last executing test programs:

1.670106125s ago: executing program 2 (id=837):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000280)='Y', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @mcast2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000e6b6fb3ed39d0322550860a6720701000000000000000000ca", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028006001000000000001400060000000000000000000000ffff000000000a000100aaaaaaaaaa000000"], 0x60}}, 0x0)

1.668843717s ago: executing program 2 (id=838):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{0x0}], 0x1}}], 0x1, 0x0) (async)
shutdown(r0, 0x1) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$inet(0x2, 0x3, 0x8)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) (async)
listen(r3, 0x0) (async)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r3) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240001801400018008000100ac1414aa08080200e00000010c000280058014000180080001000000000008000200ac1414000c00028005000100"/92], 0x5c}, 0x1, 0x0, 0x0, 0x8020}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b00000800"], 0x104}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async)
recvmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xffffffe1}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/159, 0x9f}, {&(0x7f0000001500)=""/155, 0x9b}], 0x3}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0xab}], 0x6, 0x2000, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)

1.417630814s ago: executing program 2 (id=841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8)
unshare(0x26020480)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xc, 0x4, 0x2b0, 0xffffffff, 0x118, 0x118, 0x90, 0x98, 0xffffffff, 0x248, 0x248, 0x248, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00', {}, {}, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="2f0000000000b50cb403a51a", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r7, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)={[{0x2b, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0x0, 'pids'}, {0x2d, 'freezer'}]}, 0x37)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0)
recvmsg(r8, &(0x7f0000000e40)={&(0x7f0000000840)=@rc, 0x80, &(0x7f0000000e00)}, 0x2)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @empty, @loopback}, 0xc)
getsockopt$inet_buf(r9, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xad, 0x0, &(0x7f0000000f40)="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", 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x1, 0x0, 0x3ce}, 0x50)
r11 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0xac, 0x30, 0xb, 0x5, 0x0, {}, [{0x98, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "c10000d200"}, @TCA_CT_MARK={0x8, 0x5, 0x400}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "14d13dec9dcc5dea7cc3e615eb9b94f3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

1.030070432s ago: executing program 1 (id=847):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108000840000000032000018006"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x2, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000005dc0)={&(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10, &(0x7f0000005d00)=[{&(0x7f0000005700)="03", 0x1}], 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x20400, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x17, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x2, 0xc, 0x80000000, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80), &(0x7f0000000ec0)=[{0x5, 0x3, 0xc, 0x6}, {0x4, 0x5, 0x4, 0xe0d58e0a1a7585f6}, {0x2, 0x3, 0x7, 0x2}], 0x10, 0xc}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000fc0)=r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000004010301010800000000000000000000000c0002e8ffff030c00200000"], 0x20}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000001000)=ANY=[@ANYBLOB="2000000000020101000000000000000003038008000540000000030000000000e5fc97590787c40ca4f538843019442c528f05458934fc158aea24bc3bdf36b57a81b9bc568e2b3971d089f7"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x7, 0x5, 0x6685, 0x2, 0x9, 0x80000001, 0x2, 0x3800000}}}}]}, 0x58}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, r10, {0xd, 0xa}, {0xb, 0xfff1}, {0xf, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x4041080)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@delchain={0x934, 0x65, 0x300, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x8, 0x7}, {0xb, 0xa}, {0xf, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x200}, @filter_kind_options=@f_u32={{0x8}, {0x8f8, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xed}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_bridge\x00'}, @TCA_U32_POLICE={0x838, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x88}, @TCA_POLICE_RATE={0x404, 0x2, [0xad, 0x4, 0x438, 0xbfa1, 0x5, 0x81, 0x1, 0x50, 0x9, 0x10000, 0x8, 0x4, 0xefb, 0x5f40, 0x7f, 0xfffffffa, 0x5, 0x6, 0xc00000, 0xffffffff, 0xfff, 0x1, 0x41, 0x400, 0x80000000, 0x7ff, 0x1, 0x5, 0x3ff, 0x9, 0x200, 0x8, 0x7fffffff, 0x101, 0x0, 0x9, 0x400, 0x7ff, 0x800, 0x804, 0xffffff93, 0x305, 0x1, 0x462, 0x4, 0x9, 0x52, 0xff, 0x4, 0x8, 0xffffff01, 0xad, 0x4e3, 0x5, 0x81, 0x4, 0x0, 0x5, 0x7, 0x7ff, 0x4, 0x3, 0x7, 0x1d96, 0xfffff729, 0x7, 0x9, 0x7, 0x6, 0x1000, 0x1000, 0x3, 0x200, 0x3, 0x4, 0x6493, 0x800, 0x3, 0x0, 0x8, 0x0, 0x6, 0xf8, 0xff, 0x3ff, 0x0, 0x0, 0x1, 0x49f0, 0xffffffff, 0x2, 0x7, 0x5, 0x1, 0x34, 0x200, 0x9, 0xffff, 0x4, 0x100, 0x6, 0x0, 0x80000001, 0x8, 0x1bc1, 0x40000001, 0x5, 0x0, 0x0, 0x7, 0x6, 0x3541, 0x1, 0x6, 0x0, 0x5, 0x1, 0x6, 0x9, 0x10, 0x1, 0x8, 0x0, 0x7fff, 0x1c2, 0x10000, 0x5, 0x0, 0x5, 0x9, 0x4, 0x80, 0x2800000, 0x0, 0x76, 0x1, 0xf, 0x4, 0x9, 0x4, 0x2, 0xa46, 0x5, 0x1, 0x6, 0x7, 0x3d52, 0xa, 0x7f, 0x0, 0x2, 0xfffffffc, 0xfd, 0x4, 0x101, 0x9, 0x9, 0x0, 0x400, 0x3, 0x8, 0xae6, 0x8, 0x7fffffff, 0x3, 0x100, 0x5, 0xfffffff8, 0x9, 0x6, 0x7, 0xe4, 0x1, 0x13a, 0x0, 0x7, 0x3, 0x3ff, 0x6, 0x5, 0x8, 0x7, 0x3e, 0x100, 0x351b, 0x9, 0xfb94, 0x3, 0x1, 0x7, 0x200000, 0x6, 0x6, 0xffff, 0xc, 0xd, 0x8, 0x0, 0xd86f, 0x9, 0x3, 0x4, 0x8000, 0x8, 0x9, 0x100, 0x0, 0x0, 0x6, 0x0, 0x7, 0x7fffffff, 0x3, 0xfff00000, 0x7, 0xacd, 0x5, 0x18, 0x2, 0x7f, 0x68, 0x0, 0xff, 0x66, 0x5, 0x1000, 0x6d57, 0x6, 0x7, 0x56ff242b, 0x18, 0x2, 0x3ebc, 0x7, 0x81, 0x7, 0x3, 0x5ea126fa, 0x30, 0x1ff00, 0x1, 0xc3e, 0x7, 0x7, 0xef, 0x100, 0x6, 0x7fffffff, 0x1, 0x7, 0xfffffffb, 0x40000000, 0x3, 0x1, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7028, 0x1, 0x4, 0xa, 0x8, 0x9, 0x6, 0x4, 0x6, 0x2df, 0x9, 0x4, 0x53e, 0x9, 0x8, 0x0, 0x5, 0xd, 0x7, 0x7, 0x1, 0x0, 0x4, 0x40, 0x2, 0x8, 0x352, 0x1, 0x3e, 0x9, 0x68, 0x5, 0x9, 0x0, 0x200, 0x7, 0x7, 0x0, 0xfffff800, 0xea6, 0x0, 0x3, 0x7, 0x5, 0x3d1, 0x9, 0x9f0, 0x1, 0x200, 0x6, 0x7, 0x6, 0x7, 0x6, 0x7f41, 0xf01, 0xffffffff, 0x1, 0x9, 0x8, 0x4, 0x889, 0x2, 0x2, 0x6, 0x5, 0x1, 0x1, 0x1168, 0x7, 0x6, 0x10000, 0x7fff, 0x7, 0xad, 0x6, 0x101, 0x2, 0x5, 0x886, 0x40, 0x7f, 0x10001, 0x10001, 0x1ff, 0x2, 0x1b9e, 0x7fff, 0xdd47, 0x0, 0x4, 0x7, 0x2, 0xdfc7, 0x2, 0x1, 0x6, 0x8, 0x33, 0x7, 0xf, 0x8, 0x9, 0x10001, 0x23, 0x3, 0x4, 0x6, 0x7f, 0x2, 0x15, 0x6, 0x3, 0x3, 0x0, 0x9, 0x7f, 0x1, 0x6, 0x10001, 0x5, 0x5, 0x10, 0x81, 0x83e, 0xe, 0x7, 0x3e4, 0x4, 0x5, 0x3, 0xe8a, 0x1, 0x7ff, 0x2, 0x1, 0x2, 0x9, 0x9, 0x8, 0x9cd5, 0x5, 0x7, 0x800, 0x400, 0xc, 0x1fe00, 0x100, 0x1, 0x31, 0x100, 0x4, 0x9, 0x6, 0x7fffffff, 0x10, 0x5, 0x7754bb8d, 0x56fc, 0x2, 0xf03, 0x1, 0xe, 0xffffffff, 0x0, 0x42fa, 0x6, 0x8, 0x10, 0x1, 0x0, 0x0, 0xffffffff, 0xb8f, 0xff, 0x0, 0x9, 0x400, 0x2, 0x5, 0x7a7d, 0x10000, 0xf, 0x31, 0x0, 0x7, 0x31e, 0x10000, 0x6, 0x4, 0x2, 0xfffffff7, 0x92, 0x0, 0xffff8000, 0xff3, 0x3, 0x40, 0x8, 0x8, 0xffffffff, 0x6, 0x800, 0x4, 0x2, 0x0, 0x2, 0x4, 0x81, 0x10, 0x10000, 0x1, 0x5, 0x7, 0x80000000, 0x4, 0x8, 0x2, 0xffffba1f, 0x3, 0x6, 0x5, 0x400, 0x7d, 0x3, 0x3, 0x2, 0x6, 0x2, 0x1, 0x8, 0xe, 0x400, 0x6, 0x5, 0x5, 0x9d, 0xc, 0xfffffff7, 0x5, 0x80000001, 0xf6c, 0x7, 0xfffffffa, 0x6, 0xa, 0x4, 0x7, 0xff, 0x7, 0x3, 0x1, 0x2e, 0x1, 0x3000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}]}, @TCA_U32_INDEV={0x14, 0x8, 'nicvf0\x00'}, @TCA_U32_POLICE={0x84, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x3, 0xff, 0x1, {0x80, 0x1, 0x8, 0x7, 0x8, 0x5}, {0x7, 0x2, 0x93, 0x80, 0x2, 0x4}, 0x9, 0x0, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5088, 0xffffffffffffffff, 0x8, 0xa6, 0x2, {0x76, 0x2, 0xd82, 0x3, 0xfff9, 0xfabc}, {0x9, 0x0, 0x9, 0x3, 0x5f, 0x9}, 0x1, 0x0, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x934}, 0x1, 0x0, 0x0, 0x40000}, 0x6670f0080049d8ad)

1.020916011s ago: executing program 1 (id=849):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x32a7653, 0x8, 0x0, 0x7fffffff, 0xd, 0xe9d, 0x200, 0xfffffffa, 0x4, 0x8, 0x0, 0x7, 0x7, 0xc, 0x4, 0x3ff, 0xd8, 0x401, 0x5, 0x8000, 0xa, 0x4, 0x5, 0x6, 0x7, 0x8, 0x5, 0x4, 0x5, 0x18dc, 0x5, 0x9, 0xff, 0xc8c, 0x705eece7, 0x2, 0x2, 0x5, 0x8, 0x7fff, 0xd, 0x3, 0xf14, 0x8, 0x1, 0xb33, 0xf, 0x43, 0xf, 0x9, 0xa9c, 0xf, 0x0, 0x3, 0x208c00, 0x1, 0x4, 0x4, 0x1, 0x1, 0x4, 0x9ca, 0x9, 0xf1, 0xcc95, 0xffffff80, 0x0, 0x8, 0x1ff, 0x8, 0x4, 0x2, 0x0, 0x8, 0x3, 0x4032, 0x4, 0x2, 0x1, 0xfffffff7, 0x8, 0x2, 0x917f, 0x401, 0x5, 0x1, 0x1, 0xb711, 0x9, 0x1ff, 0x2, 0x6, 0x5, 0x5428, 0x950c, 0x9, 0x1, 0x80000000, 0x7, 0x2, 0x5, 0x3, 0xecbb050, 0x3, 0x7f, 0x5, 0x2, 0x9, 0x3, 0x1, 0x7c3, 0x10, 0x9, 0x20, 0x0, 0x6, 0x9, 0x0, 0xa, 0x6, 0x3, 0x100, 0x3, 0x2, 0x2, 0x84d7, 0xfff, 0x4, 0x0, 0x2, 0x1db, 0x2b2, 0xb, 0x9, 0xaf5a, 0x8f17, 0x0, 0x7, 0x7f, 0xff, 0x5d, 0x40, 0x5d, 0x2, 0x80000001, 0x2, 0x8e6, 0xd7bb, 0x8, 0x4, 0x7d5, 0xfffffe00, 0x3ff, 0x5, 0xffff, 0x8, 0x1, 0xcb0, 0x6, 0x6, 0x5, 0x1, 0x6, 0x8, 0xe, 0x4, 0xe, 0x3, 0x9, 0x1, 0x6, 0xe, 0x4, 0x3, 0x2, 0x616, 0x8, 0x1, 0x7, 0xe, 0xf8d0, 0x2, 0x52, 0xa2e, 0x44973162, 0x4, 0xd36, 0x3, 0x8, 0x6, 0x0, 0xc, 0x7, 0x41, 0xc, 0x4, 0xe28b, 0x0, 0xa, 0x9, 0x80, 0x1, 0x7915, 0x0, 0x7, 0x7, 0x3, 0x2, 0x5c, 0x101, 0x1000000, 0x1, 0x5, 0x6, 0x36b, 0x8, 0x40, 0x40000000, 0xcaa, 0x6f, 0xe, 0x4, 0x66, 0x15b, 0x1, 0x1, 0x89d, 0xd2a9, 0x6, 0x6, 0x0, 0x8001, 0x7a8, 0xff, 0x81, 0xff, 0x200, 0x2, 0x7, 0x9, 0x54, 0x8, 0x6e66d12d, 0x0, 0x7, 0xf, 0x9, 0x4, 0x2000000, 0x107af293, 0x1, 0x7, 0x1, 0x0, 0x8]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

