last executing test programs:

34.589975189s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

29.966913078s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

23.588752934s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

17.326460147s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

11.418004281s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

5.105650376s ago: executing program 1 (id=229):
pipe(&(0x7f00000017c0)={<r0=>0xffffffffffffffff})
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000180924b1114542a19eb268ae8574a0daed36e261caad7976c0552367a85216e0a11c0396fd1f19f17f339ef3065519e68682de3a4490eb2fda755f0447d5e38b746c27954db120958df00a65c6a649f6190c5df33656fd1404011ff0dc4e2f79dcef4735c37361f67500894d28f8c9e106626da6f8e9341641ab877eb5792989d6481758ca8d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000300012800b00010065727370616e000020000280040012000600180000080000050016000200000005001700"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netpci0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB="2f080000000000000000000000000000000000002263d2bebd0cc2a4bbb4076229b07b58a5fb07b2", @ANYRES32=r7, @ANYRES32, @ANYBLOB="04000000050000000400"/28], 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9)

2.0091552s ago: executing program 0 (id=602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200d4}, 0xc000080) (async)
r1 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='GPL\x00', 0x1004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, '\x00', 0x0, @fallback=0x30}, 0x94) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYBLOB="80000000000105000000000000000000020000006400018014000180c3ff0100ac14142708000200e00000010c00028005000100000000001400018008000100ffffffff080002000000000006000340000000002400028005000100110000000c00028005000100880000000c000280050001002f000000080003400000100eb07a7fe293d24d7cc14a3fd2566aa26744ca291ccfea1f49b83a83fdf6e17ee9773a7eb9593726684ee601adc150bddde19ea2730d1530a77338f71161d9116a043e82302b13605de8a1ceaf"], 0x80}}, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000087000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012cdc75d0ae7f6134ece79f435e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005dba9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e2209000000476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c82f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000000000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4f1f8c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8413e92191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cf020deb28c13c1ed1c0d9cae846bcbfa8c3e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a2162415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec10bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add57729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e74e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b8089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49d66f07dd646bfbdea1cf021a88aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c95f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675459cf6bb393b007f5cedb7bc41183460000000000000000000000000000000000000000000000000000b2a7406571e87981ff52907293d17c78ee814c3b2b2daab1c3fae6c8e5bcba4c480dd32946fb3469c25c5d9a80aea721a727dda47f51ad161de1e38e95c8fd856ae241fce3ac63db69930700616ab6c1f383cd3f0efd8a9b40edf1902730d17c3bbf8cb939d714f1b494d817bb8cdc2dbce7c13ca8b6ce9db8577edab646c98944b418e8ee72d58a5f58ce483eb7f10df3f230c22e3429a744ce4e8750b7abe3a54ad6c53101152b1998b69370cae53facee43fe7ae7707ce960cc86cb5b1b041efa2767de75de4de4b6f4506a04c26ac05a87274a99e1dbf31221e3aa0506fa9eac267d7142827ae9a8085892ce79872aac4cb057bcb523398972bcc1165a4ce7756cceaa142842e354e718c65d7f259e20527c360b9f32a2764641912816c874fb96d7b189a48b787cb2900154c6aebf021a7ad1a7d003d01fef55989adfdd9eaf57e763c8cf0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000028c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40024, 0x2201}}}}}}]}, 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async)
accept$alg(r1, 0x0, 0x0) (async)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="9921bfc80e1b7a1e151e143123ab1d53efe7f65e76a2601b6e2d2480baf426167bcfd9a1ad395eb02437283226a5c5c6a320ee5c01144803bf7a38e4ef89dfb3952f2249f9f25e2c0a4fabda7b93c7216bf3a37bbdfa88ff0016d08ea4650c15af0f1af86d3f9dcb183c2f1fe27f1d0594353be133c9f45139947392411e1fc4578e42d758ea508fba3bcac3b8ed8e4035e40781481b7bafd9dbfd06ede6a25c592d7c45f4ab0501b56566a1c0460aaf640286aa9e2861aaca5638180c367f2b8c4788eb05d8d1b63135dbb564115426708ad21ab2b4d4f467f51b7f67e8ac6736c6cf5172ab398b804cdec836b3980d024fb738182479", 0xf7}, {&(0x7f0000000600)="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", 0xfd}, {&(0x7f0000000700)="1128e525c335f77aba89e80e83fcbec3bf056989dc754dff054950a57302ab1f4802d4834e35bac35191eb733467f5daacbb22f3005e9abc85868d37c798b657c02a284adb7813cb4bd365bba47764fdab9a35c22fb70e4e1fce70452c73e3aeab46880b915cc12e7f20a2edb239808e4294b498a0e33db099c7c83431abdfbefb4a24fc565629658225c3421562f5eafd2abac960001888f1d74e09a69bc04bcec8677066e7fc4460c8a540f14bb5", 0xaf}, {&(0x7f00000007c0)="9bb957cc5da0600e9cdca3b66bd80b87a0084823ad9f54809b7bde86cd143332758d62f9503ec1acf6e040acb9478f497ac487ebf1618ef69e65fa9bba94c2a732805bf610d24821f64b5ddedb5b7dca2fddf2c911235a8302431ce3521c51d26eefd427377d2458b24ab94e53f7", 0xfffffffffffffd53}, {&(0x7f0000000180)="e8b568bdd5eb0b22225ba53887d5ad1328a9bec08ddd0445bf679b5c115a13a3cf5a37256a0df732c6c248e5941ff7ddc057ddc8cb0463f7ded437", 0x3b}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/4264], 0x10a8, 0x8011}, 0x4040000) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r9, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x1c, r9, 0xe08, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x5, 0x40422, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000900)={@private0, <r10=>0x0}, &(0x7f0000000940)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000001b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40183021}, 0xc, &(0x7f0000000980)={&(0x7f0000001ac0)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff2}, {0xc, 0xfff2}, {0x5, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x1000}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002980)={0x1b, 0x0, 0x0, 0x501, 0x0, r2, 0x1, '\x00', r10, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r11, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r5}, 0xc)

1.297196681s ago: executing program 0 (id=603):
unshare(0x64000600) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
unshare(0x2c020400)
socket$inet(0xa, 0x801, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)
r6 = socket$packet(0x11, 0x3, 0x300) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x2d, 0xfffffffe, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x84, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x762c, 0x0, 0x0, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4, 0x101}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044844}, 0x0)
sendto$packet(r6, &(0x7f0000000240)='\x00', 0x1, 0x800, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210226bd7000ffdb77aeae3d4f92cea3c999", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000890)

760.473847ms ago: executing program 2 (id=608):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/72, 0x48}], 0x3, &(0x7f0000000240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x12000)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "a95972fc5ec50719", "8e0870e9a5e9c2f133d700", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f8"], 0xf8}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000480)={0x0, &(0x7f0000000140)}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd29, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0xffff}, {0xfff9, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

706.130557ms ago: executing program 2 (id=609):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000008000000000000000000611218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbf}, 0x94)

705.900623ms ago: executing program 2 (id=610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x24, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x24000014)

630.521738ms ago: executing program 2 (id=611):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x34000}, {0x0}], 0x2, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0)
unshare(0x6a040000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010701020000000000000000070000031400078008000240d2000002060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48080) (async)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010701020000000000000000070000031400078008000240d2000002060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc34c0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3690b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r6)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) (async)
sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

570.464482ms ago: executing program 0 (id=612):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb000088000000000000000000000000000000000000000000005a3e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="06"], 0x15c}}, 0x4000080)

160.776174ms ago: executing program 0 (id=613):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x0, 0x2, 0x8})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x4202, 0x4)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x80000001, @empty, 0x2}, 0x1c)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x2, 0x8}) (async)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x4202, 0x4) (async)
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x80000001, @empty, 0x2}, 0x1c) (async)

