last executing test programs:

2.125507687s ago: executing program 1 (id=1092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000019000109000000000000000002180000000000000000800008000100ac141400"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x4}]}]}, 0x23c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)={0xfffffffffffffd6c, 0x2d, 0x4, 0x70bd29, 0x400000}, 0x14}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000000)=0x6, 0x4)

1.995803217s ago: executing program 1 (id=1094):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x4, 0x6, 0x401}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xac}}) (async)
write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="080008000500020000001400050047a00fc000680000030690780a010100e0000001004404b9200000004e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)

1.412761662s ago: executing program 1 (id=1099):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000020000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async)
sendmmsg$inet6(r2, &(0x7f0000003580)=[{{&(0x7f0000006b00)={0xa, 0x4e22, 0x8001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x900)

1.412388168s ago: executing program 2 (id=1100):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000002d000000000c00c373302674b5af000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50)
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff2000000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc4d6a5713bcb949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ef970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$key(r0, &(0x7f0000000780)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000018c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000001800)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="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", 0x110}, {&(0x7f0000001c00)="c5fe3c1871ad388194669222b4acafc485bd34600b18cc533ef99c29346a8848117ea1c2cc5c0309bd2fc38b86eb432a30cf4cc0542322d95974088fe248c1d50cd24e3fb07223689caa475cf6d1c80071abc1913eab83fd2be68885d1a797179476ca2397c80310193e427ea6bc539cb5eca774919d4f4f4fa888e639ce1425029b0ee77cabb27ed4ca2ca1b2545dfc4d1ba4f77f473abebf9ee342ccaa3f3b959d621f0ba2d0fa72f505a284f483cb9681f0674cb9b9fecdbe034b", 0xbc}], 0x2, 0x0, 0x0, 0x80040000}}], 0x1, 0x20040980)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="11b000000000000034002b8008000100", @ANYRES32=r2, @ANYBLOB="08000300030000000800030001000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB="f64c1d29b911", @ANYRES16, @ANYRES64=r4], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="2c000000cd29bc479aca1e95d2be680260e1a5133f222ae6fd44e7a630457b73f2b5165aa0af25b13445c9f1f718960b5ed79a60d9bee0fecf07bbdb3cb97f4a0a66825ab1b9a89a977d88779eae7cc0ceac0cfc468468e0e05ac84889e5ca96be2ba30d2afabced40dae07642ea8308d9dce986bd99ce0a7b0e33d82229e452840cb6ab391c77645ec1dbf5e2ac2cf82bff6d3244ee0fecbc268e199d71a2f337b5d917b6738d49825fce63feb3480bda67378f14fe12fd50bf3b067e1031c4491d81f666e26d", @ANYRES16=r8, @ANYBLOB="010004000000fedbdf2511000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000c050}, 0x4)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
r9 = socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{<r10=>0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="15d4a9d95f274ce1b3aa155540f4bec85fe2c91bfbb2533289e502a47c339dc57cea28d2f44d803306bdea0894d7e908a561c7a7b683e0492ad2f6d0d3a3951d471da94bf22a0a5e646103810fc400f5fec6244d", @ANYRESHEX=r9, @ANYRESDEC=r4, @ANYRESDEC=r10], 0x20)

1.409712704s ago: executing program 1 (id=1101):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)

1.409309518s ago: executing program 1 (id=1102):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x9, 0xffff}, {0xffe0, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x9, 0xffff}, {0xffe0, 0x7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={<r3=>r0, 0x7f, 0x957, 0x1})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r2, r3, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0x30)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000002c0), 0x10)
connect$can_bcm(r4, &(0x7f0000000400), 0x10) (async)
connect$can_bcm(r4, &(0x7f0000000400), 0x10)
r5 = socket(0xa, 0x801, 0x0)
getsockopt(r5, 0x29, 0x43, &(0x7f0000b3ffac)=""/69, &(0x7f0000001ffc)=0x45) (async)
getsockopt(r5, 0x29, 0x43, &(0x7f0000b3ffac)=""/69, &(0x7f0000001ffc)=0x45)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000e532a2b3b8c5f668f25b40bd0b469557fdc6abca7b60f356822119625e5f3323625fd051a0b09094eb9d5d69fc40c0746855da6107f5ff928294efd8c6a184ee9844b7b60b78d4587e28f4e59200995268af63f9b9e983d79a7d6274f958fcf2c64a", @ANYRES16=r8, @ANYBLOB="623528bd7000fbdbdf252500000005002b000000000008002f00050000000a0001007770616e3300000006000600ffff0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0xffffffff, {0x7, 0x0, 0x0, r9, 0x28050, 0x581}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x48090)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r1, 0xcc29f000) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x8010, r1, 0xcc29f000)

825.839648ms ago: executing program 1 (id=1103):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x2, 0x8, 0x2})
setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/132, 0x84}, &(0x7f0000000080)}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x80000}}, @TCA_SKBEDIT_PTYPE={0x2, 0x4}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x0, 0x3, {0x9, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xea37}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x13}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r3, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000300)=""/80, &(0x7f00000000c0)=0x50)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002680)={{<r6=>0x0, 0x6, 0x0, 0x9, 0xffff, 0x9, 0x3, 0x9, 0x4, 0x3, 0x9, 0x9, 0x4, 0x5}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{<r7=>r6, 0xffff, 0x2, 0x800, 0x1, 0x1, 0xff, 0x7aa, 0xffffffff, 0x7ff, 0x5, 0x84e, 0x9, 0x2, 0xe51}, 0x8, [0x0]})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000680)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x49, "1a61165a335ca7"})
ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000001680)={r9, 0x7})

825.169746ms ago: executing program 2 (id=1104):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@enum={0xa, 0x8, 0x0, 0x6, 0x4, [{0x10, 0x8}, {0xa, 0x7fff}, {0x8, 0x8}, {0x10, 0x1}, {0x2b18, 0x1}, {0x9, 0x8000}, {0xc, 0x6}, {0x2, 0x5}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @float={0x10, 0x0, 0x0, 0x10, 0x8}, @var={0xf, 0x0, 0x0, 0xe, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x25, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x0, 0x5f]}}, &(0x7f0000000340)=""/189, 0xad, 0xbd, 0x0, 0x7}, 0x28)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x400, 0x10}, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9f, 0x2, 0x2, 0x2, r1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5}, 0x20)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20008884)
write(r0, &(0x7f0000000000)="0c000000010001", 0x7)

714.769815ms ago: executing program 2 (id=1106):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = epoll_create1(0x80000)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500))
close(r2)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00001f00000000d641000018110000", @ANYRES32=r4, @ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xff0, &(0x7f0000000cc0)=""/4080, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(r6, 0x1, 0x1a, 0x0, &(0x7f0000000340))
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8)
setsockopt(0xffffffffffffffff, 0xeffffff7, 0x30b9, &(0x7f0000000080)="1a000000020000caf57c5c7727eaafcfd1000000000000", 0x17)
sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="e973d93ae685e03ed7fadf0ce3cf27609f5a2d17c50890faf673292cd620d868c2208f57c361f7c7ec8a6c0674ccd113a5b7e9a5ad64539e420be5ef0fd6c55ce00bc6389b946b00d8a50000000000000000000000bb46246fc27f15e34cb64dddcee95adbba49335708dbc37723171e94cdee47b348d65917238ed80e167a658ad4e574a1c4a3e2321eeeaa9d2a663b386601142418052d645687b3518385f8", @ANYRES16=r9, @ANYBLOB="030c29bd7000fbdbdf252e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x800008}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)

655.815392ms ago: executing program 0 (id=1108):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = epoll_create(0x3ff)
epoll_wait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r2=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)

573.991621ms ago: executing program 0 (id=1109):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'team_slave_1\x00', &(0x7f0000000480)=@ethtool_perm_addr={0x4b, 0x46, "43720700ca0917b3352050360ad4bc4c3f9525f0d2b6796ff2aba584417202d40b4fcdf2227f128a8dd150"}})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040))
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="24000000000000000000000007000000441414d3ac1414aa80000001640101000000001140000000"], 0x28}}], 0x2, 0x200c4)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))
sendto$inet6(r4, &(0x7f00000001c0)="daef7623e9ddbc0ec2a10b4f3f38e69bc0", 0x11, 0x801, &(0x7f0000000240)={0xa, 0x4e23, 0x62, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
socket$rds(0x15, 0x5, 0x0)
unshare(0x20000400)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040))

573.119342ms ago: executing program 0 (id=1110):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r2, 0x1, 0x28, 0x0, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x4000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000001003a00000008000300", @ANYRES32=r4, @ANYBLOB="0900b2ee00000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'veth1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x3fff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r11=>0x0}) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000013000100020000000000000007000000", @ANYRES32=r11, @ANYBLOB="800d0100000000000c001a800800048004000980"], 0x2c}}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000280)={@rand_addr, <r13=>0x0}, &(0x7f0000000300)=0x14)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x64, 0x0, 0x826, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r15, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0)

343.900693ms ago: executing program 2 (id=1111):
r0 = socket$kcm(0x10, 0x400000002, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64)
r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 64)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0e7a0a8d7f180092f893f2cecf0c17487f7da7990f9f678009e5adc897f2d0f916aea47460166cade1755a9a7651b03d890a6ef018112ea06ea3911604554e9eb250dbf0e363ce8f27453af4ad56f188359831ede7c0533e0b86610746d835834e71bf29c26721d78a6a2eab94319ddba6669cdf0c4a7c8fc90c7e0c280745edb303", @ANYRES16=r6, @ANYBLOB="00012abd7000fbdbdf25160000000500040000000000050003000000000005000200000000000500040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) (async)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)

275.352825ms ago: executing program 0 (id=1112):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = getpid()
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002800))
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x7, 0xff, 0x2, 0x3, 0x4, 0x8, 0x7ff}, 0x1c) (async)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async)
recvmmsg$unix(r4, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x2, 0x0, 0x4040840}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="1b15569d3e000701feffffff000000009c62328d4188718c140401e75da25534b12203868006000600800a000006001c839dbd85307aa94c736f29d21950aef3ee2e68827f4e8d49ad7f4edb7cb6d6646ef87a2fe87c7121520382f70e1b1a1daa"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000360000000000000000ff00000000b7080000000000007b8aa8b79ad4e27a3b2765bef0ff00000001bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200"/92, @ANYRES32=r8, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) (async)
setsockopt$sock_attach_bpf(r9, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x800, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0x10}, {0xf, 0xffe0}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