539.331825ms ago: executing program 1 (id=855):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x11c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x40001}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40)

538.941717ms ago: executing program 2 (id=856):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}}, 0x0)

449.642549ms ago: executing program 2 (id=858):
shutdown(0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @mcast1, 0x9}}}, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x600800, 0x0)
r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x31c, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_USERDATA={0x23, 0xd, 0x1, 0x0, "3f5c23bc5ca1711ca36ad8d0c9ff2949c21758253e57ecf4a94d39229e6e64"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x2a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x95}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb88}, @NFTA_SET_DESC_CONCAT={0x98, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff227a}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8277}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa98a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7cdfdfc3}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb37}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xace}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb481}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x926}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbe76}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9980}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}]}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r4, 0xe90cbced68e2145f, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc081, 0x4}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008014}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0x3f7, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x20040002)
recvmmsg(r2, &(0x7f0000001980)=[{{&(0x7f00000007c0)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000840)=""/72, 0x48}, {&(0x7f00000008c0)=""/30, 0x1e}, {&(0x7f0000000900)=""/4096, 0x1000}], 0x3, &(0x7f0000001940)=""/62, 0x3e}, 0xfffffff9}], 0x1, 0x40, &(0x7f00000019c0)={0x0, 0x989680})
getsockopt$inet_udp_int(r6, 0x11, 0x66, &(0x7f0000001a00), &(0x7f0000001a40)=0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001a80)={'wlan1\x00'})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x5ec3f9c8e37369ca, 0x1, 0x2, 0x2, 0xa, 0xfffffffffffffff8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001bc0)='syzkaller\x00', 0x56, 0x7, &(0x7f0000001c00)=""/7, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x0, 0xe, 0x81, 0x57a}, 0x10, 0xb967, 0xffffffffffffffff, 0x1, &(0x7f0000001c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1, 0x1], &(0x7f0000001cc0)=[{0x5, 0x1, 0xb, 0xa}], 0x10, 0x8}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001dc0)={0x1, <r9=>0xffffffffffffffff}, 0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000001e00)={r8, r9}, 0xc)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001e40)="c6f982351c373df23f9f2f84885c6df009e6d08878b5884e7b3a5ed51b1c291cb35241ebd62dc313c5186c230287cd24681697d426573935eaca2dcc1be40a93bce69e017ddf2ae847a6a3172f5e7a2131a615b135b0d8f351f9717a538c03ae36d5d92a149d076882f89a4ee4f9dcc243b9c80ca183e2ce7609d102d70fc3a41a7846e6c5cef816a0e3f0aa209a4ee31b0849030df7121be7cd591f5c4b4b8bd1063fd20a0b291bfaffa3cd37b87ba4467e4928ef093b6a3f170729555843b7d7d9fbe0d6945c7ca9d1670c032f89a8359d14badc99ddc43f9075bee57f0478e2e97c784a7487999f4aebb9", 0xec)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={r8, 0x0, 0x1f, 0x1000, &(0x7f0000001f40)="e06c0a76a4ee7f18dac240df7e2a984ebd2ec9a5311061233f10a048cecaaf", &(0x7f0000001f80)=""/4096, 0x8, 0x0, 0xca, 0xcf, &(0x7f0000002f80)="d27b2785b5203d8f9d98eaa30a237a2888c18d583643ab3d8f87854809db2a13569c05a15b9e8441e2082d4f21eac79f108451c511bbe6828253729cd12d9766b663de43984a8b970a904063b425d93bed901a2897aa07683ea0d0c429dfa605c2380f1219e3d5e5bd60677219cb3e48108e4fad4e38a86b07dd36de48a96eeb35851d6f19fe8f69f2a0b11bf2c95e55628bf7668f436bd7005933707fb7e07c5b85d80abab70421b3ff22ee3522606fce788c4072f92a6bddf696318647f2657663b92c9009f5c180c6", &(0x7f0000003080)="bd19e9022be7edb582b72d1eea07a963da5f1397e2a152f653307f9b5f9d80d0204887f49983e39787f71672240d620909d8979132922b1dd98f07d1895d45980bc1442d38f5977d3bc3efc13e512189d7b79b9a4006950cfc16e36f231352fd62580a8c33f03437ef287008dc8a636c5927badfafb4d54d6e28d68b6924fa1487b5e6e1f1c1b45fb474a74b5dd12b3ae1e8ed0005fd3d2a1f782bd05538a5eb8018dcef8c66dc2efdee69a1a3ff68eff8f6278fb73267ddacb2c99dadf3e713f982623c2ef697c2a6013d9fc879dc", 0x2, 0x0, 0x3ff}, 0x50)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003240), r9)
sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x40, r10, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1fe}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000003340)=0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000003380)={'vxcan0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000003400), r6)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x24, r13, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000035c0)={'tunl0\x00', &(0x7f0000003500)={'gre0\x00', r12, 0x700, 0x20, 0x7, 0x5, {{0x28, 0x4, 0x3, 0x6, 0xa0, 0x67, 0x0, 0xf6, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x4c, 0xf6, 0x3, 0x0, [{@private=0xa010101, 0x8001}, {@broadcast, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x9}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@multicast1, 0x1be}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010100, 0x6}]}, @lsrr={0x83, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x34, 0xc4, 0x3, 0x8, [{@broadcast, 0x2}, {@remote, 0x9}, {@multicast2, 0x6}, {@local, 0x10001}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}]}}}}})
getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000003600), &(0x7f0000003640)=0x4)

387.17647ms ago: executing program 1 (id=859):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03316844268cb89614f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000061104c000000000005000000000000009500000c000000000d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x44, 0x2, 0x3, 0x903, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x26}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x30}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x25}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4844)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x7d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000640)={0x10})
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xffffffffffffff6d, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000005000000000000000000000950004e00000000018010000202070250000000000202020db1af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6c}, 0x90)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8)
socket$nl_route(0x10, 0x3, 0x0)

329.016306ms ago: executing program 0 (id=860):
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x24008800) (async)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async)
r3 = accept(r1, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x80) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, r5, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2001}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x8008)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x8}}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @restrict={0x9, 0x0, 0x0, 0xb, 0x2}, @enum={0xd, 0x9, 0x0, 0x6, 0x4, [{0x8, 0x9}, {0x1, 0x5083f99c}, {0x2}, {0xc, 0x160d}, {0x5, 0x1ff}, {0x3, 0x2}, {0xc, 0x7}, {0xc, 0x6}, {0x7, 0x2}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0xa4}}]}, {0x0, [0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000440)=""/56, 0xde, 0x38, 0x1, 0x40, 0x10000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0xb, 0xb4, 0x6800, 0x1, 0x6, '\x00', 0x0, r6, 0x5, 0x2, 0x4, 0xd}, 0x50)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
shutdown(r1, 0x1)

327.682319ms ago: executing program 1 (id=861):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x32a7653, 0x8, 0x0, 0x7fffffff, 0xd, 0xe9d, 0x200, 0xfffffffa, 0x4, 0x8, 0x0, 0x7, 0x7, 0xc, 0x4, 0x3ff, 0xd8, 0x401, 0x5, 0x8000, 0xa, 0x4, 0x5, 0x6, 0x7, 0x8, 0x5, 0x4, 0x5, 0x18dc, 0x5, 0x9, 0xff, 0xc8c, 0x705eece7, 0x2, 0x2, 0x5, 0x8, 0x7fff, 0xd, 0x3, 0xf14, 0x8, 0x1, 0xb33, 0xf, 0x43, 0xf, 0x9, 0xa9c, 0xf, 0x0, 0x3, 0x208c00, 0x1, 0x4, 0x4, 0x1, 0x1, 0x4, 0x9ca, 0x9, 0xf1, 0xcc95, 0xffffff80, 0x0, 0x8, 0x1ff, 0x8, 0x4, 0x2, 0x0, 0x8, 0x3, 0x4032, 0x4, 0x2, 0x1, 0xfffffff7, 0x8, 0x2, 0x917f, 0x401, 0x5, 0x1, 0x1, 0xb711, 0x9, 0x1ff, 0x2, 0x6, 0x5, 0x5428, 0x950c, 0x9, 0x1, 0x80000000, 0x7, 0x2, 0x5, 0x3, 0xecbb050, 0x3, 0x7f, 0x5, 0x2, 0x9, 0x3, 0x1, 0x7c3, 0x10, 0x9, 0x20, 0x0, 0x6, 0x9, 0x0, 0xa, 0x6, 0x3, 0x100, 0x3, 0x2, 0x2, 0x84d7, 0xfff, 0x4, 0x0, 0x2, 0x1db, 0x2b2, 0xb, 0x9, 0xaf5a, 0x8f17, 0x0, 0x7, 0x7f, 0xff, 0x5d, 0x40, 0x5d, 0x2, 0x80000001, 0x2, 0x8e6, 0xd7bb, 0x8, 0x4, 0x7d5, 0xfffffe00, 0x3ff, 0x5, 0xffff, 0x8, 0x1, 0xcb0, 0x6, 0x6, 0x5, 0x1, 0x6, 0x8, 0xe, 0x4, 0xe, 0x3, 0x9, 0x1, 0x6, 0xe, 0x4, 0x3, 0x2, 0x616, 0x8, 0x1, 0x7, 0xe, 0xf8d0, 0x2, 0x52, 0xa2e, 0x44973162, 0x4, 0xd36, 0x3, 0x8, 0x6, 0x0, 0xc, 0x7, 0x41, 0xc, 0x4, 0xe28b, 0x0, 0xa, 0x9, 0x80, 0x1, 0x7915, 0x0, 0x7, 0x7, 0x3, 0x2, 0x5c, 0x101, 0x1000000, 0x1, 0x5, 0x6, 0x36b, 0x8, 0x40, 0x40000000, 0xcaa, 0x6f, 0xe, 0x4, 0x66, 0x15b, 0x1, 0x1, 0x89d, 0xd2a9, 0x6, 0x6, 0x0, 0x8001, 0x7a8, 0xff, 0x81, 0xff, 0x200, 0x2, 0x7, 0x9, 0x54, 0x8, 0x6e66d12d, 0x0, 0x7, 0xf, 0x9, 0x4, 0x2000000, 0x107af293, 0x1, 0x7, 0x1, 0x0, 0x8]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

327.397761ms ago: executing program 0 (id=862):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) (async)
shutdown(0xffffffffffffffff, 0x1) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0020000020010000000000000000000000000000fe8000000000000000000000000000000003000000000000071000000000020000d60100000000000000000100010100285beda06b79a802ace270f2bbf832cb8cab078d2c21a0d863bd6244ed41f04082a89e8c9be722f80e898e4ec7b184f6f776a63c036bed7c2b7c8cdff2adfd0b573127c3fb477499350cb5a490c479877a09e3e41295baa064c2c0c76e297a4caecae86f5a3aacec211fd18bad35229be3d3af8d032568123d"], 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r2, &(0x7f0000000480), 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0xf8, 0x10, 0x8, 0x70bd26, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x6, 0x3}, {0x3}, {0xe, 0xd}}, [@TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x7f, 0x4, 0x6, 0x0, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x40, 0xdf, 0x3ff, 0x1, 0x0, 0x100007, 0x100, 0x4}}, {0xc, 0x2, [0xa, 0x2, 0x5, 0x4]}}, {{0x1c, 0x1, {0x0, 0x3, 0x7, 0x5, 0x0, 0x6, 0x5, 0x5}}, {0xe, 0x2, [0x4, 0x2, 0x5, 0xc, 0x10]}}, {{0x1c, 0x1, {0x9c, 0x0, 0x3, 0x1, 0x2, 0x6, 0x8, 0x6}}, {0x10, 0x2, [0x4, 0xc00, 0x9, 0x9, 0xbc, 0x7ff]}}, {{0x1c, 0x1, {0x2, 0xfa, 0x309, 0xf, 0x2, 0x6, 0x3ff, 0x1}}, {0x6, 0x2, [0xfff7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0xf8}}, 0x0) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYRESDEC], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x4, 0x4004}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x2}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x24}, 0xc) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000080000000600000008000300712e48258da909d362915a49fe855d9494b9fccc1d37abfb99d5b028e88ae93babf28eecaa5a07cecbe0ab299883b12312d3bca8e14a14f22ce6b12fefa67825ce422af9798c303906db392ce7020b3469e5d4b841e3f55ef1dc2a3551fe4ef026b1ad15dbedacde378ab6dda0cd437a3b4e80b36a511134cfb31a73a7dfbcc1638c2d5dcb8f5a0367009a4cb1d3fc1c85eaccd3b5d97faa33865b9f393719eb0a141e62cc3526fab393649e215a94a3e3ee406555c9b74d23be4a70a5d6130bb2b641782650", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000010000000000000000", @ANYRES32=r8, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010822110000000802e7b23745d0ee5b472691e6376751dfe20100010882a38b960c121824"], 0x2e) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28)

326.974511ms ago: executing program 2 (id=863):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, 0x0, 0x200080c4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
socket$rxrpc(0x21, 0x2, 0xa)
poll(0x0, 0x0, 0x7)
r2 = socket$inet6(0xa, 0xa, 0xfffffffc)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4040005)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000002000010000000000000000000a202000001f0000f3ff01001400020000000000000000000000ffff7f000001050016002f0000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r4, &(0x7f0000000000)="3f000000010000", 0x7)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0xfd0a}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r6 = socket(0x10, 0x2, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @bcast, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48)
listen(r1, 0x1ad72f7)
socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f00000002c0)={0x7, 'veth1_virt_wifi\x00', {0xa}, 0xfff7})
accept4(r1, 0x0, 0x0, 0x80000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025a6116384eae04ea83cde1510bf20d700000000002020207b1af8ff00000000bfa100000900000007010000f8ffffffb702000008000000b70300000000008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18)

259.70363ms ago: executing program 0 (id=864):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000c80)=@gettaction={0x188, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1011, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x100a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1c}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffdfd}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000)
socket$inet6(0xa, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x4000000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x4e20, @loopback}, 0x5, 0x0, 0x2}}, 0x2e)
close(r10)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

