last executing test programs:

24.396042992s ago: executing program 1 (id=30):
socket$nl_route(0x10, 0x3, 0x0)

24.346045878s ago: executing program 1 (id=31):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200000000"], 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000080ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00"/112], 0xb8}}, 0x0)

24.250415916s ago: executing program 1 (id=35):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000001300)=0x4)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x10, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140), 0x3}, 0x20)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0)
r2 = socket(0x15, 0x800, 0x8)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000000)=0x7, 0x4)

23.296073199s ago: executing program 1 (id=49):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9a}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x106, 0xb7, &(0x7f0000000180)=""/183, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x1, 0x1], &(0x7f0000000400)=[{0x1, 0x3, 0x0, 0x7}, {0x2, 0x5, 0x8, 0x8}, {0x2, 0x4, 0x9, 0xa}, {0x4, 0x2, 0x10, 0x5}, {0x2, 0x4, 0x9, 0x1}, {0x0, 0x5, 0x1, 0xb}, {0x2, 0x1, 0xe, 0x4}, {0x5, 0x2, 0xb, 0x6}, {0x3, 0x2, 0xf, 0x5}, {0x1, 0x5, 0xf, 0xa}], 0x10, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='ext4_get_implied_cluster_alloc_exit\x00', r1, 0x0, 0x6ac4}, 0x18)
sendmsg$nl_crypto(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0)

23.295128239s ago: executing program 1 (id=50):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0x8}}}, 0x24}}, 0x20004001)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f]}}, &(0x7f0000000140)=""/97, 0x27, 0x61, 0x1, 0x9, 0x10000}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x269, 0x7446, 0x800, 0x44021, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x4, 0x5, 0x0, 0xe}, 0x50)
poll(&(0x7f0000000000)=[{r6, 0xa404}, {r8, 0x21}], 0x2, 0xfffffffe)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x64, r11, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_MESH_SETUP={0x24, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x6}]}, @NL80211_ATTR_TX_RATES={0x4}, @chandef_params]}, 0x64}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x68, r11, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xf}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa9}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x20000091)
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000000))

22.905521662s ago: executing program 1 (id=51):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async, rerun: 64)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) (async)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}}, 0x18)
sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003c00070100000000008c32a475f9f4827f2998e6000000017cffff0300fc800cae008006000600800a0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25050000000800010000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0x840)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r8, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4)

7.929642989s ago: executing program 32 (id=51):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async, rerun: 64)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) (async)
connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x0, 0xf0, 0x2}}, 0x18)
sendmmsg$inet(r4, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) (async, rerun: 32)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003c00070100000000008c32a475f9f4827f2998e6000000017cffff0300fc800cae008006000600800a0000"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) (async, rerun: 32)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25050000000800010000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x48884}, 0x840)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r8, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4)

1.943846584s ago: executing program 0 (id=344):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'ip6tnl0\x00'}]}}]}, 0x44}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000140)={0x80})

1.809088743s ago: executing program 0 (id=346):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000090900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080)

1.806918927s ago: executing program 0 (id=348):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18)
r1 = socket(0x8000000010, 0x2, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket(0x23, 0x5, 0x0)
getsockopt$nfc_llcp(r3, 0x113, 0x2, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="9b919e18a5", 0x5}], 0x1}, 0x10)
sendfile(r2, r4, 0x0, 0xffffffff000)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
write(r1, &(0x7f00000002c0)="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", 0xfc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

1.443060813s ago: executing program 0 (id=351):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x31)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1)
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000000000)=[{r3, 0x8104}], 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000019c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0xf08)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffff7, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff08, 0x0, 0x0, 0x8, 0x0, &(0x7f00000003c0)=[{0x4, 0x5, 0xe, 0xb}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0xa, 0x8, 0x3}, {0x5, 0x2, 0x1, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1)
socket$inet(0x2, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, 0x0, 0x0)
close(0x3)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
recvmmsg$unix(r4, 0x0, 0x0, 0x400122a0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

734.37329ms ago: executing program 3 (id=355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

643.079245ms ago: executing program 3 (id=357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000000)="cd", 0x1) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000340), &(0x7f00000002c0)=@tcp6=r0}, 0x20)

582.650407ms ago: executing program 3 (id=358):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x123243, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x28)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x29, 0x3})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002000ffff2abd7000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e000108001b"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x57, 0xd, 0x9})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}]}, 0x24}], 0x1}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="3f00020008"], 0xe)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

581.988003ms ago: executing program 2 (id=359):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b21, &(0x7f0000000040))
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1103000000000000300012800b000100697036746e6c000020000280080008001e00000006000f000000000004001300080008000300000008000a00", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044)

513.609738ms ago: executing program 2 (id=360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffe, 0x10000, 0xfffffffe}, 0x1c)

454.594051ms ago: executing program 2 (id=361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x3a, 0x7, 0xb})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1)

453.244098ms ago: executing program 3 (id=362):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000380))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={<r3=>0x0, 0xb4, "06fe58d8d3a93a0f5c93f483c40c633d0cd372cb43cc59bd9c82e524b7f69ac87001ded38b1fc053515d1d5acd59dafb66173c1219a82e0106173dff2d3765267d7e2c02dbb18864229419df1cbd65bded7693b37fc174991fd0ffb5b851fbfd53a0b51423bf5758a038bf8c7688e7bd5e2ccac186e2a8a0501ae2f0a71a361f7bc647f9f74fdfaa0f33bf9641188a86a440e16a8ff4e78ecbf7f8be0a14a8c1942852b5803f3e911882bcd2a91f2e4cd6770639"}, &(0x7f0000000000)=0xbc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r3, 0xbc, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e21, 0x0, @empty, 0xe}, @in6={0xa, 0x4e23, 0xffff, @remote, 0x2d}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x3}, @in6={0xa, 0x4e21, 0x4, @private0, 0xd34}, @in6={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x80000000}]}, &(0x7f00000002c0)=0x10)
sendto$inet6(r2, &(0x7f0000000080)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x1, 0x0, 0x0)
connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14)

451.224511ms ago: executing program 0 (id=363):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32, @ANYBLOB="0000000000040000b705c3a3fc9b1017ff1eaf00b60000b348cc0095a2e01cd3aab887f97743c99f5eb40c81f1445743"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
listen(r0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b8, 0x0, 0x1a8, 0xffffffff, 0x0, 0x1a8, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x9, @multicast2, @local, @port=0x4e24, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x800, 0x4d3, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x0, 0x4}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x67, @gre_key=0x5}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1b, @rand_addr=0x64010100, @multicast2, @port=0x4e20, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x2, 0x5, 0x3, 0x2, 0x4], 0x3, 0x1}, {0x3, [0x6, 0x1, 0x8, 0x2, 0x1, 0x7], 0x3, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418)