67.420777ms ago: executing program 0 (id=614):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000002c0), 0x4)
listen(r1, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', <r3=>0x0})
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r6)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x1f, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x8, [@const={0x5, 0x0, 0x0, 0xa, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @datasec={0x3, 0x5, 0x0, 0xf, 0x1, [{0x5, 0xf, 0x40}, {0x5, 0x10, 0x4ca8fa50}, {0x1, 0x8, 0x2}, {0x3, 0x0, 0x100}, {0x2, 0x9, 0x4545}], "9c"}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x16, 0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x30, 0x2e]}}, &(0x7f0000001180)=""/4096, 0xac, 0x1000, 0x0, 0x2}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x0, <r9=>0x0}, 0x8)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r3, r6, 0x0, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xe, 0x23, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x3, 0x6, 0x4, 0x7ff, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x824}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xe5, &(0x7f0000000400)=""/229, 0x60980, 0x4, '\x00', r7, @fallback=0x29, r8, 0x8, &(0x7f0000000840)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x8, 0x5, 0x4}, 0x10, r9, r6, 0x1, &(0x7f0000000980)=[r10], &(0x7f00000009c0)=[{0x2, 0x2, 0x4, 0x9}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x8371, 0x4)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r6, r6, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20)
accept$nfc_llcp(r6, &(0x7f0000000ac0), &(0x7f0000000b40)=0x60)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b80)=@newlink={0x64, 0x10, 0x503, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_MAP={0xfffffffffffffff5, 0xe, {0xffffffff80000000, 0x8000000000000000, 0x3, 0xd, 0x40, 0x9}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x64}}, 0x0)

648.006µs ago: executing program 0 (id=615):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x10, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0x101, 0x100}})
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

197.124µs ago: executing program 2 (id=616):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0xce24, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff6}, {0xa, 0x4e20, 0x2004, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10001}, 0x1, {[0x7ff, 0x80000000, 0x8, 0xd, 0x44, 0x4, 0x2, 0x9617]}}, 0x5c)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001400010a0000fffffffd00000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x804)