168.758823ms ago: executing program 0 (id=865):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x35, &(0x7f0000000040)=0x18000000, 0x4)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r3)
sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x5}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

58.766465ms ago: executing program 0 (id=866):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d323456511000000caaf6c26c2742145", 0x40, 0x4000000, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) (async, rerun: 32)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) (async, rerun: 32)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000000c0)={0x2f, 0xa, 0x1, 0x4, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}, 0x58) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x1800000, 0x7fff, 0x6, 0xd7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r3=>0x0}) (rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a0000"], 0x44}}, 0x0)

55.324151ms ago: executing program 0 (id=867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x2004c000)

0s ago: executing program 1 (id=868):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r1, 0x0, 0x27, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x102}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800000}, @TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8084}, 0x4090)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5913' (ED25519) to the list of known hosts.
syzkaller login: [   47.940608][ T5797] cgroup: Unknown subsys name 'net'
[   48.050792][ T5797] cgroup: Unknown subsys name 'cpuset'
[   48.057284][ T5797] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.509224][ T5797] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.145333][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.148387][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.151402][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.156986][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.160109][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.214729][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.220855][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.224096][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.227791][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.230907][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.237565][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.241469][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.253536][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.259888][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.264514][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.437228][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   53.601877][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.615330][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.618276][ T5828] bridge_slave_0: entered allmulticast mode
[   53.621166][ T5828] bridge_slave_0: entered promiscuous mode
[   53.629080][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   53.640871][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.643429][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.645963][ T5828] bridge_slave_1: entered allmulticast mode
[   53.650503][ T5828] bridge_slave_1: entered promiscuous mode
[   53.663468][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   53.687120][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.714339][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.789318][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.792396][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.795640][ T5832] bridge_slave_0: entered allmulticast mode
[   53.799544][ T5832] bridge_slave_0: entered promiscuous mode
[   53.805940][ T5828] team0: Port device team_slave_0 added
[   53.810885][ T5828] team0: Port device team_slave_1 added
[   53.820533][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.823748][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.827785][ T5832] bridge_slave_1: entered allmulticast mode
[   53.831683][ T5832] bridge_slave_1: entered promiscuous mode
[   53.860145][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.862536][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.865128][ T5833] bridge_slave_0: entered allmulticast mode
[   53.868669][ T5833] bridge_slave_0: entered promiscuous mode
[   53.885735][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.889640][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.898403][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.902689][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.905934][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.911109][ T5833] bridge_slave_1: entered allmulticast mode
[   53.915010][ T5833] bridge_slave_1: entered promiscuous mode
[   53.946087][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.948815][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.957927][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.971454][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.976111][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.980799][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.999629][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.021516][ T5833] team0: Port device team_slave_0 added
[   54.041806][ T5833] team0: Port device team_slave_1 added
[   54.046581][ T5832] team0: Port device team_slave_0 added
[   54.061479][ T5828] hsr_slave_0: entered promiscuous mode
[   54.064578][ T5828] hsr_slave_1: entered promiscuous mode
[   54.081994][ T5832] team0: Port device team_slave_1 added
[   54.105200][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.107921][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.118269][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.148728][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.151523][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.162544][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.167746][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.170404][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.182061][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.204670][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.208094][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.217480][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.275747][ T5833] hsr_slave_0: entered promiscuous mode
[   54.279206][ T5833] hsr_slave_1: entered promiscuous mode
[   54.281732][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.284264][ T5833] Cannot create hsr debugfs directory
[   54.302426][ T5832] hsr_slave_0: entered promiscuous mode
[   54.304787][ T5832] hsr_slave_1: entered promiscuous mode
[   54.308033][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.311107][ T5832] Cannot create hsr debugfs directory
[   54.541348][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.547644][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.559543][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.569193][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.595269][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.611932][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.618016][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.636083][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.660164][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.668782][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.673333][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.678214][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.760327][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.779083][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   54.793646][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.796130][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.812578][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.819197][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.821558][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.834447][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.864934][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   54.877197][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.879500][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.891060][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   54.896233][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.898609][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.927543][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.930241][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.934615][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.937252][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.982885][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.032801][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.099917][ T5828] veth0_vlan: entered promiscuous mode
[   55.122511][ T5828] veth1_vlan: entered promiscuous mode
[   55.132806][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.137936][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.171083][ T5828] veth0_macvtap: entered promiscuous mode
[   55.185065][ T5828] veth1_macvtap: entered promiscuous mode
[   55.197298][ T5839] Bluetooth: hci0: command tx timeout
[   55.208957][ T5832] veth0_vlan: entered promiscuous mode
[   55.211535][ T5833] veth0_vlan: entered promiscuous mode
[   55.224234][ T5833] veth1_vlan: entered promiscuous mode
[   55.229567][ T5832] veth1_vlan: entered promiscuous mode
[   55.234204][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.251989][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.262021][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.265640][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.271195][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.274792][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.276904][ T5839] Bluetooth: hci2: command tx timeout
[   55.299003][ T5833] veth0_macvtap: entered promiscuous mode
[   55.310655][ T5833] veth1_macvtap: entered promiscuous mode
[   55.333056][ T5832] veth0_macvtap: entered promiscuous mode
[   55.352166][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.356466][ T5839] Bluetooth: hci1: command tx timeout
[   55.360787][ T5832] veth1_macvtap: entered promiscuous mode
[   55.370677][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.380414][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.384987][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.389986][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.392834][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.435772][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.439540][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.442024][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.449058][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.460809][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.463639][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.467183][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.470019][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.494870][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.497696][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.550522][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.553874][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.587603][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.587893][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.601140][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.637979][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.640934][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.642342][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.644581][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.759640][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   55.781218][ T5897] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   55.784168][ T5897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.788137][ T5899] tipc: Started in network mode
[   55.791194][ T5899] tipc: Node identity d295aa7b9944, cluster identity 4711
[   55.796736][ T5899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.809902][ T5903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.817208][ T5899] syzkaller0: entered promiscuous mode
[   55.819575][ T5899] syzkaller0: entered allmulticast mode
[   55.831322][ T5899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.850752][ T5899] tipc: Resetting bearer <eth:syzkaller0>
[   55.867084][ T5898] tipc: Resetting bearer <eth:syzkaller0>
[   55.874497][ T5898] tipc: Disabling bearer <eth:syzkaller0>
[   56.002903][ T5915] wireguard0: entered promiscuous mode
[   56.005157][ T5915] wireguard0: entered allmulticast mode
[   56.025926][ T5918] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   56.050948][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.054469][ T5918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'.
[   56.065904][ T5918] batadv0: entered promiscuous mode
[   56.069903][ T5918] batadv0: left promiscuous mode
[   56.123446][ T5923] netlink: 'syz.2.8': attribute type 64 has an invalid length.
[   56.133804][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   56.644305][ T5932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   56.646930][ T5932] IPv6: NLM_F_CREATE should be set when creating new route
[   56.649341][ T5932] IPv6: NLM_F_CREATE should be set when creating new route
[   56.651714][ T5932] IPv6: NLM_F_CREATE should be set when creating new route
[   56.656660][ T5932] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   56.659943][ T5932] Zero length message leads to an empty skb
[   56.739596][ T5938] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   56.761177][ T5939] netlink: 'syz.1.13': attribute type 4 has an invalid length.
[   56.772097][ T5939] netlink: 'syz.1.13': attribute type 4 has an invalid length.
[   56.966624][ T5949] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   56.974494][ T5949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15'.
[   57.120193][ T5954] tipc: Started in network mode
[   57.122999][ T5954] tipc: Node identity c6c8844b377d, cluster identity 4711
[   57.125467][ T5954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.129342][ T5954] syzkaller0: entered promiscuous mode
[   57.131191][ T5954] syzkaller0: entered allmulticast mode
[   57.146132][ T5953] tipc: Resetting bearer <eth:syzkaller0>
[   57.162282][ T5953] tipc: Disabling bearer <eth:syzkaller0>
[   57.276902][ T5839] Bluetooth: hci0: command tx timeout
[   57.356918][ T5839] Bluetooth: hci2: command tx timeout
[   57.436801][ T5839] Bluetooth: hci1: command tx timeout
[   57.545141][ T5956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.600839][ T5956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.658410][ T5956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.373073][ T5924] Set syz1 is full, maxelem 65536 reached
[   58.398479][ T5971] netlink: 'syz.1.19': attribute type 13 has an invalid length.
[   58.401208][ T5971] netlink: 'syz.1.19': attribute type 17 has an invalid length.
[   58.473927][ T5971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.527166][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.574733][ T5971] netlink: 'syz.1.19': attribute type 5 has an invalid length.
[   58.584520][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.649186][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.710289][ T5968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.784825][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   58.838881][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv1
[   58.842581][ T5997] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   58.847297][ T5997] team0: Failed to send options change via netlink (err -105)
[   58.850459][ T5997] team0: Port device batadv1 added
[   59.020036][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   59.023750][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'.
[   59.027727][ T6007] netlink: 'syz.2.29': attribute type 19 has an invalid length.
[   59.090365][ T6017] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.107993][ T6017] bridge_slave_0: left allmulticast mode
[   59.110443][ T6017] bridge_slave_0: left promiscuous mode
[   59.113583][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.138007][ T6017] bridge_slave_1: left allmulticast mode
[   59.141435][ T6017] bridge_slave_1: left promiscuous mode
[   59.143422][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.149761][ T6019] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[   59.153588][ T6017] bond0: (slave bond_slave_0): Releasing backup interface
[   59.161218][ T6017] bond0: (slave bond_slave_1): Releasing backup interface
[   59.173382][ T6017] team0: Port device team_slave_0 removed
[   59.181669][ T6017] team0: Port device team_slave_1 removed
[   59.184863][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.188647][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[   59.193182][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.196871][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.212956][ T6017] team0: Port device batadv1 removed
[   59.243350][ T6020] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.269258][ T6022] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   59.273000][ T6022] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   59.287479][ T6022] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   59.294297][ T6022] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   59.301922][ T6025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.32'.
[   59.321385][ T6022] team0: Port device geneve2 added
[   59.334174][ T6026] team0: Port device ip6gretap1 added
[   59.357480][ T5839] Bluetooth: hci0: command tx timeout
[   59.440345][ T5839] Bluetooth: hci2: command tx timeout
[   59.526085][ T6038] batman_adv: batadv0: Adding interface: gretap1
[   59.530452][ T5839] Bluetooth: hci1: command tx timeout
[   59.535045][ T6038] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   59.602933][ T6046] veth1_to_batadv: entered promiscuous mode
[   59.605345][ T6046] veth1_to_batadv: entered allmulticast mode
[   59.613855][ T6043] tipc: Started in network mode
[   59.615841][ T6043] tipc: Node identity 76a6e7bcb0a8, cluster identity 4711
[   59.625791][ T6043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.636549][ T6043] syzkaller0: entered promiscuous mode
[   59.638775][ T6043] syzkaller0: entered allmulticast mode
[   59.690081][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.690413][ T6049] netlink: 'syz.0.39': attribute type 11 has an invalid length.
[   59.693463][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.781259][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.791121][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.851495][ T6046] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.855187][ T6046] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.860630][ T6046] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.864131][ T6046] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.932869][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   59.948258][ T6042] tipc: Disabling bearer <eth:syzkaller0>
[   60.113579][ T6058] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.137539][ T6058] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.141297][ T6058] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.144838][ T6058] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.157261][ T6058] geneve2: entered promiscuous mode
[   60.423407][ T6090] ip6t_srh: unknown srh invflags 4449
[   60.719969][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.123437][ T6117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.127096][ T6117] syzkaller0: entered promiscuous mode
[   61.129886][ T6117] syzkaller0: entered allmulticast mode
[   61.141603][ T6116] tipc: Resetting bearer <eth:syzkaller0>
[   61.149983][ T6116] tipc: Disabling bearer <eth:syzkaller0>
[   61.179186][ T6119] validate_nla: 4 callbacks suppressed
[   61.179200][ T6119] netlink: 'syz.0.50': attribute type 13 has an invalid length.
[   61.184557][ T6119] netlink: 'syz.0.50': attribute type 17 has an invalid length.
[   61.277243][ T6119] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.283383][ T6123] netlink: zone id is out of range
[   61.285230][ T6126] x_tables: duplicate underflow at hook 2
[   61.285389][ T6123] netlink: zone id is out of range
[   61.292546][ T6123] netlink: zone id is out of range
[   61.294959][ T6123] netlink: zone id is out of range