393.271488ms ago: executing program 2 (id=364):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {{0xa, 0x4e21, 0xffff, @mcast2, 0xa49}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000040000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)

392.498667ms ago: executing program 3 (id=365):
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x44, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r2, 0x0, 0x400c000)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0)
ioctl$SIOCGETLINKNAME(r11, 0x89e0, &(0x7f0000000500)={0x2, 0x3})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58e0e8c9c54af63f0000", @ANYRES16=r3, @ANYBLOB="2a0e2bbd7000fddbdf25010000000c00050000010000000000000c000600000000000000000008000100000000000c0005000c000000000000000c00050001000000000000000c0008000400000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x50)

392.11207ms ago: executing program 0 (id=366):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="32e9e2ea96a40c15d21508205a6760df4accede349e80480934cd518721af6b4396a53fee791c327f124133cbdcab939e100afa75a27d70e0ecb151074d25fd5be4684bb42a87055fa3a2afaddc0df9e62b738d48530ec97b52257a6b643aee689a0630dc10b547dcf9f469f", @ANYRES64=0x0], 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)
r2 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x61d8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r4}, 0x38)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a800000800", @ANYRES32=r6], 0x8c}, 0x1, 0xba01}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r4}, 0x38)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)="d336bd7524", 0x5}], 0x3)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

323.557241ms ago: executing program 2 (id=367):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x2})
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000001280))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1], 0xff, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000000)={0x8})

615.343µs ago: executing program 2 (id=368):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0xd4, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
close(r1)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e00), 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x4}, 0x38)
r7 = socket(0x23, 0x5, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x10000008})
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000002c0)=0x110a348, 0x4)

