last executing test programs:

51.685406124s ago: executing program 1 (id=334):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x5}, {0x8}]}}]}]}, 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000040000000400c7b504000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$caif_stream(0x25, 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x4bcb, 0x4)
sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r6 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

50.695894648s ago: executing program 1 (id=351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x4000, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x18, r3}, 0x10)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
getsockopt(r0, 0x6, 0x6, &(0x7f0000000000)=""/37, &(0x7f0000000040)=0x25)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2e, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0xe9}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000001)
socket$caif_seqpacket(0x25, 0x5, 0x5)

50.625296809s ago: executing program 1 (id=354):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x70bd2b, 0x0, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x2c}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

50.623679366s ago: executing program 1 (id=356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a32f5ff000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0)

50.465320847s ago: executing program 1 (id=357):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='xen_mmu_alloc_ptpage\x00', r0, 0x0, 0xfffffffffffffff4}, 0x18)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}}, 0x4040) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x80)
unshare(0x8000200) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'vlan0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x75c6, './file0\x00'}})
r5 = socket$inet(0x2, 0x2, 0x2) (async)
r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) (async)
connect$can_bcm(r0, &(0x7f0000000540), 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r4) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r7) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x9, @local, 0x1}, @in={0x2, 0xa000, @private=0xa010101}, @in6={0xa, 0x4e24, 0x2, @remote, 0xa}], 0x48) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = accept4(r8, &(0x7f0000000680)=@generic, &(0x7f0000000700)=0x80, 0x80800)
ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r9, 0x10f, 0x83, &(0x7f0000000740), &(0x7f0000000780)=0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, <r11=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r5}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x1c, &(0x7f0000000980)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000a80)='GPL\x00', 0x1000, 0x44, &(0x7f0000000ac0)=""/68, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x7, 0x1f, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000bc0)=[{0x2, 0x4, 0xa}, {0x1, 0x5, 0xb, 0x2}, {0x4, 0x3, 0x0, 0x8}, {0x8, 0x3, 0x6, 0xc}, {0x2, 0x4, 0x1, 0x5}]}, 0x94) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6c}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x36}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1011}, 0x4000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6gre0\x00', <r13=>0x0, 0x4, 0x0, 0x38, 0xf20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x720, 0x8000, 0x4, 0x9}})
socketpair(0x5, 0x4, 0x9, &(0x7f0000000f00)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
bind$xdp(r0, &(0x7f0000000f40)={0x2c, 0x4, r13, 0x39, r14}, 0x10)

50.413458569s ago: executing program 1 (id=359):
unshare(0x400)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000100)='-', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x2, 0x0, @dev, 0x15}, 0xffffffffffffffe0)
r1 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800009, 0x110, 0xffffffffffffffff, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2027179e3f9e94f795c462aef60e842dada79a084ad573851312355a2a02", 0xff, 0xffff93df, 0x6, 0x2}, 0x3c)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@local, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', <r4=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r5=>r2})
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "2e0fa3f8373411cac032d65285579f4a9bb6ea4a085406de6aa1ff0a301b8a22", 0x4, 0x2, 0xffffff71, 0xfffff800}, 0x3c)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYBLOB="036beb0baa"], 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000680)={0x1d, r11, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@can_newroute={0x30, 0x18, 0x0, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x0, 0x1, 0x10}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1}, {0x2, 0x1}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

35.407513203s ago: executing program 32 (id=359):
unshare(0x400)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000100)='-', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x2, 0x0, @dev, 0x15}, 0xffffffffffffffe0)
r1 = socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800009, 0x110, 0xffffffffffffffff, 0x0)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2027179e3f9e94f795c462aef60e842dada79a084ad573851312355a2a02", 0xff, 0xffff93df, 0x6, 0x2}, 0x3c)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000080)={@local, @loopback, 0x1, "a25cfc95e75c9c55d5257a3fc5cf22adcb205d64f04fc93f830b020f52814d58", 0x2, 0xffffffff, 0x5, 0xfff}, 0x3c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', <r4=>0x0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={<r5=>r2})
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, "2e0fa3f8373411cac032d65285579f4a9bb6ea4a085406de6aa1ff0a301b8a22", 0x4, 0x2, 0xffffff71, 0xfffff800}, 0x3c)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYBLOB="036beb0baa"], 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f0000000680)={0x1d, r11, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000c300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@can_newroute={0x30, 0x18, 0x0, 0x70bd25, 0x25dfdbff, {0x1d, 0x1, 0x6}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x0, 0x1, 0x10}}, @CGW_FILTER={0xc, 0xb, {{0x2, 0x1}, {0x2, 0x1}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

19.155378541s ago: executing program 0 (id=811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b00000000000000710e42000000000040000000000000009500000000000000691770ea726390bd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xa, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b00000000000000710e42000000000040000000000000009500000000000000691770ea726390bd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xa, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4) (async)
setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000004ac0)=0x1e, 0x4)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000cc0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x4}}}, 0x108)
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1f, 0x0, 0x2d)
setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r8=>0x0})
accept4(r6, 0x0, 0x0, 0x180000)
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21012cbd7000000000001400000008000300", @ANYRES32=r8, @ANYBLOB="0600360803000000050029000c"], 0x2c}}, 0x0)
sendfile(r6, 0xffffffffffffffff, &(0x7f0000000040)=0xe71, 0xff)

19.102306337s ago: executing program 0 (id=814):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
listen(r0, 0x2)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x80004001}], 0x1, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="efe5e9", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="5f4845e454d045d203b51ec8998abfe0d22df295d54acda9702a8531438832069934ea95b377eaf6652c94a72ceed26a86561faf9d377e581bab151fd0a09650d110", 0x42}], 0x1}}], 0x2, 0xc8000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
sendmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@x25, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)}, {&(0x7f0000001d00)="fc61eefc", 0x4}], 0x2, &(0x7f0000000a40)=[{0x10, 0x118}, {0x40, 0x10b, 0x6, "9857bd52ce1f637902fd142f44fee17b3abcb63e7225d0f67a34df5c8875287519d23ad52151126b6d160dd392"}, {0x10, 0x322, 0x740}, {0x78, 0x101, 0x40, "af4a3ecd2978c144eb80b36b504b2428b3b49723c25f2db2917dba6afce61e4e6a64cc66db69da7a3df529fcb256edf3b2e75709c457f8301a66ac56eb1139d9f3658c2783fe8e44a31dacda57e6671fddb1990a7241ecb67855ad3b1be7a583b0"}], 0xd8}}], 0x2, 0x40000)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xffffffffffffff78}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000180)={r7, 0x1, 0x6, @local}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x2, 0x4, 0x420, 0xffffffff, 0x238, 0x148, 0x238, 0xfeffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2}, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x4f}, 0x2f2, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[0x7fffffff, 0x3], 0xffffff7f, 0x2, 0x2}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x6}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'sit0\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x4, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @local, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x81, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)

18.194949295s ago: executing program 0 (id=823):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x0, 0x7f, 0x6}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0x2, 0x1, 0x1}}, 0xf0}}, 0x804)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

17.973803933s ago: executing program 0 (id=825):
unshare(0x68040200)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0))
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
socket(0x10, 0x3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r6=>0x0, @empty, @private}, &(0x7f0000000180)=0xc)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000d0000000000000000400000018310000060000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00424a000000000000020000000000000000000094308ec08bddeec038cd97143fa1dc72ab9e3db7bb48959644995666f0aa0cd70243c6fe0c762ede62ed605720ac4bb21c653a821116ae106453a5311e181d9a4ebec5de9b319d309144356173930f1dd74396e53448ff08977a66229addaadfa17faa932188e4fc2f4344730868d23dab3a0f7e313f", @ANYRES32=r3, @ANYBLOB="0000000002000000181b0000", @ANYRES32, @ANYBLOB="00000000ffffffff354a9719", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000f60000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000006c66fcff100000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x352, 0x7, 0x1}, 0x10, 0xa90f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r7, @ANYBLOB="53bc710f3364870d31b9d3412fafe6e1078f62695a1efa68d170609c01da1d0fd670d536e9ac7188154650db990244ec87beca800a5a649ec431345589155515209a1127d3d611d6f707307af00ce120b97a603e2062282d6bab397a09546e9a416dfbab38f002022c4f0bab4f9da2a30e25aa8014d66ea3dccc248c10d7c69946cfb9bf40e1f05c129de2bbb514c23ac0aa7ddb13ce88181ade352e512c529976a0ae478471797ba60ff19d92cfb6edbd7f53e22ccc81b634", @ANYBLOB="06000000000000000000000000000000bad4d11b", @ANYRES16=r4, @ANYRES64=r7, @ANYBLOB="0300"/28], 0x50)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r11, r10, 0x0, 0x9c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r14, 0xff03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000d3030000000000008500000083000000bf09000000000000550901000000370dffffffffe1000000bf911d0000800000b7020000020000008500000085000100b7000000000000009500000000000002"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x1000}, 0x10, 0x0, r7, 0x0, &(0x7f0000000500)=[r8, r10, r14, 0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x3}, 0x94)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r12], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r15, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)