[   61.297238][ T6123] netlink: zone id is out of range
[   61.299217][ T6123] netlink: zone id is out of range
[   61.301164][ T6123] netlink: zone id is out of range
[   61.304237][ T6123] netlink: zone id is out of range
[   61.307963][ T6123] netlink: zone id is out of range
[   61.359200][ T6129] __nla_validate_parse: 5 callbacks suppressed
[   61.359211][ T6129] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.53'.
[   61.367292][ T6129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   61.399171][ T6129] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[   61.412592][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   61.436882][ T5839] Bluetooth: hci0: command tx timeout
[   61.526600][ T5839] Bluetooth: hci2: command tx timeout
[   61.606529][ T5839] Bluetooth: hci1: command tx timeout
[   61.615897][ T6149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.631273][ T6149] syzkaller0: entered promiscuous mode
[   61.633445][ T6149] syzkaller0: entered allmulticast mode
[   61.651448][ T6151] netlink: 100 bytes leftover after parsing attributes in process `syz.1.58'.
[   61.654646][ T6148] tipc: Resetting bearer <eth:syzkaller0>
[   61.663232][ T6148] tipc: Disabling bearer <eth:syzkaller0>
[   61.698608][ T6154] netlink: 176 bytes leftover after parsing attributes in process `syz.1.59'.
[   61.758728][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.2.60'.
[   61.809132][ T6161] netlink: 76 bytes leftover after parsing attributes in process `syz.0.61'.
[   61.817467][ T6161] team_slave_0: entered promiscuous mode
[   61.819598][ T6161] team_slave_1: entered promiscuous mode
[   61.821556][ T6161] geneve2: entered promiscuous mode
[   61.822115][ T6165] netlink: 'syz.2.62': attribute type 13 has an invalid length.
[   61.823400][ T6161] ip6gretap1: entered promiscuous mode
[   61.823544][ T6161] vlan2: entered promiscuous mode
[   61.831059][ T6165] netlink: 'syz.2.62': attribute type 17 has an invalid length.
[   61.834315][ T6161] team0: entered promiscuous mode
[   62.028680][ T6178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.038088][ T6178] syzkaller0: entered promiscuous mode
[   62.043932][ T6178] syzkaller0: entered allmulticast mode
[   62.080483][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   62.094178][ T6175] tipc: Disabling bearer <eth:syzkaller0>
[   62.189159][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'.
[   62.200908][ T6191] bond0: entered promiscuous mode
[   62.202753][ T6191] bond_slave_0: entered promiscuous mode
[   62.205010][ T6191] bond_slave_1: entered promiscuous mode
[   62.209875][ T6191] batadv0: entered promiscuous mode
[   62.213630][ T6191] 8021q: adding VLAN 0 to HW filter on device hsr1
[   62.261166][ T6191] bond0: left promiscuous mode
[   62.263755][ T6191] bond_slave_0: left promiscuous mode
[   62.273955][ T6191] bond_slave_1: left promiscuous mode
[   62.276690][ T6191] batadv0: left promiscuous mode
[   62.371139][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   62.374773][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'.
[   62.379340][ T6195] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000
[   62.623593][ T6215] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.626930][ T6215] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.629792][ T6215] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.632913][ T6215] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.650982][ T6212] bond0: entered promiscuous mode
[   62.657360][ T6212] bond_slave_0: entered promiscuous mode
[   62.659655][ T6212] bond_slave_1: entered promiscuous mode
[   62.669509][ T6212] batadv0: entered promiscuous mode
[   62.672220][ T6212] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   62.685242][ T6212] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   62.695519][ T6212] 8021q: adding VLAN 0 to HW filter on device hsr1
[   62.700211][ T6212] bond0: left promiscuous mode
[   62.715070][ T6212] bond_slave_0: left promiscuous mode
[   62.718820][ T6212] bond_slave_1: left promiscuous mode
[   62.725008][ T6212] batadv0: left promiscuous mode
[   63.105490][ T6231] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.109517][ T6231] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.112422][ T6231] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.115445][ T6231] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.132315][ T6231] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.135272][ T6231] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.138369][ T6231] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.141456][ T6231] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   63.187114][ T6244] vlan0: entered promiscuous mode
[   63.189087][ T6244] vlan0: entered allmulticast mode
[   63.190887][ T6244] hsr_slave_1: entered allmulticast mode
[   63.276988][ T6252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.280953][ T6252] syzkaller0: entered promiscuous mode
[   63.282718][ T6252] syzkaller0: entered allmulticast mode
[   63.329855][ T6252] tipc: Resetting bearer <eth:syzkaller0>
[   63.333314][ T6251] tipc: Resetting bearer <eth:syzkaller0>
[   63.341591][ T6251] tipc: Disabling bearer <eth:syzkaller0>
[   63.599878][ T6270] netlink: 'syz.1.89': attribute type 1 has an invalid length.
[   63.624826][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.644982][ T6271] veth3: entered promiscuous mode
[   63.651084][ T6271] bond1: (slave veth3): Enslaving as an active interface with a down link
[   63.840389][ T6276] geneve0: entered promiscuous mode
[   64.122571][ T6294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.135450][ T6294] syzkaller0: entered promiscuous mode
[   64.139915][ T6294] syzkaller0: entered allmulticast mode
[   64.194484][ T6293] tipc: Resetting bearer <eth:syzkaller0>
[   64.233205][ T6293] tipc: Disabling bearer <eth:syzkaller0>
[   64.338866][ T6309] gretap0: entered promiscuous mode
[   64.551414][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.992267][ T6353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.996602][ T6353] syzkaller0: entered promiscuous mode
[   64.999190][ T6353] syzkaller0: entered allmulticast mode
[   65.014235][ T6352] tipc: Resetting bearer <eth:syzkaller0>
[   65.028310][ T6352] tipc: Disabling bearer <eth:syzkaller0>
[   65.084993][ T6355] netlink: 'syz.0.108': attribute type 1 has an invalid length.
[   65.112476][ T6355] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.126926][ T6355] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.129987][ T6355] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.135711][ T6355] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   65.179484][ T6358] gretap2: entered promiscuous mode
[   65.183867][ T6358] bond1: (slave gretap2): making interface the new active one
[   65.189364][ T6358] bond1: (slave gretap2): Enslaving as an active interface with an up link
[   65.203960][ T6355] bond1: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[   65.445734][ T6369] netlink: 'syz.2.112': attribute type 1 has an invalid length.
[   65.558089][ T6371] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   65.576842][ T6371] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   65.749672][ T6383] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.771716][ T6383] bond2: (slave ip6gretap1): making interface the new active one
[   65.775562][ T6383] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   65.972588][ T6396] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[   66.020054][ T6398] pimreg: entered allmulticast mode
[   66.025846][ T6398] pimreg: left allmulticast mode
[   66.355014][ T6424] validate_nla: 5 callbacks suppressed
[   66.355023][ T6424] netlink: 'syz.0.128': attribute type 1 has an invalid length.
[   66.384878][ T6427] __nla_validate_parse: 34 callbacks suppressed
[   66.384888][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'.
[   66.484675][ T6427] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'.
[   66.539755][ T6440] netlink: 'syz.0.131': attribute type 10 has an invalid length.
[   66.770240][ T6462] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   66.812858][ T6466] tipc: Enabled bearer <ib:caif0>, priority 10
[   66.824004][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[   66.842038][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.134'.
[   66.947991][ T6476] ip6tnl1: entered promiscuous mode
[   66.950028][ T6476] ip6tnl1: entered allmulticast mode
[   66.952993][ T6476] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[   66.989266][ T6478] netlink: 'syz.1.139': attribute type 1 has an invalid length.
[   66.998339][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   67.001844][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'.
[   67.007356][ T6480] net_ratelimit: 22 callbacks suppressed
[   67.007369][ T6480] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   67.016346][ T6478] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   67.021932][ T6480] netlink: 60 bytes leftover after parsing attributes in process `syz.0.138'.
[   67.026485][ T6478] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   67.031986][ T6478] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   67.043634][ T6478] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   67.054858][ T6478] bond2: (slave geneve3): making interface the new active one
[   67.062620][ T6478] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   67.084014][ T6480] bond2: entered promiscuous mode
[   67.086013][ T6480] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.137492][ T6480] bond2 (unregistering): Released all slaves
[   67.152841][ T6478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'.
[   67.242468][ T6491] netlink: 'syz.2.142': attribute type 1 has an invalid length.
[   67.244991][ T6491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.142'.
[   67.308518][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   67.312499][ T6499] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   67.314991][ T6499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.432818][ T6516] netlink: 'syz.1.148': attribute type 10 has an invalid length.
[   67.439198][ T6516] batman_adv: batadv0: Adding interface: netdevsim0
[   67.441675][ T6516] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.450298][ T6516] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   67.535349][ T6518] ip6gre1: entered allmulticast mode
[   67.545120][ T6526] netlink: 'syz.1.152': attribute type 1 has an invalid length.
[   67.597267][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.600028][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.604224][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.616546][ T6528] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.622972][ T6528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   67.668288][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.671767][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.675017][ T6528] wlan1 speed is unknown, defaulting to 1000
[   67.948940][ T5880] tipc: Node number set to 3322865596
[   68.037045][ T6544] x_tables: duplicate underflow at hook 2
[   68.150609][ T6550] 8021q: VLANs not supported on caif0
[   68.263868][ T6555] batadv_slave_1: entered promiscuous mode
[   68.288615][ T6558] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   68.304119][ T6558] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   68.331502][ T6554] batadv_slave_1: left promiscuous mode
[   68.340624][ T6562] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   68.384200][ T6562] bond4: entered promiscuous mode
[   68.389602][ T6562] bond4: entered allmulticast mode
[   68.397004][ T6562] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.442584][ T6572] netlink: 'syz.2.168': attribute type 11 has an invalid length.
[   68.768672][ T6603] pimreg: entered allmulticast mode
[   68.771076][ T6603] pimreg: left allmulticast mode
[   68.838339][ T6607] netlink: 'syz.1.175': attribute type 5 has an invalid length.
[   68.921962][ T6617] netlink: 'syz.0.176': attribute type 1 has an invalid length.
[   68.949148][ T6616] syzkaller1: entered promiscuous mode
[   68.951452][ T6616] syzkaller1: entered allmulticast mode
[   69.199196][ T6642] !: renamed from dummy0
[   69.669317][ T6690] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.674201][ T6690] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.677713][ T6690] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.680462][ T6690] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.721262][ T6694] syz.0.194 (6694) used greatest stack depth: 19976 bytes left
[   69.731980][ T6687] wlan1 speed is unknown, defaulting to 1000
[   69.818339][ T6705] pim6reg1: entered promiscuous mode
[   69.819988][ T6709] xt_connbytes: Forcing CT accounting to be enabled
[   69.820135][ T6705] pim6reg1: entered allmulticast mode
[   69.822314][ T6709] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   69.984577][ T6717] 8021q: adding VLAN 0 to HW filter on device bond3
[   70.020257][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.225057][ T6731] syzkaller0: entered promiscuous mode
[   70.228641][ T6731] syzkaller0: entered allmulticast mode
[   70.885960][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.038951][ T6780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.045108][ T6773] wlan1 speed is unknown, defaulting to 1000
[   71.104921][ T6780] wlan1 speed is unknown, defaulting to 1000
[   71.238522][ T6779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.343979][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.347942][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.350303][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.558966][ T6819] __nla_validate_parse: 30 callbacks suppressed
[   71.558983][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   71.564123][ T6819] validate_nla: 10 callbacks suppressed
[   71.564131][ T6819] netlink: 'syz.0.221': attribute type 30 has an invalid length.
[   71.580358][ T6819] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.583437][ T6819] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.586983][ T6819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.590446][ T6819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.596593][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   71.599627][ T6819] netlink: 'syz.0.221': attribute type 30 has an invalid length.
[   71.605547][ T6819] netlink: 34 bytes leftover after parsing attributes in process `syz.0.221'.
[   71.610716][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'.
[   71.657650][ T6823] macvlan1: entered allmulticast mode
[   71.659448][ T6823] bond0: entered allmulticast mode
[   71.661089][ T6823] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   71.673818][ T6823] 8021q: adding VLAN 0 to HW filter on device macvlan1
[   71.677491][ T6823] bond0: left allmulticast mode
[   71.679178][ T6823] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   71.685349][ T6826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'.
[   71.818643][ T6828] netlink: 44 bytes leftover after parsing attributes in process `syz.0.224'.
[   71.898898][ T6830] nbd2: detected capacity change from 0 to 127
[   71.915055][ T6828] netlink: 'syz.0.224': attribute type 1 has an invalid length.
[   71.934085][ T6828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.224'.
[   71.946304][ T6832] block nbd2: NBD_DISCONNECT
[   71.948541][ T6832] block nbd2: Disconnected due to user request.
[   71.950868][ T6832] block nbd2: shutting down sockets
[   71.956685][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.960624][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   71.962083][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   71.964054][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.970413][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   71.973710][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.977570][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   71.980859][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.984517][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   71.988184][ T5840] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.991533][ T5840] Buffer I/O error on dev nbd2, logical block 0, async page read
[   71.994448][ T5840] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.000297][ T5840] Buffer I/O error on dev nbd2, logical block 1, async page read
[   72.003221][ T5840] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.006414][ T5840] Buffer I/O error on dev nbd2, logical block 2, async page read
[   72.010453][ T5840] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.013502][ T5840] Buffer I/O error on dev nbd2, logical block 3, async page read
[   72.016835][ T5840] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.020440][ T5840] Buffer I/O error on dev nbd2, logical block 0, async page read
[   72.023239][ T5840] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   72.027057][ T5840] Buffer I/O error on dev nbd2, logical block 1, async page read
[   72.037092][ T5840] ldm_validate_partition_table(): Disk read failed.
[   72.041265][ T5840] Dev nbd2: unable to read RDB block 0
[   72.044583][ T5840]  nbd2: unable to read partition table
[   72.067945][ T5840] ldm_validate_partition_table(): Disk read failed.
[   72.073186][ T5840] Dev nbd2: unable to read RDB block 0
[   72.076864][ T5840]  nbd2: unable to read partition table
[   72.077693][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.229'.
[   72.123362][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   72.126961][ T6844] netlink: 'syz.1.230': attribute type 12 has an invalid length.
[   72.141302][ T6844] syzkaller1: entered promiscuous mode
[   72.143274][ T6844] syzkaller1: entered allmulticast mode
[   72.404045][ T6866] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   72.437989][ T6869] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   72.581815][ T6881] x_tables: duplicate underflow at hook 2
[   72.618260][ T6883] netlink: 'syz.0.237': attribute type 13 has an invalid length.
[   72.621850][ T6883] netlink: 'syz.0.237': attribute type 17 has an invalid length.
[   72.661228][ T6883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.682892][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.688301][ T6885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.717308][ T6883] wlan1 speed is unknown, defaulting to 1000
[   72.838476][ T6902] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   72.843792][ T6902] bridge_slave_0: left allmulticast mode
[   72.845608][ T6902] bridge_slave_0: left promiscuous mode
[   72.848255][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.852704][ T6902] bridge_slave_1: left allmulticast mode
[   72.854540][ T6902] bridge_slave_1: left promiscuous mode
[   72.863931][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.871451][ T6902] bond0: (slave bond_slave_0): Releasing backup interface
[   72.879174][ T6902] bond0: (slave bond_slave_1): Releasing backup interface
[   72.883717][ T6902] team0: Port device team_slave_0 removed
[   72.890150][ T6902] team0: Port device team_slave_1 removed
[   72.892988][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.894932][ T6905] netlink: 'syz.1.242': attribute type 10 has an invalid length.
[   72.899597][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.903566][ T6902] batman_adv: batadv0: Removing interface: netdevsim0
[   72.910626][ T6902] bond1: (slave veth3): Releasing active interface
[   72.916386][ T6902] bond2: (slave geneve3): Releasing active interface
[   72.920356][ T6902] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.924264][ T6902] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.930413][ T6902] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.934878][ T6902] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.944423][ T6904] bridge0: entered promiscuous mode
[   72.949824][ T6905] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   72.960012][ T6905] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.068700][ T6914] ipt_ECN: cannot use operation on non-tcp rule
[   73.246057][ T6938] wlan1 speed is unknown, defaulting to 1000
[   73.304626][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.589604][ T6957] wlan1 speed is unknown, defaulting to 1000
[   73.988046][ T6965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.224892][ T6971] bridge5: port 1(ip6gretap2) entered blocking state
[   74.228999][ T6971] bridge5: port 1(ip6gretap2) entered disabled state