0s ago: executing program 3 (id=369):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @loopback}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x3)
sendmsg$nl_xfrm(r4, &(0x7f0000000c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x1455134c, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xab}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16648' (ED25519) to the list of known hosts.
syzkaller login: [   48.511192][ T5820] cgroup: Unknown subsys name 'net'
[   48.595308][ T5820] cgroup: Unknown subsys name 'cpuset'
[   48.599500][ T5820] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.264061][ T5820] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.473187][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.476214][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.479358][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.481981][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.485159][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.487755][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.503178][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.506146][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.509580][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.512095][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.530301][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.534373][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.537025][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.541390][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.543948][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.754683][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   54.772979][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   54.833794][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.908344][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.911652][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.914004][ T5837] bridge_slave_0: entered allmulticast mode
[   54.916752][ T5837] bridge_slave_0: entered promiscuous mode
[   54.924015][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.926185][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.928361][ T5837] bridge_slave_1: entered allmulticast mode
[   54.931757][ T5837] bridge_slave_1: entered promiscuous mode
[   54.955627][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.958275][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.961482][ T5829] bridge_slave_0: entered allmulticast mode
[   54.964788][ T5829] bridge_slave_0: entered promiscuous mode
[   55.005564][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.008334][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.011033][ T5829] bridge_slave_1: entered allmulticast mode
[   55.013788][ T5829] bridge_slave_1: entered promiscuous mode
[   55.027854][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.031450][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.034225][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.036455][ T5828] bridge_slave_0: entered allmulticast mode
[   55.039599][ T5828] bridge_slave_0: entered promiscuous mode
[   55.053307][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.057427][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.061012][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.063227][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.065454][ T5828] bridge_slave_1: entered allmulticast mode
[   55.068327][ T5828] bridge_slave_1: entered promiscuous mode
[   55.089831][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.102535][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.107868][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.148499][ T5837] team0: Port device team_slave_0 added
[   55.154979][ T5837] team0: Port device team_slave_1 added
[   55.168026][ T5828] team0: Port device team_slave_0 added
[   55.184457][ T5829] team0: Port device team_slave_0 added
[   55.188458][ T5828] team0: Port device team_slave_1 added
[   55.218033][ T5829] team0: Port device team_slave_1 added
[   55.237735][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.241310][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.252131][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.266734][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.269510][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.277063][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.281070][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.283174][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.291116][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.295184][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.297900][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.311274][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.318244][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.321446][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.333218][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.338172][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.340663][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.348444][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.409508][ T5837] hsr_slave_0: entered promiscuous mode
[   55.411937][ T5837] hsr_slave_1: entered promiscuous mode
[   55.434918][ T5829] hsr_slave_0: entered promiscuous mode
[   55.437419][ T5829] hsr_slave_1: entered promiscuous mode
[   55.441204][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.443671][ T5829] Cannot create hsr debugfs directory
[   55.448351][ T5828] hsr_slave_0: entered promiscuous mode
[   55.450785][ T5828] hsr_slave_1: entered promiscuous mode
[   55.452847][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.455170][ T5828] Cannot create hsr debugfs directory
[   55.685289][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.694365][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.701231][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.711832][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.757466][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.762326][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.767551][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.774234][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.824212][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.833732][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.852343][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.862627][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.921317][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.933158][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.951637][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   55.957859][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   55.966420][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.968655][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.974079][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.976555][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.991308][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.993592][ T2183] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.996742][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.999014][ T2183] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.037222][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.079360][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.095609][  T385] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.097866][  T385] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.109874][  T385] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.112314][  T385] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.228450][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.234672][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.288329][ T5829] veth0_vlan: entered promiscuous mode
[   56.300018][ T5837] veth0_vlan: entered promiscuous mode
[   56.304039][ T5829] veth1_vlan: entered promiscuous mode
[   56.309968][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.321847][ T5837] veth1_vlan: entered promiscuous mode
[   56.357283][ T5829] veth0_macvtap: entered promiscuous mode
[   56.365150][ T5828] veth0_vlan: entered promiscuous mode
[   56.370301][ T5829] veth1_macvtap: entered promiscuous mode
[   56.374488][ T5837] veth0_macvtap: entered promiscuous mode
[   56.381888][ T5837] veth1_macvtap: entered promiscuous mode
[   56.388130][ T5828] veth1_vlan: entered promiscuous mode
[   56.406474][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.415745][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.420032][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.434703][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.437474][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.441023][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.443694][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.451189][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.465887][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.468551][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.472481][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.475172][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.481209][ T5828] veth0_macvtap: entered promiscuous mode
[   56.494232][ T5828] veth1_macvtap: entered promiscuous mode
[   56.509725][ T5836] Bluetooth: hci0: command tx timeout
[   56.525795][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.535494][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.561729][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.565434][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.568431][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.572464][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.590399][ T5836] Bluetooth: hci2: command tx timeout