0s ago: executing program 2 (id=617):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000008000000000000000000611218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe4}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24260' (ED25519) to the list of known hosts.
syzkaller login: [   49.232473][ T5740] cgroup: Unknown subsys name 'net'
[   49.306429][ T5740] cgroup: Unknown subsys name 'cpuset'
[   49.312352][ T5740] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.904348][ T5740] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.152053][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.155194][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.158673][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.161629][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.164492][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.177412][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.182076][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.185146][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.190147][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.193277][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.206628][ T5201] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.211343][ T5201] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.214633][ T5201] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.218050][ T5201] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.221435][ T5201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.511190][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   55.517337][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   55.609753][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   55.708320][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.711115][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.713532][ T5809] bridge_slave_0: entered allmulticast mode
[   55.716239][ T5809] bridge_slave_0: entered promiscuous mode
[   55.726280][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.730224][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.733358][ T5808] bridge_slave_0: entered allmulticast mode
[   55.737174][ T5808] bridge_slave_0: entered promiscuous mode
[   55.742375][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.745444][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.748796][ T5809] bridge_slave_1: entered allmulticast mode
[   55.752889][ T5809] bridge_slave_1: entered promiscuous mode
[   55.762560][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.765518][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.769864][ T5808] bridge_slave_1: entered allmulticast mode
[   55.773772][ T5808] bridge_slave_1: entered promiscuous mode
[   55.851486][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.854556][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.856779][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.860802][ T5817] bridge_slave_0: entered allmulticast mode
[   55.863765][ T5817] bridge_slave_0: entered promiscuous mode
[   55.869199][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.874425][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.880360][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.884326][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.886735][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.891246][ T5817] bridge_slave_1: entered allmulticast mode
[   55.894564][ T5817] bridge_slave_1: entered promiscuous mode
[   55.954736][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.962308][ T5808] team0: Port device team_slave_0 added
[   55.967305][ T5809] team0: Port device team_slave_0 added
[   55.971497][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.976069][ T5808] team0: Port device team_slave_1 added
[   55.981780][ T5809] team0: Port device team_slave_1 added
[   56.043435][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.046355][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.056201][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.062464][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.064883][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.074793][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.080294][ T5817] team0: Port device team_slave_0 added
[   56.082734][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.085076][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.093968][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.103990][ T5817] team0: Port device team_slave_1 added
[   56.106440][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.110201][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.119550][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.152074][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.154640][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.163685][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.186953][ T5809] hsr_slave_0: entered promiscuous mode
[   56.191524][ T5809] hsr_slave_1: entered promiscuous mode
[   56.208273][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.211474][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.220241][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.250117][ T5808] hsr_slave_0: entered promiscuous mode
[   56.252560][ T5808] hsr_slave_1: entered promiscuous mode
[   56.254784][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.257406][ T5808] Cannot create hsr debugfs directory
[   56.309179][ T5817] hsr_slave_0: entered promiscuous mode
[   56.311606][ T5817] hsr_slave_1: entered promiscuous mode
[   56.313758][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.316175][ T5817] Cannot create hsr debugfs directory
[   56.534098][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.541127][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.545857][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.562838][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.606297][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.620077][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.643175][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.650965][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.675139][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.684196][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.695440][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.702057][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.825604][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.830213][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.844696][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.858886][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   56.862387][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   56.873396][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.875881][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.890667][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.893665][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.899757][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.902496][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.908333][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.910758][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.923009][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   56.942012][ T2173] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.945170][ T2173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.970641][ T2173] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.973721][ T2173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.194234][ T5201] Bluetooth: hci0: command tx timeout
[   57.209402][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.235517][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.252706][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.269412][ T5201] Bluetooth: hci2: command tx timeout
[   57.271515][ T5201] Bluetooth: hci1: command tx timeout
[   57.292007][ T5817] veth0_vlan: entered promiscuous mode
[   57.307101][ T5809] veth0_vlan: entered promiscuous mode
[   57.310396][ T5817] veth1_vlan: entered promiscuous mode
[   57.327053][ T5809] veth1_vlan: entered promiscuous mode
[   57.350414][ T5808] veth0_vlan: entered promiscuous mode
[   57.360226][ T5808] veth1_vlan: entered promiscuous mode
[   57.381068][ T5809] veth0_macvtap: entered promiscuous mode
[   57.387785][ T5817] veth0_macvtap: entered promiscuous mode
[   57.394914][ T5809] veth1_macvtap: entered promiscuous mode
[   57.403063][ T5817] veth1_macvtap: entered promiscuous mode
[   57.429669][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.437137][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.456347][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.463860][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.471633][ T5808] veth0_macvtap: entered promiscuous mode
[   57.477643][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.483421][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.486758][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.491798][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.502711][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.506360][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.511026][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.514757][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.522743][ T5808] veth1_macvtap: entered promiscuous mode
[   57.612241][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.639713][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.643861][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.646930][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.657733][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.666478][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.674475][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.678049][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.724207][ T2184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.736473][ T2184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.766150][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.774348][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.786249][ T2184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.789376][ T2184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.821764][ T2173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.825086][ T2173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.840791][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.864125][ T2173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.866736][ T2173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.956125][ T5881] pim6reg: entered allmulticast mode
[   57.973647][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.976893][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.175122][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.177828][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.264835][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.272796][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.305357][ T5899] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.308326][ T5899] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.314928][ T5899] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.317944][ T5899] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.349357][ T5907] bond0: entered promiscuous mode
[   58.351173][ T5907] bond_slave_0: entered promiscuous mode
[   58.353172][ T5907] bond_slave_1: entered promiscuous mode
[   58.355876][ T5907] bond0: left promiscuous mode
[   58.357681][ T5907] bond_slave_0: left promiscuous mode
[   58.361692][ T5907] bond_slave_1: left promiscuous mode
[   58.426215][ T5927] macvlan0: entered allmulticast mode
[   58.428403][ T5927] veth1_vlan: entered allmulticast mode
[   58.434971][ T5930] veth1_vlan: left allmulticast mode
[   58.450294][ T5930] macvlan0 (unregistering): left allmulticast mode
[   58.494316][ T5934] netem: change failed
[   58.552016][ T5938] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20000
[   58.701084][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   58.912291][ T5944] Zero length message leads to an empty skb
[   59.197483][ T5952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22'.
[   59.271288][ T5816] Bluetooth: hci0: command tx timeout
[   59.292839][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.348865][ T5816] Bluetooth: hci1: command tx timeout
[   59.350831][ T5816] Bluetooth: hci2: command tx timeout
[   59.832599][ T5969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'.
[   59.836514][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   59.850255][ T5969] netlink: 'syz.2.28': attribute type 10 has an invalid length.
[   59.853886][ T5969] bridge0: port 3(team0) entered blocking state
[   59.857390][ T5969] bridge0: port 3(team0) entered disabled state
[   59.862651][ T5969] team0: entered allmulticast mode
[   59.865228][ T5969] team_slave_0: entered allmulticast mode
[   59.869088][ T5969] team_slave_1: entered allmulticast mode