11.550674735s ago: executing program 0 (id=825):
unshare(0x68040200)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0))
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
socket(0x10, 0x3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r6=>0x0, @empty, @private}, &(0x7f0000000180)=0xc)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000d0000000000000000400000018310000060000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00424a000000000000020000000000000000000094308ec08bddeec038cd97143fa1dc72ab9e3db7bb48959644995666f0aa0cd70243c6fe0c762ede62ed605720ac4bb21c653a821116ae106453a5311e181d9a4ebec5de9b319d309144356173930f1dd74396e53448ff08977a66229addaadfa17faa932188e4fc2f4344730868d23dab3a0f7e313f", @ANYRES32=r3, @ANYBLOB="0000000002000000181b0000", @ANYRES32, @ANYBLOB="00000000ffffffff354a9719", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000f60000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000006c66fcff100000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x352, 0x7, 0x1}, 0x10, 0xa90f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r7, @ANYBLOB="53bc710f3364870d31b9d3412fafe6e1078f62695a1efa68d170609c01da1d0fd670d536e9ac7188154650db990244ec87beca800a5a649ec431345589155515209a1127d3d611d6f707307af00ce120b97a603e2062282d6bab397a09546e9a416dfbab38f002022c4f0bab4f9da2a30e25aa8014d66ea3dccc248c10d7c69946cfb9bf40e1f05c129de2bbb514c23ac0aa7ddb13ce88181ade352e512c529976a0ae478471797ba60ff19d92cfb6edbd7f53e22ccc81b634", @ANYBLOB="06000000000000000000000000000000bad4d11b", @ANYRES16=r4, @ANYRES64=r7, @ANYBLOB="0300"/28], 0x50)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r11, r10, 0x0, 0x9c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r14, 0xff03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000d3030000000000008500000083000000bf09000000000000550901000000370dffffffffe1000000bf911d0000800000b7020000020000008500000085000100b7000000000000009500000000000002"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x1000}, 0x10, 0x0, r7, 0x0, &(0x7f0000000500)=[r8, r10, r14, 0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x3}, 0x94)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r12], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r15, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)

6.142131564s ago: executing program 0 (id=825):
unshare(0x68040200)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0))
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
socket(0x10, 0x3, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r6=>0x0, @empty, @private}, &(0x7f0000000180)=0xc)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000d0000000000000000400000018310000060000000000000000000000181b0000", @ANYRES32, @ANYBLOB="00424a000000000000020000000000000000000094308ec08bddeec038cd97143fa1dc72ab9e3db7bb48959644995666f0aa0cd70243c6fe0c762ede62ed605720ac4bb21c653a821116ae106453a5311e181d9a4ebec5de9b319d309144356173930f1dd74396e53448ff08977a66229addaadfa17faa932188e4fc2f4344730868d23dab3a0f7e313f", @ANYRES32=r3, @ANYBLOB="0000000002000000181b0000", @ANYRES32, @ANYBLOB="00000000ffffffff354a9719", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000f60000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000006c66fcff100000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000000b40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x352, 0x7, 0x1}, 0x10, 0xa90f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r7, @ANYBLOB="53bc710f3364870d31b9d3412fafe6e1078f62695a1efa68d170609c01da1d0fd670d536e9ac7188154650db990244ec87beca800a5a649ec431345589155515209a1127d3d611d6f707307af00ce120b97a603e2062282d6bab397a09546e9a416dfbab38f002022c4f0bab4f9da2a30e25aa8014d66ea3dccc248c10d7c69946cfb9bf40e1f05c129de2bbb514c23ac0aa7ddb13ce88181ade352e512c529976a0ae478471797ba60ff19d92cfb6edbd7f53e22ccc81b634", @ANYBLOB="06000000000000000000000000000000bad4d11b", @ANYRES16=r4, @ANYRES64=r7, @ANYBLOB="0300"/28], 0x50)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r9, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendfile(r11, r10, 0x0, 0x9c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r13, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r14, 0xff03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000008000000000000000180000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000d3030000000000008500000083000000bf09000000000000550901000000370dffffffffe1000000bf911d0000800000b7020000020000008500000085000100b7000000000000009500000000000002"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x50, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x1000}, 0x10, 0x0, r7, 0x0, &(0x7f0000000500)=[r8, r10, r14, 0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x3}, 0x94)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r12], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r15, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0)

875.404309ms ago: executing program 3 (id=1026):
socket(0x8, 0x5, 0x7) (async, rerun: 32)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff0000000900f2ff"], 0x20}}, 0x4000054) (async, rerun: 32)
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x8, {{0xa, 0x0, 0x4, @mcast2, 0x2}}}, 0x88) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) (async)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) (async)
sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="44a781", 0x3}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06c63f00bbbbbbbbbbbbaaaaaaaaaabb88f5da6f138334a4b4f402f79a03122dd07711fb6a9248302b82fe2a5964320ad4231f3388ea3b7fe8b9fcf7ab4d2889214573005620bc3954313de8351d3ff638"], 0x72)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r6)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0) (async, rerun: 64)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x4800, @private2, 0xbc}}}, 0x32) (async, rerun: 64)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r8, 0x0, 0x0, 0x84)

803.267245ms ago: executing program 3 (id=1028):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000)

744.340752ms ago: executing program 3 (id=1030):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x128, 0x5802, 0x294, 0x0, 0x294, 0x288, 0x378, 0x378, 0x288, 0x378, 0x3, 0x0, {[{{@uncond, 0xf202, 0x108, 0x128, 0x52020000, {0x0, 0x600}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@mh={{0x28}, {"123a"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4)
connect$pppoe(r5, &(0x7f00000004c0)={0x18, 0x0, {0x1, @link_local, 'virt_wifi0\x00'}}, 0x1e)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x198, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @remote, 0xb588}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb19, @private0, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x16}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffbff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4c8b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x48}}, 0x0)

673.355383ms ago: executing program 3 (id=1031):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r3, &(0x7f0000000240)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "37f707085394893947dd37e23106b4cfae87c9c69d0b7f91", "27497dfd51a3a5418f31bf21ba3529cba8626cbe92065e6de7f910bedd514f5c"}}}}}}}, 0x6e) (async)
syz_init_net_socket$ax25(0x3, 0x3, 0x6) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff9a, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES8, @ANYBLOB="001a0000000000002c00128009000100626f6e64000000f91b0002800500010004002000080020", @ANYRES16=r3, @ANYRESHEX=r2], 0x4c}}, 0x40007)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0300000000007400"/20, @ANYRES32=r7, @ANYBLOB="049c01000750050008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000080)={0x2, 0xffff, 0xc, &(0x7f0000000000)=""/12}) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async)
syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000d12c32303c135e13dabcbe6775cfe3b25800000000000000000000000001540000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb000000002000000002000000000300"/118], 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, 0x140b, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) (async)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={'bridge_slave_1\x00', {0x2, 0x4e22, @private=0xa010101}})

545.210828ms ago: executing program 2 (id=1032):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(r1, 0x1ad72f7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x408d4)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r7, 0x0, 0x2a, 0x0, 0x0)
sendmsg$inet(r7, &(0x7f00000028c0)={&(0x7f0000002700)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002740)="2e2800a464a9", 0x6}, {0x0}], 0x2}, 0xd4)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r1)

544.579011ms ago: executing program 3 (id=1033):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000180)='./file0/file0\x00', 0x0, 0xc, r0}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r1}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x841, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff0300000000000000000000000000010420880b000000000000081c000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000100800655800000025a864d026823c42b8009d649786d000"], 0x82)
read$alg(r4, &(0x7f00000003c0)=""/98, 0x4c)
socket$inet6(0xa, 0x2, 0x3)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r10)
bind$netrom(r10, 0x0, 0x0)
recvmmsg(r10, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)
setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000040)={0x6, [0x10001, 0xfffff5b5], 0x4}, 0x10)
write(r5, &(0x7f0000003300)="ac", 0x1)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc)
ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x10001)
write(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

284.051286ms ago: executing program 2 (id=1034):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4)
shutdown(r0, 0x1)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/18, 0x12}, 0x3}], 0x1, 0x2300, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r2, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2)

185.755004ms ago: executing program 2 (id=1035):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)

65.510733ms ago: executing program 2 (id=1036):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800)
connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x102, 0x66, 0x3, 0x3, 0x3, @remote}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x16, 0xa01, 0x0, 0x0, {0x2}, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x11c}]}]}, 0x1c}}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf256800000008000300", @ANYRES32=r4], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

64.580502ms ago: executing program 2 (id=1037):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e)
connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0xa, @loopback}}, 0x1e)