272.372108ms ago: executing program 2 (id=1113):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @struct={0xf, 0x7, 0x0, 0x4, 0x0, 0x5, [{0x6, 0x5, 0xa6}, {0x3, 0x1, 0x2}, {0xd, 0x5, 0x1}, {0x1, 0x4, 0x7fffffff}, {0x9, 0x0, 0x1}, {0x7, 0x2, 0xf}, {0xb, 0x2, 0x3}]}]}, {0x0, [0x293ef776e06d74ad, 0x61, 0x61, 0x30, 0x2e, 0x0, 0x30]}}, &(0x7f0000001600)=""/4096, 0x8d, 0x1000, 0x1, 0x4}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r5=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000002"], 0x48)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000014c0), r6)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x3c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044840}, 0x800)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

5.276637ms ago: executing program 0 (id=1114):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x7, <r7=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r7}, 0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r7}, 0x4)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000080))
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r10, &(0x7f0000000240)=ANY=[@ANYBLOB="e7c8543bcf4c64bd5de303d6b41b1e04d3d062d45dd9dc1459"], 0xfdef)

4.5627ms ago: executing program 2 (id=1115):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4) (async)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000001180)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6baa4c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f9077110c6a3a75c87bf0e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x96}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x8000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="02de7f1188f7d8696f000840008700"/29, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = socket$rds(0x15, 0x5, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6)
sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r7, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0)=0x1, 0x4) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x5, &(0x7f0000000440)=@framed={{}, [@map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x200}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=1116):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000001700))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r3 = socket$kcm(0x2, 0x3, 0x2) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x900, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x104, 0x6, "a9261bb48fcb3612cf1bc1a11640c307000000cf776dee26cb29e0e71023482423d449fcfcde132bc5847336d3a40cae92a2fb1bf7846a45e0b46aa4cce50c55cf5000f1af19a5dfb02bb4afc9ac489cff5b59c3debb4e046452cf3e847b6b3f5f355d7d06b1c1edd6bc71589ea809df5cf48e71f9e972ce92fd7ea5c16f130a186c97662f431007504a8922e0d97d7caaff307c3e32762a80fd968a9989880beeb61d4ee6a9022f0666ee044b532cdf145effe98448b68063f44987168d7b4053731e64dd02c00ac38613d59e529d7e22f88ae06eba6487ebdbf07eb2222265ff05be558f2100"/256}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x64, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2ec, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2cc, 0x3, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "a1a25a6536b308df648b8dd70f90a27e6c2503e2897bb3a1358f50"}, @NFTA_SET_ELEM_USERDATA={0x58, 0x6, 0x1, 0x0, "a13f70895d1b6b43c4cfc60c8e97577e744498c79d7e8ebc048b203433ac555aa39aac7c11338a3723d3899796643a154805e09a2ca766dc940ed47ecc77c7dd545ef88350668e5b26d1f38175927c309616f60c"}]}, {0x240, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "65aced69c4a79a14957de249fc497cea690b16ebab9f514e061206e52db05a275e715d4ce9e9b8b53e1caa423c14aaa3f12ee03f2af90fd8f11b3c533edecb7555b70ce22eed84198c5142b39e5c96975c0c3d3914572ff50559a546ac1db524"}, @NFTA_SET_ELEM_KEY={0x1c4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "aebe1dd2"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "8d132c22eac9a3404c9cdb8278218f82760068abf563249a91bc61fd21f1edf2a28915d240152bba571f0346d67a63fa786f72a36e1d5d96507a7ef8321203bbf6b416ab808901ab02d2502393f9519530078e6eef3c"}, @NFTA_DATA_VALUE={0xfd, 0x1, "074f9437290069de48eb3ca771df435dd53b6d5dbef32182ad9c915fdfa4c862178fab5088b81aac2c06f4e29766770ce5108eae49cbb861f338e5d28e618ff436c5c37d706de7b061e9d2a3778b92e6d40dc5bc2dc0ec6c0339fc6ffa083cf0859c7375233ff1430eefb37c0b5d2b949868f3d07a92d74ecf4cd17053e8a57f820ce396cc761019bd4fbac3a18a3fe26494055f3433d0ffc3b3ca3c3cc8ae10245d81d53b69cc9f163a1fff9a10ea80e645f36ef10e1bb0c48c230877ffa5bbe703ae679207a3e6171a6706230d6f0232b0415af8379308a3b8b66b2be17c1eb21a3e32c084fd09faec91a12f1818fc87ee168edc2ae7c200"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x401, 0x0, 0x0, {0xd, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0xe1, 0x6, "4d2ee33cb9631f6b27747709878fc69f264f9735fba489b3a80d79b9e9d11a6cffbe4f17dce1ede714aae9dd1b13ca75964959e3c0f12ea246b5b137e995353dd0f2a7046c0485b4a4470f585d4ca38758b39f416cbf0cd44e9635290da776c98df3d7f8ba34e8be3a4b0b52e8f5d46d9865c0ebe0b2bfe37a544cf0ede7c2fbef686e34118164599525568a0ecaf5d44288861a4a15ca8f9f438f1865fd03c7bf0f14dfd3acc6491a8f43a8cdcc79bc7cc49393f97ebae85c953bdc5e8dc0e6e12f66c5767f8da044a4a2094dd18ca41b7a3733015ca43d4e93258773"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x258, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc}, @NFTA_SET_DESC={0x214, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f48}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa106}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x860}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffb7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10b8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3cc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ed}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x500}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @exthdr={{0xb}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c0}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b019f0000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c400000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0xfc6d)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13205' (ED25519) to the list of known hosts.
syzkaller login: [   56.687409][ T5835] cgroup: Unknown subsys name 'net'
[   56.794025][ T5835] cgroup: Unknown subsys name 'cpuset'
[   56.798631][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.123431][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.976035][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.976046][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.979883][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.986077][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.987557][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.991000][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.995009][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.995529][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.998251][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.002845][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.007302][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.008279][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.010275][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.014336][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.019108][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.394616][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.418767][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   65.530632][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   65.595695][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.598920][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.604135][ T5855] bridge_slave_0: entered allmulticast mode
[   65.607975][ T5855] bridge_slave_0: entered promiscuous mode
[   65.654062][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.656892][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.659924][ T5855] bridge_slave_1: entered allmulticast mode
[   65.664063][ T5855] bridge_slave_1: entered promiscuous mode
[   65.747075][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.753765][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.757494][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.760525][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.764866][ T5862] bridge_slave_0: entered allmulticast mode
[   65.768714][ T5862] bridge_slave_0: entered promiscuous mode
[   65.773787][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.776030][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.778669][ T5862] bridge_slave_1: entered allmulticast mode
[   65.782954][ T5862] bridge_slave_1: entered promiscuous mode
[   65.859520][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.862694][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.865463][ T5853] bridge_slave_0: entered allmulticast mode
[   65.869189][ T5853] bridge_slave_0: entered promiscuous mode
[   65.876012][ T5855] team0: Port device team_slave_0 added
[   65.878747][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.882136][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.884943][ T5853] bridge_slave_1: entered allmulticast mode
[   65.888647][ T5853] bridge_slave_1: entered promiscuous mode
[   65.895202][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.900197][ T5855] team0: Port device team_slave_1 added
[   65.934029][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.984667][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.987300][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.999271][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.007246][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.026985][ T5862] team0: Port device team_slave_0 added
[   66.033177][ T5862] team0: Port device team_slave_1 added
[   66.036305][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.039220][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.049188][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.063548][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.098904][ T5853] team0: Port device team_slave_0 added
[   66.113515][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.116050][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.126097][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.155158][ T5853] team0: Port device team_slave_1 added
[   66.158415][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.162369][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.172472][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.208839][ T5855] hsr_slave_0: entered promiscuous mode
[   66.215231][ T5855] hsr_slave_1: entered promiscuous mode
[   66.223443][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.225970][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.235934][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.273812][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.276219][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.285900][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.300172][ T5862] hsr_slave_0: entered promiscuous mode
[   66.303681][ T5862] hsr_slave_1: entered promiscuous mode
[   66.305872][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   66.307707][ T5862] Cannot create hsr debugfs directory
[   66.416564][ T5853] hsr_slave_0: entered promiscuous mode
[   66.420290][ T5853] hsr_slave_1: entered promiscuous mode
[   66.425355][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   66.427578][ T5853] Cannot create hsr debugfs directory
[   66.674506][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.686230][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.701563][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.713923][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.758492][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.773005][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.781658][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.801813][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.875540][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.896284][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.905594][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.918424][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.023643][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.051526][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.062116][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.074452][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.077382][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.083164][ T5238] Bluetooth: hci0: command tx timeout