[   59.874297][ T5969] team0: entered promiscuous mode
[   59.876722][ T5969] team_slave_0: entered promiscuous mode
[   59.881823][ T5969] team_slave_1: entered promiscuous mode
[   59.886748][ T5969] bridge0: port 3(team0) entered blocking state
[   59.889764][ T5969] bridge0: port 3(team0) entered forwarding state
[   60.244334][ T5976] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET)
[   61.377284][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   61.431153][ T5816] Bluetooth: hci1: command tx timeout
[   61.432366][ T5201] Bluetooth: hci2: command tx timeout
[   61.437755][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'.
[   61.446403][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'.
[   61.471882][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.477416][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.604207][ T5997] wireguard0: entered allmulticast mode
[   61.824069][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.076258][ T6034] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   62.213898][ T6044] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   62.342176][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.881666][ T6068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.008317][ T6092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.108372][ T6100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.206831][ T6107] pim6reg1: entered promiscuous mode
[   63.208907][ T6107] pim6reg1: entered allmulticast mode
[   63.509342][ T5201] Bluetooth: hci1: command tx timeout
[   63.522202][ T5201] Bluetooth: hci2: command tx timeout
[   63.595679][ T6122] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   63.655279][ T6125] sch_tbf: burst 1885 is lower than device lo mtu (65550) !
[   63.783954][ T6133] __nla_validate_parse: 10 callbacks suppressed
[   63.783966][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   63.789529][ T6133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.78'.
[   63.849547][ T6136] warning: `syz.1.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.032539][ T6142] team0: No ports can be present during mode change
[   64.037051][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   64.491453][ T6158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.582789][ T6158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.616256][ T6160] bridge0: entered promiscuous mode
[   64.622238][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.625450][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.637990][ T6158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.711273][ T6158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.815708][ T6158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.829242][ T6158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.845285][ T6158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.849156][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'.
[   64.859344][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'.
[   64.870492][ T6158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.918859][ T6171] bond0: option mode: unable to set because the bond device has slaves
[   65.018802][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   65.023664][ T6180] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   65.031822][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.137173][ T6180] tipc: Started in network mode
[   65.143009][ T6180] tipc: Node identity fabb5f608274, cluster identity 4711
[   65.147020][ T6180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.154078][ T6180] syzkaller0: entered promiscuous mode
[   65.162332][ T6180] syzkaller0: entered allmulticast mode
[   65.203614][ T6179] tipc: Resetting bearer <eth:syzkaller0>
[   65.215531][ T6179] tipc: Disabling bearer <eth:syzkaller0>
[   65.663613][ T6218] netlink: 'syz.2.108': attribute type 11 has an invalid length.
[   65.679859][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   65.684178][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   65.864981][ T6230] sctp: [Deprecated]: syz.0.110 (pid 6230) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.864981][ T6230] Use struct sctp_sack_info instead
[   65.969404][ T6245] netlink: 'syz.2.116': attribute type 10 has an invalid length.
[   65.972757][ T6245] dummy0: entered promiscuous mode
[   65.975224][ T6245] dummy0: entered allmulticast mode
[   65.980750][ T6245] bridge0: port 4(dummy0) entered blocking state
[   65.983063][ T6245] bridge0: port 4(dummy0) entered disabled state
[   65.988270][ T6245] bridge0: port 4(dummy0) entered blocking state
[   65.991098][ T6245] bridge0: port 4(dummy0) entered forwarding state
[   66.121635][ T6253] xt_hashlimit: size too large, truncated to 1048576
[   66.177357][ T6255] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   66.181073][ T6255] macsec1: entered promiscuous mode
[   66.183415][ T6255] macsec1: entered allmulticast mode
[   66.185372][ T6255] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[   66.381881][ T6264] pim6reg0: tun_chr_ioctl cmd 1074025694
[   67.748879][ T6298] Bluetooth: MGMT ver 1.23
[   68.014128][ T6303] bridge0: port 4(dummy0) entered disabled state
[   68.020675][ T6303] team0: left allmulticast mode
[   68.022238][ T6303] team_slave_0: left allmulticast mode
[   68.023951][ T6303] team_slave_1: left allmulticast mode
[   68.025724][ T6303] team0: left promiscuous mode
[   68.027407][ T6303] team_slave_0: left promiscuous mode
[   68.029975][ T6303] team_slave_1: left promiscuous mode
[   68.032643][ T6303] bridge0: port 3(team0) entered disabled state
[   68.040834][ T6303] bridge_slave_1: left allmulticast mode
[   68.043196][ T6303] bridge_slave_1: left promiscuous mode
[   68.046005][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.051258][ T6303] bridge_slave_0: left allmulticast mode
[   68.053137][ T6303] bridge_slave_0: left promiscuous mode
[   68.055269][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.572561][ T6324] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   68.624783][ T6326] syzkaller1: entered promiscuous mode
[   68.627184][ T6326] syzkaller1: entered allmulticast mode
[   68.632903][ T6326] PF_CAN: dropped non conform CAN skbuff: dev type 779, len 324
[   68.745454][ T6332] xt_hashlimit: size too large, truncated to 1048576
[   68.799832][ T6334] __nla_validate_parse: 10 callbacks suppressed
[   68.799843][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'.
[   68.912458][ T6336] netlink: 10 bytes leftover after parsing attributes in process `syz.0.147'.
[   69.154768][ T6348] macsec0: default FDB implementation only supports local addresses
[   69.254012][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[   69.260549][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'.
[   69.322362][ T6356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'.
[   69.465378][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   69.469225][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   69.472498][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   69.476464][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'.
[   69.481665][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   69.492087][ T6365] netlink: 'syz.1.159': attribute type 10 has an invalid length.
[   69.494922][ T6366] netlink: 'syz.1.159': attribute type 10 has an invalid length.
[   69.497976][ T6365] dummy0: entered promiscuous mode
[   69.500821][ T6365] bridge0: port 3(dummy0) entered blocking state
[   69.503149][ T6365] bridge0: port 3(dummy0) entered disabled state
[   69.505616][ T6365] dummy0: entered allmulticast mode
[   69.963029][ T6406] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   69.966021][ T6406] netlink: 'syz.0.174': attribute type 1 has an invalid length.
[   70.050174][ T6415] batadv_slave_1: entered promiscuous mode
[   70.063492][ T6418] batadv_slave_1: left promiscuous mode
[   70.317396][ T6432] vlan2: entered promiscuous mode
[   70.322403][ T6432] vlan2: entered allmulticast mode
[   70.324511][ T6432] hsr_slave_1: entered allmulticast mode
[   70.717016][ T6445] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   70.851869][ T6449] block nbd0: Receive control failed (result -32)
[   70.955025][ T5816] Bluetooth: hci2: command 0x0405 tx timeout
[   70.958426][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.961374][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.039374][ T6455] tipc: Started in network mode
[   71.041431][ T6455] tipc: Node identity 9ac373657f05, cluster identity 4711
[   71.044200][ T6455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.050266][ T6454] tipc: Disabling bearer <eth:syzkaller0>
[   71.143855][ T6458] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   71.161354][ T6458] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.197018][ T6458] bond1: (slave veth3): Enslaving as an active interface with a down link
[   71.220838][ T6458] IPv6: sit1: Disabled Multicast RS
[   71.240715][ T6458] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   71.245426][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv1
[   71.259137][ T6458] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   71.278130][ T6461] dummy0: left allmulticast mode
[   71.280443][ T6461] bridge0: port 3(dummy0) entered disabled state
[   71.286474][ T6461] batman_adv: batadv0: Adding interface: dummy0
[   71.290498][ T6461] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.299176][ T6461] batman_adv: batadv0: Interface activated: dummy0
[   71.431102][   T27] wlan1: Trigger new scan to find an IBSS to join
[   71.860547][ T6503] netlink: 'syz.0.202': attribute type 2 has an invalid length.
[   71.932755][ T6512] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[   72.107660][ T6520] tc_dump_action: action bad kind
[   72.874464][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   72.876940][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   72.893697][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.099992][ T6549] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   73.780914][ T6567] sctp: [Deprecated]: syz.0.222 (pid 6567) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.780914][ T6567] Use struct sctp_sack_info instead
[   73.873974][ T6572] syzkaller1: entered promiscuous mode
[   73.875824][ T6572] syzkaller1: entered allmulticast mode
[   73.878358][ T6571] __nla_validate_parse: 22 callbacks suppressed
[   73.878365][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[   74.469200][ T1088] wlan1: Trigger new scan to find an IBSS to join
[   74.963403][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.966947][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.971325][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.974495][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.982849][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.254148][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[   75.262974][ T6587] chnl_net:caif_netlink_parms(): no params data found
[   75.271366][ T6603] netlink: 176 bytes leftover after parsing attributes in process `syz.0.235'.
[   75.275295][ T6603] netlink: 176 bytes leftover after parsing attributes in process `syz.0.235'.
[   75.353002][ T6610] netlink: 48 bytes leftover after parsing attributes in process `syz.0.235'.
[   75.371137][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.373664][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.376207][ T6587] bridge_slave_0: entered allmulticast mode
[   75.380308][ T6587] bridge_slave_0: entered promiscuous mode
[   75.383603][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.386439][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.390329][ T6587] bridge_slave_1: entered allmulticast mode
[   75.408156][ T6587] bridge_slave_1: entered promiscuous mode
[   75.453958][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.462083][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.482023][ T6618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.484784][ T6618] IPv6: NLM_F_CREATE should be set when creating new route
[   75.500974][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'.
[   75.501380][ T6587] team0: Port device team_slave_0 added
[   75.515460][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.241'.
[   75.517788][ T6587] team0: Port device team_slave_1 added
[   75.532424][ T6620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.536777][ T6620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.541107][ T6620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.543943][ T6620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.546680][ T6620] geneve0: entered allmulticast mode
[   75.596387][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.603809][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.612798][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.627391][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.632467][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.641703][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.711832][ T6587] hsr_slave_0: entered promiscuous mode