[   74.231498][ T6971] ip6gretap2: entered allmulticast mode
[   74.234627][ T6971] ip6gretap2: entered promiscuous mode
[   74.260239][ T6971] veth3: entered promiscuous mode
[   74.265188][ T6971] bridge5: port 2(veth3) entered blocking state
[   74.268633][ T6971] bridge5: port 2(veth3) entered disabled state
[   74.270977][ T6971] veth3: entered allmulticast mode
[   74.345626][ T6982] trusted_key: syz.2.262 sent an empty control message without MSG_MORE.
[   74.416946][ T6987] bridge6: entered promiscuous mode
[   74.419157][ T6987] bridge6: entered allmulticast mode
[   74.482635][ T6991] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[   74.496356][ T6991] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[   74.504458][ T6991] tipc: Can't bind to reserved service type 0
[   74.930300][ T7023] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   75.034885][ T7029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.148377][ T7029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.227608][ T7029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.270861][ T7029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.297201][ T7038] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   75.325918][ T7038] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.376859][ T7029] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.386755][ T7029] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.394324][ T7029] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.403503][ T6991] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   75.407590][ T7029] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.517977][ T7044] wlan1 speed is unknown, defaulting to 1000
[   75.559498][ T7045] wlan1 speed is unknown, defaulting to 1000
[   75.714587][ T7065] gretap0: entered promiscuous mode
[   75.723713][ T7065] 0XD: renamed from gretap0
[   75.730946][ T7065] 0XD: left promiscuous mode
[   75.733012][ T7065] 0XD: entered allmulticast mode
[   75.738149][ T7065] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[   76.556277][ T5839] Bluetooth: hci1: command 0x0401 tx timeout
[   76.615617][ T7103] netlink: 'syz.2.283': attribute type 39 has an invalid length.
[   76.715651][ T7105] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.718441][ T7105] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.721264][ T7105] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.724117][ T7105] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.826075][ T7108] __nla_validate_parse: 29 callbacks suppressed
[   76.826084][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'.
[   76.885125][ T7112] tipc: Resetting bearer <ib:caif0>
[   77.022928][ T7120] bond0: (slave wlan1): Releasing backup interface
[   77.133778][ T7133] openvswitch: netlink: Missing valid actions attribute.
[   77.136007][ T7133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.233009][ T7133] wlan1 speed is unknown, defaulting to 1000
[   77.245605][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   77.333366][ T7088] Set syz1 is full, maxelem 65536 reached
[   77.340519][ T7087] Set syz1 is full, maxelem 65536 reached
[   77.363729][ T7146] batman_adv: batadv0: Adding interface: dummy0
[   77.366929][ T7146] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   77.383686][ T7146] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   77.538048][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[   77.643442][ T7167] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   77.662005][ T7167] bond0: (slave wlan1): Releasing backup interface
[   77.668716][ T7167] bond2: (slave ip6gretap1): Releasing active interface
[   77.675178][ T7167] ip6gretap2: left allmulticast mode
[   77.686295][ T7167] ip6gretap2: left promiscuous mode
[   77.690080][ T7167] bridge5: port 1(ip6gretap2) entered disabled state
[   77.698265][ T7167] veth3: left allmulticast mode
[   77.700020][ T7167] bridge5: port 2(veth3) entered disabled state
[   77.705232][ T7167] netlink: 'syz.2.297': attribute type 10 has an invalid length.
[   77.709268][ T7167] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   77.711534][ T7167] bond0: (slave wlan1): refused to change device type
[   77.745091][ T7170] wlan1 speed is unknown, defaulting to 1000
[   77.964724][ T7193] netlink: 436 bytes leftover after parsing attributes in process `syz.0.303'.
[   77.968108][ T7194] netlink: 436 bytes leftover after parsing attributes in process `syz.0.303'.
[   78.086631][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'.
[   78.108123][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'.
[   78.222100][ T7217] netlink: 'syz.2.310': attribute type 3 has an invalid length.
[   78.225301][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'.
[   78.318483][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   78.359210][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'.
[   78.723697][ T7228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.734154][ T7228] ip6t_REJECT: ECHOREPLY is not supported
[   78.738479][ T7228] syzkaller0: entered promiscuous mode
[   78.740972][ T7228] syzkaller0: entered allmulticast mode
[   78.765557][ T7228] tipc: Resetting bearer <eth:syzkaller0>
[   78.768876][ T7227] tipc: Resetting bearer <eth:syzkaller0>
[   78.777851][ T7227] tipc: Disabling bearer <eth:syzkaller0>
[   78.978218][ T7237] bridge_slave_0: left allmulticast mode
[   78.981441][ T7237] bridge_slave_0: left promiscuous mode
[   78.988939][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.002360][ T7237] bridge_slave_1: left allmulticast mode
[   79.006618][ T7237] bridge_slave_1: left promiscuous mode
[   79.009523][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.015611][ T7237] bond0: (slave bond_slave_0): Releasing backup interface
[   79.021777][ T7237] bond0: (slave bond_slave_1): Releasing backup interface
[   79.027898][ T7237] team_slave_0: left promiscuous mode
[   79.037575][ T7237] team0: Port device team_slave_0 removed
[   79.040970][ T7237] team_slave_1: left promiscuous mode
[   79.050394][ T7237] team0: Port device team_slave_1 removed
[   79.053532][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.057423][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.061799][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.064958][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.071529][ T7237] geneve2: left promiscuous mode
[   79.073983][ T7237] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.077273][ T7237] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.080241][ T7237] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.083856][ T7237] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   79.096012][ T7237] team0: Port device geneve2 removed
[   79.101306][ T7237] ip6gretap1: left promiscuous mode
[   79.112959][ T7237] team0: Port device ip6gretap1 removed
[   79.115810][ T7237] batman_adv: batadv0: Removing interface: gretap1
[   79.120448][ T7237] bond1: (slave gretap2): Releasing active interface
[   79.184117][ T7244] vlan2: entered promiscuous mode
[   79.185955][ T7244] vlan2: entered allmulticast mode
[   79.195154][ T7244] hsr_slave_1: entered allmulticast mode
[   79.264815][ T7249] netlink: 'syz.0.322': attribute type 2 has an invalid length.
[   79.551080][ T7268] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   79.827559][ T7291] sock: sock_timestamping_bind_phc: sock not bind to device
[   79.919601][ T7308] xt_l2tp: invalid flags combination: 4
[   79.939363][ T7303] team0: Master is either lo or non-ether device
[   80.038687][ T7312] wlan1 speed is unknown, defaulting to 1000
[   80.122655][ T7321] xt_hashlimit: overflow, try lower: 72057594037927936/255
[   80.167807][ T7323] wlan1 speed is unknown, defaulting to 1000
[   80.552930][ T7348] lo: entered promiscuous mode
[   80.573393][ T7345] netlink: 'syz.0.347': attribute type 13 has an invalid length.
[   80.575861][ T7345] netlink: 'syz.0.347': attribute type 17 has an invalid length.
[   80.595037][ T7345] 0XD: left allmulticast mode
[   80.608437][ T7345] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.619446][ T7347] lo: left promiscuous mode
[   80.675609][ T7345] syz.0.347 (7345) used greatest stack depth: 18392 bytes left
[   80.765908][ T7353] batadv_slave_0: entered promiscuous mode
[   80.865619][ T7361] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   80.875135][ T7362] netlink: 'syz.0.352': attribute type 2 has an invalid length.
[   81.054988][ T7364] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   81.117338][   T10] cfg80211: failed to load regulatory.db
[   81.133560][ T7380] netlink: 'syz.2.356': attribute type 1 has an invalid length.
[   81.252440][ T7386] team0: Master is either lo or non-ether device
[   81.353053][ T7392] 8021q: adding VLAN 0 to HW filter on device macvlan1
[   81.693237][ T7396] pim6reg1: entered promiscuous mode
[   81.695140][ T7396] pim6reg1: entered allmulticast mode
[   81.890079][ T7404] __nla_validate_parse: 26 callbacks suppressed
[   81.890094][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[   81.898342][ T7404] openvswitch: netlink: Flow key attr not present in new flow.
[   81.991903][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   82.064441][ T7420] vlan0: entered promiscuous mode
[   82.092656][ T7420] vlan0: entered allmulticast mode
[   82.094874][ T7420] hsr_slave_1: entered allmulticast mode
[   82.139278][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[   82.159483][ T7427] netlink: 'syz.2.369': attribute type 9 has an invalid length.
[   82.162135][ T7427] netlink: 'syz.2.369': attribute type 6 has an invalid length.
[   82.165091][ T7427] netlink: 'syz.2.369': attribute type 7 has an invalid length.
[   82.173933][ T7427] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[   82.287913][ T7433] xt_hashlimit: invalid interval
[   82.395217][ T7445] macsec1: entered promiscuous mode
[   82.399439][ T7445] syz_tun: entered promiscuous mode
[   82.406017][ T7445] syz_tun: left promiscuous mode
[   82.564907][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   82.570994][ T7451] netlink: 'syz.1.375': attribute type 7 has an invalid length.
[   82.574304][ T7451] netlink: 'syz.1.375': attribute type 8 has an invalid length.
[   82.578602][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[   82.669242][ T7455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.673962][ T7455] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   82.677681][ T7455] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   82.696830][ T7455] tipc: Resetting bearer <eth:syzkaller0>
[   82.920633][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'.
[   83.053022][ T7469] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   83.067087][ T7469] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.079660][ T7469] 8021q: adding VLAN 0 to HW filter on device bond5
[   83.081974][ T7469] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[   83.085920][ T7469] bond5: (slave vxcan1): Error -95 calling set_mac_address
[   83.132073][ T7474] gretap2: entered promiscuous mode
[   83.136776][ T7474] bond5: (slave gretap2): making interface the new active one
[   83.140006][ T7474] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   83.315665][ T7480] ipt_ECN: cannot use operation on non-tcp rule
[   83.538878][ T7486] netlink: 'syz.0.382': attribute type 1 has an invalid length.
[   83.568556][ T7486] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   83.573902][ T7486] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   83.686836][   T10] tipc: Node number set to 1272031867
[   83.790208][ T7492] netlink: 'syz.0.384': attribute type 4 has an invalid length.
[   83.849975][ T7496] x_tables: duplicate underflow at hook 2
[   83.982968][ T7500] bond5: (slave gretap2): Releasing active interface
[   84.020535][ T7507] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   84.023094][ T7507] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   84.026020][ T7506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.061269][ T7509] Bluetooth: MGMT ver 1.23
[   84.064445][ T7509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.390'.
[   84.110489][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'.
[   84.127924][ T7512] 8021q: adding VLAN 0 to HW filter on device bond6
[   84.140169][ T7512] macvlan1: entered promiscuous mode
[   84.142437][ T7512] macvlan1: entered allmulticast mode
[   84.145364][ T7512] bond6: entered promiscuous mode
[   84.148138][ T7512] 8021q: adding VLAN 0 to HW filter on device macvlan1
[   84.153006][ T7512] bond6: left promiscuous mode
[   84.295394][ T7518] netlink: 'syz.2.393': attribute type 10 has an invalid length.
[   84.300820][ T7518] bridge0: left promiscuous mode
[   84.312008][ T7518] team0: Port device bridge0 added
[   84.365599][ T7520] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.368016][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'.
[   84.377532][ T7521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   84.381339][ T7521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   84.384980][ T7521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   84.389095][ T7521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   85.039114][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'.
[   85.049684][ T7536] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.053025][ T7536] syzkaller0: entered promiscuous mode
[   85.055376][ T7536] syzkaller0: entered allmulticast mode
[   85.064157][ T7536] tipc: Resetting bearer <eth:syzkaller0>
[   85.069331][ T7535] tipc: Resetting bearer <eth:syzkaller0>
[   85.082290][ T7535] tipc: Disabling bearer <eth:syzkaller0>
[   85.856818][ T7573] team0 (unregistering): Port device bridge0 removed
[   86.223432][ T7584] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.227394][ T7584] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.230251][ T7584] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.233018][ T7584] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.273473][ T7584] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.277064][ T7584] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.280221][ T7584] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.283300][ T7584] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.754304][ T7629] pim6reg1: entered promiscuous mode
[   86.758634][ T7629] pim6reg1: entered allmulticast mode
[   86.805252][ T7631] Cannot find add_set index 0 as target
[   86.861490][ T7629] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[   86.863916][ T7629] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[   86.911142][ T7629] bond7 (unregistering): Released all slaves
[   87.014476][ T7647] macvlan1: entered promiscuous mode
[   87.021214][ T7647] bond0: entered promiscuous mode
[   87.023610][ T7647] macvlan1: entered allmulticast mode
[   87.025941][ T7647] bond0: entered allmulticast mode
[   87.029123][ T7647] 8021q: adding VLAN 0 to HW filter on device macvlan1
[   87.034401][ T7647] bond0: left allmulticast mode
[   87.038180][ T7647] bond0: left promiscuous mode
[   87.719884][ T7659] __nla_validate_parse: 76 callbacks suppressed
[   87.719900][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'.
[   87.770396][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.432'.
[   87.773656][ T7661] bridge_slave_0: entered allmulticast mode
[   87.811174][ T7663] validate_nla: 2 callbacks suppressed
[   87.811186][ T7663] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   87.861384][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.433'.
[   87.868815][ T7663] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.922609][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'.
[   87.973085][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[   88.081957][ T7680] netlink: 44 bytes leftover after parsing attributes in process `syz.0.439'.
[   88.100182][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   88.131563][ T7688] batadv_slave_0: entered promiscuous mode
[   88.161837][ T7691] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[   88.239911][ T7699] netlink: 'syz.2.444': attribute type 4 has an invalid length.
[   88.248064][ T7700] netlink: 'syz.1.446': attribute type 4 has an invalid length.
[   88.301433][ T7706] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   88.319978][ T7706] bond6: entered promiscuous mode
[   88.322058][ T7706] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.334041][ T7706] netlink: 3 bytes leftover after parsing attributes in process `syz.1.448'.
[   88.359133][ T7706] batadv2: entered promiscuous mode
[   88.361171][ T7706] batadv2: entered allmulticast mode
[   88.363835][ T7706] 8021q: adding VLAN 0 to HW filter on device batadv2
[   88.368021][ T7706] bond6: (slave batadv2): making interface the new active one
[   88.371329][ T7706] bond6: (slave batadv2): Enslaving as an active interface with an up link
[   88.402928][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'.
[   88.545519][ T7723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.553018][ T7724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.583707][ T7727] xt_CT: No such helper "snmp"
[   88.708836][ T7731] netlink: 'syz.1.451': attribute type 16 has an invalid length.
[   88.711994][ T7731] netlink: 'syz.1.451': attribute type 17 has an invalid length.
[   88.715304][ T7731] tipc: Resetting bearer <eth:syzkaller0>
[   88.866819][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[   89.109970][ T7742] netlink: 'syz.2.455': attribute type 10 has an invalid length.
[   89.171654][ T7749] ip6tnl2: entered promiscuous mode
[   89.173922][ T7749] ip6tnl2: entered allmulticast mode
[   89.450917][ T7762] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (4095)
[   89.454033][ T7762] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   89.550993][ T7770] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   89.584244][ T7770] netlink: 'syz.2.464': attribute type 10 has an invalid length.
[   89.589162][ T7770] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   89.591493][ T7770] bond0: (slave wlan1): refused to change device type
[   89.808649][ T7779] netlink: 'syz.0.467': attribute type 10 has an invalid length.
[   90.037960][ T7796] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.927105][ T7810] wlan1 speed is unknown, defaulting to 1000
[   91.030073][ T7818] tipc: Enabling of bearer <ib:batadv0> rejected, failed to enable media
[   91.035510][ T7818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.042647][ T7818] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   91.045743][ T7818] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   91.066092][ T7818] tipc: Resetting bearer <eth:syzkaller0>
[   91.131112][ T7825] wlan1 speed is unknown, defaulting to 1000
[   91.218437][ T7828] x_tables: duplicate underflow at hook 1
[   91.312927][ T7831] wlan1 speed is unknown, defaulting to 1000
[   92.150545][ T7863] bridge0: port 1(ipvlan0) entered blocking state
[   92.166785][ T7863] bridge0: port 1(ipvlan0) entered disabled state
[   92.169637][ T7863] ipvlan0: entered allmulticast mode
[   92.171856][ T7863] bridge0: entered allmulticast mode
[   92.175785][ T7863] ipvlan0: left allmulticast mode
[   92.206290][ T7863] bridge0: left allmulticast mode
[   92.366660][ T7877] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   92.596876][ T7897] wlan1 speed is unknown, defaulting to 1000
[   92.684050][ T7901] pim6reg1: entered promiscuous mode
[   92.700396][ T7901] pim6reg1: entered allmulticast mode
[   92.974395][ T7917] validate_nla: 5 callbacks suppressed
[   92.974405][ T7917] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[   93.054608][ T7919] __nla_validate_parse: 20 callbacks suppressed
[   93.054618][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'.
[   93.081194][ T7921] bond7: (slave geneve3): making interface the new active one
[   93.084103][ T7921] bond7: (slave geneve3): Enslaving as an active interface with an up link
[   93.095556][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.505'.
[   93.097453][ T7919] pim6reg: entered allmulticast mode
[   93.103230][ T7917] 8021q: adding VLAN 0 to HW filter on device bond7
[   93.113077][ T7919] pim6reg: left allmulticast mode
[   93.229054][ T7927] veth0_to_team: entered promiscuous mode
[   93.231386][ T7927] veth0_to_team: entered allmulticast mode
[   93.381612][ T7935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'.
[   93.645787][ T7951] openvswitch: netlink: IP tunnel TTL not specified.
[   93.667007][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.514'.