4.908457ms ago: executing program 3 (id=1038):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61, 0x61, 0x61, 0x30]}}, 0x0, 0x2e, 0x0, 0x1, 0x3}, 0x28)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x36)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x440d4}, 0x20044054)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x61, 0x61, 0x61, 0x30]}}, 0x0, 0x2e, 0x0, 0x1, 0x3}, 0x28) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x36) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x440d4}, 0x20044054) (async)

0s ago: executing program 2 (id=1039):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, <r1=>0x0]}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x1, 0x3, 0x10, 0x2, 0x3}, &(0x7f0000000080)=0x98)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r4, 0x104, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000180)='syz0\x00', 0x1ff) (async)
r6 = openat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) (async)
r7 = socket$inet_sctp(0x2, 0x3, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x70}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@unspec=@mark={{0x30}, {0x401, 0x6, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet(r8, &(0x7f0000002500)=[{{&(0x7f0000002340)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000024c0)=[@ip_tos_int={{0x10}}], 0x10}}], 0x1, 0x0)
r9 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35204' (ED25519) to the list of known hosts.
syzkaller login: [   49.341957][ T5798] cgroup: Unknown subsys name 'net'
[   49.452768][ T5798] cgroup: Unknown subsys name 'cpuset'
[   49.457994][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.787742][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.625214][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.630632][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.664842][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.668279][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.672232][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.676766][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.676903][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.683216][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.686527][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.689793][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.709391][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.712389][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.714968][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.718339][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.721332][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.977546][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   55.023379][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   55.153592][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.156082][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.158794][ T5814] bridge_slave_0: entered allmulticast mode
[   55.161459][ T5814] bridge_slave_0: entered promiscuous mode
[   55.168802][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   55.182646][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.185351][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.187723][ T5814] bridge_slave_1: entered allmulticast mode
[   55.191379][ T5814] bridge_slave_1: entered promiscuous mode
[   55.201509][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.204038][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.206456][ T5811] bridge_slave_0: entered allmulticast mode
[   55.210168][ T5811] bridge_slave_0: entered promiscuous mode
[   55.213492][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.216042][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.218679][ T5811] bridge_slave_1: entered allmulticast mode
[   55.221438][ T5811] bridge_slave_1: entered promiscuous mode
[   55.269175][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.290802][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.296051][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.302783][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.360620][ T5814] team0: Port device team_slave_0 added
[   55.371908][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.374332][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.376680][ T5820] bridge_slave_0: entered allmulticast mode
[   55.380556][ T5820] bridge_slave_0: entered promiscuous mode
[   55.394071][ T5814] team0: Port device team_slave_1 added
[   55.404835][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.407614][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.411369][ T5820] bridge_slave_1: entered allmulticast mode
[   55.414357][ T5820] bridge_slave_1: entered promiscuous mode
[   55.418999][ T5811] team0: Port device team_slave_0 added
[   55.422787][ T5811] team0: Port device team_slave_1 added
[   55.448373][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.450915][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.459536][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.480696][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.483377][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.492833][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.496764][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.499661][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.507897][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.514874][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.523925][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.526583][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.535522][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.545259][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.585957][ T5814] hsr_slave_0: entered promiscuous mode
[   55.589637][ T5814] hsr_slave_1: entered promiscuous mode
[   55.595446][ T5820] team0: Port device team_slave_0 added
[   55.609061][ T5820] team0: Port device team_slave_1 added
[   55.651161][ T5811] hsr_slave_0: entered promiscuous mode
[   55.653524][ T5811] hsr_slave_1: entered promiscuous mode
[   55.656164][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.659555][ T5811] Cannot create hsr debugfs directory
[   55.678027][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.681037][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.690201][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.706699][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.710194][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.719039][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.775857][ T5820] hsr_slave_0: entered promiscuous mode
[   55.779721][ T5820] hsr_slave_1: entered promiscuous mode
[   55.781982][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.784455][ T5820] Cannot create hsr debugfs directory
[   55.942064][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.961902][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.966367][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.983449][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.013086][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.026818][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.050568][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.056737][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.099159][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.104378][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.114436][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.124759][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.229863][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.261184][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   56.274960][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.278244][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.290860][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.297334][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.307424][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.310663][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.326528][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   56.345096][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   56.353269][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.355668][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.370254][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.372688][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.383901][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.386919][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.402378][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.404782][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.541645][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.590563][ T5820] veth0_vlan: entered promiscuous mode
[   56.594869][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.611086][ T5820] veth1_vlan: entered promiscuous mode
[   56.631283][ T5811] veth0_vlan: entered promiscuous mode
[   56.642920][ T5820] veth0_macvtap: entered promiscuous mode
[   56.646507][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.652002][ T5811] veth1_vlan: entered promiscuous mode
[   56.654706][ T5820] veth1_macvtap: entered promiscuous mode
[   56.674316][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.683756][ T5811] veth0_macvtap: entered promiscuous mode
[   56.691064][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.694962][ T5811] veth1_macvtap: entered promiscuous mode
[   56.701985][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.705069][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.707975][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.715762][ T5815] Bluetooth: hci0: command tx timeout
[   56.718939][ T5815] Bluetooth: hci1: command tx timeout
[   56.720982][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.751263][ T5814] veth0_vlan: entered promiscuous mode
[   56.758870][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.767910][ T5814] veth1_vlan: entered promiscuous mode
[   56.785260][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.788494][ T5815] Bluetooth: hci2: command tx timeout
[   56.804826][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.807793][ T5811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.811957][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.814849][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.827220][ T5814] veth0_macvtap: entered promiscuous mode
[   56.834868][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.839093][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.841059][ T5814] veth1_macvtap: entered promiscuous mode
[   56.875146][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.878412][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.878556][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.889569][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.907506][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.912342][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.915221][ T5814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.923297][ T5814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.937524][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.951257][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.961771][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.014607][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.017169][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.045439][ T5876] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   57.046229][ T3866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.053668][ T3866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.080107][ T3866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.082645][ T3866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.154304][ T5882] Bluetooth: MGMT ver 1.23