[   67.086137][ T5867] Bluetooth: hci2: command tx timeout
[   67.090843][   T55] Bluetooth: hci1: command tx timeout
[   67.097917][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.100846][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.132810][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   67.150144][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.153129][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.173928][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.176864][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.196355][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.264053][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.292976][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.295815][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.318515][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.321284][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.463976][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.528943][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.574432][ T5855] veth0_vlan: entered promiscuous mode
[   67.592114][ T5855] veth1_vlan: entered promiscuous mode
[   67.627392][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.635370][ T5862] veth0_vlan: entered promiscuous mode
[   67.663523][ T5855] veth0_macvtap: entered promiscuous mode
[   67.670460][ T5855] veth1_macvtap: entered promiscuous mode
[   67.678336][ T5862] veth1_vlan: entered promiscuous mode
[   67.717607][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.729265][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.757530][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.763986][ T5888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.767307][ T5888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.770697][ T5888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.776278][ T5853] veth0_vlan: entered promiscuous mode
[   67.799229][ T5853] veth1_vlan: entered promiscuous mode
[   67.815349][ T5862] veth0_macvtap: entered promiscuous mode
[   67.834264][ T5862] veth1_macvtap: entered promiscuous mode
[   67.858458][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.876426][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.902426][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.909752][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.937271][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.955880][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.978823][ T5853] veth0_macvtap: entered promiscuous mode
[   67.999456][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.005290][ T5853] veth1_macvtap: entered promiscuous mode
[   68.007302][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.043997][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.053502][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.065745][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.113730][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.116890][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.127034][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.158075][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.180410][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.201332][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.205000][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.208584][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.243808][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.260441][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.275790][ T5926] ieee802154 phy0 wpan0: encryption failed: -90
[   68.368511][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.384744][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.418410][ T5930] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.424577][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.427755][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.547948][ T5938] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   69.150980][   T55] Bluetooth: hci1: command tx timeout
[   69.151317][ T5867] Bluetooth: hci0: command tx timeout
[   69.153273][   T55] Bluetooth: hci2: command tx timeout
[   69.558105][ T5960] netlink: 'syz.1.9': attribute type 2 has an invalid length.
[   69.591998][ T5960] : entered promiscuous mode
[   69.954776][ T5972] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   69.998846][ T5972] team0: Port device dummy0 added
[   70.018977][ T5972] netlink: 'syz.2.11': attribute type 10 has an invalid length.
[   70.036561][ T5972] team0: Port device dummy0 removed
[   70.052383][ T5972] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.202126][ T5990] bridge_slave_0: left allmulticast mode
[   70.204339][ T5990] bridge_slave_0: left promiscuous mode
[   70.207802][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.225502][ T5990] bridge_slave_1: left allmulticast mode
[   70.227805][ T5990] bridge_slave_1: left promiscuous mode
[   70.233695][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.259258][ T5990] bond0: (slave bond_slave_0): Releasing backup interface
[   70.278891][ T5990] bond0: (slave bond_slave_1): Releasing backup interface
[   70.322992][ T5990] team0: Port device team_slave_0 removed
[   70.347593][ T5990] team0: Port device team_slave_1 removed
[   70.363036][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.374621][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.379578][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.383952][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.439041][ T5993] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   70.443003][ T5990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'.
[   70.743697][ T5972] syz.2.11 (5972) used greatest stack depth: 19448 bytes left
[   70.822127][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17'.
[   70.832298][ T6003] netlink: 'syz.2.17': attribute type 7 has an invalid length.
[   70.834712][ T6003] netlink: 'syz.2.17': attribute type 8 has an invalid length.
[   70.843972][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   70.858626][ T6003] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET)
[   70.862843][ T6003] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[   70.997953][ T6010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.052199][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'.
[   71.235619][ T5238] Bluetooth: hci0: command tx timeout
[   71.237887][ T5238] Bluetooth: hci1: command tx timeout
[   71.240115][ T5238] Bluetooth: hci2: command tx timeout
[   71.245840][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.249043][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.769226][ T6046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.894584][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   71.897420][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   71.922449][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   71.951512][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   72.101281][ T2341] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   72.689058][ T6083] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   72.692156][ T6082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'.
[   72.806095][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40'.
[   72.859252][ T6089] syzkaller1: entered promiscuous mode
[   72.863691][ T6089] syzkaller1: entered allmulticast mode
[   72.869904][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'.
[   73.065207][ T6095] netlink: 9 bytes leftover after parsing attributes in process `syz.0.42'.
[   73.069166][ T6095] ..0: renamed from hsr0 (while UP)
[   73.075342][ T6095] ..0: entered allmulticast mode
[   73.076962][ T6095] hsr_slave_0: entered allmulticast mode
[   73.078789][ T6095] hsr_slave_1: entered allmulticast mode
[   73.081171][ T6095] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   73.194321][ T6091] Zero length message leads to an empty skb
[   73.311783][   T55] Bluetooth: hci2: command tx timeout
[   73.311911][ T5238] Bluetooth: hci1: command tx timeout
[   73.315694][   T55] Bluetooth: hci0: command tx timeout
[   73.430695][ T6103] Bluetooth: MGMT ver 1.23
[   73.448600][ T6103] netlink: 128 bytes leftover after parsing attributes in process `syz.2.45'.
[   73.573565][ T6107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.46'.
[   74.297207][ T6141] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.437847][ T6148] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.58'.
[   74.602244][ T6145] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   74.819503][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.1.62'.
[   74.926130][ T6175] lo speed is unknown, defaulting to 1000
[   74.928773][ T6175] lo speed is unknown, defaulting to 1000
[   74.938466][ T6175] lo speed is unknown, defaulting to 1000
[   74.946150][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.957828][ T6175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   74.990325][ T6175] lo speed is unknown, defaulting to 1000
[   74.994404][ T6175] lo speed is unknown, defaulting to 1000
[   74.997273][ T6175] lo speed is unknown, defaulting to 1000
[   75.062707][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'.
[   75.207400][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'.
[   75.326275][ T6195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.345985][ T6197] !: renamed from dummy0 (while UP)
[   75.409186][ T6195] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   75.551032][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.578407][ T6206] lo speed is unknown, defaulting to 1000
[   75.925035][ T6225] netlink: 80 bytes leftover after parsing attributes in process `syz.2.77'.
[   76.018444][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'.
[   76.138257][ T6232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'.
[   76.701746][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'.
[   76.985947][ T6287] IPVS: nq: FWM 3 0x00000003 - no destination available
[   76.994866][ T2341] IPVS: starting estimator thread 0...
[   77.080924][ T6288] IPVS: using max 62 ests per chain, 148800 per kthread
[   77.215540][ T6302] lo speed is unknown, defaulting to 1000
[   77.957226][ T6356] bond1: entered promiscuous mode
[   77.959682][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.965567][ T6357] syzkaller1: entered promiscuous mode
[   77.967864][ T6357] syzkaller1: entered allmulticast mode
[   78.317716][ T6384] netlink: 'syz.2.110': attribute type 2 has an invalid length.
[   78.524979][ T6398] team0: Device ipip0 is up. Set it down before adding it as a team port
[   78.568044][ T6399] tipc: Started in network mode
[   78.570113][ T6399] tipc: Node identity 663acd74114f, cluster identity 4711
[   78.573562][ T6399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.616129][ T6398] tipc: Disabling bearer <eth:syzkaller0>
[   78.775367][ T6410] __nla_validate_parse: 8 callbacks suppressed
[   78.775385][ T6410] netlink: 9 bytes leftover after parsing attributes in process `syz.1.116'.
[   78.782625][ T6410] ..0: renamed from hsr0 (while UP)
[   78.786898][ T6410] ..0: entered allmulticast mode
[   78.788946][ T6410] hsr_slave_0: entered allmulticast mode
[   78.792118][ T6410] hsr_slave_1: entered allmulticast mode
[   78.794920][ T6410] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   78.803652][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'.
[   79.280300][ T6425] syzkaller1: entered promiscuous mode
[   79.285844][ T6425] syzkaller1: entered allmulticast mode
[   79.562350][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'.
[   79.581419][ T6406] syz.1.116 (6406) used greatest stack depth: 18616 bytes left
[   79.668217][ T6437] lo speed is unknown, defaulting to 1000
[   80.130431][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'.
[   80.149818][ T6454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.277699][ T6462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.135'.
[   80.291741][ T6463] netlink: 64 bytes leftover after parsing attributes in process `syz.2.135'.
[   80.364163][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   80.369193][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   80.477183][ T6469] syzkaller1: entered promiscuous mode
[   80.479389][ T6469] syzkaller1: entered allmulticast mode
[   80.583364][ T6477] netlink: 'syz.0.141': attribute type 10 has an invalid length.
[   80.609952][ T6477] batman_adv: batadv0: Adding interface: netdevsim0