[   56.592780][ T5836] Bluetooth: hci1: command tx timeout
[   56.610373][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.612880][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.654350][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.656820][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.670336][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.677602][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.681780][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.684126][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.724433][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.724468][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.738261][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.780446][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.782847][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.899800][ T5897] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.952642][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.956201][ T5897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.963829][ T5904] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   56.969828][ T5903] bridge0: entered promiscuous mode
[   57.004936][ T5907] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.029033][ T5906] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.036555][ T5906] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.041097][ T5906] netlink: 'syz.2.5': attribute type 4 has an invalid length.
[   57.057024][ T5911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.111212][ T5913] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   57.158066][ T5917] netlink: 'syz.1.10': attribute type 29 has an invalid length.
[   57.162288][ T5917] netlink: 'syz.1.10': attribute type 29 has an invalid length.
[   57.180494][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.184526][ T5922] 8021q: VLANs not supported on ip6gre0
[   57.249311][ T5924] netlink: 'syz.1.13': attribute type 2 has an invalid length.
[   57.401185][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'.
[   57.422869][ T5943] netlink: 88 bytes leftover after parsing attributes in process `syz.2.20'.
[   57.464168][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.487350][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'.
[   57.495140][ T5954] tipc: Started in network mode
[   57.496856][ T5954] tipc: Node identity bea9db7dd1ee, cluster identity 4711
[   57.506066][ T5954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.522327][ T5954] tipc: Disabling bearer <eth:syzkaller0>
[   57.736410][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[   57.863160][ T5982] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[   57.875051][ T5982] netlink: 'syz.0.34': attribute type 2 has an invalid length.
[   57.878229][ T5982] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[   57.887584][ T5982] netlink: 'syz.0.34': attribute type 2 has an invalid length.
[   57.990741][ T5991] Bluetooth: MGMT ver 1.23
[   58.061969][ T5997] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   58.193675][ T5991] ip6gretap0: entered promiscuous mode
[   58.197497][ T5991] ip6gretap0: left promiscuous mode
[   58.209219][ T6002] Zero length message leads to an empty skb
[   58.285089][ T6006] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   58.589637][ T5836] Bluetooth: hci0: command tx timeout
[   58.679061][ T5836] Bluetooth: hci1: command tx timeout
[   58.682349][ T5836] Bluetooth: hci2: command tx timeout
[   59.439743][ T6052] nbd2: detected capacity change from 0 to 63
[   59.442293][ T6053] block nbd2: NBD_DISCONNECT
[   59.445169][ T6053] block nbd2: Disconnected due to user request.
[   59.448314][ T6053] block nbd2: shutting down sockets
[   59.607906][ T6068] xt_policy: output policy not valid in PREROUTING and INPUT
[   59.645097][ T6074] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   59.649026][ T6074] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   59.765468][ T6083] batadv1: entered allmulticast mode
[   59.767954][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv1
[   60.176974][ T6115] geneve2: entered allmulticast mode
[   60.298908][ T6122] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.313950][ T6122] 8021q: adding VLAN 0 to HW filter on device bond1
[   60.316151][ T6122] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   60.320471][ T6122] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   60.360214][ T6124] gretap1: entered promiscuous mode
[   60.364562][ T6124] bond1: (slave gretap1): making interface the new active one
[   60.367454][ T6124] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   60.405391][ T6126] tipc: Started in network mode
[   60.406990][ T6126] tipc: Node identity ac14142f, cluster identity 4711
[   60.413039][ T6126] tipc: New replicast peer: 0.0.0.0
[   60.416135][ T6126] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.421526][ T6126] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   60.470574][    C1] vcan0: j1939_tp_rxtimer: 0xffff888107158c00: rx timeout, send abort
[   60.473828][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888107158c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.478623][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802245d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.566567][ T6135] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.571708][ T6137] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.630278][ T6140] team0: Device gtp0 is of different type
[   60.680277][ T5836] Bluetooth: hci0: command tx timeout
[   60.749581][ T5836] Bluetooth: hci2: command 0x040f tx timeout
[   60.750070][ T5832] Bluetooth: hci1: command tx timeout
[   61.501630][ T6159] xt_ecn: cannot match TCP bits for non-tcp packets
[   61.540368][  T789] tipc: Node number set to 2886997039
[   61.695779][ T6168] syzkaller0: entered promiscuous mode
[   61.697546][ T6168] syzkaller0: entered allmulticast mode
[   61.756258][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802245cc00: rx timeout, send abort
[   61.759110][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802245cc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   61.763401][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802245c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.682375][ T6175] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   62.741761][ T6176] __nla_validate_parse: 18 callbacks suppressed
[   62.741775][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   62.748974][   T53] Bluetooth: hci0: command tx timeout
[   62.830394][   T53] Bluetooth: hci1: command tx timeout
[   62.838849][   T53] Bluetooth: hci2: command 0x040f tx timeout
[   63.043249][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802245c800: rx timeout, send abort
[   63.045890][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802245c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   63.050266][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803b840c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   63.370776][ T6185] sctp: [Deprecated]: syz.2.99 (pid 6185) Use of int in max_burst socket option deprecated.
[   63.370776][ T6185] Use struct sctp_assoc_value instead
[   63.376925][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'.
[   63.379685][ T6185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.99'.
[   63.382321][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'.
[   63.418281][ T6191] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   63.421851][ T6188] IPVS: stopping backup sync thread 6191 ...
[   63.518546][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   63.577697][ T5866] IPVS: starting estimator thread 0...
[   63.636966][ T6201] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   63.646541][ T6201] validate_nla: 3 callbacks suppressed
[   63.646573][ T6201] netlink: 'syz.2.105': attribute type 20 has an invalid length.
[   63.655789][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'.
[   63.668918][ T6202] IPVS: using max 62 ests per chain, 148800 per kthread
[   63.925943][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.930619][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.110'.
[   63.960454][ T6217] Cannot find add_set index 0 as target
[   64.158644][ T6243] netlink: 'syz.2.116': attribute type 7 has an invalid length.
[   64.208584][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'.
[   64.236323][ T6254] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   64.240168][ T6254] netlink: 208 bytes leftover after parsing attributes in process `syz.0.119'.
[   64.243032][ T6254] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   64.245512][ T6254] netlink: 'syz.0.119': attribute type 2 has an invalid length.
[   64.252361][ T6254] netem: change failed
[   64.254083][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'.
[   64.256889][ T6251] bridge_slave_1: left allmulticast mode
[   64.258625][ T6251] bridge_slave_1: left promiscuous mode
[   64.260952][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.266354][ T6251] bridge_slave_0: left allmulticast mode
[   64.268081][ T6251] bridge_slave_0: left promiscuous mode
[   64.273002][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.329139][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803b841800: rx timeout, send abort
[   64.332153][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803b841800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   64.336685][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880245abc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   64.343935][ T6262] lo: entered allmulticast mode
[   64.346293][ T6262] lo: left allmulticast mode