[   75.715143][ T6587] hsr_slave_1: entered promiscuous mode
[   75.717524][ T6587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   75.720600][ T6587] Cannot create hsr debugfs directory
[   75.795345][ T6632] ipvlan2: entered promiscuous mode
[   75.810115][ T6632] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   75.812755][ T6632] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   75.874108][ T6587] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.934695][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'.
[   75.944447][ T6587] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.019539][ T6587] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.025278][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'.
[   76.074557][ T6650] bond1: entered promiscuous mode
[   76.078059][ T6650] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.138275][ T6650] bond1 (unregistering): Released all slaves
[   76.166409][ T6587] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.293938][ T6587] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.297284][ T6661] netlink: 'syz.2.252': attribute type 10 has an invalid length.
[   76.298301][ T6587] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.307969][ T6587] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.313075][ T6587] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.313304][ T6661] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.252'.
[   76.462305][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.480254][ T6587] 8021q: adding VLAN 0 to HW filter on device team0
[   76.486563][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.489886][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.511863][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.514436][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.723184][ T6694] syzkaller0: entered promiscuous mode
[   76.725419][ T6694] syzkaller0: entered allmulticast mode
[   76.741880][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.029557][ T5816] Bluetooth: hci0: command tx timeout
[   77.432825][ T2188] wlan1: Trigger new scan to find an IBSS to join
[   77.590490][ T6587] veth0_vlan: entered promiscuous mode
[   77.597953][ T6587] veth1_vlan: entered promiscuous mode
[   77.654049][ T6587] veth0_macvtap: entered promiscuous mode
[   77.666959][ T6587] veth1_macvtap: entered promiscuous mode
[   77.684819][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.705877][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.724934][ T6587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.728443][ T6587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.732193][ T6587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.735910][ T6587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.813092][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.819563][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.844320][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.847085][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.855385][ T6708] x_tables: duplicate underflow at hook 2
[   77.977785][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.349770][   T64] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[   78.691115][ T5846] IPVS: starting estimator thread 0...
[   78.727782][ T6747] xt_l2tp: v2 sid > 0xffff: 4294901760
[   78.778892][ T6744] IPVS: using max 80 ests per chain, 192000 per kthread
[   78.914211][ T6766] __nla_validate_parse: 2 callbacks suppressed
[   78.914221][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   78.977423][ T5839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.158978][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'.
[   79.176477][ T6780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.284'.
[   79.182181][ T6780] SET target dimension over the limit!
[   79.231872][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.235083][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.238213][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'.
[   79.240471][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.243361][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'.
[   79.245291][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.253760][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.294169][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.286'.
[   79.382506][ T6793] tipc: New replicast peer: 255.255.255.31
[   79.385439][ T6793] tipc: Enabled bearer <udp:syz2>, priority 10
[   79.389355][ T6793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.287'.
[   79.393250][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'.
[   79.397287][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'.
[   79.404470][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[   79.417202][ T6785] chnl_net:caif_netlink_parms(): no params data found
[   79.496493][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.499213][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.501602][ T6785] bridge_slave_0: entered allmulticast mode
[   79.504288][ T6785] bridge_slave_0: entered promiscuous mode
[   79.507429][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.512490][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.515336][ T6785] bridge_slave_1: entered allmulticast mode
[   79.521640][ T6785] bridge_slave_1: entered promiscuous mode
[   79.551073][ T6803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.557928][ T6785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.562882][ T6785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.585410][ T6785] team0: Port device team_slave_0 added
[   79.590941][ T6785] team0: Port device team_slave_1 added
[   79.642201][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.644678][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.656686][ T6785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.662632][ T6785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.665130][ T6785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.676130][ T6785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.715174][ T6785] hsr_slave_0: entered promiscuous mode
[   79.719656][ T6785] hsr_slave_1: entered promiscuous mode
[   79.722702][ T6785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.726793][ T6785] Cannot create hsr debugfs directory
[   79.812843][ T5839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.421389][ T6825] netlink: 'syz.2.297': attribute type 4 has an invalid length.
[   80.500100][    T9] tipc: Node number set to 3854988133
[   80.612055][ T6837] netlink: 'syz.0.301': attribute type 4 has an invalid length.
[   80.615356][ T6838] netlink: 'syz.0.301': attribute type 4 has an invalid length.
[   80.718016][ T5839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.782106][ T5839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.950795][ T5839] bridge_slave_1: left allmulticast mode
[   80.954138][ T5839] bridge_slave_1: left promiscuous mode
[   80.969865][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.978231][ T5839] bridge_slave_0: left allmulticast mode
[   80.982740][ T5839] bridge_slave_0: left promiscuous mode
[   80.985206][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.198370][  T791] cfg80211: failed to load regulatory.db
[   81.266935][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.268754][ T5816] Bluetooth: hci0: command tx timeout
[   81.276512][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.282403][ T5839] bond0 (unregistering): Released all slaves
[   81.524421][    T9] IPVS: starting estimator thread 0...
[   81.610341][ T6887] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.639242][ T6897] netlink: 'syz.2.314': attribute type 6 has an invalid length.
[   81.723733][ T5839] hsr_slave_0: left promiscuous mode
[   81.737337][ T5839] hsr_slave_1: left promiscuous mode
[   81.749999][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.759859][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.770388][ T5839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.773504][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.816963][ T5839] veth1_macvtap: left promiscuous mode
[   81.828789][ T5839] veth0_macvtap: left promiscuous mode
[   81.831337][ T5839] veth1_vlan: left promiscuous mode
[   81.833714][ T5839] veth0_vlan: left promiscuous mode
[   82.342405][ T5839] team0 (unregistering): Port device team_slave_1 removed
[   82.379078][ T5839] team0 (unregistering): Port device team_slave_0 removed
[   82.751916][ T6919] unknown channel width for channel at 909000KHz?
[   82.755474][ T6919] unknown channel width for channel at 909000KHz?
[   82.758407][ T6919] unknown channel width for channel at 909000KHz?
[   82.847632][ T6785] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   82.862434][ T6785] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   82.879707][ T6785] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   82.894401][ T6785] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.031125][ T6973] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   83.061065][ T6785] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.083759][ T6785] 8021q: adding VLAN 0 to HW filter on device team0
[   83.106214][ T2188] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.108725][ T2188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.113798][ T6981] netlink: 'syz.2.325': attribute type 4 has an invalid length.
[   83.181500][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.184430][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.245053][ T6785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.351191][ T5816] Bluetooth: hci0: command tx timeout
[   83.433830][ T6996] sctp: [Deprecated]: syz.0.330 (pid 6996) Use of int in maxseg socket option.
[   83.433830][ T6996] Use struct sctp_assoc_value instead
[   83.444421][ T6785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.519331][ T6785] veth0_vlan: entered promiscuous mode
[   83.524547][ T6785] veth1_vlan: entered promiscuous mode
[   83.590120][ T6785] veth0_macvtap: entered promiscuous mode
[   83.590557][ T7012] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   83.594287][ T6785] veth1_macvtap: entered promiscuous mode
[   83.611473][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.621607][ T6785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.633440][ T6785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.650252][ T6785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.661427][ T6785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.664239][ T6785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.725246][ T2188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.730634][ T2188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.768055][ T2184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.773632][ T2184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.788186][ T7054] __nla_validate_parse: 13 callbacks suppressed
[   84.788196][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'.
[   84.838635][ T7054] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.842481][ T7054] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.846290][ T7054] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.850629][ T7054] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.990021][ T7062] xt_CT: No such helper "snmp"
[   85.215646][ T7066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'.
[   85.571837][ T5821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.730959][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.737512][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.740833][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.744225][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.747121][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.799444][ T7083] netlink: 'syz.0.349': attribute type 1 has an invalid length.
[   85.916753][ T7080] chnl_net:caif_netlink_parms(): no params data found
[   86.027817][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.030435][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.037337][ T7080] bridge_slave_0: entered allmulticast mode
[   86.046884][ T7080] bridge_slave_0: entered promiscuous mode
[   86.056712][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.060920][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.063374][ T7080] bridge_slave_1: entered allmulticast mode
[   86.066227][ T7080] bridge_slave_1: entered promiscuous mode
[   86.096761][ T7107] netlink: 'syz.2.354': attribute type 4 has an invalid length.
[   86.123926][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.133218][ T7112] xt_time: invalid argument - start or stop time greater than 23:59:59
[   86.137531][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.144061][ T7112] xt_time: invalid argument - start or stop time greater than 23:59:59