[   93.928061][ T7964] netlink: 552 bytes leftover after parsing attributes in process `syz.1.517'.
[   93.972641][ T7966] netlink: 'syz.0.518': attribute type 4 has an invalid length.
[   93.974351][ T7967] netlink: 'syz.0.518': attribute type 4 has an invalid length.
[   94.049737][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.519'.
[   94.208572][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[   94.302441][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'.
[   94.350563][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'.
[   94.392830][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.398219][ T7988] netlink: 32 bytes leftover after parsing attributes in process `syz.1.522'.
[   94.625876][ T8012] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.644215][ T8012] netlink: 'syz.2.527': attribute type 4 has an invalid length.
[   94.904235][ T8029] netlink: 'syz.2.531': attribute type 1 has an invalid length.
[   94.988928][ T8033] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   95.063023][ T8037] bond0: option min_links: invalid value (18446744073709551604)
[   95.065593][ T8037] bond0: option min_links: allowed values 0 - 2147483647
[   95.184009][ T8045] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   95.209136][ T8045] batadv3: entered promiscuous mode
[   95.217587][ T8047] netlink: 'syz.0.539': attribute type 1 has an invalid length.
[   95.250654][ T8050] bridge0: port 1(ipvlan0) entered blocking state
[   95.253674][ T8050] bridge0: port 1(ipvlan0) entered disabled state
[   95.261317][ T8050] ipvlan0: entered allmulticast mode
[   95.264459][ T8050] bridge0: entered allmulticast mode
[   95.268281][ T8050] ipvlan0: left allmulticast mode
[   95.270375][ T8050] bridge0: left allmulticast mode
[   95.312400][ T8054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.321121][ T8054] syzkaller0: entered promiscuous mode
[   95.323777][ T8054] syzkaller0: entered allmulticast mode
[   95.340694][ T8054] tipc: Resetting bearer <eth:syzkaller0>
[   95.370820][ T8052] tipc: Resetting bearer <eth:syzkaller0>
[   95.403487][ T8052] tipc: Disabling bearer <eth:syzkaller0>
[   95.600870][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.612627][ T8069] bond0: (slave rose0): Enslaving as an active interface with an up link
[   95.624894][ T8079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   95.899784][ T8111] netlink: 'syz.2.555': attribute type 13 has an invalid length.
[   95.903077][ T8111] netlink: 'syz.2.555': attribute type 17 has an invalid length.
[   95.934953][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.965506][ T8111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.217161][ T8133] netlink: 'syz.0.559': attribute type 12 has an invalid length.
[   96.514756][ T8153] netlink: 'syz.0.563': attribute type 4 has an invalid length.
[   96.716241][ T8179] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.719074][ T8179] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.721773][ T8179] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.727579][ T8179] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.965603][ T8201] gretap0: left promiscuous mode
[   96.973805][ T8201] batadv_slave_0: left promiscuous mode
[   96.982345][ T8201] veth1_to_batadv: left promiscuous mode
[   96.984853][ T8201] veth1_to_batadv: left allmulticast mode
[   97.000498][ T8201] geneve2: left promiscuous mode
[   97.002421][ T8201] veth3: left promiscuous mode
[   97.005417][ T8201] tipc: Resetting bearer <eth:syzkaller0>
[   97.013507][ T8201] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   97.019241][ T8201] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   97.023344][ T8201] bond6: left promiscuous mode
[   97.035442][ T8201] batadv2: left promiscuous mode
[   97.041167][ T8201] batadv2: left allmulticast mode
[   97.212271][ T8219] pimreg: entered allmulticast mode
[   97.241546][ T8219] pimreg: left allmulticast mode
[   97.468248][ T8242] netlink: 'syz.2.590': attribute type 11 has an invalid length.
[   97.874370][ T8266] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.883917][ T8266] batman_adv: batadv0: Interface activated: dummy0
[   97.889740][ T8266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.981930][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.052040][ T8266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.142972][ T8266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.146676][ T8285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.284570][ T8294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.294019][ T8294] syzkaller0: entered promiscuous mode
[   98.296980][ T8294] syzkaller0: entered allmulticast mode
[   98.317889][ T8294] tipc: Resetting bearer <eth:syzkaller0>
[   98.326618][ T8292] tipc: Resetting bearer <eth:syzkaller0>
[   98.340629][ T8292] tipc: Disabling bearer <eth:syzkaller0>
[   98.363788][ T8297] veth0_to_team: left promiscuous mode
[   98.366783][ T8297] veth0_to_team: left allmulticast mode
[   98.376027][ T8297] validate_nla: 3 callbacks suppressed
[   98.376042][ T8297] netlink: 'syz.2.597': attribute type 16 has an invalid length.
[   98.385273][ T8297] netlink: 'syz.2.597': attribute type 17 has an invalid length.
[   98.446017][ T8297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.477120][ T8299] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.480563][ T8299] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.484614][ T8299] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.489642][ T8299] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.542302][ T1269] IPVS: starting estimator thread 0...
[   98.636368][ T8302] IPVS: using max 70 ests per chain, 168000 per kthread
[   98.795987][ T8308] pim6reg1: entered promiscuous mode
[   98.798187][ T8308] pim6reg1: entered allmulticast mode
[   98.947979][ T8310] __nla_validate_parse: 33 callbacks suppressed
[   98.947989][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'.
[   99.253779][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'.
[   99.375421][ T8322] netlink: 156 bytes leftover after parsing attributes in process `syz.1.604'.
[   99.605761][ T8331] netlink: 56 bytes leftover after parsing attributes in process `syz.2.608'.
[   99.752747][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[   99.762771][ T8339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'.
[   99.805057][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[   99.808437][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'.
[   99.997603][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.610'.
[  100.201946][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'.
[  100.461815][ T8350] macvlan2: entered allmulticast mode
[  100.464234][ T8350] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  100.516675][ T8350] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  100.697062][ T8357] syzkaller1: entered promiscuous mode
[  100.699897][ T8357] syzkaller1: entered allmulticast mode
[  101.071068][ T8362] pim6reg1: entered promiscuous mode
[  101.073246][ T8362] pim6reg1: entered allmulticast mode
[  101.123750][ T8367] batadv_slave_0: entered promiscuous mode
[  101.293963][ T8376] netlink: 'syz.2.619': attribute type 1 has an invalid length.
[  101.382894][ T8386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.440940][ T8376] netlink: 'syz.2.619': attribute type 282 has an invalid length.
[  101.520895][ T8400] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[  102.052300][ T8430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.059332][ T8432] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  102.064826][ T8432] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  102.136981][ T8441] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[  102.181797][ T8441] gretap1: entered promiscuous mode
[  102.195564][ T8441] bond7: (slave gretap1): making interface the new active one
[  102.198586][ T8441] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  102.252379][ T8451] netlink: 'syz.1.634': attribute type 1 has an invalid length.
[  102.303430][ T8455] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  102.685932][ T8480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  102.691952][ T8481] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  102.920348][ T8488] syz.1.639: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  102.944160][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.1.639 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  102.944180][ T8488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.944186][ T8488] Call Trace:
[  102.944192][ T8488]  <TASK>
[  102.944198][ T8488]  dump_stack_lvl+0x189/0x250
[  102.944222][ T8488]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.944237][ T8488]  ? __pfx__printk+0x10/0x10
[  102.944254][ T8488]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.944270][ T8488]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.944286][ T8488]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  102.944304][ T8488]  warn_alloc+0x214/0x310
[  102.944324][ T8488]  ? __pfx_warn_alloc+0x10/0x10
[  102.944347][ T8488]  ? __get_vm_area_node+0x28f/0x300
[  102.944362][ T8488]  ? translate_table+0x19b/0x2040
[  102.944380][ T8488]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  102.944416][ T8488]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  102.944435][ T8488]  ? rcu_is_watching+0x15/0xb0
[  102.944450][ T8488]  ? translate_table+0x19b/0x2040
[  102.944463][ T8488]  ? translate_table+0x19b/0x2040
[  102.944476][ T8488]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  102.944489][ T8488]  ? translate_table+0x19b/0x2040
[  102.944502][ T8488]  ? xt_alloc_table_info+0x3b/0xa0
[  102.944522][ T8488]  translate_table+0x19b/0x2040
[  102.944547][ T8488]  ? __lock_acquire+0xab9/0xd20
[  102.944563][ T8488]  ? __pfx_translate_table+0x10/0x10
[  102.944579][ T8488]  ? __might_fault+0xb0/0x130
[  102.944605][ T8488]  ? _copy_from_user+0x94/0xb0
[  102.944630][ T8488]  do_ip6t_set_ctl+0x970/0xce0
[  102.944650][ T8488]  ? rcu_is_watching+0x15/0xb0
[  102.944663][ T8488]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  102.944724][ T8488]  ? __pfx___mutex_lock+0x10/0x10
[  102.944739][ T8488]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  102.944749][ T8488]  ? aa_sk_perm+0x81e/0x950
[  102.944770][ T8488]  ? __pfx_aa_sk_perm+0x10/0x10
[  102.944791][ T8488]  nf_setsockopt+0x26f/0x290
[  102.944808][ T8488]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  102.944823][ T8488]  do_sock_setsockopt+0x25a/0x3e0
[  102.944840][ T8488]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  102.944858][ T8488]  ? __fget_files+0x2a/0x420
[  102.944878][ T8488]  __x64_sys_setsockopt+0x18b/0x220
[  102.944897][ T8488]  do_syscall_64+0xfa/0x3b0
[  102.944909][ T8488]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.944925][ T8488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.944937][ T8488]  ? exc_page_fault+0x9f/0xf0
[  102.944955][ T8488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.944966][ T8488] RIP: 0033:0x7f92f5d8e929
[  102.944978][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.944988][ T8488] RSP: 002b:00007f92f6b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.945002][ T8488] RAX: ffffffffffffffda RBX: 00007f92f5fb6160 RCX: 00007f92f5d8e929
[  102.945010][ T8488] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[  102.945017][ T8488] RBP: 00007f92f5e10b39 R08: 0000000000000310 R09: 0000000000000000
[  102.945024][ T8488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.945031][ T8488] R13: 0000000000000000 R14: 00007f92f5fb6160 R15: 00007ffcdcb4fdd8
[  102.945051][ T8488]  </TASK>
[  102.945056][ T8488] Mem-Info:
[  103.088438][ T8488] active_anon:5941 inactive_anon:0 isolated_anon:0
[  103.088438][ T8488]  active_file:1028 inactive_file:38221 isolated_file:0
[  103.088438][ T8488]  unevictable:1768 dirty:170 writeback:0
[  103.088438][ T8488]  slab_reclaimable:9668 slab_unreclaimable:97040
[  103.088438][ T8488]  mapped:18320 shmem:2486 pagetables:1008
[  103.088438][ T8488]  sec_pagetables:0 bounce:0
[  103.088438][ T8488]  kernel_misc_reclaimable:0
[  103.088438][ T8488]  free:250970 free_pcp:21312 free_cma:0
[  103.107262][ T8488] Node 0 active_anon:11740kB inactive_anon:0kB active_file:3012kB inactive_file:11680kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27000kB dirty:152kB writeback:0kB shmem:5104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3564kB pagetables:1696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.121309][ T8488] Node 1 active_anon:12024kB inactive_anon:0kB active_file:1100kB inactive_file:141204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46280kB dirty:528kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8872kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.135071][ T8488] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.156255][ T8488] lowmem_reserve[]: 0 812 812 812 812
[  103.166309][ T8488] Node 0 DMA32 free:329124kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11740kB inactive_anon:0kB active_file:3012kB inactive_file:11680kB unevictable:3536kB writepending:152kB present:1556484kB managed:831876kB mlocked:0kB bounce:0kB free_pcp:25516kB local_pcp:12144kB free_cma:0kB
[  103.186239][ T8488] lowmem_reserve[]: 0 0 0 0 0
[  103.187924][ T8488] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  103.216263][ T8488] lowmem_reserve[]: 0 0 854 854 854
[  103.218100][ T8488] Node 1 Normal free:200904kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12024kB inactive_anon:0kB active_file:1100kB inactive_file:141204kB unevictable:3536kB writepending:528kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:60044kB local_pcp:20876kB free_cma:0kB
[  103.245669][ T8488] lowmem_reserve[]: 0 0 0 0 0
[  103.251020][ T8488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.255487][ T8488] Node 0 DMA32: 174*4kB (ME) 624*8kB (UM) 443*16kB (UME) 88*32kB (UME) 76*64kB (UME) 14*128kB (UM) 3*256kB (UM) 11*512kB (UME) 7*1024kB (UME) 3*2048kB (UM) 70*4096kB (UM) = 328680kB
[  103.262740][ T8488] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  103.273208][ T8488] Node 1 Normal: 2208*4kB (UM) 651*8kB (UME) 449*16kB (UME) 393*32kB (UME) 165*64kB (UM) 62*128kB (UME) 9*256kB (UME) 8*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 31*4096kB (UM) = 201032kB
[  103.285101][ T8488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.290286][ T8488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.293552][ T8488] 41735 total pagecache pages
[  103.295176][ T8488] 0 pages in swap cache
[  103.299321][ T8488] Free swap  = 124996kB
[  103.300657][ T8488] Total swap = 124996kB
[  103.306742][ T8488] 786301 pages RAM
[  103.308060][ T8488] 0 pages HighMem/MovableOnly
[  103.309644][ T8488] 241084 pages reserved
[  103.311204][ T8488] 0 pages cma reserved
[  103.834144][ T8544] xt_l2tp: unknown flags: 10
[  104.259089][ T8553] __nla_validate_parse: 12 callbacks suppressed
[  104.259107][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[  104.267729][ T8553] netlink: 'syz.2.656': attribute type 12 has an invalid length.
[  104.538910][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.658'.
[  104.752417][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'.
[  104.869244][ T8579] IPVS: Unknown mcast interface: dvmrp1
[  104.989210][ T8590] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  105.092384][ T8592] IPv6: rose0: Disabled Multicast RS
[  105.190380][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  105.384369][ T8607] netlink: 'syz.2.671': attribute type 10 has an invalid length.
[  105.398233][ T8607] bond0: (slave wlan1): refused to change device type
[  105.403366][ T8606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.451003][ T8611] netlink: 'syz.0.673': attribute type 13 has an invalid length.
[  105.453481][ T8611] netlink: 'syz.0.673': attribute type 17 has an invalid length.
[  105.462124][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.465863][ T8611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.536050][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'.
[  105.557602][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'.
[  105.633702][ T8619] netlink: 'syz.1.675': attribute type 4 has an invalid length.
[  105.648507][ T8619] netlink: 'syz.1.675': attribute type 4 has an invalid length.
[  105.782858][ T8627] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  105.785925][ T8627] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  105.791384][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[  105.847144][ T8629] netlink: 'syz.1.679': attribute type 13 has an invalid length.
[  105.850300][ T8629] netlink: 'syz.1.679': attribute type 17 has an invalid length.
[  105.859709][ T8629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.921242][ T8634] pimreg3: entered allmulticast mode
[  105.959152][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'.
[  106.031948][ T8650] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'.
[  106.043190][ T8650] syzkaller0: entered promiscuous mode
[  106.045152][ T8650] syzkaller0: entered allmulticast mode
[  106.088900][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'.
[  106.092779][ T8657] netlink: 'syz.2.687': attribute type 10 has an invalid length.
[  106.095779][ T8657] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  106.474893][ T8686] pim6reg1: entered promiscuous mode
[  106.477821][ T8686] pim6reg1: entered allmulticast mode
[  106.508092][ T8689] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  106.511195][ T8689] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  106.571239][ T8696] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  106.679236][ T8700] wireguard1: entered promiscuous mode
[  106.681395][ T8700] wireguard1: entered allmulticast mode
[  106.933845][ T8706] vlan0: entered promiscuous mode
[  106.936030][ T8706] bridge0: entered promiscuous mode
[  106.939491][ T8706] vlan0: entered allmulticast mode
[  106.941991][ T8706] bridge0: entered allmulticast mode
[  107.014812][ T8708] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  107.201873][ T8715] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.223581][ T8715] 8021q: adding VLAN 0 to HW filter on device bond10
[  107.228886][ T8715] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  107.235612][ T8715] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  107.257904][ T8719] netlink: 'syz.1.701': attribute type 11 has an invalid length.
[  107.620458][  T824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.623546][  T824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.018062][ T8776] 8021q: adding VLAN 0 to HW filter on device bond9
[  108.050968][ T8776] macvlan0: entered promiscuous mode
[  108.055100][ T8776] macvlan0: entered allmulticast mode
[  108.063331][ T8776] bond9: entered promiscuous mode
[  108.069017][ T8776] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  108.075099][ T8776] bond9: left promiscuous mode
[  108.390875][ T8803] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.488630][ T8813] syzkaller1: entered promiscuous mode
[  108.490466][ T8813] syzkaller1: entered allmulticast mode
[  108.950886][ T8825] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.953635][ T8825] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.956685][ T8825] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.959445][ T8825] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.349237][ T8853] __nla_validate_parse: 21 callbacks suppressed
[  109.349251][ T8853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'.
[  109.386958][ T8858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.726'.
[  109.418271][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.726'.
[  109.500147][   T10] IPVS: starting estimator thread 0...
[  109.538279][ T8871] pimreg: entered allmulticast mode
[  109.540575][ T8871] pimreg: left allmulticast mode
[  109.586476][ T8867] IPVS: using max 79 ests per chain, 189600 per kthread
[  109.651364][ T8881] validate_nla: 7 callbacks suppressed
[  109.651373][ T8881] netlink: 'syz.2.732': attribute type 1 has an invalid length.
[  109.674538][ T8885] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  109.685158][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  109.691298][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'.
[  109.728771][ T8881] bond12: (slave vti0): The slave device specified does not support setting the MAC address
[  109.732484][ T8881] bond12: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  109.737369][ T8881] bond12: (slave vti0): making interface the new active one