[   57.253409][ T5892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.561244][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   57.644627][ T5920] pim6reg1: entered promiscuous mode
[   57.646984][ T5920] pim6reg1: entered allmulticast mode
[   57.652975][ T5920] netlink: 'syz.2.10': attribute type 11 has an invalid length.
[   57.656371][ T5920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'.
[   57.884864][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'.
[   58.276481][ T5953] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.285464][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.22'.
[   58.290883][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'.
[   58.295988][ T5953] netlink: 128 bytes leftover after parsing attributes in process `syz.0.22'.
[   58.480685][ T5962] batman_adv: batadv0: Adding interface: dummy0
[   58.482789][ T5962] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.492389][ T5962] batman_adv: batadv0: Interface activated: dummy0
[   58.499916][ T5962] batadv0: mtu less than device minimum
[   58.502977][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.506853][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.510614][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.514681][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.518457][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.522278][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.525987][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.529797][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.533593][ T5962] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   58.788302][ T5815] Bluetooth: hci1: command tx timeout
[   58.788404][   T54] Bluetooth: hci0: command tx timeout
[   58.868726][   T54] Bluetooth: hci2: command tx timeout
[   58.875484][ T5987] tipc: Started in network mode
[   58.877507][ T5987] tipc: Node identity 2000007, cluster identity 4711
[   58.880376][ T5987] tipc: Node number set to 33554439
[   58.987879][ T5993] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET)
[   58.992762][ T5993] syzkaller1: entered promiscuous mode
[   58.995011][ T5993] syzkaller1: entered allmulticast mode
[   60.099376][ T6001] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[   60.274269][ T6006] geneve2: entered promiscuous mode
[   60.385504][ T6008] warning: `syz.0.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.732343][ T6022] batman_adv: batadv0: Interface deactivated: dummy0
[   60.737077][ T6022] batman_adv: batadv0: Removing interface: dummy0
[   60.742961][ T6022] bridge_slave_0: left allmulticast mode
[   60.745291][ T6022] bridge_slave_0: left promiscuous mode
[   60.750622][ T6022] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.779955][ T6022] bridge_slave_1: left allmulticast mode
[   60.782480][ T6022] bridge_slave_1: left promiscuous mode
[   60.785035][ T6022] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.791189][ T6025] netlink: 'syz.2.46': attribute type 3 has an invalid length.
[   60.793810][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   60.827187][ T6022] bond0: (slave bond_slave_0): Releasing backup interface
[   60.834019][ T6022] bond0: (slave bond_slave_1): Releasing backup interface
[   60.845701][ T6022] team0: Port device team_slave_0 removed
[   60.857945][ T6022] team0: Port device team_slave_1 removed
[   60.862428][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.864966][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.868352][   T54] Bluetooth: hci1: command tx timeout
[   60.871090][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.873791][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.878219][ T5815] Bluetooth: hci0: command tx timeout
[   60.968231][ T5815] Bluetooth: hci2: command tx timeout
[   60.974231][  T970] IPVS: starting estimator thread 0...
[   61.098738][ T6031] IPVS: using max 80 ests per chain, 192000 per kthread
[   61.107393][ T6035] nft_compat: unsupported protocol 0
[   61.239971][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'.
[   61.245278][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'.
[   61.251159][ T6038] netlink: 31 bytes leftover after parsing attributes in process `syz.2.49'.
[   61.255165][ T6038] netlink: 'syz.2.49': attribute type 3 has an invalid length.
[   61.259425][ T6038] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   61.262747][ T6038] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   61.363909][ T6042] IPVS: Error connecting to the multicast addr
[   61.367109][ T6042] Driver unsupported XDP return value 0 on prog  (id 19) dev N/A, expect packet loss!
[   61.569268][ T6049] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   61.779779][ T6060] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.783168][ T6060] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.786169][ T6060] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.789555][ T6060] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.797927][ T6060] team0: Port device vxlan0 added
[   62.181643][ T6091] Zero length message leads to an empty skb
[   62.341782][ T6100] IPVS: persistence engine module ip_vs_pe_ not found
[   62.603424][ T6120] __nla_validate_parse: 6 callbacks suppressed
[   62.603438][ T6120] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   62.618430][ T6121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   62.762248][ T6132] netlink: 216 bytes leftover after parsing attributes in process `syz.2.69'.
[   62.766163][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'.
[   62.776544][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'.
[   62.781939][ T6132] netlink: 76 bytes leftover after parsing attributes in process `syz.2.69'.
[   62.948772][ T5815] Bluetooth: hci0: command tx timeout
[   62.948981][   T54] Bluetooth: hci1: command tx timeout
[   62.989509][ T6138] netlink: 92 bytes leftover after parsing attributes in process `syz.0.71'.
[   62.994292][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.000981][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.028432][   T54] Bluetooth: hci2: command tx timeout
[   63.300434][ T6152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.76'.
[   63.513690][    C0] Unknown status report in ack skb
[   63.546735][ T6175] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   63.632400][ T6184] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   63.918697][    C0] Unknown status report in ack skb
[   63.967516][ T6217] syzkaller1: entered promiscuous mode
[   63.970729][ T6217] syzkaller1: entered allmulticast mode
[   64.242727][ T6231] batman_adv: batadv0: Adding interface: ip6gretap1
[   64.245036][ T6231] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.254441][ T6231] batman_adv: batadv0: Interface activated: ip6gretap1
[   64.562937][ T6254] netlink: 'syz.0.109': attribute type 9 has an invalid length.
[   64.563932][ T6252] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   64.613658][ T6252] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   64.616492][ T6252] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   64.845618][ T6275] netlink: 'syz.0.113': attribute type 1 has an invalid length.
[   65.271032][ T6298] sctp: [Deprecated]: syz.1.121 (pid 6298) Use of int in maxseg socket option.
[   65.271032][ T6298] Use struct sctp_assoc_value instead
[   65.834308][ T6324] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   66.302858][ T6332] net_ratelimit: 17 callbacks suppressed
[   66.302871][ T6332] openvswitch: netlink: Duplicate or invalid key (type 0).
[   66.310367][ T6332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.432600][ T6339] syz.1.135 (6339) used greatest stack depth: 20728 bytes left
[   66.551253][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.554198][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.557387][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.567064][ T6351] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   66.582898][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.588001][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.593430][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0
[   66.596666][  T970] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3
[   66.618740][  T970] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   66.685099][ T6354] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   66.710004][    C0] Unknown status report in ack skb
[   66.734959][ T6364] set match dimension is over the limit!
[   66.955926][ T6375] netlink: 'syz.2.145': attribute type 12 has an invalid length.
[   66.960218][ T6375] netlink: 'syz.2.145': attribute type 29 has an invalid length.
[   67.035402][ T6379] xt_CT: No such helper "snmp"
[   67.203286][ T6383] netlink: 'syz.0.148': attribute type 7 has an invalid length.
[   67.205881][ T6383] netlink: 'syz.0.148': attribute type 8 has an invalid length.
[   67.209675][ T6383] netlink: 'syz.0.148': attribute type 4 has an invalid length.
[   67.563182][ T6397] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   67.572250][ T6397] syz.1.154 (6397) used greatest stack depth: 20568 bytes left
[   67.625653][ T6400] __nla_validate_parse: 50 callbacks suppressed
[   67.625664][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   67.977278][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.048511][ T6422] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002
[   68.057049][ T6425] IPVS: set_ctl: invalid protocol: 50 10.1.1.0:20002
[   68.096443][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.164'.
[   68.168019][ T6431] trusted_key: syz.1.165 sent an empty control message without MSG_MORE.
[   68.439353][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'.
[   68.497876][ T6452] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   68.718400][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   69.306278][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'.
[   69.330762][   T33] audit: type=1107 audit(1751702718.805:2): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='yW҉n_7P3o5'.;>JǾ\B܀<	z{e}"҉Hm~܁3_ܺQyQ*5׾G|sVTJDg[ɞ3INsW[*]_MgP'Ay^K;m2zQ%=7y'
[   69.373590][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[   69.376788][ T6485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.570414][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.575017][ T6500] No such timeout policy "syz0"
[   69.636244][ T6503] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   69.641680][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.1.184 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   69.641692][ T6503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.641697][ T6503] Call Trace:
[   69.641701][ T6503]  <TASK>
[   69.641705][ T6503]  dump_stack_lvl+0x189/0x250