[   80.613624][ T6477] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.623973][ T6477] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   80.846040][ T6491] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   80.994735][ T6495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.002907][ T6495] syzkaller0: entered promiscuous mode
[   81.005742][ T6495] syzkaller0: entered allmulticast mode
[   81.014302][ T6495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   81.029313][ T6495] tipc: Resetting bearer <eth:syzkaller0>
[   81.089046][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[   81.133156][ T6494] tipc: Resetting bearer <eth:syzkaller0>
[   81.147428][ T6494] tipc: Disabling bearer <eth:syzkaller0>
[   81.317736][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'.
[   81.482433][   T10] cfg80211: failed to load regulatory.db
[   82.048321][ T6552] netlink: 'syz.0.168': attribute type 12 has an invalid length.
[   82.094345][ T6555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.151080][ T6554] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   82.388414][ T6581] netlink: 'syz.1.177': attribute type 1 has an invalid length.
[   82.410024][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.433461][ T6581] veth5: entered promiscuous mode
[   82.438651][ T6581] bond1: (slave veth5): Enslaving as an active interface with a down link
[   82.647533][ T6587] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   82.655980][ T5895] lo speed is unknown, defaulting to 1000
[   83.329031][ T6611] ..0: renamed from hsr0 (while UP)
[   83.343220][ T6611] ..0: entered allmulticast mode
[   83.347891][ T6611] hsr_slave_0: entered allmulticast mode
[   83.350148][ T6611] hsr_slave_1: entered allmulticast mode
[   83.362753][ T6611] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   83.391042][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.610212][ T6629] tc_dump_action: action bad kind
[   83.718614][ T6642] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001
[   83.757139][ T6642] IPVS: nq: FWM 3 0x00000003 - no destination available
[   84.016822][ T6663] __nla_validate_parse: 14 callbacks suppressed
[   84.016841][ T6663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.202'.
[   84.040092][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[   84.044638][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'.
[   84.048884][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.052352][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.155388][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.164496][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.297371][ T6662] geneve2: entered promiscuous mode
[   84.311594][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.315926][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.322011][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.326546][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.759411][ T6692] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.212'.
[   84.958651][ T6704] tipc: Started in network mode
[   84.963510][ T6704] tipc: Node identity 8a574dcf3908, cluster identity 4711
[   84.966630][ T6704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.970023][ T6704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.976200][ T6704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.979283][ T6704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.990137][ T6704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.999074][ T6708] tipc: Resetting bearer <eth:syzkaller0>
[   85.040054][ T6704] tipc: Disabling bearer <eth:syzkaller0>
[   85.358248][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.220'.
[   85.504733][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   85.786991][ T6740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[   85.852326][ T6742] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   86.357998][ T6730] delete_channel: no stack
[   86.370156][ T6761] siw: device registration error -23
[   86.395246][ T6759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.232'.
[   86.436364][ T6759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.232'.
[   86.445774][ T6759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.232'.
[   86.545084][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.548608][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.834252][ T6774] netlink: 'syz.1.236': attribute type 1 has an invalid length.
[   86.850118][ T6774] block nbd0: shutting down sockets
[   86.878634][ T6781] lo speed is unknown, defaulting to 1000
[   86.917944][   T10] IPVS: starting estimator thread 0...
[   87.003277][ T6789] IPVS: using max 41 ests per chain, 98400 per kthread
[   87.208466][ T6798] netlink: 'syz.0.243': attribute type 8 has an invalid length.
[   87.354696][ T6809] siw: device registration error -23
[   87.447547][ T6813] lo speed is unknown, defaulting to 1000
[   87.659191][ T6819] ieee802154 phy0 wpan0: encryption failed: -22
[   88.095386][ T6842] lo speed is unknown, defaulting to 1000
[   88.661805][ T6866] unknown channel width for channel at 909000KHz?
[   89.238077][ T6886] __nla_validate_parse: 27 callbacks suppressed
[   89.238095][ T6886] netlink: 124 bytes leftover after parsing attributes in process `syz.0.270'.
[   89.319443][ T6888] siw: device registration error -23
[   89.406033][ T6892] syzkaller1: entered promiscuous mode
[   89.408014][ T6892] syzkaller1: entered allmulticast mode
[   89.656266][ T6900] bond_slave_0: mtu less than device minimum
[   89.836321][ T6907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.280'.
[   90.337297][ T6922] bond1: entered promiscuous mode
[   90.341392][ T6922] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.551719][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'.
[   90.702180][ T6934] bridge0: port 3(erspan0) entered blocking state
[   90.731828][ T6934] bridge0: port 3(erspan0) entered disabled state
[   90.734620][ T6934] erspan0: entered allmulticast mode
[   90.738623][ T6934] erspan0: entered promiscuous mode
[   90.769464][ T6936] erspan0: left allmulticast mode
[   90.779543][ T6936] erspan0: left promiscuous mode
[   90.782992][ T6941] netlink: 144 bytes leftover after parsing attributes in process `syz.1.291'.
[   90.788149][ T6936] bridge0: port 3(erspan0) entered disabled state
[   90.810358][ T6939] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   90.840067][ T6939] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   91.102768][    T9] IPVS: starting estimator thread 0...
[   91.190903][ T6963] IPVS: using max 47 ests per chain, 112800 per kthread
[   91.305449][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'.
[   91.379508][ T6974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.301'.
[   91.389603][ T6974] netlink: 43 bytes leftover after parsing attributes in process `syz.2.301'.
[   91.399364][ T6974] netlink: 'syz.2.301': attribute type 6 has an invalid length.
[   91.413400][ T6974] netlink: 43 bytes leftover after parsing attributes in process `syz.2.301'.
[   91.476318][ T6978] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   91.699766][ T6987] lo speed is unknown, defaulting to 1000
[   91.847086][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'.
[   92.012915][ T7007] netlink: 6 bytes leftover after parsing attributes in process `syz.1.311'.
[   92.114013][ T7016] netlink: 'syz.2.312': attribute type 9 has an invalid length.
[   92.309591][ T7027] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[   92.324228][ T7027] syzkaller1: entered promiscuous mode
[   92.326937][ T7027] syzkaller1: entered allmulticast mode
[   92.991622][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   93.167298][ T7065] tipc: Started in network mode
[   93.170389][ T7065] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   93.174262][ T7065] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   93.481934][ T7070] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[   93.734357][ T7087] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   94.181921][ T7101] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   94.186029][ T7101] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   94.498012][ T7118] syzkaller1: entered promiscuous mode
[   94.500140][ T7118] syzkaller1: entered allmulticast mode
[   94.505201][ T7121] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   94.838434][ T7146] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003
[   94.847944][ T7146] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[   94.892155][ T7148] __nla_validate_parse: 50 callbacks suppressed
[   94.892172][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.353'.
[   94.946325][ T7150] netlink: 'syz.2.354': attribute type 4 has an invalid length.
[   94.951447][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   95.155273][ T7161] syzkaller0: tun_chr_ioctl cmd 35092
[   95.277610][ T7167] siw: device registration error -23
[   95.386178][ T7173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.363'.
[   95.639124][ T7178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.794034][ T7178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.897145][ T7178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.975124][ T7178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.094264][ T5677] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.110387][ T5677] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.125847][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.142345][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.219208][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   96.229035][ T7190] rdma_rxe: rxe_newlink: failed to add vxcan1
[   96.240491][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   96.244176][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   96.450337][ T7191] infiniband syz2: set down
[   96.451319][ T5909] vxcan1 speed is unknown, defaulting to 1000
[   96.460211][ T7191] infiniband syz2: added vxcan1
[   96.467497][ T7191] syz2: rxe_create_cq: returned err = -12
[   96.472759][ T7191] infiniband syz2: Couldn't create ib_mad CQ
[   96.477168][ T7191] infiniband syz2: Couldn't open port 1
[   96.487716][ T7199] netlink: 'syz.1.370': attribute type 3 has an invalid length.
[   96.491252][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'.
[   96.515668][ T7191] RDS/IB: syz2: added
[   96.522965][ T7191] smc: adding ib device syz2 with port count 1
[   96.529122][ T7191] smc:    ib device syz2 port 1 has pnetid 
[   96.536812][   T10] vxcan1 speed is unknown, defaulting to 1000
[   96.559050][ T7201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.570540][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   96.651741][ T7203] lo speed is unknown, defaulting to 1000
[   96.824403][ T7208] netlink: 'syz.2.374': attribute type 1 has an invalid length.
[   96.874981][ T7203] vxcan1 speed is unknown, defaulting to 1000
[   96.930490][ T7210] netlink: 120 bytes leftover after parsing attributes in process `syz.2.375'.
[   97.052048][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   97.194836][ T7218] netlink: 48 bytes leftover after parsing attributes in process `syz.1.377'.
[   97.413692][ T7224] pim6reg: entered allmulticast mode
[   97.423599][ T7191] vxcan1 speed is unknown, defaulting to 1000
[   97.427268][ T7224] pim6reg: left allmulticast mode
[   97.867930][ T7241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.385'.
[   97.985479][ T7251] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   98.014831][ T7247] can: request_module (can-proto-5) failed.
[   98.096165][ T7260] batadv1: entered promiscuous mode
[   98.098137][ T7260] batadv1: entered allmulticast mode
[   98.139567][ T7261] syzkaller0: mtu greater than device maximum
[   98.780247][ T7273] veth5: left promiscuous mode
[   98.789547][ T5858] lo speed is unknown, defaulting to 1000
[   98.793963][ T5858] syz0: Port: 1 Link DOWN
[   98.802213][ T7290] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   98.819148][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.832388][ T5677] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.835711][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.847549][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.909376][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.400'.
[   98.915017][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'.
[   98.938740][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[   99.154343][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.173535][ T7298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.208420][ T7298] ..0: left allmulticast mode