[   86.198077][ T7080] team0: Port device team_slave_0 added
[   86.203878][ T7080] team0: Port device team_slave_1 added
[   86.262564][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.265931][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.276399][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.285102][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.288130][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.299179][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.346443][ T7080] hsr_slave_0: entered promiscuous mode
[   86.350279][ T7080] hsr_slave_1: entered promiscuous mode
[   86.352913][ T7080] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.355817][ T7080] Cannot create hsr debugfs directory
[   86.458455][ T7124] tipc: Started in network mode
[   86.460376][ T7124] tipc: Node identity e61142bec734, cluster identity 4711
[   86.462715][ T7124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.467136][ T7124] syzkaller0: entered promiscuous mode
[   86.470779][ T7124] syzkaller0: entered allmulticast mode
[   86.477222][ T7124] tipc: Resetting bearer <eth:syzkaller0>
[   86.481557][ T7123] tipc: Resetting bearer <eth:syzkaller0>
[   86.490966][ T7123] tipc: Disabling bearer <eth:syzkaller0>
[   86.579083][ T7126] pim6reg: entered allmulticast mode
[   86.583382][ T7126] pim6reg: left allmulticast mode
[   86.775966][ T7132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'.
[   87.240495][ T5821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.303397][ T5821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.389488][ T7164] team0 (unregistering): Port device team_slave_0 removed
[   87.393547][ T7164] team0 (unregistering): Port device team_slave_1 removed
[   87.421494][ T5821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.507241][ T5821] bridge_slave_1: left allmulticast mode
[   87.509509][ T5821] bridge_slave_1: left promiscuous mode
[   87.511734][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.520547][ T5821] bridge_slave_0: left allmulticast mode
[   87.523105][ T5821] bridge_slave_0: left promiscuous mode
[   87.525785][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.823238][ T5821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.830916][ T5821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.830985][ T5816] Bluetooth: hci0: command tx timeout
[   87.837752][ T5821] bond0 (unregistering): Released all slaves
[   88.128207][ T5821] hsr_slave_0: left promiscuous mode
[   88.133709][ T5821] hsr_slave_1: left promiscuous mode
[   88.136344][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.141017][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.145867][ T5821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.149073][ T5821] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.161929][ T5821] veth1_macvtap: left promiscuous mode
[   88.165758][ T5821] veth0_macvtap: left promiscuous mode
[   88.176225][ T5821] veth1_vlan: left promiscuous mode
[   88.186993][ T5821] veth0_vlan: left promiscuous mode
[   88.493559][ T5821] team0 (unregistering): Port device team_slave_1 removed
[   88.515674][ T5821] team0 (unregistering): Port device team_slave_0 removed
[   88.515779][ T7199] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   88.961657][ T7080] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.972397][ T7080] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.983107][ T7080] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.992842][ T7080] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.076305][ T7210] x_tables: duplicate underflow at hook 2
[   89.107437][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.125501][ T7080] 8021q: adding VLAN 0 to HW filter on device team0
[   89.150787][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[   89.180897][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.183842][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.192723][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.195619][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.328164][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'.
[   89.348554][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'.
[   89.423438][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[   89.431851][ T7230] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   89.597367][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.627653][ T7080] veth0_vlan: entered promiscuous mode
[   89.656450][ T7080] veth1_vlan: entered promiscuous mode
[   89.661712][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.389'.
[   89.686445][ T7080] veth0_macvtap: entered promiscuous mode
[   89.695213][ T7080] veth1_macvtap: entered promiscuous mode
[   89.708322][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.717188][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.725414][ T7080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.728358][ T7080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.734781][ T7080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.737834][ T7080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.775296][ T7250] netlink: 72 bytes leftover after parsing attributes in process `syz.2.391'.
[   89.842491][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.846125][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.866451][ T7252] netlink: 'syz.2.392': attribute type 20 has an invalid length.
[   89.884707][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.887922][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.908999][ T5816] Bluetooth: hci0: command tx timeout
[   89.978448][ T7252] Unsupported ieee802154 address type: 0
[   90.052657][ T7260] syz_tun: entered promiscuous mode
[   90.054373][ T7260] syz_tun: entered allmulticast mode
[   90.281990][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'.
[   90.367676][ T7279] veth0: entered promiscuous mode
[   90.372419][ T7278] veth0: left promiscuous mode
[   90.570639][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[   90.729470][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'.
[   90.744013][ T7303] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   90.747226][ T7303] netlink: 'syz.2.406': attribute type 2 has an invalid length.
[   91.006083][ T7324] netlink: 'syz.2.411': attribute type 1 has an invalid length.
[   91.035971][ T7324] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   91.040737][ T7324] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   91.047350][ T7324] bond1: (slave vti0): making interface the new active one
[   91.050975][ T7324] bond1: (slave vti0): Enslaving as an active interface with an up link
[   91.128163][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.132946][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.136319][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.251816][ T7327] infiniband syz0: set active
[   91.254845][ T6965] dummy0 speed is unknown, defaulting to 1000
[   91.257547][ T7327] infiniband syz0: added dummy0
[   91.283741][ T7327] RDS/IB: syz0: added
[   91.288807][ T7327] smc: adding ib device syz0 with port count 1
[   91.291813][ T7327] smc:    ib device syz0 port 1 has pnetid 
[   91.294831][ T6964] dummy0 speed is unknown, defaulting to 1000
[   91.298057][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'.
[   91.299109][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.301324][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[   91.305893][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'.
[   91.311488][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'.
[   91.424498][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.568978][ T7327] dummy0 speed is unknown, defaulting to 1000
[   91.661645][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.733174][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'.
[   91.738223][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'.
[   91.745976][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'.
[   91.771951][ T7337] syz_tun: left promiscuous mode
[   91.774271][ T7337] syz_tun: left allmulticast mode
[   91.784976][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.794031][ T7337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.816133][ T7327] dummy0 speed is unknown, defaulting to 1000
[   92.343881][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.347835][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.350881][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.354516][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.357884][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.383043][ T7348] dummy0 speed is unknown, defaulting to 1000
[   92.639275][ T7348] chnl_net:caif_netlink_parms(): no params data found
[   92.753501][ T7386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.813172][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.815669][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.824800][ T7348] bridge_slave_0: entered allmulticast mode
[   92.829792][ T7348] bridge_slave_0: entered promiscuous mode
[   92.835275][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.838291][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.853176][ T7348] bridge_slave_1: entered allmulticast mode
[   92.859832][ T7348] bridge_slave_1: entered promiscuous mode
[   92.920662][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.925280][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.972975][ T7348] team0: Port device team_slave_0 added
[   92.976600][ T7348] team0: Port device team_slave_1 added
[   93.008063][ T7402] pimreg: entered allmulticast mode
[   93.029045][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.031667][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.048890][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.053964][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.056188][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.065822][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.135071][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.196562][ T7348] hsr_slave_0: entered promiscuous mode
[   93.202880][ T7348] hsr_slave_1: entered promiscuous mode
[   93.205365][ T7348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   93.207861][ T7348] Cannot create hsr debugfs directory
[   93.235471][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.243553][ T7416] dummy0 speed is unknown, defaulting to 1000
[   93.243622][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.249799][ T7418] batadv_slave_1: entered promiscuous mode
[   93.298372][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.519601][ T7428] netlink: 'syz.2.440': attribute type 5 has an invalid length.
[   93.585238][   T13] bridge_slave_1: left allmulticast mode
[   93.587687][   T13] bridge_slave_1: left promiscuous mode
[   93.592207][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.596814][   T13] bridge_slave_0: left allmulticast mode
[   93.599525][   T13] bridge_slave_0: left promiscuous mode
[   93.602334][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.800207][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.804704][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.808766][   T13] bond0 (unregistering): Released all slaves
[   93.888223][ T7433] netlink: 'syz.2.442': attribute type 4 has an invalid length.
[   94.216355][   T13] hsr_slave_0: left promiscuous mode
[   94.221527][   T13] hsr_slave_1: left promiscuous mode
[   94.225774][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.232129][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.240076][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.249907][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.273933][   T13] veth1_macvtap: left promiscuous mode
[   94.281421][   T13] veth0_macvtap: left promiscuous mode
[   94.284683][   T13] veth1_vlan: left promiscuous mode
[   94.287022][   T13] veth0_vlan: left promiscuous mode
[   94.388816][ T5201] Bluetooth: hci0: command tx timeout
[   94.451599][ T7463] netlink: 'syz.2.454': attribute type 10 has an invalid length.
[   94.600486][   T13] team0 (unregistering): Port device team_slave_1 removed
[   94.628334][   T13] team0 (unregistering): Port device team_slave_0 removed
[   94.863262][ T7463] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   94.971085][ T7348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.975991][ T7348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.986907][ T7348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.992079][ T7348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   95.022145][ T7471] pim6reg: entered allmulticast mode
[   95.037053][ T7471] pim6reg: left allmulticast mode
[   95.107254][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.123208][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.125718][ T7348] 8021q: adding VLAN 0 to HW filter on device team0