[   69.641723][ T6503]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.641742][ T6503]  ? __pfx__printk+0x10/0x10
[   69.641755][ T6503]  ? kernfs_path_from_node+0x2c/0x260
[   69.641767][ T6503]  ? kernfs_path_from_node+0x2c/0x260
[   69.641775][ T6503]  ? kernfs_path_from_node+0x2c/0x260
[   69.641783][ T6503]  ? kernfs_path_from_node+0x22c/0x260
[   69.641790][ T6503]  ? kernfs_path_from_node+0x2c/0x260
[   69.641799][ T6503]  sysfs_warn_dup+0x8e/0xa0
[   69.641808][ T6503]  sysfs_do_create_link_sd+0xc0/0x110
[   69.641819][ T6503]  device_add_class_symlinks+0x1cf/0x240
[   69.641834][ T6503]  device_add+0x475/0xb50
[   69.641849][ T6503]  wiphy_register+0x199a/0x26b0
[   69.641869][ T6503]  ? __pfx_wiphy_register+0x10/0x10
[   69.641877][ T6503]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   69.641889][ T6503]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   69.641901][ T6503]  ieee80211_register_hw+0x33e1/0x4120
[   69.641927][ T6503]  ? ieee80211_register_hw+0x14b1/0x4120
[   69.641970][ T6503]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   69.641982][ T6503]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.642006][ T6503]  ? __hrtimer_setup+0x187/0x210
[   69.642023][ T6503]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   69.642039][ T6503]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   69.642076][ T6503]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   69.642091][ T6503]  ? trace_kmalloc+0x1f/0xd0
[   69.642101][ T6503]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   69.642112][ T6503]  ? kstrndup+0xbf/0x160
[   69.642159][ T6503]  hwsim_new_radio_nl+0xea4/0x1b10
[   69.642168][ T6503]  ? __pfx___nla_validate_parse+0x10/0x10
[   69.642196][ T6503]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   69.642217][ T6503]  ? __nla_parse+0x40/0x60
[   69.642237][ T6503]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   69.642257][ T6503]  genl_family_rcv_msg_doit+0x215/0x300
[   69.642276][ T6503]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   69.642302][ T6503]  ? bpf_lsm_capable+0x9/0x20
[   69.642312][ T6503]  ? security_capable+0x7e/0x2e0
[   69.642330][ T6503]  genl_rcv_msg+0x60e/0x790
[   69.642347][ T6503]  ? __pfx_genl_rcv_msg+0x10/0x10
[   69.642360][ T6503]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   69.642382][ T6503]  netlink_rcv_skb+0x208/0x470
[   69.642395][ T6503]  ? __pfx_genl_rcv_msg+0x10/0x10
[   69.642412][ T6503]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   69.642433][ T6503]  ? down_read+0x1ad/0x2e0
[   69.642444][ T6503]  genl_rcv+0x28/0x40
[   69.642457][ T6503]  netlink_unicast+0x75b/0x8d0
[   69.642475][ T6503]  netlink_sendmsg+0x805/0xb30
[   69.642490][ T6503]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.642503][ T6503]  ? aa_sock_msg_perm+0x94/0x160
[   69.642518][ T6503]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   69.642531][ T6503]  ? __pfx_netlink_sendmsg+0x10/0x10
[   69.642545][ T6503]  __sock_sendmsg+0x21c/0x270
[   69.642564][ T6503]  ____sys_sendmsg+0x505/0x830
[   69.642582][ T6503]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.642602][ T6503]  ? import_iovec+0x74/0xa0
[   69.642616][ T6503]  ___sys_sendmsg+0x21f/0x2a0
[   69.642632][ T6503]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.642672][ T6503]  ? __fget_files+0x2a/0x420
[   69.642679][ T6503]  ? __fget_files+0x3a0/0x420
[   69.642691][ T6503]  __x64_sys_sendmsg+0x19b/0x260
[   69.642701][ T6503]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   69.642718][ T6503]  ? do_syscall_64+0xbe/0x3b0
[   69.642726][ T6503]  do_syscall_64+0xfa/0x3b0
[   69.642732][ T6503]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.642741][ T6503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.642752][ T6503]  ? exc_page_fault+0x9f/0xf0
[   69.642768][ T6503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.642779][ T6503] RIP: 0033:0x7fd61d38e929
[   69.642790][ T6503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.642799][ T6503] RSP: 002b:00007fd61e1e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.642812][ T6503] RAX: ffffffffffffffda RBX: 00007fd61d5b5fa0 RCX: 00007fd61d38e929
[   69.642820][ T6503] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[   69.642826][ T6503] RBP: 00007fd61d410b39 R08: 0000000000000000 R09: 0000000000000000
[   69.642831][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.642835][ T6503] R13: 0000000000000000 R14: 00007fd61d5b5fa0 R15: 00007ffda0867e78
[   69.642847][ T6503]  </TASK>
[   69.643377][ T6504] validate_nla: 1 callbacks suppressed
[   69.643392][ T6504] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   69.843415][ T6504] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.926290][ T6509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.185'.
[   69.931964][ T6509] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   69.937297][ T6509] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   69.940116][ T6509] netlink: 224 bytes leftover after parsing attributes in process `syz.0.185'.
[   70.702972][ T6519] syz_tun: entered promiscuous mode
[   70.706696][ T6519] batadv_slave_0: entered promiscuous mode
[   70.714692][ T6519] hsr1: entered allmulticast mode
[   70.716449][ T6519] syz_tun: entered allmulticast mode
[   70.718723][ T6519] batadv_slave_0: entered allmulticast mode
[   70.745213][ T6526] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   70.944325][ T6548] netlink: 'syz.1.198': attribute type 3 has an invalid length.
[   70.947611][ T6548] netlink: 'syz.1.198': attribute type 2 has an invalid length.
[   70.954760][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.963528][ T6548] netlink: 'syz.1.198': attribute type 2 has an invalid length.
[   70.967735][ T6549] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   70.977392][ T6552] netlink: 'syz.1.198': attribute type 3 has an invalid length.
[   70.981823][ T6552] netlink: 'syz.1.198': attribute type 2 has an invalid length.
[   70.985196][ T6552] netlink: 'syz.1.198': attribute type 2 has an invalid length.
[   71.136328][ T6568] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   71.158021][ T6568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   71.255713][ T6576] netlink: 'syz.2.206': attribute type 1 has an invalid length.
[   71.299934][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.339249][ T6576] bond1: (slave gretap1): making interface the new active one
[   71.342572][ T6576] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   71.365706][ T6576] syz.2.206 (6576) used greatest stack depth: 20040 bytes left
[   71.467708][ T6597] IPv6: NLM_F_REPLACE set, but no existing node found!
[   71.532894][ T6589] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.537156][ T6589] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.542795][ T6589] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.546855][ T6589] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.591638][ T6589] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.595693][ T6589] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.599900][ T6589] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.603665][ T6589] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.945975][ T6632] bond0: Unable to set down delay as MII monitoring is disabled
[   72.204402][ T6648] team0: Device ipvlan1 failed to register rx_handler
[   72.224668][ T6651] team0: Device ipvlan1 failed to register rx_handler
[   73.015363][ T6709] __nla_validate_parse: 13 callbacks suppressed
[   73.015374][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'.
[   73.087274][ T6720] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   73.232983][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'.
[   73.413574][ T6745] syz.1.239: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   73.420594][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.1.239 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   73.420612][ T6745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.420619][ T6745] Call Trace:
[   73.420624][ T6745]  <TASK>
[   73.420629][ T6745]  dump_stack_lvl+0x189/0x250
[   73.420657][ T6745]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.420674][ T6745]  ? __pfx__printk+0x10/0x10
[   73.420711][ T6745]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   73.420725][ T6745]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   73.420741][ T6745]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   73.420757][ T6745]  warn_alloc+0x214/0x310
[   73.420772][ T6745]  ? stack_depot_save_flags+0x429/0x900
[   73.420790][ T6745]  ? __pfx_warn_alloc+0x10/0x10
[   73.420806][ T6745]  ? kasan_save_track+0x4f/0x80
[   73.420826][ T6745]  ? xskq_create+0x56/0x170
[   73.420842][ T6745]  ? xsk_init_queue+0xb0/0x110
[   73.420858][ T6745]  ? xsk_setsockopt+0x43f/0x710
[   73.420872][ T6745]  ? do_sock_setsockopt+0x25a/0x3e0
[   73.420886][ T6745]  ? __x64_sys_setsockopt+0x18b/0x220
[   73.420898][ T6745]  ? do_syscall_64+0xfa/0x3b0
[   73.420908][ T6745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.420926][ T6745]  __vmalloc_node_range_noprof+0x125/0x12f0
[   73.420958][ T6745]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   73.420973][ T6745]  ? __kasan_kmalloc+0x93/0xb0
[   73.420987][ T6745]  vmalloc_user_noprof+0xad/0xf0
[   73.421000][ T6745]  ? xskq_create+0xbf/0x170
[   73.421015][ T6745]  xskq_create+0xbf/0x170
[   73.421034][ T6745]  xsk_init_queue+0xb0/0x110
[   73.421053][ T6745]  xsk_setsockopt+0x43f/0x710
[   73.421071][ T6745]  ? __pfx_xsk_setsockopt+0x10/0x10
[   73.421086][ T6745]  ? __lock_acquire+0xab9/0xd20
[   73.421110][ T6745]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   73.421156][ T6745]  ? __pfx_xsk_setsockopt+0x10/0x10
[   73.421175][ T6745]  do_sock_setsockopt+0x25a/0x3e0
[   73.421192][ T6745]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   73.421211][ T6745]  ? __fget_files+0x2a/0x420
[   73.421231][ T6745]  __x64_sys_setsockopt+0x18b/0x220
[   73.421249][ T6745]  do_syscall_64+0xfa/0x3b0
[   73.421267][ T6745]  ? lockdep_hardirqs_on+0x9c/0x150
[   73.421304][ T6745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.421318][ T6745]  ? exc_page_fault+0x9f/0xf0
[   73.421337][ T6745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.421349][ T6745] RIP: 0033:0x7fd61d38e929
[   73.421362][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.421372][ T6745] RSP: 002b:00007fd61e1c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   73.421385][ T6745] RAX: ffffffffffffffda RBX: 00007fd61d5b6080 RCX: 00007fd61d38e929
[   73.421395][ T6745] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[   73.421402][ T6745] RBP: 00007fd61d410b39 R08: 0000000000000004 R09: 0000000000000000
[   73.421410][ T6745] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.421418][ T6745] R13: 0000000000000000 R14: 00007fd61d5b6080 R15: 00007ffda0867e78
[   73.421439][ T6745]  </TASK>
[   73.421636][ T6745] Mem-Info:
[   73.538394][ T6744] openvswitch: netlink: IP tunnel TTL not specified.
[   73.540567][ T6745] active_anon:5537 inactive_anon:0 isolated_anon:0
[   73.540567][ T6745]  active_file:959 inactive_file:38210 isolated_file:0
[   73.540567][ T6745]  unevictable:1768 dirty:1470 writeback:0
[   73.540567][ T6745]  slab_reclaimable:9058 slab_unreclaimable:55233
[   73.540567][ T6745]  mapped:18151 shmem:2446 pagetables:931