[   99.215965][ T7298] hsr_slave_0: left allmulticast mode
[   99.218071][ T7298] hsr_slave_1: left allmulticast mode
[   99.389997][ T7298] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   99.445270][ T7298] bond1: left promiscuous mode
[   99.450417][ T7298] geneve2: left promiscuous mode
[   99.480799][ T7304] syzkaller0: entered promiscuous mode
[   99.485305][ T7304] syzkaller0: entered allmulticast mode
[   99.499959][ T5888] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.505460][ T5888] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.510675][ T5888] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.515463][ T5888] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.544889][ T7311] syzkaller0: entered promiscuous mode
[   99.546642][ T7311] syzkaller0: entered allmulticast mode
[  100.997549][ T7326] netlink: 596 bytes leftover after parsing attributes in process `syz.0.407'.
[  101.274576][ T7335] syzkaller1: entered promiscuous mode
[  101.276965][ T7335] syzkaller1: entered allmulticast mode
[  101.599578][ T7339] lo speed is unknown, defaulting to 1000
[  101.611692][ T7339] vxcan1 speed is unknown, defaulting to 1000
[  101.667830][ T7347] netlink: 'syz.0.412': attribute type 13 has an invalid length.
[  101.672728][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'.
[  101.692926][ T5888] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.696373][ T5888] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.700587][ T7347] netlink: 'syz.0.412': attribute type 13 has an invalid length.
[  101.704657][ T5888] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.709852][ T5888] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.714662][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'.
[  101.802969][ T7350] netlink: 'syz.0.413': attribute type 3 has an invalid length.
[  101.805936][ T7350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'.
[  101.809835][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'.
[  101.944108][ T7356] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[  101.947031][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'.
[  102.036467][ T7356] bond2: entered promiscuous mode
[  102.038942][ T7356] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.063981][ T7360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.416'.
[  102.067922][ T7360] netem: change failed
[  102.135763][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[  102.225341][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.417'.
[  102.328669][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'.
[  102.536812][ T7380] syzkaller1: entered promiscuous mode
[  102.538988][ T7380] syzkaller1: entered allmulticast mode
[  102.784848][ T7397] lo speed is unknown, defaulting to 1000
[  102.788040][ T7397] vxcan1 speed is unknown, defaulting to 1000
[  102.788655][ T7399] lo speed is unknown, defaulting to 1000
[  103.024010][ T7399] vxcan1 speed is unknown, defaulting to 1000
[  103.532276][ T7423] syzkaller1: entered promiscuous mode
[  103.540926][ T7423] syzkaller1: entered allmulticast mode
[  103.669235][ T7427] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.716942][ T7427] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  103.774207][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  103.845838][ T7436] lo speed is unknown, defaulting to 1000
[  103.849162][ T7436] vxcan1 speed is unknown, defaulting to 1000
[  103.892833][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.036449][ T7478] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[  105.039112][ T7478] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[  105.231651][ T7485] lo speed is unknown, defaulting to 1000
[  105.248030][ T7485] vxcan1 speed is unknown, defaulting to 1000
[  105.373868][ T7493] lo speed is unknown, defaulting to 1000
[  105.443615][ T7493] vxcan1 speed is unknown, defaulting to 1000
[  105.766460][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.770150][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.786428][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.789837][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.680210][ T7522] __nla_validate_parse: 8 callbacks suppressed
[  106.680227][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'.
[  106.752815][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'.
[  106.795052][ T7528] syzkaller1: entered promiscuous mode
[  106.797229][ T7528] syzkaller1: entered allmulticast mode
[  106.875483][ T7532] syzkaller1: entered promiscuous mode
[  106.878368][ T7532] syzkaller1: entered allmulticast mode
[  106.932580][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.473'.
[  106.937101][ T7534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'.
[  107.113553][ T7548] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  107.271513][ T7554] sctp: [Deprecated]: syz.1.479 (pid 7554) Use of int in maxseg socket option.
[  107.271513][ T7554] Use struct sctp_assoc_value instead
[  107.295103][ T7554] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.479'.
[  107.450175][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'.
[  107.623860][ T7570] netlink: 9 bytes leftover after parsing attributes in process `syz.1.487'.
[  107.642351][ T7570] ..1: renamed from ..0
[  107.656461][ T7570] ..1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.660453][ T7570] ..1: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.674115][ T7570] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check.
[  107.694696][ T7575] syzkaller1: entered promiscuous mode
[  107.696993][ T7575] syzkaller1: entered allmulticast mode
[  107.835407][ T7597] netlink: 552 bytes leftover after parsing attributes in process `syz.0.494'.
[  107.894610][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'.
[  107.904988][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'.
[  108.537093][ T7603] bond0: Unable to set down delay as MII monitoring is disabled
[  108.600566][ T7603] netlink: 'syz.2.495': attribute type 4 has an invalid length.
[  109.080081][ T7642] netlink: 'syz.1.507': attribute type 21 has an invalid length.
[  109.122123][ T7645] syzkaller1: entered promiscuous mode
[  109.123920][ T7645] syzkaller1: entered allmulticast mode
[  109.145204][ T7642] netlink: 'syz.1.507': attribute type 16 has an invalid length.
[  109.148424][ T7642] netlink: 'syz.1.507': attribute type 17 has an invalid length.
[  109.196935][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.205228][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.215342][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.219450][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.294343][ T7655] siw: device registration error -23
[  109.311152][ T7656] netlink: 'syz.2.511': attribute type 10 has an invalid length.
[  109.315218][ T7656] bond0: (slave dummy0): Releasing backup interface
[  109.322374][ T7656] team0: Port device dummy0 added
[  109.537880][ T7665] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  109.779639][ T7671] ip6gre1: entered allmulticast mode
[  109.928598][ T7680] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  110.203250][ T7696] netlink: 'syz.2.526': attribute type 14 has an invalid length.
[  110.249904][ T7700] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  110.296474][ T7701] syzkaller1: entered promiscuous mode
[  110.298866][ T7701] syzkaller1: entered allmulticast mode
[  110.460439][ T7706] batadv1: entered promiscuous mode
[  110.462573][ T7706] batadv1: entered allmulticast mode
[  110.873473][ T7714] lo speed is unknown, defaulting to 1000
[  110.876093][ T7714] vxcan1 speed is unknown, defaulting to 1000
[  111.205670][ T7726] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  111.418779][ T7730] openvswitch: netlink: IP tunnel TTL not specified.
[  111.430074][ T7732] openvswitch: netlink: IP tunnel TTL not specified.
[  111.467289][ T7734] syzkaller1: entered promiscuous mode
[  111.469106][ T7734] syzkaller1: entered allmulticast mode
[  111.559471][ T7740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.562142][ T7740] syzkaller0: entered promiscuous mode
[  111.564450][ T7740] syzkaller0: entered allmulticast mode
[  111.579629][ T7740] tipc: Resetting bearer <eth:syzkaller0>
[  111.584519][ T7739] tipc: Resetting bearer <eth:syzkaller0>
[  111.595872][ T7739] tipc: Disabling bearer <eth:syzkaller0>
[  112.049084][ T7754] siw: device registration error -23
[  112.175244][ T7754] lo speed is unknown, defaulting to 1000
[  112.269074][ T7760] __nla_validate_parse: 12 callbacks suppressed
[  112.269094][ T7760] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.550'.
[  112.281063][ T7760] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  112.353133][ T7764] syzkaller1: entered promiscuous mode
[  112.354895][ T7764] syzkaller1: entered allmulticast mode
[  112.360247][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'.
[  112.587305][ T7792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  112.595256][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  112.679509][ T7801] syzkaller0: entered promiscuous mode
[  112.681975][ T7801] syzkaller0: entered allmulticast mode
[  112.686497][ T7801] netlink: 'syz.1.560': attribute type 8 has an invalid length.
[  113.410471][ T7808] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.561'.
[  113.417364][ T7808] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  113.851337][ T7816] siw: device registration error -23
[  113.927348][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.567'.
[  113.976846][ T7820] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  114.013717][ T7820] netlink: 'syz.0.565': attribute type 58 has an invalid length.
[  114.016926][ T7820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'.
[  114.045544][ T7836] syzkaller1: entered promiscuous mode
[  114.047762][ T7836] syzkaller1: entered allmulticast mode
[  114.080499][ T7838] syzkaller1: entered promiscuous mode
[  114.082582][ T7838] syzkaller1: entered allmulticast mode
[  114.185817][ T7846] lo speed is unknown, defaulting to 1000
[  114.189194][ T7846] vxcan1 speed is unknown, defaulting to 1000
[  114.399538][ T7864] netlink: 'syz.0.576': attribute type 4 has an invalid length.
[  114.501850][ T7870] siw: device registration error -23
[  114.640566][ T7877] syzkaller1: entered promiscuous mode
[  114.643161][ T7877] syzkaller1: entered allmulticast mode
[  114.647312][ T7880] netlink: 284 bytes leftover after parsing attributes in process `syz.2.584'.
[  114.824112][ T7891] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.586'.
[  114.826975][ T7891] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  114.851580][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'.
[  114.882702][ T6271] smc: removing ib device syz2
[  115.239249][ T7913] syzkaller0: entered promiscuous mode
[  115.241190][ T7913] syzkaller0: entered allmulticast mode
[  117.174132][ T7944] syzkaller1: entered promiscuous mode
[  117.175898][ T7944] syzkaller1: entered allmulticast mode
[  117.455006][ T5888] syzkaller0: tun_net_xmit 76
[  117.459607][ T5888] syzkaller0: tun_net_xmit 48
[  117.484060][ T5909] syzkaller0: tun_net_xmit 76
[  118.803116][ T7969] __nla_validate_parse: 4 callbacks suppressed
[  118.803136][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'.
[  118.942266][ T7977] syzkaller0: entered promiscuous mode
[  118.947337][ T7977] syzkaller0: entered allmulticast mode
[  119.254442][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  120.269169][ T7996] netlink: 232 bytes leftover after parsing attributes in process `syz.0.619'.
[  120.333510][ T7999] syzkaller1: entered promiscuous mode
[  120.335685][ T7999] syzkaller1: entered allmulticast mode
[  120.393634][ T8002] Bluetooth: MGMT ver 1.23
[  120.447798][ T8005] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.708151][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  121.236232][ T8036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.278830][ T8039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.633'.
[  121.380275][ T8046] siw: device registration error -23
[  121.531883][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'.
[  121.563520][ T8063] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  121.569796][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'.
[  121.574591][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'.