[   95.136766][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.139057][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.151607][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.153927][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.295046][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.344851][ T7348] veth0_vlan: entered promiscuous mode
[   95.352500][ T7348] veth1_vlan: entered promiscuous mode
[   95.367993][ T7348] veth0_macvtap: entered promiscuous mode
[   95.376386][ T7348] veth1_macvtap: entered promiscuous mode
[   95.385882][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.435174][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.440874][ T7348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.443616][ T7348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.446311][ T7348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.451381][ T7348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.535851][ T7499] netlink: 'syz.0.462': attribute type 21 has an invalid length.
[   95.538344][ T7499] IPv6: NLM_F_CREATE should be specified when creating new route
[   95.549157][ T7499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.551652][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   95.554388][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   95.557446][ T7499] IPv6: NLM_F_CREATE should be set when creating new route
[   95.572690][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.575253][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.602791][ T2188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.607201][ T2188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.791000][ T7517] wireguard0: entered promiscuous mode
[   95.793277][ T7517] wireguard0: entered allmulticast mode
[   95.899382][ T7533] macvlan0: entered promiscuous mode
[   95.901859][ T7533] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   95.905160][ T7533] netlink: 'syz.0.471': attribute type 2 has an invalid length.
[   95.960031][ T7535] dummy0 speed is unknown, defaulting to 1000
[   96.024805][ T7540] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   96.277500][ T7558] netlink: 'syz.0.479': attribute type 1 has an invalid length.
[   96.286161][ T7560] netlink: 'syz.2.477': attribute type 6 has an invalid length.
[   96.566554][ T7576] __nla_validate_parse: 19 callbacks suppressed
[   96.566564][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[   96.574428][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'.
[   96.803970][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.489'.
[   96.850170][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[   96.853814][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'.
[   96.885192][ T7597] netlink: 'syz.2.491': attribute type 10 has an invalid length.
[   96.888369][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.491'.
[   96.896125][ T7597] dummy0: left promiscuous mode
[   96.898338][ T7597] dummy0: left allmulticast mode
[   96.904418][ T7597] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   96.911331][ T5836] dummy0 speed is unknown, defaulting to 1000
[   97.080153][ T7608] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   97.084791][ T7608] Cannot find set identified by id 0 to match
[   97.128092][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[   97.241258][ T7622] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   97.244353][ T7622] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   97.486225][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.238397][ T7634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.502'.
[   98.319227][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.323684][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.327537][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.333358][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.337545][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.366264][ T7641] dummy0 speed is unknown, defaulting to 1000
[   98.399770][ T7644] netlink: 'syz.0.505': attribute type 2 has an invalid length.
[   98.402327][ T7644] netlink: 119 bytes leftover after parsing attributes in process `syz.0.505'.
[   98.433482][ T7646] netlink: 'syz.0.506': attribute type 32 has an invalid length.
[   98.436433][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.506'.
[   98.546022][ T7637] dummy0 speed is unknown, defaulting to 1000
[   98.599539][ T7656] vlan0: entered promiscuous mode
[   98.860828][ T7637] chnl_net:caif_netlink_parms(): no params data found
[   98.910766][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.913497][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.918854][ T7637] bridge_slave_0: entered allmulticast mode
[   98.921836][ T7637] bridge_slave_0: entered promiscuous mode
[   98.926310][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.929081][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.932871][ T7637] bridge_slave_1: entered allmulticast mode
[   98.935711][ T7637] bridge_slave_1: entered promiscuous mode
[   98.955474][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.961459][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.985454][ T7637] team0: Port device team_slave_0 added
[   98.989450][ T7637] team0: Port device team_slave_1 added
[   99.014804][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.017601][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.028066][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.036068][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.039209][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.052828][ T7674] netlink: 'syz.0.510': attribute type 1 has an invalid length.
[   99.059049][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.085386][ T7674] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.100021][ T7674] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.102519][ T7674] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[   99.106735][ T7674] bond4: (slave vxcan1): Error -95 calling set_mac_address
[   99.146772][ T7637] hsr_slave_0: entered promiscuous mode
[   99.150483][ T7637] hsr_slave_1: entered promiscuous mode
[   99.152603][ T7637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   99.155060][ T7637] Cannot create hsr debugfs directory
[   99.181311][ T7680] bond4: (slave bridge2): Enslaving as an active interface with a down link
[   99.355130][ T7691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   99.358215][ T7691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   99.362259][ T7691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   99.365269][ T7691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   99.369294][ T7691] geneve2: entered promiscuous mode
[   99.371102][ T7691] geneve2: entered allmulticast mode
[   99.480625][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.548073][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.555324][ T7706] xt_TPROXY: Can be used only with -p tcp or -p udp
[   99.616086][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.641812][ T7714] sch_tbf: burst 5 is lower than device bridge2 mtu (1514) !
[   99.808041][   T13] bridge_slave_1: left allmulticast mode
[   99.815063][   T13] bridge_slave_1: left promiscuous mode
[   99.817951][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.826286][   T13] bridge_slave_0: left allmulticast mode
[   99.830499][   T13] bridge_slave_0: left promiscuous mode
[   99.833388][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.033081][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.116185][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.122522][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.127665][   T13] bond0 (unregistering): Released all slaves
[  100.390998][ T5201] Bluetooth: hci0: command tx timeout
[  100.580666][ T7637] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.615718][ T7637] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  100.620756][ T7637] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  100.650801][   T13] hsr_slave_0: left promiscuous mode
[  100.655382][   T13] hsr_slave_1: left promiscuous mode
[  100.660310][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.663267][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.665863][ T7757] validate_nla: 1 callbacks suppressed
[  100.665871][ T7757] netlink: 'syz.2.534': attribute type 5 has an invalid length.
[  100.675517][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.678690][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.709833][   T13] veth1_macvtap: left promiscuous mode
[  100.711865][   T13] veth0_macvtap: left promiscuous mode
[  100.713774][   T13] veth1_vlan: left promiscuous mode
[  100.715549][   T13] veth0_vlan: left promiscuous mode
[  101.200994][   T13] team0 (unregistering): Port device team_slave_1 removed
[  101.236838][   T13] team0 (unregistering): Port device team_slave_0 removed
[  101.530636][ T7637] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  101.538318][ T7758] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[  101.673056][ T7770] __nla_validate_parse: 9 callbacks suppressed
[  101.673073][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[  101.687990][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[  101.716508][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.762351][ T7637] 8021q: adding VLAN 0 to HW filter on device team0
[  101.783223][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.786242][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.817346][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.820410][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.824699][ T7777] netlink: 'syz.2.539': attribute type 4 has an invalid length.
[  101.874554][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'.
[  101.887179][ T7780] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  101.992047][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[  101.994908][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'.
[  102.032978][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.113499][ T7637] veth0_vlan: entered promiscuous mode
[  102.132242][ T7637] veth1_vlan: entered promiscuous mode
[  102.184765][ T7637] veth0_macvtap: entered promiscuous mode
[  102.200019][ T7637] veth1_macvtap: entered promiscuous mode
[  102.232256][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.244893][ T7637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.250814][ T7637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.254499][ T7637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.257965][ T7637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.263265][ T7637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.286799][ T7804] xt_bpf: check failed: parse error
[  102.335959][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.346964][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.358141][ T7804] nbd: must specify at least one socket
[  102.362980][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.365485][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.658181][ T7818] netlink: 27 bytes leftover after parsing attributes in process `syz.0.550'.
[  102.755193][ T7822] openvswitch: netlink: Multiple metadata blocks provided
[  102.755196][ T7820] openvswitch: netlink: Multiple metadata blocks provided
[  102.846947][ T7824] netlink: 'syz.2.552': attribute type 10 has an invalid length.
[  103.047930][ T7835] netlink: 11 bytes leftover after parsing attributes in process `syz.2.555'.
[  103.100542][ T7837] vlan0: entered promiscuous mode
[  103.145780][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.151135][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  103.317384][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'.
[  103.785943][ T5922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.524173][ T7864] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[  104.701855][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  104.706781][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  104.716314][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  104.724903][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  104.728224][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  104.739175][ T7880] netlink: 'syz.2.570': attribute type 11 has an invalid length.
[  104.779082][ T7882] Bluetooth: MGMT ver 1.23
[  104.792346][ T7875] dummy0 speed is unknown, defaulting to 1000
[  105.127442][ T5922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.302462][ T7875] chnl_net:caif_netlink_parms(): no params data found
[  105.383091][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.385361][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.388390][ T7875] bridge_slave_0: entered allmulticast mode
[  105.398848][ T7875] bridge_slave_0: entered promiscuous mode
[  105.403043][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.405437][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.407940][ T7875] bridge_slave_1: entered allmulticast mode
[  105.417304][ T7875] bridge_slave_1: entered promiscuous mode