[   73.540567][ T6745]  sec_pagetables:0 bounce:0
[   73.540567][ T6745]  kernel_misc_reclaimable:0
[   73.540567][ T6745]  free:297876 free_pcp:21832 free_cma:0
[   73.558340][ T6745] Node 0 active_anon:11680kB inactive_anon:0kB active_file:2864kB inactive_file:9080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37668kB dirty:4180kB writeback:0kB shmem:4688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5188kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.572158][ T6745] Node 1 active_anon:10468kB inactive_anon:0kB active_file:972kB inactive_file:143760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34936kB dirty:1700kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6480kB pagetables:1312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.586844][ T6745] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.599914][ T6745] lowmem_reserve[]: 0 815 815 815 815
[   73.602156][ T6745] Node 0 DMA32 free:440628kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11680kB inactive_anon:0kB active_file:2864kB inactive_file:9080kB unevictable:3536kB writepending:4180kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:27376kB local_pcp:11020kB free_cma:0kB
[   73.612489][ T6745] lowmem_reserve[]: 0 0 0 0 0
[   73.614000][ T6745] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.623828][ T6745] lowmem_reserve[]: 0 0 854 854 854
[   73.625528][ T6745] Node 1 Normal free:277172kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10468kB inactive_anon:0kB active_file:972kB inactive_file:143760kB unevictable:3536kB writepending:1700kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:59728kB local_pcp:22860kB free_cma:0kB
[   73.635335][ T6745] lowmem_reserve[]: 0 0 0 0 0
[   73.636851][ T6745] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   73.641076][ T6745] Node 0 DMA32: 511*4kB (UM) 137*8kB (UM) 35*16kB (UME) 38*32kB (UME) 24*64kB (UME) 20*128kB (UME) 6*256kB (UM) 2*512kB (UM) 3*1024kB (M) 4*2048kB (UM) 102*4096kB (M) = 440628kB
[   73.646579][ T6745] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   73.651662][ T6745] Node 1 Normal: 147*4kB (UME) 351*8kB (UME) 147*16kB (UME) 81*32kB (UME) 58*64kB (UME) 30*128kB (UME) 13*256kB (UM) 6*512kB (UME) 7*1024kB (UM) 9*2048kB (UME) 56*4096kB (M) = 277268kB
[   73.657357][ T6745] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.660371][ T6745] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.663232][ T6745] 41615 total pagecache pages
[   73.664726][ T6745] 0 pages in swap cache
[   73.666081][ T6745] Free swap  = 124996kB
[   73.667411][ T6745] Total swap = 124996kB
[   73.669109][ T6745] 786301 pages RAM
[   73.670328][ T6745] 0 pages HighMem/MovableOnly
[   73.671826][ T6745] 240368 pages reserved
[   73.673170][ T6745] 0 pages cma reserved
[   73.715371][ T6749] netlink: 256 bytes leftover after parsing attributes in process `syz.1.240'.
[   73.922511][ T6755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'.
[   74.145318][ T6769] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002
[   74.297242][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[   74.947080][ T6796] batadv_slave_1: entered promiscuous mode
[   74.966329][ T6798] batadv_slave_1: left promiscuous mode
[   75.140456][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'.
[   75.265699][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.2.263'.
[   75.444373][ T6855] validate_nla: 4 callbacks suppressed
[   75.444383][ T6855] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   75.454698][ T6855] batman_adv: batadv0: Adding interface: team0
[   75.456916][ T6855] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.465836][ T6855] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   75.473745][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.485284][ T6855] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   75.489382][ T6855] netlink: 2 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.490278][ T6857] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   75.492688][ T6855] team0: entered promiscuous mode
[   75.495064][ T6857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.270'.
[   75.501174][ T6855] team_slave_0: entered promiscuous mode
[   75.504412][ T6855] team_slave_1: entered promiscuous mode
[   75.510873][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[   75.513256][ T6855] batman_adv: batadv0: Interface activated: team0
[   75.515539][ T6855] batman_adv: batadv0: Interface deactivated: team0
[   75.521506][ T6855] batman_adv: batadv0: Removing interface: team0
[   75.527995][ T6855] bridge0: port 3(team0) entered blocking state
[   75.539601][ T6855] bridge0: port 3(team0) entered disabled state
[   75.542339][ T6855] team0: entered allmulticast mode
[   75.544263][ T6855] team_slave_0: entered allmulticast mode
[   75.546567][ T6855] team_slave_1: entered allmulticast mode
[   75.551259][ T6855] bridge0: port 3(team0) entered blocking state
[   75.553435][ T6855] bridge0: port 3(team0) entered forwarding state
[   75.829852][ T6879] can: request_module (can-proto-0) failed.
[   75.832524][ T6879] netlink: 'syz.2.278': attribute type 4 has an invalid length.
[   76.213016][ T6918] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   76.230841][ T6918] netlink: 'syz.0.291': attribute type 4 has an invalid length.
[   76.299310][ T6930] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   76.303192][ T6930] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   76.320690][ T6929] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[   76.344989][   T51] IPVS: starting estimator thread 0...
[   76.429095][ T6932] IPVS: using max 58 ests per chain, 139200 per kthread
[   76.523438][ T6954] netlink: 'syz.0.298': attribute type 1 has an invalid length.
[   76.953216][ T6973] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   77.679480][ T6995] netlink: 'syz.1.320': attribute type 6 has an invalid length.
[   78.029444][ T7004] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20005
[   78.361958][ T7018] __nla_validate_parse: 17 callbacks suppressed
[   78.361976][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'.
[   78.371868][   T33] audit: type=1107 audit(1751702727.845:3): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   78.454433][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'.
[   78.465600][ T7021] veth2: entered allmulticast mode
[   78.474638][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.477746][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.485577][ T7020] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.490405][ T7020] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.494619][ T7020] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   78.497661][ T7020] batman_adv: batadv0: Removing interface: ip6gretap1
[   79.102789][ T7070] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   79.191982][ T7082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.342'.
[   79.326013][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'.
[   79.365438][ T7103] netlink: 48 bytes leftover after parsing attributes in process `syz.2.347'.
[   79.380693][ T7103] pim6reg9: entered allmulticast mode
[   79.385103][ T7108] batadv_slave_1: entered promiscuous mode
[   79.404716][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'.
[   79.424193][ T7098] batadv_slave_1: left promiscuous mode
[   79.485047][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'.
[   79.489568][ T7117] netlink: 232 bytes leftover after parsing attributes in process `syz.0.349'.
[   79.492401][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'.
[   79.913097][ T7161] ip6erspan0: entered allmulticast mode
[   80.077316][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   80.372018][ T7187] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   80.419088][ T7190] geneve0: entered promiscuous mode
[   80.422035][ T7190] geneve0: entered allmulticast mode
[   80.425188][ T7190] team0: Failed to send port change of device geneve0 via netlink (err -105)
[   80.429334][ T7190] team0: Failed to send options change via netlink (err -105)
[   80.432882][ T7190] team0: Port device geneve0 added
[   80.642250][ T7202] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   80.706461][ T7204] validate_nla: 6 callbacks suppressed
[   80.706482][ T7204] netlink: 'syz.2.371': attribute type 25 has an invalid length.
[   81.192798][   T24] cfg80211: failed to load regulatory.db
[   81.619612][ T7249] x9: renamed from bridge_slave_0 (while UP)
[   82.200004][ T7292] netlink: 'syz.0.399': attribute type 15 has an invalid length.
[   82.204312][ T7292] netlink: 'syz.0.399': attribute type 18 has an invalid length.
[   82.277109][ T7297] netlink: 'syz.2.401': attribute type 1 has an invalid length.
[   82.283793][ T7299] netlink: 'syz.0.402': attribute type 1 has an invalid length.
[   82.308484][ T7299] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.337633][ T7299] bond2: (slave gretap1): making interface the new active one
[   82.343646][ T7299] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   82.847597][ T7338] xt_hashlimit: size too large, truncated to 1048576
[   83.107802][ T7358] netlink: 'syz.2.417': attribute type 11 has an invalid length.
[   83.487253][ T7398] __nla_validate_parse: 20 callbacks suppressed
[   83.487271][ T7398] netlink: 27 bytes leftover after parsing attributes in process `syz.2.429'.
[   83.487465][ T7396] syzkaller1: entered promiscuous mode
[   83.496230][ T7396] syzkaller1: entered allmulticast mode
[   83.508561][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[   83.560723][ T7401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.564328][ T7401] syzkaller0: entered promiscuous mode
[   83.566657][ T7401] syzkaller0: entered allmulticast mode
[   83.591057][ T7401] tipc: Resetting bearer <eth:syzkaller0>
[   83.595252][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'.
[   83.599030][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'.
[   83.602738][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'.
[   83.703260][ T7400] tipc: Resetting bearer <eth:syzkaller0>
[   83.715246][ T7400] tipc: Disabling bearer <eth:syzkaller0>
[   83.851564][ T7419] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.433'.
[   83.861192][ T7419] netlink: 'syz.2.433': attribute type 7 has an invalid length.
[   83.872923][ T7419] : entered promiscuous mode
[   84.897833][ T7444] netlink: 'syz.0.444': attribute type 12 has an invalid length.
[   85.121926][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'.
[   85.126951][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.447'.
[   85.271551][ T7461] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   85.712722][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.719064][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[   85.722777][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[   86.226511][ T7493] netlink: 'syz.2.460': attribute type 1 has an invalid length.
[   86.422476][ T7509] ip6t_srh: unknown srh match flags  5294
[   86.950248][   T33] audit: type=1800 audit(1751702736.415:4): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.476" name=36FFFF dev="tmpfs" ino=863 res=0 errno=0
[   87.285385][ T7550] netdevsim netdevsim2: Direct firmware load for .. failed with error -2
[   87.290969][ T7550] netdevsim netdevsim2: Falling back to sysfs fallback for: ..