[   64.857899][ T6297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.861445][ T6297] netlink: 'syz.2.128': attribute type 4 has an invalid length.
[   64.920455][   T53] Bluetooth: hci2: command 0x040f tx timeout
[   65.607752][    C0] vcan0: j1939_tp_rxtimer: 0xffff888111fa9800: rx timeout, send abort
[   65.610620][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888111fa9800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   65.615286][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888111fa9000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   65.695220][ T6316] bond0: entered promiscuous mode
[   65.696922][ T6316] bond_slave_0: entered promiscuous mode
[   65.701011][ T6316] bond_slave_1: entered promiscuous mode
[   65.703897][ T6316] batadv0: entered promiscuous mode
[   65.706658][ T6316] 8021q: adding VLAN 0 to HW filter on device hsr1
[   65.711957][ T6316] bond0: left promiscuous mode
[   65.713497][ T6316] bond_slave_0: left promiscuous mode
[   65.715270][ T6316] bond_slave_1: left promiscuous mode
[   65.717609][ T6316] batadv0: left promiscuous mode
[   65.806538][ T6321] team_slave_0: entered promiscuous mode
[   65.808366][ T6321] team_slave_1: entered promiscuous mode
[   65.810662][ T6321] vlan2: entered promiscuous mode
[   65.812171][ T6321] team0: entered promiscuous mode
[   65.958303][ T6332] vlan2: entered allmulticast mode
[   66.003397][ T6336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.005765][ T6336] IPv6: NLM_F_CREATE should be set when creating new route
[   66.008030][ T6336] IPv6: NLM_F_CREATE should be set when creating new route
[   66.047790][ T6340] netlink: 'syz.0.143': attribute type 12 has an invalid length.
[   66.074656][ T6341] bond2: entered promiscuous mode
[   66.076462][ T6341] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.291805][ T6366] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.436383][ T6386] sctp: [Deprecated]: syz.2.155 (pid 6386) Use of int in maxseg socket option.
[   66.436383][ T6386] Use struct sctp_assoc_value instead
[   66.551489][ T6398] geneve0: entered promiscuous mode
[   66.567030][ T6400] Cannot find del_set index 0 as target
[   66.884986][    C1] vcan0: j1939_tp_rxtimer: 0xffff888111fa8c00: rx timeout, send abort
[   66.887816][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888111fa8c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.892177][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888111fa8800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   66.908272][ T6423] openvswitch: netlink: Message has 4 unknown bytes.
[   67.037035][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.039704][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.094508][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.102242][ T6431] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.145344][ T6431] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.148171][ T6431] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.156492][ T6431] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.160016][ T6431] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.191042][ T6431] syz.0.169 (6431) used greatest stack depth: 19928 bytes left
[   67.256655][ T6436] nbd: must specify at least one socket
[   67.458205][ T6448] netlink: 'syz.0.175': attribute type 7 has an invalid length.
[   67.462794][ T6448] netlink: 'syz.0.175': attribute type 8 has an invalid length.
[   67.522767][ T6448] SET target dimension over the limit!
[   67.625307][ T6457] netlink: 'syz.2.178': attribute type 10 has an invalid length.
[   67.636758][ T6457] 8021q: adding VLAN 0 to HW filter on device team0
[   67.641022][ T6457] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.753335][ T6469] __nla_validate_parse: 15 callbacks suppressed
[   67.753348][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   67.753677][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   67.755373][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   67.758109][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'.
[   67.812217][ T6473] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   68.163737][    C0] vcan0: j1939_tp_rxtimer: 0xffff888111fa8400: rx timeout, send abort
[   68.166634][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888111fa8400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.171084][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f7c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   68.728107][ T6500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.189'.
[   68.731005][ T6500] netlink: 35 bytes leftover after parsing attributes in process `syz.2.189'.
[   68.772455][ T6502] validate_nla: 1 callbacks suppressed
[   68.772468][ T6502] netlink: 'syz.2.190': attribute type 1 has an invalid length.
[   68.776635][ T6502] netlink: 228 bytes leftover after parsing attributes in process `syz.2.190'.
[   69.007719][ T6520] syzkaller1: tun_chr_ioctl cmd 1074025677
[   69.010344][ T6520] syzkaller1: Linktype set failed because interface is up
[   69.013959][ T6520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'.
[   69.097097][ T6523] netlink: 'syz.2.197': attribute type 23 has an invalid length.
[   69.133719][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'.
[   69.222214][ T6529] Cannot find set identified by id 0 to match
[   69.228235][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'.
[   69.338095][ T6530] delete_channel: no stack
[   69.437863][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881110f7800: rx timeout, send abort
[   69.440850][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f7800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   69.445097][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f7400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   70.147313][ T6563] netlink: 'syz.2.210': attribute type 4 has an invalid length.
[   70.472763][ T6586] syz.0.217: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   70.477913][ T6586] CPU: 0 UID: 0 PID: 6586 Comm: syz.0.217 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   70.477924][ T6586] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.477930][ T6586] Call Trace:
[   70.477935][ T6586]  <TASK>
[   70.477941][ T6586]  dump_stack_lvl+0x189/0x250
[   70.477959][ T6586]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.477969][ T6586]  ? __pfx__printk+0x10/0x10
[   70.477981][ T6586]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.477993][ T6586]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.478004][ T6586]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   70.478015][ T6586]  warn_alloc+0x214/0x310
[   70.478030][ T6586]  ? __pfx_warn_alloc+0x10/0x10
[   70.478045][ T6586]  ? __get_vm_area_node+0x28f/0x300
[   70.478056][ T6586]  ? htable_create+0xfc/0x7a0
[   70.478072][ T6586]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   70.478096][ T6586]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   70.478109][ T6586]  ? rcu_is_watching+0x15/0xb0
[   70.478120][ T6586]  ? htable_create+0xfc/0x7a0
[   70.478130][ T6586]  ? htable_create+0xfc/0x7a0
[   70.478139][ T6586]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   70.478151][ T6586]  ? htable_create+0xfc/0x7a0
[   70.478160][ T6586]  ? hashlimit_pernet+0x23/0x240
[   70.478174][ T6586]  htable_create+0xfc/0x7a0
[   70.478188][ T6586]  hashlimit_mt_check_common+0x719/0xa10
[   70.478203][ T6586]  hashlimit_mt_check_v1+0x221/0x360
[   70.478215][ T6586]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[   70.478229][ T6586]  ? xt_find_match+0x1f7/0x250
[   70.478244][ T6586]  xt_check_match+0x3d1/0xab0
[   70.478253][ T6586]  ? __pfx___mutex_lock+0x10/0x10
[   70.478264][ T6586]  ? __pfx_xt_check_match+0x10/0x10
[   70.478276][ T6586]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   70.478292][ T6586]  ? xt_find_match+0x1f7/0x250
[   70.478305][ T6586]  translate_table+0x150b/0x2000
[   70.478327][ T6586]  ? __pfx_translate_table+0x10/0x10
[   70.478337][ T6586]  ? __might_fault+0xb0/0x130
[   70.478356][ T6586]  ? _copy_from_user+0x94/0xb0
[   70.478370][ T6586]  do_ipt_set_ctl+0x967/0xcd0
[   70.478383][ T6586]  ? rcu_is_watching+0x15/0xb0
[   70.478391][ T6586]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   70.478410][ T6586]  ? __pfx___mutex_lock+0x10/0x10
[   70.478418][ T6586]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   70.478425][ T6586]  ? aa_sk_perm+0x81e/0x950
[   70.478439][ T6586]  ? __pfx_aa_sk_perm+0x10/0x10
[   70.478452][ T6586]  nf_setsockopt+0x26f/0x290
[   70.478469][ T6586]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   70.478479][ T6586]  do_sock_setsockopt+0x25a/0x3e0
[   70.478492][ T6586]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   70.478503][ T6586]  ? __fget_files+0x2a/0x420
[   70.478519][ T6586]  __x64_sys_setsockopt+0x18b/0x220
[   70.478531][ T6586]  do_syscall_64+0xfa/0x3b0
[   70.478540][ T6586]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.478552][ T6586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.478560][ T6586]  ? exc_page_fault+0x9f/0xf0
[   70.478572][ T6586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.478580][ T6586] RIP: 0033:0x7f2bcb98e929
[   70.478589][ T6586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.478597][ T6586] RSP: 002b:00007f2bcc81b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.478605][ T6586] RAX: ffffffffffffffda RBX: 00007f2bcbbb6080 RCX: 00007f2bcb98e929
[   70.478611][ T6586] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 000000000000008a
[   70.478616][ T6586] RBP: 00007f2bcba10b39 R08: 0000000000000518 R09: 0000000000000000
[   70.478621][ T6586] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000