[  109.744229][ T8881] bond12: (slave vti0): Enslaving as an active interface with an up link
[  109.786749][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.736'.
[  109.790210][ T8893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.736'.
[  109.794194][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  109.803064][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'.
[  109.824483][ T8895] 8021q: adding VLAN 0 to HW filter on device bond8
[  109.915806][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'.
[  109.961311][ T8911] vlan1: entered allmulticast mode
[  109.963505][ T8911] gretap0: entered allmulticast mode
[  110.030097][ T8917] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  110.044982][ T8917] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  110.048228][ T8917] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  110.053754][ T8917] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  110.100477][ T8921] netlink: 'syz.0.743': attribute type 4 has an invalid length.
[  110.108253][ T8921] netlink: 'syz.0.743': attribute type 4 has an invalid length.
[  110.300094][ T8928] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.304037][ T8928] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.308365][ T8928] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.312330][ T8928] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.327583][ T8928] tipc: Resetting bearer <eth:syzkaller0>
[  110.355110][ T8928] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.358549][ T8928] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.362057][ T8928] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.364942][ T8928] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.389552][ T8930] dvmrp0: entered allmulticast mode
[  111.254037][ T8957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.318620][ T8966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.357914][ T8965] netlink: 'syz.0.753': attribute type 3 has an invalid length.
[  111.374829][ T8957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.451181][ T8977] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  111.459425][ T8977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  111.489863][ T8982] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[  111.503899][ T8985] netlink: 'syz.2.757': attribute type 13 has an invalid length.
[  111.510868][ T8985] netlink: 'syz.2.757': attribute type 17 has an invalid length.
[  111.537576][ T8985] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.541524][ T8985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.559553][ T8982] vlan0: entered allmulticast mode
[  111.562019][ T8982] bond9: entered allmulticast mode
[  111.641478][ T8984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.970850][ T9002] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  111.995174][ T9002] netlink: 'syz.1.761': attribute type 39 has an invalid length.
[  112.203276][ T9011] Cannot find add_set index 3 as target
[  112.278062][ T2154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.281206][ T2154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.287760][ T9009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.389560][ T9021] syz.2.768 uses old SIOCAX25GETINFO
[  112.509088][ T9028] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.511811][ T9028] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.514485][ T9028] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.517980][ T9028] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.521135][ T9028] geneve5: entered promiscuous mode
[  112.574698][ T9031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 59505 - 0
[  112.579527][ T9031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 59505 - 0
[  112.582709][ T9031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 59505 - 0
[  112.585611][ T9031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 59505 - 0
[  112.589582][ T9031] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 48968 - 0
[  112.592379][ T9031] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 48968 - 0
[  112.596116][ T9031] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 48968 - 0
[  112.601164][ T9031] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 48968 - 0
[  112.604161][ T9031] geneve5: entered promiscuous mode
[  112.606031][ T9031] geneve5: entered allmulticast mode
[  112.642870][ T9039] netlink: 'syz.2.773': attribute type 1 has an invalid length.
[  112.785915][ T9042] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  112.877800][ T9054] batman_adv: batadv0: Interface deactivated: dummy0
[  112.885070][ T9052] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[  112.978591][ T9062] veth7: entered promiscuous mode
[  113.074726][ T9071] !: renamed from dummy0
[  113.118872][ T9068] bond10: entered promiscuous mode
[  113.120718][ T9068] bond10: entered allmulticast mode
[  113.122748][ T9068] 8021q: adding VLAN 0 to HW filter on device bond10
[  113.128331][ T9068] syzkaller0: entered promiscuous mode
[  113.130152][ T9068] syzkaller0: entered allmulticast mode
[  113.296015][ T9088] dvmrp8: entered allmulticast mode
[  113.317540][ T9087] dvmrp8: left allmulticast mode
[  113.441997][ T9103] bond0: entered promiscuous mode
[  113.801690][ T9143] lo speed is unknown, defaulting to 1000
[  113.803823][ T9143] lo speed is unknown, defaulting to 1000
[  113.806758][ T9143] lo speed is unknown, defaulting to 1000
[  113.815520][ T9143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  113.831856][ T9143] lo speed is unknown, defaulting to 1000
[  113.839038][ T9143] lo speed is unknown, defaulting to 1000
[  113.841846][ T9143] lo speed is unknown, defaulting to 1000
[  113.844555][ T9143] lo speed is unknown, defaulting to 1000
[  114.028641][ T9183] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000
[  114.228108][ T9203] bond0: entered allmulticast mode
[  114.230215][ T9203] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.282296][ T1269] lo speed is unknown, defaulting to 1000
[  114.397624][ T9216] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  114.397759][ T9210] __nla_validate_parse: 20 callbacks suppressed
[  114.397769][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'.
[  114.562959][ T9226] Illegal XDP return value 9226 on prog  (id 400) dev N/A, expect packet loss!
[  114.599802][ T9231] lo speed is unknown, defaulting to 1000
[  114.615881][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  114.626903][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'.
[  114.846863][ T5839] Bluetooth: hci2: link tx timeout
[  114.848949][ T5839] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.854589][ T5221] Bluetooth: hci2: link tx timeout
[  114.857800][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.890860][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'.
[  114.975947][ T9249] netlink: 'syz.1.812': attribute type 4 has an invalid length.
[  115.033848][ T9249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'.
[  115.167680][ T9258] netlink: 'syz.2.813': attribute type 1 has an invalid length.
[  115.232567][ T5221] Bluetooth: hci2: link tx timeout
[  115.235301][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.267168][ T5221] Bluetooth: hci2: link tx timeout
[  115.269506][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.378063][ T5221] Bluetooth: hci2: link tx timeout
[  115.380330][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.409087][ T9268] netlink: 'syz.2.815': attribute type 1 has an invalid length.
[  115.460001][ T9268] bond14: entered promiscuous mode
[  115.476522][ T9268] 8021q: adding VLAN 0 to HW filter on device bond14
[  115.559107][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'.
[  115.562876][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.818'.
[  115.579116][ T9286] netlink: 'syz.0.818': attribute type 13 has an invalid length.
[  115.593552][ T9286] 0XD: refused to change device tx_queue_len
[  115.606899][ T9286] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  115.614606][ T1269] lo speed is unknown, defaulting to 1000
[  115.621394][ T1269] syz1: Port: 1 Link DOWN
[  115.658367][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  115.662141][ T9294] netlink: 'syz.0.820': attribute type 4 has an invalid length.
[  115.688677][ T9293] bond11: entered promiscuous mode
[  115.692448][ T9293] netlink: 'syz.0.820': attribute type 4 has an invalid length.
[  115.697978][ T1269] lo speed is unknown, defaulting to 1000
[  115.700354][ T1269] syz1: Port: 1 Link ACTIVE
[  115.742148][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.822'.
[  115.760305][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'.
[  115.854107][ T9308] lo speed is unknown, defaulting to 1000
[  115.999425][ T5221] Bluetooth: hci2: link tx timeout
[  116.001669][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.028817][ T9323] netlink: 'syz.1.825': attribute type 4 has an invalid length.
[  116.041951][ T9316] netlink: 'syz.1.825': attribute type 4 has an invalid length.
[  116.142524][ T5221] Bluetooth: hci2: link tx timeout
[  116.144426][ T5221] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.151169][ T9330] netlink: 'syz.2.826': attribute type 1 has an invalid length.
[  116.172841][ T9330] bond15: entered promiscuous mode
[  116.174893][ T9330] 8021q: adding VLAN 0 to HW filter on device bond15
[  116.203018][ T9330] batadv0: entered promiscuous mode
[  116.205365][ T9330] batadv0: entered allmulticast mode
[  116.208364][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.212016][ T9330] bond15: (slave batadv0): making interface the new active one
[  116.216000][ T9330] bond15: (slave batadv0): Enslaving as an active interface with an up link
[  116.584741][ T9354] gretap0: entered promiscuous mode
[  116.595515][ T9354] 0XD: renamed from gretap0
[  116.600000][ T9354] 0XD: left promiscuous mode
[  116.605321][ T9354] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  116.673717][ T9356] lo speed is unknown, defaulting to 1000
[  116.876421][ T5221] Bluetooth: hci2: command 0x0406 tx timeout
[  116.889016][ T9375] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[  117.224539][ T9384] syzkaller0: entered promiscuous mode
[  117.228394][ T9384] syzkaller0: entered allmulticast mode
[  117.505023][ T9394] ip6t_srh: unknown srh invflags 4449
[  117.760106][ T9411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.832267][ T9414] lo speed is unknown, defaulting to 1000
[  118.290453][ T9445] netlink: 'syz.1.855': attribute type 11 has an invalid length.
[  118.293677][ T9445] netlink: 'syz.1.855': attribute type 11 has an invalid length.
[  118.294956][ T9439] 8021q: adding VLAN 0 to HW filter on device bond10
[  118.330972][ T9439] bond10: (slave gretap2): making interface the new active one
[  118.335156][ T9439] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  118.495099][ T9466] lo speed is unknown, defaulting to 1000
[  118.562949][ T9475] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  118.570588][ T9475] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.574711][ T9475] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  118.581219][ T9475] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  118.586979][ T9475] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  118.817615][   T12] 
[  118.818611][   T12] ============================================
[  118.820872][   T12] WARNING: possible recursive locking detected
[  118.822872][   T12] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  118.826558][   T12] --------------------------------------------
[  118.828733][   T12] kworker/u8:0/12 is trying to acquire lock:
[  118.830745][   T12] ffff8881012ce218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x2228/0x3a70
[  118.834604][   T12] 
[  118.834604][   T12] but task is already holding lock:
[  118.837010][   T12] ffff88802daf1258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  118.841291][   T12] 
[  118.841291][   T12] other info that might help us debug this:
[  118.844467][   T12]  Possible unsafe locking scenario:
[  118.844467][   T12] 
[  118.846925][   T12]        CPU0
[  118.847988][   T12]        ----
[  118.849261][   T12]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2);
[  118.852213][   T12]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2);
[  118.854806][   T12] 
[  118.854806][   T12]  *** DEADLOCK ***
[  118.854806][   T12] 
[  118.857380][   T12]  May be due to missing lock nesting notation
[  118.857380][   T12] 
[  118.860175][   T12] 11 locks held by kworker/u8:0/12:
[  118.861936][   T12]  #0: ffff88802041c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  118.865754][   T12]  #1: ffffc900000f7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  118.870161][   T12]  #2: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  118.873811][   T12]  #3: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x208/0x1400
[  118.877831][   T12]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0
[  118.881811][   T12]  #5: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  118.885869][   T12]  #6: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0x101/0x1a90
[  118.889677][   T12]  #7: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  118.893846][   T12]  #8: ffff88802daf1258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  118.898092][   T12]  #9: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  118.902029][   T12]  #10: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  118.906047][   T12] 
[  118.906047][   T12] stack backtrace:
[  118.908472][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  118.908492][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.908500][   T12] Workqueue: ipv6_addrconf addrconf_dad_work
[  118.908516][   T12] Call Trace:
[  118.908524][   T12]  <TASK>
[  118.908529][   T12]  dump_stack_lvl+0x189/0x250
[  118.908546][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.908559][   T12]  ? __pfx__printk+0x10/0x10
[  118.908575][   T12]  ? print_lock_name+0xde/0x100
[  118.908590][   T12]  print_deadlock_bug+0x28b/0x2a0
[  118.908605][   T12]  validate_chain+0x1a3f/0x2140
[  118.908619][   T12]  ? unwind_next_frame+0xa5/0x2390
[  118.908662][   T12]  ? unwind_next_frame+0xa5/0x2390
[  118.908674][   T12]  ? look_up_lock_class+0x74/0x170
[  118.908692][   T12]  ? register_lock_class+0x51/0x320
[  118.908703][   T12]  ? unwind_next_frame+0xa5/0x2390
[  118.908714][   T12]  ? __pfx_hlock_conflict+0x10/0x10
[  118.908728][   T12]  __lock_acquire+0xab9/0xd20
[  118.908740][   T12]  ? __dev_queue_xmit+0x2228/0x3a70
[  118.908756][   T12]  lock_acquire+0x120/0x360
[  118.908767][   T12]  ? __dev_queue_xmit+0x2228/0x3a70
[  118.908783][   T12]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  118.908799][   T12]  _raw_spin_lock+0x2e/0x40
[  118.908814][   T12]  ? __dev_queue_xmit+0x2228/0x3a70
[  118.908827][   T12]  __dev_queue_xmit+0x2228/0x3a70
[  118.908845][   T12]  ? __dev_queue_xmit+0x27e/0x3a70
[  118.908863][   T12]  ? neigh_connected_output+0x1ea/0x460
[  118.908875][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  118.908891][   T12]  ? read_seqbegin+0x122/0x250
[  118.908901][   T12]  ? neigh_connected_output+0x1ea/0x460
[  118.908911][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.908928][   T12]  ? read_seqbegin+0x1ac/0x250
[  118.908939][   T12]  ? __pfx_read_seqbegin+0x10/0x10
[  118.908957][   T12]  ip_finish_output2+0xd40/0x1160
[  118.908968][   T12]  ? ip_skb_dst_mtu+0x147/0xc50
[  118.908985][   T12]  ? ip_finish_output2+0x452/0x1160
[  118.908995][   T12]  ? __pfx_ip_finish_output2+0x10/0x10
[  118.909005][   T12]  ? ip_skb_dst_mtu+0x147/0xc50
[  118.909019][   T12]  ? ip_skb_dst_mtu+0x147/0xc50
[  118.909035][   T12]  ? ip_skb_dst_mtu+0x970/0xc50
[  118.909052][   T12]  ? __ip_finish_output+0x336/0x3f0
[  118.909062][   T12]  iptunnel_xmit+0x571/0xa00
[  118.909079][   T12]  ip_tunnel_xmit+0x1c3c/0x2380
[  118.909096][   T12]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  118.909106][   T12]  ? gre_build_header+0x3fd/0xa40
[  118.909124][   T12]  ? __pfx_gre_build_header+0x10/0x10
[  118.909143][   T12]  gre_tap_xmit+0x590/0x7a0
[  118.909159][   T12]  ? __pfx_gre_tap_xmit+0x10/0x10
[  118.909174][   T12]  ? validate_xmit_skb+0xb4c/0x11b0
[  118.909190][   T12]  dev_hard_start_xmit+0x2d7/0x830
[  118.909212][   T12]  sch_direct_xmit+0x241/0x4b0
[  118.909226][   T12]  ? __pfx_sch_direct_xmit+0x10/0x10
[  118.909237][   T12]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  118.909254][   T12]  __dev_queue_xmit+0x17b6/0x3a70
[  118.909271][   T12]  ? __dev_queue_xmit+0x27e/0x3a70
[  118.909288][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  118.909302][   T12]  ? unwind_next_frame+0xa5/0x2390
[  118.909316][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  118.909331][   T12]  ? __lock_acquire+0xab9/0xd20
[  118.909348][   T12]  ? __lock_acquire+0xab9/0xd20
[  118.909361][   T12]  bond_dev_queue_xmit+0x10b/0x1e0
[  118.909377][   T12]  ? __pfx_bond_dev_queue_xmit+0x10/0x10
[  118.909393][   T12]  ? bond_do_alb_xmit+0x600/0x820
[  118.909410][   T12]  bond_start_xmit+0xc0a/0x1a90
[  118.909421][   T12]  ? __lock_acquire+0xab9/0xd20
[  118.909433][   T12]  ? bond_start_xmit+0x101/0x1a90
[  118.909444][   T12]  ? __pfx_bond_start_xmit+0x10/0x10
[  118.909454][   T12]  ? skb_network_protocol+0x508/0x760
[  118.909470][   T12]  ? validate_xmit_xfrm+0xbf/0x1130
[  118.909493][   T12]  ? __pfx_skb_network_protocol+0x10/0x10
[  118.909509][   T12]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  118.909526][   T12]  ? __pfx_passthru_features_check+0x10/0x10
[  118.909544][   T12]  dev_hard_start_xmit+0x2d7/0x830
[  118.909563][   T12]  __dev_queue_xmit+0x1adf/0x3a70
[  118.909578][   T12]  ? register_lock_class+0x51/0x320
[  118.909591][   T12]  ? __dev_queue_xmit+0x27e/0x3a70
[  118.909609][   T12]  ? __pfx___dev_queue_xmit+0x10/0x10
[  118.909624][   T12]  ? read_seqbegin+0x122/0x250
[  118.909659][   T12]  ? neigh_resolve_output+0x438/0x750
[  118.909670][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.909687][   T12]  ? read_seqbegin+0x1ac/0x250
[  118.909697][   T12]  ? __pfx_read_seqbegin+0x10/0x10
[  118.909708][   T12]  ? __local_bh_enable_ip+0x12d/0x1c0
[  118.909720][   T12]  ? eth_header+0x11b/0x200
[  118.909735][   T12]  ? __asan_memcpy+0x40/0x70
[  118.909752][   T12]  ip6_finish_output2+0x11fe/0x16a0
[  118.909769][   T12]  ? ip6_finish_output2+0x701/0x16a0
[  118.909785][   T12]  ? __pfx_ip6_finish_output2+0x10/0x10
[  118.909801][   T12]  ? ip6_mtu+0x7d/0x3f0
[  118.909815][   T12]  ? ip6_mtu+0x7d/0x3f0
[  118.909828][   T12]  ip6_finish_output+0x234/0x7d0
[  118.909843][   T12]  ndisc_send_skb+0xb47/0x1400
[  118.909854][   T12]  ? ndisc_send_skb+0x208/0x1400
[  118.909867][   T12]  ? __pfx_ndisc_send_skb+0x10/0x10
[  118.909877][   T12]  ? __pfx_dst_output+0x10/0x10
[  118.909886][   T12]  ? __asan_memcpy+0x40/0x70
[  118.909899][   T12]  ? mod_delayed_work_on+0x128/0x200
[  118.909915][   T12]  ndisc_send_ns+0xcb/0x150
[  118.909926][   T12]  ? __pfx_ndisc_send_ns+0x10/0x10
[  118.909936][   T12]  ? addrconf_dad_work+0xa04/0x14b0
[  118.909950][   T12]  addrconf_dad_work+0xaae/0x14b0
[  118.909962][   T12]  ? __lock_acquire+0xab9/0xd20
[  118.909974][   T12]  ? __pfx_addrconf_dad_work+0x10/0x10
[  118.909987][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  118.910000][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.910015][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  118.910027][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  118.910040][   T12]  process_scheduled_works+0xae1/0x17b0
[  118.910059][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  118.910075][   T12]  worker_thread+0x8a0/0xda0
[  118.910094][   T12]  kthread+0x711/0x8a0
[  118.910110][   T12]  ? __pfx_worker_thread+0x10/0x10
[  118.910123][   T12]  ? __pfx_kthread+0x10/0x10
[  118.910138][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.910152][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.910168][   T12]  ? __pfx_kthread+0x10/0x10
[  118.910182][   T12]  ret_from_fork+0x3fc/0x770
[  118.910194][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  118.910206][   T12]  ? __switch_to_asm+0x39/0x70
[  118.910219][   T12]  ? __switch_to_asm+0x33/0x70
[  118.910232][   T12]  ? __pfx_kthread+0x10/0x10
[  118.910247][   T12]  ret_from_fork_asm+0x1a/0x30
[  118.910264][   T12]  </TASK>
[  119.127391][ T9491] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'