[  105.465414][ T5922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.473175][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.480123][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.522547][ T7875] team0: Port device team_slave_0 added
[  105.554410][ T5922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.573902][ T7875] team0: Port device team_slave_1 added
[  105.623002][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.625309][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.634869][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.645092][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.647432][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.665545][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.673283][ T7929] batadv_slave_1: entered promiscuous mode
[  105.675634][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.807232][ T7875] hsr_slave_0: entered promiscuous mode
[  105.810038][ T7875] hsr_slave_1: entered promiscuous mode
[  105.812490][ T7875] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.815302][ T7875] Cannot create hsr debugfs directory
[  105.904848][ T5922] bridge_slave_1: left allmulticast mode
[  105.906995][ T5922] bridge_slave_1: left promiscuous mode
[  105.918052][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.925764][ T5922] bridge_slave_0: left allmulticast mode
[  105.928114][ T5922] bridge_slave_0: left promiscuous mode
[  105.931813][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.245858][ T5922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.252483][ T5922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.258086][ T5922] bond0 (unregistering): Released all slaves
[  106.311987][ T7948] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  106.315744][ T7948] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  106.325733][ T7948] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  106.329686][ T7948] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  106.332626][ T7948] geneve3: entered allmulticast mode
[  106.358751][ T7945] dummy0 speed is unknown, defaulting to 1000
[  106.751674][ T7976] Bluetooth: MGMT ver 1.23
[  106.849194][ T5922] hsr_slave_0: left promiscuous mode
[  106.854457][ T5922] hsr_slave_1: left promiscuous mode
[  106.863097][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.867246][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.874100][ T5922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.877224][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.887495][ T7982] netlink: 'syz.0.602': attribute type 2 has an invalid length.
[  106.893613][ T7982] netlink: 'syz.0.602': attribute type 2 has an invalid length.
[  106.893708][ T5922] veth1_macvtap: left promiscuous mode
[  106.900884][ T5922] veth0_macvtap: left promiscuous mode
[  106.903401][ T5922] veth1_vlan: left promiscuous mode
[  106.908455][ T5922] veth0_vlan: left promiscuous mode
[  106.971270][ T7987] __nla_validate_parse: 10 callbacks suppressed
[  106.971286][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'.
[  107.225953][ T5922] team0 (unregistering): Port device team_slave_1 removed
[  107.247826][ T5922] team0 (unregistering): Port device team_slave_0 removed
[  107.488050][ T7982] veth5: entered promiscuous mode
[  107.644805][ T7990] dummy0 speed is unknown, defaulting to 1000
[  107.721447][ T7875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  107.737649][ T7875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  107.750446][ T7875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  107.763050][ T7875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  107.788728][ T7995] netlink: 'syz.2.604': attribute type 2 has an invalid length.
[  107.791511][ T7995] netlink: 'syz.2.604': attribute type 8 has an invalid length.
[  107.794269][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.604'.
[  107.833935][   T51] dummy0 speed is unknown, defaulting to 1000
[  108.064759][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.092974][ T7875] 8021q: adding VLAN 0 to HW filter on device team0
[  108.114114][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.116428][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.150733][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.153094][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.289479][ T8026] dummy0 speed is unknown, defaulting to 1000
[  108.380819][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.496625][ T7875] veth0_vlan: entered promiscuous mode
[  108.505340][ T7875] veth1_vlan: entered promiscuous mode
[  108.524414][ T7875] veth0_macvtap: entered promiscuous mode
[  108.530496][ T7875] veth1_macvtap: entered promiscuous mode
[  108.541903][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.552381][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.558157][ T7875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.562501][ T7875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.565659][ T7875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.571819][ T7875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.742550][ T2184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.745984][ T2184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.767275][ T2188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.771708][ T2188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.783997][ T8046] @: renamed from vlan0
[  108.797316][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.0.614'.
[  108.894329][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.618'.
[  108.909879][ T8055] sch_fq: defrate 1 ignored.
[  108.911922][ T8055] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN PTI
[  108.916044][ T8055] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef]
[  108.919694][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.0.618 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  108.925256][ T8055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.929613][ T8055] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  108.932064][ T8055] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  108.940375][ T8055] RSP: 0018:ffffc900029befb0 EFLAGS: 00010203
[  108.942932][ T8055] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  108.946259][ T8055] RDX: ffffc9000f047000 RSI: 0000000000001046 RDI: 0000000000001047
[  108.949558][ T8055] RBP: dffffc0000000000 R08: ffff88802107b980 R09: 0000000000000002
[  108.953774][ T8055] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  108.956881][ T8055] R13: ffff88802afb2000 R14: 00000000000002ec R15: ffff88802afb2000
[  108.960120][ T8055] FS:  00007f802c73b6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  108.963836][ T8055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.966287][ T8055] CR2: 00007f6ff10a5fc8 CR3: 000000001f9f6000 CR4: 00000000000006f0
[  108.968907][ T8055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  108.971481][ T8055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  108.974003][ T8055] Call Trace:
[  108.975100][ T8055]  <TASK>
[  108.976081][ T8055]  qdisc_tree_reduce_backlog+0x29c/0x480
[  108.977866][ T8055]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  108.979873][ T8055]  fq_change+0x1519/0x1f50
[  108.981393][ T8055]  ? __pfx_fq_change+0x10/0x10
[  108.982995][ T8055]  ? __hrtimer_setup+0x187/0x210
[  108.984622][ T8055]  fq_init+0x699/0x960
[  108.985982][ T8055]  ? __pfx_fq_init+0x10/0x10
[  108.987499][ T8055]  ? lockdep_rtnl_is_held+0x26/0x40
[  108.989227][ T8055]  ? qdisc_lookup+0x36d/0x6d0
[  108.990730][ T8055]  ? __pfx_fq_init+0x10/0x10
[  108.992253][ T8055]  qdisc_create+0x7ac/0xea0
[  108.993780][ T8055]  tc_modify_qdisc+0x1426/0x2010
[  108.995370][ T8055]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  108.997083][ T8055]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  108.998842][ T8055]  rtnetlink_rcv_msg+0x77c/0xb70
[  109.000481][ T8055]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  109.002173][ T8055]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  109.003962][ T8055]  ? ref_tracker_free+0x63a/0x7d0
[  109.005759][ T8055]  ? __copy_skb_header+0xa7/0x550
[  109.007467][ T8055]  ? __pfx_ref_tracker_free+0x10/0x10
[  109.009436][ T8055]  netlink_rcv_skb+0x208/0x470
[  109.011054][ T8055]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  109.012828][ T8055]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.014519][ T8055]  ? netlink_deliver_tap+0x2e/0x1b0
[  109.016186][ T8055]  ? netlink_deliver_tap+0x2e/0x1b0
[  109.017835][ T8055]  netlink_unicast+0x75b/0x8d0
[  109.019347][ T8055]  netlink_sendmsg+0x805/0xb30
[  109.021011][ T8055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.022702][ T8055]  ? aa_sock_msg_perm+0x94/0x160
[  109.024295][ T8055]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.026004][ T8055]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.027691][ T8055]  __sock_sendmsg+0x21c/0x270
[  109.029227][ T8055]  ____sys_sendmsg+0x505/0x830
[  109.030904][ T8055]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.032794][ T8055]  ? import_iovec+0x74/0xa0
[  109.034226][ T8055]  ___sys_sendmsg+0x21f/0x2a0
[  109.035731][ T8055]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.037398][ T8055]  ? __fget_files+0x2a/0x420
[  109.038856][ T8055]  ? __fget_files+0x3a0/0x420
[  109.040331][ T8055]  __x64_sys_sendmsg+0x19b/0x260
[  109.042000][ T8055]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.043782][ T8055]  ? rcu_is_watching+0x15/0xb0
[  109.045466][ T8055]  ? do_syscall_64+0xbe/0x3b0
[  109.046956][ T8055]  do_syscall_64+0xfa/0x3b0
[  109.048377][ T8055]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.050050][ T8055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.052086][ T8055]  ? exc_page_fault+0x9f/0xf0
[  109.053619][ T8055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.055481][ T8055] RIP: 0033:0x7f802b98e929
[  109.056868][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.062959][ T8055] RSP: 002b:00007f802c73b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.065641][ T8055] RAX: ffffffffffffffda RBX: 00007f802bbb5fa0 RCX: 00007f802b98e929
[  109.068159][ T8055] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[  109.071107][ T8055] RBP: 00007f802ba10b39 R08: 0000000000000000 R09: 0000000000000000
[  109.073593][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.076038][ T8055] R13: 0000000000000000 R14: 00007f802bbb5fa0 R15: 00007fff0243bf48
[  109.078555][ T8055]  </TASK>
[  109.079558][ T8055] Modules linked in:
[  109.081089][ T8055] ---[ end trace 0000000000000000 ]---
[  109.083039][ T8055] RIP: 0010:hfsc_qlen_notify+0x2e/0x160
[  109.084869][ T8055] Code: 55 41 57 41 56 41 55 41 54 53 48 89 f3 49 bc 00 00 00 00 00 fc ff df e8 90 ef 45 f8 4c 8d b3 ec 02 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 e8 00 00 00 41 8b 2e 31 ff 89 ee e8 a9
[  109.091600][ T8055] RSP: 0018:ffffc900029befb0 EFLAGS: 00010203
[  109.093676][ T8055] RAX: 000000000000005d RBX: 0000000000000000 RCX: 0000000000080000
[  109.096401][ T8055] RDX: ffffc9000f047000 RSI: 0000000000001046 RDI: 0000000000001047
[  109.099246][ T8055] RBP: dffffc0000000000 R08: ffff88802107b980 R09: 0000000000000002
[  109.102026][ T8055] R10: 00000000ffffffff R11: ffffffff897a5ec0 R12: dffffc0000000000
[  109.104861][ T8055] R13: ffff88802afb2000 R14: 00000000000002ec R15: ffff88802afb2000
[  109.107668][ T8055] FS:  00007f802c73b6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[  109.111036][ T8055] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.113738][ T8055] CR2: 00007f6ff10a5fc8 CR3: 000000001f9f6000 CR4: 00000000000006f0
[  109.116480][ T8055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  109.119272][ T8055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  109.122168][ T8055] Kernel panic - not syncing: Fatal exception in interrupt
[  109.125342][ T8055] Kernel Offset: disabled
[  109.127091][ T8055] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:21:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001d3c RDI=0000000000001d3d RBP=00000000000003f8 RSP=ffffc900029be7f0
R8 =ffff8880214f0237 R9 =1ffff1100429e046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac490f R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f802c73b6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6ff10a5fc8 CR3=000000001f9f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6ff0384478 00007f6ff0384450 XMM03=00007f6ff0384488 00007f6ff0384480
XMM04=00007f6ff0eed100 00007f6ff0384440 XMM05=00007f6ff0384458 00007f6ff03844a0
XMM06=00007f6ff0384498 00007f6ff0384490 XMM07=00007f6ff0384488 00007f6ff0384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f6ff0211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fd278c74f9038400 RBX=ffffffff81974d58 RCX=fd278c74f9038400 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa10cf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ef1fffc CR3=0000000029f26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