[   87.993492][ T7567] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   88.025008][ T7569] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[   88.029673][ T7569] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   88.194530][ T7581] netlink: 'syz.2.486': attribute type 1 has an invalid length.
[   88.197490][ T7581] netlink: 'syz.2.486': attribute type 10 has an invalid length.
[   88.201332][ T7580] smc: net device bond0 applied user defined pnetid SYZ2
[   88.254947][ T7587] vti0: entered promiscuous mode
[   89.233756][ T7599] __nla_validate_parse: 136 callbacks suppressed
[   89.233776][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   90.122189][ T7612] netlink: 84 bytes leftover after parsing attributes in process `syz.2.495'.
[   90.163178][ T7614] tipc: Failed to remove unknown binding: 66,1,1/33554439:1737048316/1737048318
[   90.166192][ T7614] tipc: Failed to remove unknown binding: 66,1,1/33554439:1737048316/1737048318
[   90.201202][ T7616] IPv6: addrconf: prefix option has invalid lifetime
[   90.258405][ T7620] IPv6: addrconf: prefix option has invalid lifetime
[   90.493793][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   90.497211][ T7630] netlink: 'syz.2.500': attribute type 30 has an invalid length.
[   90.503381][ T7630] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.506893][ T7630] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.510769][ T7630] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.514383][ T7630] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.520374][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[   90.524171][ T7630] netlink: 'syz.2.500': attribute type 30 has an invalid length.
[   91.662648][ T7639] netlink: 'syz.2.504': attribute type 1 has an invalid length.
[   91.679004][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.696733][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.700789][ T7639] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[   91.706355][ T7639] bond2: (slave vxcan5): Error -95 calling set_mac_address
[   91.744475][ T7641] gretap2: entered promiscuous mode
[   91.750771][ T7641] bond2: (slave gretap2): making interface the new active one
[   91.754469][ T7641] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   91.807311][ T7643] tap0: tun_chr_ioctl cmd 1074025678
[   91.810179][ T7643] tap0: group set to 0
[   91.930113][ T7647] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   92.322375][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'.
[   92.443910][ T7674] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   92.447653][ T7674] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   92.728225][ T7689] sctp: [Deprecated]: syz.0.520 (pid 7689) Use of struct sctp_assoc_value in delayed_ack socket option.
[   92.728225][ T7689] Use struct sctp_sack_info instead
[   92.744839][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   92.750767][ T7689] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   92.754497][ T7689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.973008][ T7699] netlink: 'syz.0.522': attribute type 4 has an invalid length.
[   93.230246][ T7716] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   93.240806][ T7718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.531'.
[   93.247235][ T7716] sch_fq: defrate 1 ignored.
[   93.349582][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'.
[   93.450515][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'.
[   93.765826][ T7757] netlink: 76 bytes leftover after parsing attributes in process `syz.2.546'.
[   93.843645][ T7761] netlink: zone id is out of range
[   93.845908][ T7761] netlink: zone id is out of range
[   93.847951][ T7761] netlink: zone id is out of range
[   93.850065][ T7761] netlink: zone id is out of range
[   93.852415][ T7761] netlink: zone id is out of range
[   93.854752][ T7761] netlink: zone id is out of range
[   93.857823][ T7761] netlink: zone id is out of range
[   93.861984][ T7761] netlink: del zone limit has 4 unknown bytes
[   94.796835][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'.
[   94.852887][ T7776] xt_hashlimit: size too large, truncated to 1048576
[   94.855163][ T7776] xt_hashlimit: max too large, truncated to 1048576
[   95.036494][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'.
[   95.252162][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'.
[   95.267208][ T7810] pim6reg: entered allmulticast mode
[   95.269829][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.271687][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.273722][ T7811] pim6reg: left allmulticast mode
[   95.276907][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.286780][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.290789][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.442743][ T7822] sctp: [Deprecated]: syz.2.566 (pid 7822) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.442743][ T7822] Use struct sctp_sack_info instead
[   95.446362][ T7812] chnl_net:caif_netlink_parms(): no params data found
[   95.463336][ T7822] bond0: option mode: unable to set because the bond device has slaves
[   95.544878][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.547355][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.550948][ T7812] bridge_slave_0: entered allmulticast mode
[   95.553663][ T7812] bridge_slave_0: entered promiscuous mode
[   95.556992][ T7812] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.560260][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.562640][ T7812] bridge_slave_1: entered allmulticast mode
[   95.565381][ T7812] bridge_slave_1: entered promiscuous mode
[   95.584296][ T7812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.591955][ T7812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.613918][ T7812] team0: Port device team_slave_0 added
[   95.617489][ T7812] team0: Port device team_slave_1 added
[   95.651024][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.653993][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.666519][ T7812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.674564][ T7812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.677433][ T7812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.688388][ T7812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.748046][ T7812] hsr_slave_0: entered promiscuous mode
[   95.752918][ T7812] hsr_slave_1: entered promiscuous mode
[   95.755657][ T7812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.758838][ T7812] Cannot create hsr debugfs directory
[   95.862637][ T7812] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.866977][ T7812] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.871314][ T7812] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.875969][ T7812] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.922759][ T7812] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.936381][ T7812] 8021q: adding VLAN 0 to HW filter on device team0
[   95.943044][ T3862] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.945535][ T3862] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.959916][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.963054][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.982868][ T7812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.986748][ T7812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.085009][ T7812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.121719][ T7812] veth0_vlan: entered promiscuous mode
[   96.132530][ T7812] veth1_vlan: entered promiscuous mode
[   96.156805][ T7812] veth0_macvtap: entered promiscuous mode
[   96.164350][ T7812] veth1_macvtap: entered promiscuous mode
[   96.177695][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.187544][ T7812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.195634][ T7812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.199267][ T7812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.202953][ T7812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.206553][ T7812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.265346][ T6688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.269665][ T6688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.292665][ T6688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.295558][ T6688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.431042][    C0] Unknown status report in ack skb
[   96.646018][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[   96.662170][ T7865] bridge0: port 3(team0) entered disabled state
[   96.761743][ T7865] team0 (unregistering): left allmulticast mode
[   96.763955][ T7865] team_slave_0: left allmulticast mode
[   96.765864][ T7865] team_slave_1: left allmulticast mode
[   96.767757][ T7865] geneve0: left allmulticast mode
[   96.771056][ T7865] bridge0: port 3(team0) entered disabled state
[   96.775770][ T7865] team_slave_0: left promiscuous mode
[   96.800726][ T7865] team0 (unregistering): Port device team_slave_0 removed
[   96.803234][ T7865] team_slave_1: left promiscuous mode
[   96.809532][ T7865] team0 (unregistering): Port device team_slave_1 removed
[   96.812040][ T7865] geneve0: left promiscuous mode
[   96.817846][ T7865] team0 (unregistering): Port device geneve0 removed
[   97.080389][ T7896] netlink: 272 bytes leftover after parsing attributes in process `syz.0.583'.
[   97.140870][ T7903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'.
[   97.147016][ T7904] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   97.300963][ T7916] netlink: 'syz.0.589': attribute type 30 has an invalid length.
[   97.342848][ T7919] netlink: 'syz.3.590': attribute type 1 has an invalid length.
[   97.348463][ T5815] Bluetooth: hci3: command tx timeout
[   97.353787][ T7919] nlmon0: Master is either lo or non-ether device
[   97.498867][ T7928] lo: entered promiscuous mode
[   97.746825][    C1] Unknown status report in ack skb
[   97.916910][ T7944] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   98.286308][ T7967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.602'.
[   98.341541][ T7970] pimreg: entered allmulticast mode
[   98.344868][ T7970] pimreg: left allmulticast mode
[   98.366945][ T7973] netlink: 'syz.2.605': attribute type 23 has an invalid length.
[   99.438325][ T5815] Bluetooth: hci3: command tx timeout
[   99.602312][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[   99.889242][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.620'.
[  100.170528][ T8040] netlink: 'syz.2.622': attribute type 2 has an invalid length.
[  100.502798][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'.
[  100.856434][ T8068] netlink: 'syz.2.631': attribute type 2 has an invalid length.
[  101.116455][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  101.245348][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'.
[  101.472449][ T8108] netlink: 'syz.3.640': attribute type 13 has an invalid length.
[  101.475135][ T8108] netlink: 'syz.3.640': attribute type 17 has an invalid length.
[  101.478020][ T8108] lo: left promiscuous mode
[  101.508973][   T54] Bluetooth: hci3: command tx timeout
[  101.583629][ T8108] net_ratelimit: 4 callbacks suppressed