[   70.478626][ T6586] R13: 0000000000000000 R14: 00007f2bcbbb6080 R15: 00007ffe58aa73d8
[   70.478640][ T6586]  </TASK>
[   70.478644][ T6586] Mem-Info:
[   70.592992][ T6586] active_anon:12046 inactive_anon:0 isolated_anon:0
[   70.592992][ T6586]  active_file:931 inactive_file:38208 isolated_file:0
[   70.592992][ T6586]  unevictable:1768 dirty:1469 writeback:0
[   70.592992][ T6586]  slab_reclaimable:9242 slab_unreclaimable:52925
[   70.592992][ T6586]  mapped:17866 shmem:2441 pagetables:822
[   70.592992][ T6586]  sec_pagetables:0 bounce:0
[   70.592992][ T6586]  kernel_misc_reclaimable:0
[   70.592992][ T6586]  free:295641 free_pcp:17934 free_cma:0
[   70.606784][ T6586] Node 0 active_anon:12204kB inactive_anon:0kB active_file:2276kB inactive_file:146736kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35820kB dirty:2912kB writeback:0kB shmem:4752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5984kB pagetables:1868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.616637][ T6586] Node 1 active_anon:35912kB inactive_anon:0kB active_file:1448kB inactive_file:6096kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35508kB dirty:2964kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5288kB pagetables:1420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.626322][ T6586] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.635191][ T6586] lowmem_reserve[]: 0 812 812 812 812
[   70.637396][ T6586] Node 0 DMA32 free:276188kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12204kB inactive_anon:0kB active_file:2276kB inactive_file:146736kB unevictable:3536kB writepending:2912kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:36072kB local_pcp:15888kB free_cma:0kB
[   70.647253][ T6586] lowmem_reserve[]: 0 0 0 0 0
[   70.649365][ T6586] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.658948][ T6586] lowmem_reserve[]: 0 0 854 854 854
[   70.660754][ T6586] Node 1 Normal free:432196kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35980kB inactive_anon:0kB active_file:1448kB inactive_file:6096kB unevictable:3536kB writepending:2964kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36756kB local_pcp:18028kB free_cma:0kB
[   70.671506][ T6586] lowmem_reserve[]: 0 0 0 0 0
[   70.673108][ T6586] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.676966][ T6586] Node 0 DMA32: 5085*4kB (UME) 358*8kB (UM) 242*16kB (UM) 100*32kB (UME) 56*64kB (UM) 9*128kB (UME) 6*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 5*2048kB (UME) 55*4096kB (M) = 276164kB
[   70.682670][ T6586] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   70.690132][ T6586] Node 1 Normal: 11*4kB (UM) 363*8kB (UME) 113*16kB (UM) 64*32kB (UM) 82*64kB (UME) 24*128kB (UME) 11*256kB (UM) 3*512kB (ME) 3*1024kB (ME) 4*2048kB (UME) 98*4096kB (M) = 432148kB
[   70.696046][ T6586] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.700774][ T6586] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.704119][ T6586] 41580 total pagecache pages
[   70.705788][ T6586] 0 pages in swap cache
[   70.707081][ T6586] Free swap  = 124996kB
[   70.708375][ T6586] Total swap = 124996kB
[   70.711550][ T6586] 786301 pages RAM
[   70.712809][ T6586] 0 pages HighMem/MovableOnly
[   70.714294][ T6586] 241085 pages reserved
[   70.715534][ T6586] 0 pages cma reserved
[   70.722577][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881110f6000: rx timeout, send abort
[   70.725156][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f6000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   70.729432][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f5c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   70.834897][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.836985][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.878292][ T6616] netlink: 'syz.0.227': attribute type 58 has an invalid length.
[   70.981946][ T6626] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   71.021071][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.001073][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881110f5800: rx timeout, send abort
[   72.003700][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f5800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   72.007969][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f5400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   72.090963][ T6641] geneve0: entered promiscuous mode
[   72.197408][ T6659] syzkaller0: entered promiscuous mode
[   72.200612][ T6659] syzkaller0: entered allmulticast mode
[   72.422956][ T6675] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.222651][ T6684] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.277507][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881110f5000: rx timeout, send abort
[   73.285464][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f5000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   73.289900][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f4c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   73.354812][ T6703] __nla_validate_parse: 17 callbacks suppressed
[   73.354828][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   73.361986][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   73.523207][ T6718] netlink: 'syz.0.252': attribute type 8 has an invalid length.
[   73.527822][ T6718] netlink: 'syz.0.252': attribute type 8 has an invalid length.
[   74.450398][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.454708][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.457362][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.464543][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.467442][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.568321][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881110f4800: rx timeout, send abort
[   74.573783][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f4800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.576410][ T6746] netlink: 92 bytes leftover after parsing attributes in process `syz.0.258'.
[   74.578150][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f4400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.612604][ T6735] chnl_net:caif_netlink_parms(): no params data found
[   74.669648][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.671889][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.674077][ T6735] bridge_slave_0: entered allmulticast mode
[   74.676742][ T6735] bridge_slave_0: entered promiscuous mode
[   74.680387][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.682540][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.684876][ T6735] bridge_slave_1: entered allmulticast mode
[   74.687573][ T6735] bridge_slave_1: entered promiscuous mode
[   74.750278][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.777208][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.813437][ T6735] team0: Port device team_slave_0 added
[   74.816969][ T6735] team0: Port device team_slave_1 added
[   74.868189][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.870729][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.878805][ T6735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.898850][ T6735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.901413][ T6735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.911208][ T6735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.961429][ T6735] hsr_slave_0: entered promiscuous mode
[   74.963771][ T6735] hsr_slave_1: entered promiscuous mode
[   74.965863][ T6735] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   74.968130][ T6735] Cannot create hsr debugfs directory
[   74.982745][ T6778] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   74.985749][ T6778] netlink: 180 bytes leftover after parsing attributes in process `syz.2.267'.
[   75.034037][ T6780] xt_HMARK: spi-set and port-set can't be combined
[   75.054063][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   75.087701][ T6782] netlink: 'syz.0.269': attribute type 5 has an invalid length.
[   75.141741][ T6735] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.152243][ T6735] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.160660][ T6735] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.166359][ T6735] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.272790][ T6799] netlink: 'syz.0.272': attribute type 4 has an invalid length.
[   75.286710][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.313770][ T6735] 8021q: adding VLAN 0 to HW filter on device team0
[   75.328935][ T6801] dummy0: entered promiscuous mode
[   75.331527][ T6801] batadv0: entered promiscuous mode
[   75.334712][ T6801] dummy0: left promiscuous mode
[   75.336704][ T6801] batadv0: left promiscuous mode
[   75.353047][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.355384][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.365446][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.367840][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.384373][ T6802] bond0: option ad_select: unable to set because the bond device is up
[   75.438415][ T6808] syzkaller1: entered promiscuous mode
[   75.441398][ T6808] syzkaller1: entered allmulticast mode
[   75.446070][ T6808] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   75.448988][ T6808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'.
[   75.527044][ T6814] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   75.531124][ T6814] netlink: 'syz.2.276': attribute type 4 has an invalid length.
[   75.546229][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.577968][ T6735] veth0_vlan: entered promiscuous mode
[   75.590895][ T6735] veth1_vlan: entered promiscuous mode
[   75.627748][ T6735] veth0_macvtap: entered promiscuous mode
[   75.643423][ T6735] veth1_macvtap: entered promiscuous mode