[  121.620258][ T8067] netlink: 'syz.1.644': attribute type 1 has an invalid length.
[  121.624827][ T8067] netlink: 15978 bytes leftover after parsing attributes in process `syz.1.644'.
[  121.852952][ T8080] IPVS: Error connecting to the multicast addr
[  121.855994][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'.
[  121.964405][ T8090] netlink: 'syz.2.651': attribute type 2 has an invalid length.
[  121.998021][ T8092] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  122.005288][ T8092] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  122.410346][ T8119] netlink: 'syz.0.662': attribute type 7 has an invalid length.
[  122.966406][ T8154] bridge0: port 1(erspan0) entered blocking state
[  122.969145][ T8154] bridge0: port 1(erspan0) entered disabled state
[  122.973038][ T8154] erspan0: entered allmulticast mode
[  122.976883][ T8154] erspan0: entered promiscuous mode
[  122.985827][ T8150] erspan0: left allmulticast mode
[  122.987880][ T8150] erspan0: left promiscuous mode
[  122.991177][ T8150] bridge0: port 1(erspan0) entered disabled state
[  123.068976][ T8156] lo speed is unknown, defaulting to 1000
[  123.233533][ T8166] ..0: renamed from ..1
[  123.256036][ T8166] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.260466][ T8166] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.275438][ T8166] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  123.924654][ T8205] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[  124.103816][ T8221] __nla_validate_parse: 6 callbacks suppressed
[  124.103834][ T8221] netlink: 64 bytes leftover after parsing attributes in process `syz.0.688'.
[  124.409668][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'.
[  124.433484][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'.
[  124.469832][ T8249] netlink: 256 bytes leftover after parsing attributes in process `syz.1.691'.
[  124.552629][ T8257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.693'.
[  124.560004][ T8252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'.
[  124.565337][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  124.591947][ T8253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.692'.
[  124.685889][ T8267] syzkaller1: entered promiscuous mode
[  124.688025][ T8267] syzkaller1: entered allmulticast mode
[  124.765965][ T8272] sctp: [Deprecated]: syz.0.698 (pid 8272) Use of int in max_burst socket option.
[  124.765965][ T8272] Use struct sctp_assoc_value instead
[  124.771202][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'.
[  124.787306][ T8278] x9: renamed from bridge_slave_0
[  124.856172][ T8284] macsec1: entered promiscuous mode
[  124.861136][ T8284] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  124.868184][ T8284] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  124.953047][ T8293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'.
[  124.957356][ T8283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.076151][ T8297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.244200][ T8309] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  125.257766][ T8309] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  125.262404][ T8309] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  125.355199][ T8317] pim6reg1: entered promiscuous mode
[  125.357112][ T8317] pim6reg1: entered allmulticast mode
[  125.397143][ T8317] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  125.488319][ T8328] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  125.569569][ T8336] bond1: (slave veth5): Releasing active interface
[  125.581151][ T8335] syz.1.715: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  125.588877][ T8335] CPU: 1 UID: 0 PID: 8335 Comm: syz.1.715 Not tainted syzkaller #0 PREEMPT(full) 
[  125.588897][ T8335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.588907][ T8335] Call Trace:
[  125.588913][ T8335]  <TASK>
[  125.588919][ T8335]  dump_stack_lvl+0x189/0x250
[  125.588947][ T8335]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.588965][ T8335]  ? __pfx__printk+0x10/0x10
[  125.588985][ T8335]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  125.589035][ T8335]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  125.589054][ T8335]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  125.589072][ T8335]  warn_alloc+0x214/0x310
[  125.589095][ T8335]  ? stack_depot_save_flags+0x40/0x860
[  125.589120][ T8335]  ? __pfx_warn_alloc+0x10/0x10
[  125.589142][ T8335]  ? kasan_save_track+0x4f/0x80
[  125.589161][ T8335]  ? xskq_create+0x56/0x170
[  125.589174][ T8335]  ? xsk_init_queue+0xb0/0x110
[  125.589185][ T8335]  ? xsk_setsockopt+0x4dc/0x8d0
[  125.589203][ T8335]  ? do_sock_setsockopt+0x17c/0x1b0
[  125.589219][ T8335]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  125.589234][ T8335]  ? do_syscall_64+0xfa/0x3b0
[  125.589249][ T8335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.589270][ T8335]  __vmalloc_node_range_noprof+0x125/0x12f0
[  125.589312][ T8335]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  125.589333][ T8335]  ? xskq_create+0x56/0x170
[  125.589348][ T8335]  ? __kasan_kmalloc+0x93/0xb0
[  125.589369][ T8335]  vmalloc_user_noprof+0xad/0xf0
[  125.589389][ T8335]  ? xskq_create+0xbf/0x170
[  125.589409][ T8335]  xskq_create+0xbf/0x170
[  125.589425][ T8335]  xsk_init_queue+0xb0/0x110
[  125.589440][ T8335]  xsk_setsockopt+0x4dc/0x8d0
[  125.589462][ T8335]  ? __pfx_xsk_setsockopt+0x10/0x10
[  125.589482][ T8335]  ? __pfx_aa_sk_perm+0x10/0x10
[  125.589508][ T8335]  ? aa_sock_opt_perm+0xff/0x1b0
[  125.589525][ T8335]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  125.589541][ T8335]  ? __pfx_xsk_setsockopt+0x10/0x10
[  125.589562][ T8335]  do_sock_setsockopt+0x17c/0x1b0
[  125.589582][ T8335]  __x64_sys_setsockopt+0x13f/0x1b0
[  125.589604][ T8335]  do_syscall_64+0xfa/0x3b0
[  125.589617][ T8335]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.589632][ T8335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.589645][ T8335]  ? exc_page_fault+0x9f/0xf0
[  125.589664][ T8335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.589678][ T8335] RIP: 0033:0x7f9eab18ec29
[  125.589691][ T8335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.589702][ T8335] RSP: 002b:00007f9eac0d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  125.589717][ T8335] RAX: ffffffffffffffda RBX: 00007f9eab3d5fa0 RCX: 00007f9eab18ec29
[  125.589727][ T8335] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  125.589735][ T8335] RBP: 00007f9eab211e41 R08: 0000000000000004 R09: 0000000000000000
[  125.589743][ T8335] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.589751][ T8335] R13: 00007f9eab3d6038 R14: 00007f9eab3d5fa0 R15: 00007ffe78b1fe28
[  125.589775][ T8335]  </TASK>
[  125.589781][ T8335] Mem-Info:
[  125.715657][ T8336] bond2: (slave ip6gretap1): Removing an active aggregator
[  125.727300][ T8335] active_anon:12448 inactive_anon:0 isolated_anon:0
[  125.727300][ T8335]  active_file:1522 inactive_file:38264 isolated_file:0
[  125.727300][ T8335]  unevictable:1768 dirty:122 writeback:0
[  125.727300][ T8335]  slab_reclaimable:9955 slab_unreclaimable:54651
[  125.727300][ T8335]  mapped:18490 shmem:2448 pagetables:1112
[  125.727300][ T8335]  sec_pagetables:0 bounce:0
[  125.727300][ T8335]  kernel_misc_reclaimable:0
[  125.727300][ T8335]  free:290591 free_pcp:17264 free_cma:0
[  125.733285][ T8336] bond2: (slave ip6gretap1): Releasing backup interface
[  125.764340][ T8335] Node 0 active_anon:26300kB inactive_anon:0kB active_file:3648kB inactive_file:32816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40500kB dirty:220kB writeback:0kB shmem:4856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6800kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.792946][ T8335] Node 1 active_anon:23560kB inactive_anon:0kB active_file:2440kB inactive_file:120240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33324kB dirty:268kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5364kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.804283][ T8335] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.817126][ T8335] lowmem_reserve[]: 0 811 811 811 811
[  125.819081][ T8335] Node 0 DMA32 free:358060kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26096kB inactive_anon:0kB active_file:3648kB inactive_file:32816kB unevictable:3536kB writepending:220kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:32884kB local_pcp:17432kB free_cma:0kB
[  125.844802][ T8335] lowmem_reserve[]: 0 0 0 0 0
[  125.846814][ T8335] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  125.862902][ T8335] lowmem_reserve[]: 0 0 854 854 854
[  125.870895][ T8335] Node 1 Normal free:330324kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23560kB inactive_anon:0kB active_file:2440kB inactive_file:120240kB unevictable:3536kB writepending:268kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37472kB local_pcp:21052kB free_cma:0kB
[  125.903334][ T8335] lowmem_reserve[]: 0 0 0 0 0
[  125.905322][ T8335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.910192][ T8335] Node 0 DMA32: 493*4kB (UM) 115*8kB (ME) 30*16kB (UME) 5*32kB (UME) 101*64kB (UM) 51*128kB (UME) 21*256kB (UM) 16*512kB (UM) 11*1024kB (UME) 3*2048kB (UM) 75*4096kB (M) = 354700kB
[  125.917320][ T8335] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  125.923872][ T8335] Node 1 Normal: 971*4kB (UE) 357*8kB (UE) 294*16kB (U) 408*32kB (UME) 130*64kB (UE) 29*128kB (UME) 19*256kB (UM) 14*512kB (UME) 6*1024kB (UM) 8*2048kB (UME) 63*4096kB (M) = 329140kB
[  125.931076][ T8335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.934640][ T8335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.938173][ T8335] 42234 total pagecache pages
[  125.940113][ T8349] bridge_slave_1: left allmulticast mode
[  125.943412][ T8349] bridge_slave_1: left promiscuous mode
[  125.945804][ T8335] 0 pages in swap cache
[  125.947417][ T8335] Free swap  = 124996kB
[  125.949040][ T8335] Total swap = 124996kB
[  125.955321][ T8335] 786301 pages RAM
[  125.955406][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.956836][ T8335] 0 pages HighMem/MovableOnly
[  125.956886][ T8335] 241346 pages reserved
[  125.963065][ T8335] 0 pages cma reserved
[  125.965689][ T8349] bridge_slave_0: left allmulticast mode
[  125.967722][ T8349] bridge_slave_0: left promiscuous mode
[  125.974374][ T8349] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.987419][ T8345] ieee802154 phy0 wpan0: encryption failed: -22
[  126.082091][ T8346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.095747][ T8352] netlink: 'syz.1.718': attribute type 8 has an invalid length.
[  126.100317][ T8344] tipc: Resetting bearer <eth:syzkaller0>
[  126.150336][ T8354] netlink: 'syz.1.718': attribute type 8 has an invalid length.
[  127.083984][    T9] tipc: Node number set to 1
[  127.117386][ T8344] tipc: Disabling bearer <eth:syzkaller0>
[  127.125359][ T8352] bond0: entered promiscuous mode
[  127.128040][ T8352] bond0: left promiscuous mode
[  127.137159][ T8354] bond0: entered promiscuous mode
[  127.139902][ T8354] bond0: left promiscuous mode
[  127.145784][ T8357] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  127.158806][ T8359] bond0: (slave bond_slave_0): Releasing backup interface
[  127.170372][ T8359] bond0: (slave bond_slave_1): Releasing backup interface
[  127.176283][ T8359] team0: Port device team_slave_0 removed
[  127.183292][ T8359] team0: Port device team_slave_1 removed
[  127.185635][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.192635][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.200579][ T8359] batman_adv: batadv0: Removing interface: netdevsim0
[  127.239610][ T8368] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  127.249689][ T8368] netlink: 'syz.0.721': attribute type 1 has an invalid length.
[  127.411224][ T8387] netlink: 'syz.1.723': attribute type 4 has an invalid length.
[  127.671623][ T8400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.059517][ T8411] ieee802154 phy0 wpan0: encryption failed: -22
[  128.205703][ T8415] !: renamed from dummy0 (while UP)
[  128.246330][ T8420] openvswitch: netlink: Flow actions attr not present in new flow.
[  128.278957][ T8424] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  128.313779][ T8424] lo speed is unknown, defaulting to 1000
[  128.446672][ T8431] ieee802154 phy0 wpan0: encryption failed: -22
[  128.810282][ T8466] netlink: 'syz.1.738': attribute type 10 has an invalid length.
[  128.824990][ T8466] team0: Port device 0! added
[  128.832322][ T8466] netlink: 'syz.1.738': attribute type 10 has an invalid length.