VM DIAGNOSIS:
03:41:52  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe970 RSP=ffffc900000f5870
R8 =ffff888108c48237 R9 =1ffff11021189046 R10=dffffc0000000000 R11=ffffffff854786b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478727 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000140 CR3=0000000107a0c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f92f5e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89fc3fb5 RBX=0000000000000000 RCX=ffff888108b7d640 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc90007d5e968
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90007d5eba0 R11=fffff52000fabd7a
R12=0000000000000000 R13=0000000000000017 R14=ffff88802d6e6020 R15=dffffc0000000000
RIP=ffffffff81c036a7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f92f6bcb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000c038 CR3=000000012bd04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000001df8a
XMM02=0000000000000000 00005555808fb620 XMM03=d0030010001fc003 0210001fb00301c8
XMM04=0000000000000000 0000000000000000 XMM05=00005555808f9e1c 00005555808f8ff0
XMM06=00005555808ead84 00005555808ead80 XMM07=030010001fc00302 10001fb00301c810
XMM08=0002999003020800 10c0031e040010bc XMM09=2062203061346331 3061396666666666
XMM10=6f5f74696e695f63 6e5f766461746162 XMM11=6666666666660a79 656b5f5f2e676972
XMM12=766f206220303666 6331306139666666 XMM13=79656b5f5f2e7465 6e5f74696e695f73
XMM14=3866633130613966 666666666666660a XMM15=74656e5f74696e69 5f73766f20622030