[   75.665634][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.676374][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.685523][ T6735] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.688298][ T6735] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.691501][ T6735] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.694271][ T6735] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.743057][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.746635][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.766268][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.769253][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.855412][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881110f4000: rx timeout, send abort
[   75.857981][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881110f4000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.862222][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888107414400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.924069][ T6831] tipc: Enabling of bearer <ib:c`if0> rejected, failed to enable media
[   75.963544][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'.
[   76.509971][   T53] Bluetooth: hci2: command tx timeout
[   76.592006][ T6845] netlink: 92 bytes leftover after parsing attributes in process `syz.2.285'.
[   76.601751][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.603681][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.610155][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.615204][ T6845] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.630535][ T6845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   76.650033][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.654331][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.657111][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.662390][ T6845] wg1 speed is unknown, defaulting to 1000
[   76.756296][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.796511][ T6857] wg1 speed is unknown, defaulting to 1000
[   77.082165][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.292'.
[   77.128625][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811508d000: rx timeout, send abort
[   77.131874][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811508d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   77.135908][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811508c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   77.339687][ T6885] netlink: 'syz.3.294': attribute type 1 has an invalid length.
[   77.544581][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[   77.595753][ T6906] ieee802154 phy0 wpan0: encryption failed: -22
[   77.992654][ T6942] pimreg: entered allmulticast mode
[   77.994903][ T6940] pimreg: left allmulticast mode
[   78.403500][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106e71c00: rx timeout, send abort
[   78.406541][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888106e71c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   78.410756][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888106e70c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   78.588918][   T53] Bluetooth: hci2: command tx timeout
[   78.821529][ T6954] __nla_validate_parse: 3 callbacks suppressed
[   78.821539][ T6954] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.319'.
[   78.915636][ T6956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.320'.
[   78.918454][ T6956] netlink: 56 bytes leftover after parsing attributes in process `syz.3.320'.
[   79.026207][ T6962] tipc: Started in network mode
[   79.027730][ T6962] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   79.032318][ T6962] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   79.227469][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'.
[   79.258990][ T6978] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.267101][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.328'.
[   79.296366][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'.
[   79.445576][ T6993] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   79.683148][    C1] vcan0: j1939_tp_rxtimer: 0xffff888106e70800: rx timeout, send abort
[   79.685965][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888106e70800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   79.690517][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104a1c400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   79.755148][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'.
[   79.895562][ T7007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.898295][ T7005] syzkaller0: entered promiscuous mode
[   79.901909][ T7005] syzkaller0: entered allmulticast mode
[   79.917118][ T7005] tipc: Resetting bearer <eth:syzkaller0>
[   79.929078][ T7005] tipc: Disabling bearer <eth:syzkaller0>
[   80.055498][ T7015] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   80.063746][ T7015] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   80.168259][ T7019] netlink: 'syz.2.343': attribute type 3 has an invalid length.
[   80.177940][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   80.255609][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'.
[   80.301468][ T7026] xfrm1: entered allmulticast mode
[   80.417052][ T7033] netlink: 'syz.0.348': attribute type 12 has an invalid length.
[   80.669449][   T53] Bluetooth: hci2: command tx timeout
[   80.724122][ T7040] netlink: 'syz.3.352': attribute type 1 has an invalid length.
[   80.730942][ T7040] netlink: 244 bytes leftover after parsing attributes in process `syz.3.352'.
[   80.961196][    C0] vcan0: j1939_tp_rxtimer: 0xffff888104a1d800: rx timeout, send abort
[   80.964514][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888104a1d800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[   80.979043][ T7049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.986386][ T7049] netlink: 'syz.0.351': attribute type 4 has an invalid length.
[   81.070010][   T10] cfg80211: failed to load regulatory.db
[   81.364646][ T5859] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.502788][ T5859] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.536417][ T7064] openvswitch: netlink: Unknown key attributes 2
[   81.554886][ T5859] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.584785][ T7064] 8021q: adding VLAN 0 to HW filter on device team1
[   81.602113][ T7068] netlink: 'syz.2.360': attribute type 1 has an invalid length.
[   81.650098][ T5859] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.703039][ T7075] x_tables: duplicate underflow at hook 1
[   81.727252][ T7078] netlink: 'syz.2.364': attribute type 4 has an invalid length.
[   81.742345][ T7082] netlink: 'syz.3.365': attribute type 1 has an invalid length.
[   81.748774][ T7082] netlink: 'syz.3.365': attribute type 2 has an invalid length.
[   81.751015][ T7082] netlink: 'syz.3.365': attribute type 8 has an invalid length.
[   81.787453][ T7085] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   81.800491][ T5859] bridge_slave_1: left allmulticast mode
[   81.802269][ T5859] bridge_slave_1: left promiscuous mode
[   81.804411][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.812678][ T5859] bridge_slave_0: left allmulticast mode
[   81.814335][ T5859] bridge_slave_0: left promiscuous mode
[   81.816595][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.830339][ T7082] nbd3: detected capacity change from 0 to 63
[   81.832718][ T7086] block nbd3: NBD_DISCONNECT
[   81.834626][ T7086] block nbd3: Disconnected due to user request.
[   81.837046][ T7086] block nbd3: shutting down sockets
[   82.044262][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.049110][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.052683][ T5859] bond0 (unregistering): Released all slaves
[   82.061001][ T7080] wg1 speed is unknown, defaulting to 1000
[   82.130958][ T5859] tipc: Left network mode
[   82.178661][ T7093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.181569][ T7093] IPv6: NLM_F_CREATE should be set when creating new route
[   82.184273][ T7093] IPv6: NLM_F_CREATE should be set when creating new route
[   82.189350][ T7093] ------------[ cut here ]------------
[   82.191157][ T7093] WARNING: CPU: 1 PID: 7093 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080
[   82.194792][ T7093] Modules linked in:
[   82.197729][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.3.369 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   82.202802][ T7093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.206853][ T7093] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[   82.208930][ T7093] Code: fa be 02 00 00 00 eb 0a e8 15 4f b3 fa be 01 00 00 00 4c 89 f7 e8 e8 d4 b4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 4e b3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[   82.216131][ T7093] RSP: 0018:ffffc900087e7068 EFLAGS: 00010287
[   82.218360][ T7093] RAX: ffffffff870ce777 RBX: 0000000000000002 RCX: 0000000000080000
[   82.221032][ T7093] RDX: ffffc90028c50000 RSI: 000000000000153e RDI: 000000000000153f
[   82.223436][ T7093] RBP: dffffc0000000000 R08: ffff88803cbbd42f R09: 1ffff11007977a85
[   82.226457][ T7093] R10: dffffc0000000000 R11: ffffed1007977a86 R12: ffff88810600b000
[   82.229204][ T7093] R13: ffffc900087e71e0 R14: 0000000000000001 R15: ffffc900087e71f8
[   82.231585][ T7093] FS:  00007f8826d136c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   82.234284][ T7093] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   82.236861][ T7093] CR2: 000000110c2898d7 CR3: 0000000106404000 CR4: 00000000000006f0
[   82.239637][ T7093] Call Trace:
[   82.240845][ T7093]  <TASK>
[   82.241838][ T7093]  notifier_call_chain+0x1b6/0x3e0
[   82.243746][ T7093]  ? atomic_notifier_call_chain+0x26/0x180