[  128.864912][ T8466] team0: Port device 0! removed
[  128.894807][ T8469] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  129.831020][ T8522] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  129.834186][ T8522] nbd: error processing sock list
[  129.836449][ T8522] block nbd0: shutting down sockets
[  129.916543][ T8544] pim6reg1: entered promiscuous mode
[  129.918231][ T8544] pim6reg1: entered allmulticast mode
[  130.045313][ T8547] syzkaller1: entered promiscuous mode
[  130.047705][ T8547] syzkaller1: entered allmulticast mode
[  130.393432][ T8561] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[  130.432784][ T8561] bond2: (slave geneve3): making interface the new active one
[  130.436302][ T8561] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  130.442891][ T8561] __nla_validate_parse: 13 callbacks suppressed
[  130.442904][ T8561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'.
[  130.448897][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  130.452046][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  130.462855][ T8561] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.466184][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  130.469341][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  130.668193][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  130.801031][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.763'.
[  131.088609][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  131.179921][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.768'.
[  131.235732][ T8610] tipc: Failed to remove unknown binding: 66,1,1/1:1517186941/1517186943
[  131.239732][ T8610] tipc: Failed to remove unknown binding: 66,1,1/1:1517186941/1517186943
[  131.332195][ T8617] netlink: 'syz.0.772': attribute type 10 has an invalid length.
[  131.340986][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  131.548203][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'.
[  131.757733][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'.
[  131.805250][ T8640] netlink: 92 bytes leftover after parsing attributes in process `syz.1.780'.
[  131.808954][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.780'.
[  131.851512][ T8642] netlink: 'syz.1.781': attribute type 5 has an invalid length.
[  131.892237][ T8645] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  131.894994][ T8645] team0: Device ipvlan0 is already an upper device of the team interface
[  132.073487][ T8650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.170031][ T8649] tipc: Disabling bearer <eth:syzkaller0>
[  132.185164][ T8654] netlink: 'syz.0.784': attribute type 4 has an invalid length.
[  132.607097][ T8687] lo speed is unknown, defaulting to 1000
[  132.675412][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.080106][ T8729] xt_l2tp: missing protocol rule (udp|l2tpip)
[  133.766980][ T8785] xt_l2tp: v2 sid > 0xffff: 1114112
[  133.925262][ T8799] IPv6: NLM_F_CREATE should be specified when creating new route
[  133.942723][ T8801] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.019462][ T8803] trusted_key: syz.1.814 sent an empty control message without MSG_MORE.
[  134.060113][ T8811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.064680][ T8811] syzkaller0: entered promiscuous mode
[  134.066672][ T8811] syzkaller0: entered allmulticast mode
[  134.102243][ T8811] tipc: Resetting bearer <eth:syzkaller0>
[  134.119001][ T8811] tipc: Disabling bearer <eth:syzkaller0>
[  134.551605][ T8841] can: request_module (can-proto-0) failed.
[  134.956284][ T8849] lo speed is unknown, defaulting to 1000
[  135.107782][ T8856] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  135.215446][ T8859] ieee802154 phy0 wpan0: encryption failed: -22
[  135.224819][ T8860] ieee802154 phy0 wpan0: encryption failed: -22
[  136.469170][ T8902] 8021q: VLANs not supported on ip6_vti0
[  136.474795][ T8902] veth1_to_bond: entered allmulticast mode
[  136.498784][ T8901] veth1_to_bond: left allmulticast mode
[  136.515700][ T8906] __nla_validate_parse: 13 callbacks suppressed
[  136.515715][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'.
[  136.735631][ T8916] lo speed is unknown, defaulting to 1000
[  136.866873][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'.
[  136.874390][ T8926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  136.887359][ T8929] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'.
[  137.122086][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'.
[  137.325187][ T8972] syzkaller1: entered promiscuous mode
[  137.327017][ T8972] syzkaller1: entered allmulticast mode
[  137.354185][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.862'.
[  137.493407][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'.
[  137.549641][ T8985] syz.0.865 (8985) used obsolete PPPIOCDETACH ioctl
[  137.586713][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'.
[  137.679866][ T8990] lo speed is unknown, defaulting to 1000
[  137.744553][ T8994] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  137.974981][ T9009] netlink: 'syz.0.871': attribute type 11 has an invalid length.
[  138.529249][ T9047] syzkaller1: entered promiscuous mode
[  138.535515][ T9047] syzkaller1: entered allmulticast mode
[  139.213640][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.884'.
[  139.328480][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'.
[  140.012476][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.897'.
[  140.190860][ T5867] Bluetooth: hci0: command tx timeout
[  140.581697][ T9149] syzkaller0: entered promiscuous mode
[  140.584046][ T9149] syzkaller0: entered allmulticast mode
[  142.111590][ T9180] __nla_validate_parse: 4 callbacks suppressed
[  142.111605][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.912'.
[  142.333087][ T9190] netlink: 'syz.2.915': attribute type 6 has an invalid length.
[  142.361449][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'.
[  142.381164][ T9190] netlink: 'syz.2.915': attribute type 12 has an invalid length.
[  142.384248][ T9190] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.915'.
[  142.388702][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'.
[  142.619754][ T9220] ksmbd: Unknown IPC event: 3, ignore.
[  142.642257][ T9220] netlink: 'syz.1.921': attribute type 1 has an invalid length.
[  142.674186][ T9220] 8021q: adding VLAN 0 to HW filter on device bond4
[  142.689709][ T9216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.935735][ T9255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'.
[  143.110100][ T9267] netlink: 'syz.0.929': attribute type 7 has an invalid length.
[  143.115913][ T9267] netlink: 'syz.0.929': attribute type 3 has an invalid length.
[  143.118421][ T9267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.929'.
[  143.127165][ T9267] netlink: 'syz.0.929': attribute type 10 has an invalid length.
[  143.136489][ T9267] team0: Port device dummy0 added
[  143.142874][ T9267] netlink: 'syz.0.929': attribute type 10 has an invalid length.
[  143.152433][ T9267] team0: Port device dummy0 removed
[  143.307060][ T9273] netlink: 96 bytes leftover after parsing attributes in process `syz.2.932'.
[  143.312585][ T9273] 8021q: VLANs not supported on ip_vti0
[  143.384015][ T9276] netlink: 'syz.2.933': attribute type 10 has an invalid length.
[  143.385147][ T9277] netlink: 'syz.2.933': attribute type 10 has an invalid length.
[  143.398091][ T9277] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  143.404180][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'.
[  143.407824][ T9275] bridge_slave_1: left allmulticast mode
[  143.410131][ T9275] bridge_slave_1: left promiscuous mode
[  143.414304][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.419949][ T9275] x9: left allmulticast mode
[  143.423837][ T9275] x9: left promiscuous mode
[  143.426571][ T9275] bridge0: port 1(1x9) entered disabled state
[  143.448873][ T9275] bond0: (slave bridge0): Releasing backup interface
[  143.956476][ T9284] IPVS: Error connecting to the multicast addr
[  143.965314][ T9284] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.935'.
[  144.254901][ T9290] raw_sendmsg: syz.0.938 forgot to set AF_INET. Fix it!
[  144.479274][ T9305] 8021q: VLANs not supported on wg2
[  144.649762][ T9313] netlink: 92 bytes leftover after parsing attributes in process `syz.1.943'.
[  144.956265][ T9330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.964168][ T9330] syzkaller0: entered promiscuous mode
[  144.966439][ T9330] syzkaller0: entered allmulticast mode
[  144.987749][ T9330] tipc: Resetting bearer <eth:syzkaller0>
[  144.991730][ T9329] tipc: Resetting bearer <eth:syzkaller0>
[  145.005272][ T9329] tipc: Disabling bearer <eth:syzkaller0>
[  145.025693][ T9333] netlink: 'syz.2.951': attribute type 5 has an invalid length.
[  145.038662][ T9333] syzkaller1: entered promiscuous mode
[  145.043166][ T9333] syzkaller1: entered allmulticast mode
[  145.757237][ T9374] openvswitch: netlink: IP tunnel dst address not specified
[  145.758085][ T9375] openvswitch: netlink: IP tunnel dst address not specified
[  145.771328][ T9375] xfrm2: entered promiscuous mode
[  145.773312][ T9375] xfrm2: entered allmulticast mode
[  145.824072][ T9377] tipc: Invalid UDP bearer configuration
[  145.824119][ T9377] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  146.800131][ T9411] 8021q: adding VLAN 0 to HW filter on device team0
[  146.878403][ T9420] ip6tnl1: entered promiscuous mode
[  146.880139][ T9420] ip6tnl1: entered allmulticast mode
[  149.896668][ T9435] block nbd0: shutting down sockets
[  150.079500][ T9447] __nla_validate_parse: 18 callbacks suppressed
[  150.079520][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  150.090908][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.987'.
[  150.097901][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  150.119794][ T9448] syzkaller1: entered promiscuous mode
[  150.127381][ T9448] syzkaller1: entered allmulticast mode
[  153.536662][ T9470] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  153.537859][ T9473] validate_nla: 5 callbacks suppressed
[  153.537883][ T9473] netlink: 'syz.2.996': attribute type 1 has an invalid length.
[  153.567166][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.996'.
[  153.617402][ T9473] lo speed is unknown, defaulting to 1000
[  153.630129][ T9482] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[  153.675930][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.998'.
[  153.705136][ T9481] syzkaller1: entered promiscuous mode
[  153.707432][ T9481] syzkaller1: entered allmulticast mode
[  153.711419][ T9481] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  153.941402][   T56] block nbd0: Receive control failed (result -107)
[  153.971970][ T9489] nbd0: detected capacity change from 0 to 32
[  153.978426][ T9468] block nbd0: Dead connection, failed to find a fallback
[  153.983827][ T9468] block nbd0: shutting down sockets
[  153.986288][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.990116][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  153.994048][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.997570][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.005040][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.008631][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.012281][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.020842][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.024034][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.041752][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.044969][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.056033][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.058793][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.064196][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.067274][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.071197][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.098881][ T9468] ldm_validate_partition_table(): Disk read failed.
[  154.102754][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.106001][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.115041][ T9468] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.118044][ T9468] Buffer I/O error on dev nbd0, logical block 0, async page read
[  154.129048][ T9468] Dev nbd0: unable to read RDB block 0
[  154.131461][ T9468]  nbd0: unable to read partition table
[  154.161167][ T9468] ldm_validate_partition_table(): Disk read failed.