[   82.246011][ T7093]  atomic_notifier_call_chain+0xda/0x180
[   82.248143][ T7093]  call_fib_notifiers+0x31/0x60
[   82.250383][ T7093]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[   82.252796][ T7093]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[   82.255413][ T7093]  ? inet6_rtm_newroute+0xe8b/0x18c0
[   82.257412][ T7093]  inet6_rtm_newroute+0x12f5/0x18c0
[   82.259867][ T7093]  ? nlmon_xmit+0xb0/0x100
[   82.261298][ T7093]  ? kmem_cache_free+0x18f/0x400
[   82.262788][ T7093]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   82.264639][ T7093]  ? __local_bh_enable_ip+0x12d/0x1c0
[   82.266297][ T7093]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   82.267978][ T7093]  rtnetlink_rcv_msg+0x7cf/0xb70
[   82.269695][ T7093]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   82.271199][ T7093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.273126][ T7093]  ? ref_tracker_free+0x63a/0x7d0
[   82.275039][ T7093]  ? __copy_skb_header+0xa7/0x550
[   82.276960][ T7093]  ? __pfx_ref_tracker_free+0x10/0x10
[   82.279303][ T7093]  ? __skb_clone+0x63/0x7a0
[   82.281016][ T7093]  netlink_rcv_skb+0x208/0x470
[   82.282853][ T7093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.284890][ T7093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.286437][ T7093]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.287956][ T7093]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.289872][ T7093]  netlink_unicast+0x75c/0x8e0
[   82.291379][ T7093]  netlink_sendmsg+0x805/0xb30
[   82.292983][ T7093]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.294979][ T7093]  ? aa_sock_msg_perm+0x94/0x160
[   82.296757][ T7093]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.298317][ T7093]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.300065][ T7093]  __sock_sendmsg+0x21c/0x270
[   82.301446][ T7093]  ____sys_sendmsg+0x505/0x830
[   82.303027][ T7093]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.304706][ T7093]  ? import_iovec+0x74/0xa0
[   82.306068][ T7093]  ___sys_sendmsg+0x21f/0x2a0
[   82.307442][ T7093]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.309137][ T7093]  ? __fget_files+0x2a/0x420
[   82.310537][ T7093]  ? __fget_files+0x3a0/0x420
[   82.311980][ T7093]  __x64_sys_sendmsg+0x19b/0x260
[   82.313523][ T7093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.315608][ T7093]  ? do_syscall_64+0xbe/0x3b0
[   82.317389][ T7093]  do_syscall_64+0xfa/0x3b0
[   82.318917][ T7093]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.320563][ T7093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.322638][ T7093]  ? exc_page_fault+0x9f/0xf0
[   82.324538][ T7093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.326812][ T7093] RIP: 0033:0x7f8825f8e929
[   82.328761][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.335273][ T7093] RSP: 002b:00007f8826d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.338164][ T7093] RAX: ffffffffffffffda RBX: 00007f88261b5fa0 RCX: 00007f8825f8e929
[   82.340747][ T7093] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   82.343150][ T7093] RBP: 00007f8826010b39 R08: 0000000000000000 R09: 0000000000000000
[   82.345461][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.347794][ T7093] R13: 0000000000000000 R14: 00007f88261b5fa0 R15: 00007ffc2717b468
[   82.350599][ T7093]  </TASK>
[   82.351563][ T7093] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   82.354211][ T7093] CPU: 1 UID: 0 PID: 7093 Comm: syz.3.369 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   82.357975][ T7093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.361055][ T7093] Call Trace:
[   82.362096][ T7093]  <TASK>
[   82.362977][ T7093]  dump_stack_lvl+0x99/0x250
[   82.364618][ T7093]  ? __asan_memcpy+0x40/0x70
[   82.366083][ T7093]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.367616][ T7093]  ? __pfx__printk+0x10/0x10
[   82.368978][ T7093]  panic+0x2db/0x790
[   82.370165][ T7093]  ? __pfx_panic+0x10/0x10
[   82.371511][ T7093]  ? show_trace_log_lvl+0x4fb/0x550
[   82.373149][ T7093]  __warn+0x31b/0x4b0
[   82.374342][ T7093]  ? nsim_fib_event_nb+0xed8/0x1080
[   82.376000][ T7093]  ? nsim_fib_event_nb+0xed8/0x1080
[   82.377526][ T7093]  report_bug+0x2be/0x4f0
[   82.378804][ T7093]  ? nsim_fib_event_nb+0xed8/0x1080
[   82.380374][ T7093]  ? nsim_fib_event_nb+0xed8/0x1080
[   82.381887][ T7093]  ? nsim_fib_event_nb+0xeda/0x1080
[   82.383409][ T7093]  handle_bug+0x84/0x160
[   82.384660][ T7093]  exc_invalid_op+0x1a/0x50
[   82.386177][ T7093]  asm_exc_invalid_op+0x1a/0x20
[   82.387688][ T7093] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080
[   82.389663][ T7093] Code: fa be 02 00 00 00 eb 0a e8 15 4f b3 fa be 01 00 00 00 4c 89 f7 e8 e8 d4 b4 fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 f9 4e b3 fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35
[   82.396147][ T7093] RSP: 0018:ffffc900087e7068 EFLAGS: 00010287
[   82.398016][ T7093] RAX: ffffffff870ce777 RBX: 0000000000000002 RCX: 0000000000080000
[   82.400423][ T7093] RDX: ffffc90028c50000 RSI: 000000000000153e RDI: 000000000000153f
[   82.402738][ T7093] RBP: dffffc0000000000 R08: ffff88803cbbd42f R09: 1ffff11007977a85
[   82.405066][ T7093] R10: dffffc0000000000 R11: ffffed1007977a86 R12: ffff88810600b000
[   82.407477][ T7093] R13: ffffc900087e71e0 R14: 0000000000000001 R15: ffffc900087e71f8
[   82.409959][ T7093]  ? nsim_fib_event_nb+0xed7/0x1080
[   82.411830][ T7093]  ? nsim_fib_event_nb+0xed7/0x1080
[   82.413595][ T7093]  notifier_call_chain+0x1b6/0x3e0
[   82.415097][ T7093]  ? atomic_notifier_call_chain+0x26/0x180
[   82.417019][ T7093]  atomic_notifier_call_chain+0xda/0x180
[   82.418657][ T7093]  call_fib_notifiers+0x31/0x60
[   82.420085][ T7093]  call_fib6_multipath_entry_notifiers+0xe6/0x150
[   82.422112][ T7093]  ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10
[   82.424387][ T7093]  ? inet6_rtm_newroute+0xe8b/0x18c0
[   82.426314][ T7093]  inet6_rtm_newroute+0x12f5/0x18c0
[   82.428145][ T7093]  ? nlmon_xmit+0xb0/0x100
[   82.429512][ T7093]  ? kmem_cache_free+0x18f/0x400
[   82.431057][ T7093]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   82.433061][ T7093]  ? __local_bh_enable_ip+0x12d/0x1c0
[   82.434880][ T7093]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[   82.436700][ T7093]  rtnetlink_rcv_msg+0x7cf/0xb70
[   82.438143][ T7093]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   82.439660][ T7093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.441223][ T7093]  ? ref_tracker_free+0x63a/0x7d0
[   82.442689][ T7093]  ? __copy_skb_header+0xa7/0x550
[   82.444180][ T7093]  ? __pfx_ref_tracker_free+0x10/0x10
[   82.445769][ T7093]  ? __skb_clone+0x63/0x7a0
[   82.447106][ T7093]  netlink_rcv_skb+0x208/0x470
[   82.448529][ T7093]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   82.450093][ T7093]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   82.451649][ T7093]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.453192][ T7093]  ? netlink_deliver_tap+0x2e/0x1b0
[   82.454720][ T7093]  netlink_unicast+0x75c/0x8e0
[   82.456168][ T7093]  netlink_sendmsg+0x805/0xb30
[   82.457638][ T7093]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.459173][ T7093]  ? aa_sock_msg_perm+0x94/0x160
[   82.460629][ T7093]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.462180][ T7093]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.463740][ T7093]  __sock_sendmsg+0x21c/0x270
[   82.465145][ T7093]  ____sys_sendmsg+0x505/0x830
[   82.466620][ T7093]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.468238][ T7093]  ? import_iovec+0x74/0xa0
[   82.469636][ T7093]  ___sys_sendmsg+0x21f/0x2a0
[   82.471092][ T7093]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.472721][ T7093]  ? __fget_files+0x2a/0x420
[   82.474147][ T7093]  ? __fget_files+0x3a0/0x420
[   82.475546][ T7093]  __x64_sys_sendmsg+0x19b/0x260
[   82.477037][ T7093]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.478664][ T7093]  ? do_syscall_64+0xbe/0x3b0
[   82.480056][ T7093]  do_syscall_64+0xfa/0x3b0
[   82.481440][ T7093]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.483011][ T7093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.484811][ T7093]  ? exc_page_fault+0x9f/0xf0
[   82.486212][ T7093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.487941][ T7093] RIP: 0033:0x7f8825f8e929
[   82.489255][ T7093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.494801][ T7093] RSP: 002b:00007f8826d13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.497189][ T7093] RAX: ffffffffffffffda RBX: 00007f88261b5fa0 RCX: 00007f8825f8e929
[   82.499559][ T7093] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   82.501824][ T7093] RBP: 00007f8826010b39 R08: 0000000000000000 R09: 0000000000000000
[   82.504130][ T7093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.506426][ T7093] R13: 0000000000000000 R14: 00007f88261b5fa0 R15: 00007ffc2717b468
[   82.508749][ T7093]  </TASK>
[   82.510205][ T7093] Kernel Offset: disabled
[   82.511540][ T7093] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:01:17  Registers:
info registers vcpu 0

CPU#0
RAX=6a2909f82a498d00 RBX=ffffffff81976c78 RCX=6a2909f82a498d00 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8826ce7d60 CR3=000000010621e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000dc7a RDI=000000000000dc7b RBP=00000000000003f8 RSP=ffffc900087e6810
R8 =ffff8880217d8237 R9 =1ffff110042fb046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9881 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8826d136c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2898d7 CR3=0000000106404000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe685a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