[  154.163536][ T9468] Dev nbd0: unable to read RDB block 0
[  154.166717][ T9468]  nbd0: unable to read partition table
[  154.183918][ T9509] syzkaller1: entered promiscuous mode
[  154.185730][ T9509] syzkaller1: entered allmulticast mode
[  154.284146][ T9513] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1008'.
[  154.287849][ T9516] netlink: 'syz.0.1009': attribute type 12 has an invalid length.
[  154.362803][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'.
[  154.503311][ T9519] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  154.540094][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'.
[  154.547717][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'.
[  154.551971][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1011'.
[  154.734827][ T9529] 8021q: adding VLAN 0 to HW filter on device bond4
[  155.167674][ T9554] lo speed is unknown, defaulting to 1000
[  155.282291][ T9560] lo speed is unknown, defaulting to 1000
[  156.085239][ T9613] __nla_validate_parse: 2 callbacks suppressed
[  156.085251][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'.
[  156.139238][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  156.268614][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1032'.
[  156.353965][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1037'.
[  156.454879][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'.
[  156.515160][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1039'.
[  156.664347][ T9667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1042'.
[  156.667297][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'.
[  156.681076][ T9668] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1042'.
[  156.683921][ T9668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'.
[  156.821534][ T9682] openvswitch: netlink: Flow actions attr not present in new flow.
[  156.825051][ T9682] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  156.982453][ T9692] netlink: 'syz.0.1052': attribute type 8 has an invalid length.
[  157.349938][ T9733] netlink: 'syz.2.1062': attribute type 6 has an invalid length.
[  157.352599][ T9734] netlink: 'syz.2.1062': attribute type 6 has an invalid length.
[  157.978280][ T9737] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.301933][ T9777] netlink: 'syz.0.1071': attribute type 12 has an invalid length.
[  158.821955][ T9816] syzkaller1: entered promiscuous mode
[  158.823880][ T9816] syzkaller1: entered allmulticast mode
[  159.077958][ T9836] IPv6: NLM_F_CREATE should be specified when creating new route
[  159.096930][ T9837] netlink: 'syz.0.1089': attribute type 12 has an invalid length.
[  159.321562][ T9852] syzkaller1: entered allmulticast mode
[  159.486603][ T9869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.518293][ T9881] macsec2: entered promiscuous mode
[  160.521130][ T9881] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  160.523713][ T9881] macsec2: entered allmulticast mode
[  160.525711][ T9881] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  161.041901][ T9913] lo speed is unknown, defaulting to 1000
[  161.079211][ T9918] netlink: 'syz.2.1113': attribute type 1 has an invalid length.
[  161.091579][ T9918] __nla_validate_parse: 17 callbacks suppressed
[  161.091589][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'.
[  161.132028][ T9918] lo speed is unknown, defaulting to 1000
[  161.134165][ T9918] lo speed is unknown, defaulting to 1000
[  161.136483][ T9918] lo speed is unknown, defaulting to 1000
[  161.152702][ T9918] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  161.206748][ T9918] lo speed is unknown, defaulting to 1000
[  161.211415][ T9918] lo speed is unknown, defaulting to 1000
[  161.216341][ T9918] lo speed is unknown, defaulting to 1000
[  161.354899][ T9928] syzkaller1: entered promiscuous mode
[  161.357274][ T9928] syzkaller1: entered allmulticast mode
Connection to localhost closed by remote host.
[  161.509255][ T9935] syzkaller0: entered promiscuous mode
[  161.511396][ T9935] syzkaller0: entered allmulticast mode
[  162.593332][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  166.821690][   T12] bond0 (unregistering): Released all slaves
[  166.894780][   T12] bond1 (unregistering): Released all slaves
[  166.966450][   T12] bond2 (unregistering): Released all slaves
[  166.973686][   T12] bond3 (unregistering): Released all slaves
[  167.041395][   T12] bond4 (unregistering): Released all slaves
[  167.119081][   T12] : left promiscuous mode
[  167.168184][   T12] tipc: Left network mode
[  167.183465][   T12] IPVS: stopping backup sync thread 6083 ...
[  167.453908][   T12] hsr_slave_0: left promiscuous mode
[  167.456703][   T12] hsr_slave_1: left promiscuous mode
[  168.194739][   T12] IPVS: stop unused estimator thread 0...
[  168.206976][   T12] ------------[ cut here ]------------
[  168.208717][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  168.211679][   T12] Modules linked in:
[  168.212983][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  168.216589][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.219515][   T12] Workqueue: netns cleanup_net
[  168.221065][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  168.222771][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b 78 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 33 e1 f7 e8 d4 05 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 05 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  168.228603][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  168.230447][   T12] RAX: ffffffff8a22b92c RBX: ffff88810fb30000 RCX: ffff88801c2f5640
[  168.232925][   T12] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffff88801c2f5640
[  168.235311][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6
[  168.237696][   T12] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d80
[  168.240117][   T12] R13: 1ffff9200001ef40 R14: ffff88810fb31480 R15: dffffc0000000000
[  168.242602][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  168.245243][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  168.247190][   T12] CR2: 0000560103e5ca18 CR3: 0000000022862000 CR4: 00000000000006f0
[  168.249623][   T12] Call Trace:
[  168.250670][   T12]  <TASK>
[  168.251655][   T12]  xfrm_net_exit+0x2d/0x70
[  168.253114][   T12]  ops_undo_list+0x49a/0x990
[  168.254505][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  168.256184][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  168.257873][   T12]  cleanup_net+0x4c5/0x800
[  168.259252][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  168.260864][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.262601][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  168.264383][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  168.266152][   T12]  process_scheduled_works+0xae1/0x17b0
[  168.267885][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  168.269759][   T12]  worker_thread+0x8a0/0xda0
[  168.271311][   T12]  kthread+0x711/0x8a0
[  168.272761][   T12]  ? __pfx_worker_thread+0x10/0x10
[  168.274354][   T12]  ? __pfx_kthread+0x10/0x10
[  168.275783][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.277486][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.279054][   T12]  ? __pfx_kthread+0x10/0x10
[  168.280495][   T12]  ret_from_fork+0x439/0x7d0
[  168.281983][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  168.283536][   T12]  ? __switch_to_asm+0x39/0x70
[  168.285044][   T12]  ? __switch_to_asm+0x33/0x70
[  168.286535][   T12]  ? __pfx_kthread+0x10/0x10
[  168.287964][   T12]  ret_from_fork_asm+0x1a/0x30
[  168.289659][   T12]  </TASK>
[  168.290943][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  168.293462][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  168.296966][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.300895][   T12] Workqueue: netns cleanup_net
[  168.302777][   T12] Call Trace:
[  168.304097][   T12]  <TASK>
[  168.305229][   T12]  dump_stack_lvl+0x99/0x250
[  168.306980][   T12]  ? __asan_memcpy+0x40/0x70
[  168.308704][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.310650][   T12]  ? __pfx__printk+0x10/0x10
[  168.312413][   T12]  vpanic+0x281/0x750
[  168.313927][   T12]  ? __pfx__printk+0x10/0x10
[  168.315665][   T12]  ? __pfx_vpanic+0x10/0x10
[  168.317387][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  168.319376][   T12]  panic+0xb9/0xc0
[  168.320806][   T12]  ? __pfx_panic+0x10/0x10
[  168.322488][   T12]  __warn+0x31b/0x4b0
[  168.323991][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  168.325863][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  168.327415][   T12]  report_bug+0x2be/0x4f0
[  168.328785][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  168.330324][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  168.331847][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  168.333502][   T12]  handle_bug+0x84/0x160
[  168.335029][   T12]  exc_invalid_op+0x1a/0x50
[  168.336817][   T12]  asm_exc_invalid_op+0x1a/0x20
[  168.338603][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  168.340405][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8b 78 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 09 33 e1 f7 e8 d4 05 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c6 05 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  168.346523][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  168.348497][   T12] RAX: ffffffff8a22b92c RBX: ffff88810fb30000 RCX: ffff88801c2f5640
[  168.351320][   T12] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffff88801c2f5640
[  168.354371][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6
[  168.357257][   T12] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d80
[  168.360006][   T12] R13: 1ffff9200001ef40 R14: ffff88810fb31480 R15: dffffc0000000000
[  168.362436][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  168.363956][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  168.365637][   T12]  xfrm_net_exit+0x2d/0x70
[  168.367065][   T12]  ops_undo_list+0x49a/0x990
[  168.368613][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  168.370238][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  168.372012][   T12]  cleanup_net+0x4c5/0x800
[  168.373483][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  168.375125][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.376791][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  168.378633][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  168.380446][   T12]  process_scheduled_works+0xae1/0x17b0
[  168.382154][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  168.384023][   T12]  worker_thread+0x8a0/0xda0
[  168.385679][   T12]  kthread+0x711/0x8a0
[  168.386988][   T12]  ? __pfx_worker_thread+0x10/0x10
[  168.388682][   T12]  ? __pfx_kthread+0x10/0x10
[  168.390508][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  168.392505][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.394483][   T12]  ? __pfx_kthread+0x10/0x10
[  168.396390][   T12]  ret_from_fork+0x439/0x7d0
[  168.398075][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  168.399880][   T12]  ? __switch_to_asm+0x39/0x70
[  168.401422][   T12]  ? __switch_to_asm+0x33/0x70
[  168.402977][   T12]  ? __pfx_kthread+0x10/0x10
[  168.404794][   T12]  ret_from_fork_asm+0x1a/0x30
[  168.406635][   T12]  </TASK>
[  168.408450][   T12] Kernel Offset: disabled
[  168.410193][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:37:48  Registers:
info registers vcpu 0

CPU#0
RAX=00007f48e32d793e RBX=ffffc90007690000 RCX=1ffff92000ed2f01 RDX=ffffc90007697978
RSI=0000000000000003 RDI=ffffc90007697fd8 RBP=ffffc90007698000 RSP=ffffc90007697890
R8 =0000000000000022 R9 =ffffffff8172d195 R10=ffffc900076979b8 R11=ffffffff81ac4b00
R12=ffffc90007697f58 R13=1ffff92000ed2f2e R14=ffffc90007697968 R15=1ffff92000ed2f2f
RIP=ffffffff817300b3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f48e32bed11 CR3=0000000028916000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ffffff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000045 RBX=0000000000000045 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff8881078e8237 R9 =1ffff11020f1d046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b0091d R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560103e5ca18 CR3=0000000022862000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000111 0000000034002c31
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00ff0000 XMM09=0000000000000111 0000000034003231
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