[  101.583637][ T8108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.673523][ T8108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.734704][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.809994][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.924507][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'.
[  101.984842][ T8132] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  102.065013][ T8139] bridge2: entered promiscuous mode
[  102.066883][ T8139] bridge2: entered allmulticast mode
[  102.275263][ T8151] tipc: Started in network mode
[  102.277446][ T8151] tipc: Node identity a63a78ca1d55, cluster identity 4711
[  102.282408][ T8151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.285785][ T8151] syzkaller0: entered promiscuous mode
[  102.288495][ T8151] syzkaller0: entered allmulticast mode
[  102.304233][ T8150] tipc: Resetting bearer <eth:syzkaller0>
[  102.315261][ T8150] tipc: Disabling bearer <eth:syzkaller0>
[  102.384952][ T8160] netlink: 52 bytes leftover after parsing attributes in process `syz.3.652'.
[  102.425821][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.442818][ T8164] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  102.533572][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'.
[  102.614732][   T10] IPVS: starting estimator thread 0...
[  102.718625][ T8175] IPVS: using max 81 ests per chain, 194400 per kthread
[  102.723183][ T8183] bridge0: port 3(syz_tun) entered blocking state
[  102.726187][ T8183] bridge0: port 3(syz_tun) entered disabled state
[  102.729670][ T8183] syz_tun: entered allmulticast mode
[  102.733179][ T8183] syz_tun: entered promiscuous mode
[  102.735750][ T8183] bridge0: port 3(syz_tun) entered blocking state
[  102.738749][ T8183] bridge0: port 3(syz_tun) entered forwarding state
[  102.745800][ T8184] vxlan2: entered promiscuous mode
[  102.747590][ T8184] vxlan2: entered allmulticast mode
[  102.853097][ T8190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'.
[  102.856111][ T8190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'.
[  102.884818][ T8192] netlink: 'syz.3.664': attribute type 6 has an invalid length.
[  103.033329][ T8205] veth1_macvtap: left promiscuous mode
[  103.036161][ T8205] macsec0: entered allmulticast mode
[  103.048604][ T8205] veth1_macvtap: entered promiscuous mode
[  103.051388][ T8205] veth1_macvtap: entered allmulticast mode
[  103.054141][ T8205] macsec0: left allmulticast mode
[  103.056334][ T8205] veth1_macvtap: left allmulticast mode
[  103.231967][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'.
[  103.381471][ T8227] netlink: 'syz.3.676': attribute type 3 has an invalid length.
[  103.598628][   T54] Bluetooth: hci3: command 0x0419 tx timeout
[  104.119994][ T8267] netlink: 'syz.3.687': attribute type 4 has an invalid length.
[  104.665799][ T8289] xt_hashlimit: size too large, truncated to 1048576
[  104.674513][ T8292] @: renamed from vlan0
[  105.134306][ T8313] __nla_validate_parse: 8 callbacks suppressed
[  105.134320][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'.
[  105.142581][ T8313] netlink: 'syz.0.697': attribute type 3 has an invalid length.
[  105.304397][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'.
[  105.582931][ T8329] unsupported nlmsg_type 40
[  105.600008][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  105.669347][ T5815] Bluetooth: hci3: command 0x0419 tx timeout
[  105.791303][ T8340] netlink: 'syz.2.707': attribute type 13 has an invalid length.
[  105.794584][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'.
[  105.799744][ T8340] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  105.871165][ T8348] netlink: 'syz.2.709': attribute type 12 has an invalid length.
[  105.874187][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.709'.
[  105.948517][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.708'.
[  106.086299][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[  106.544717][ T8381] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.718'.
[  107.002057][ T8403] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  107.016040][ T8403] bond0: entered promiscuous mode
[  107.020148][ T8403] bond_slave_0: entered promiscuous mode
[  107.022738][ T8403] bond_slave_1: entered promiscuous mode
[  107.026787][ T8403] macvlan1: entered promiscuous mode
[  107.039905][ T8403] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  107.043107][ T8403] Cannot create hsr debugfs directory
[  107.045676][ T8403] hsr1: entered promiscuous mode
[  107.053311][ T8403] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  107.059661][ T8408] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  107.107437][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'.
[  107.277244][ T8422] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  107.413776][ T8430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.732'.
[  107.425881][ T8433] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  107.432572][   T28] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  107.574865][ T8443] IPv6: Can't replace route, no match found
[  107.920976][ T8463] netlink: 'syz.2.740': attribute type 30 has an invalid length.
[  108.030574][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.033408][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.039813][ T8468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.042950][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.375197][ T8484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  108.493975][    C0] Unknown status report in ack skb
[  108.512481][ T8500] netlink: 'syz.2.752': attribute type 1 has an invalid length.
[  108.654988][ T8514] netlink: 'syz.2.757': attribute type 11 has an invalid length.
[  108.731567][ T8518] vlan2: entered promiscuous mode
[  108.830811][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.903360][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.972431][ T8536] x_tables: duplicate underflow at hook 1
[  109.047484][ T8539] netlink: 'syz.3.762': attribute type 29 has an invalid length.
[  109.472644][    C1] Unknown status report in ack skb
[  109.644624][ T8583] netlink: 'syz.0.771': attribute type 3 has an invalid length.
[  109.673561][ T8583] unsupported nla_type 65024
[  110.376860][ T8638] __nla_validate_parse: 17 callbacks suppressed
[  110.376875][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.785'.
[  110.425736][ T8640] nbd: must specify a device to reconfigure
[  110.464815][ T8642] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  110.491058][ T8642] 8021q: adding VLAN 0 to HW filter on device bond5
[  110.690922][ T8661] xt_hashlimit: max too large, truncated to 1048576
[  110.694047][ T8661] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  110.746064][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  110.773241][ T8662] delete_channel: no stack
[  110.822672][ T8678] xt_CT: You must specify a L4 protocol and not use inversions on it
[  110.895252][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.802'.
[  111.153048][ T8700] netlink: 260 bytes leftover after parsing attributes in process `syz.2.807'.
[  111.156474][ T8700] openvswitch: netlink: Flow key attr not present in new flow.
[  111.252804][ T8708] netlink: 'syz.0.810': attribute type 27 has an invalid length.
[  111.256594][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.258806][ T8706] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  111.304733][ T8712] openvswitch: netlink: IP tunnel dst address not specified
[  111.310835][ T8711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.812'.
[  111.459944][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'.
[  111.577538][ T8730] lo speed is unknown, defaulting to 1000
[  111.582194][ T8730] lo speed is unknown, defaulting to 1000
[  111.585074][ T8730] lo speed is unknown, defaulting to 1000
[  111.684976][   T51] lo speed is unknown, defaulting to 1000
[  111.687146][ T8730] infiniband syz0: set active
[  111.689215][ T8730] infiniband syz0: added lo
[  111.712435][ T8730] RDS/IB: syz0: added
[  111.714040][ T8730] smc: adding ib device syz0 with port count 1
[  111.716937][ T8730] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  111.722256][ T8730] lo speed is unknown, defaulting to 1000
[  111.729319][   T51] lo speed is unknown, defaulting to 1000
[  111.824594][ T8730] lo speed is unknown, defaulting to 1000
[  111.962060][ T8730] lo speed is unknown, defaulting to 1000
[  112.063672][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'.
[  112.104653][ T8730] lo speed is unknown, defaulting to 1000
[  112.416817][ T8752] netlink: 'syz.3.824': attribute type 12 has an invalid length.
[  112.421021][ T8752] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.824'.
[  112.497757][ T8753] netlink: 'syz.3.824': attribute type 12 has an invalid length.
[  112.501672][ T8753] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.824'.
[  112.855417][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.869819][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.832'.
[  112.890259][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.894381][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.899059][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.904490][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.910303][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.989697][ T8777] lo speed is unknown, defaulting to 1000
[  113.193109][   T28] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  113.197563][ T5840] bond2 (unregistering): (slave gretap1): Releasing active interface
[  113.281591][ T5840] team0: Port device vxlan0 removed
[  113.386264][ T5840] bond0 (unregistering): Released all slaves
[  113.400186][ T5840] bond1 (unregistering): Released all slaves
[  113.486369][ T5840] bond2 (unregistering): Released all slaves
[  113.497625][ T5840] bond3 (unregistering): Released all slaves
[  113.512753][ T5840] bond4 (unregistering): Released all slaves
[  113.588577][ T5840] bond5 (unregistering): Released all slaves
[  113.726316][ T8798] tls_set_device_offload: netdev not found
[  113.736609][ T5840] tipc: Left network mode
[  113.817572][ T8803] netlink: 'syz.2.838': attribute type 21 has an invalid length.
[  113.842626][ T8803] netlink: 'syz.2.838': attribute type 22 has an invalid length.
[  113.873078][ T8803] netlink: 'syz.2.838': attribute type 23 has an invalid length.
[  113.875865][ T8803] netlink: 'syz.2.838': attribute type 25 has an invalid length.
[  113.880380][ T8803] netlink: 'syz.2.838': attribute type 26 has an invalid length.
[  113.920752][ T8777] chnl_net:caif_netlink_parms(): no params data found
[  114.141757][ T8826] netlink: 'syz.2.843': attribute type 1 has an invalid length.
[  114.158769][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.161416][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.163898][ T8777] bridge_slave_0: entered allmulticast mode
[  114.187664][ T8777] bridge_slave_0: entered promiscuous mode
[  114.199402][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.201767][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.204514][ T8777] bridge_slave_1: entered allmulticast mode
[  114.220258][ T8777] bridge_slave_1: entered promiscuous mode
[  114.325772][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.370784][ T5840] hsr_slave_0: left promiscuous mode
[  114.376898][ T5840] hsr_slave_1: left promiscuous mode
[  114.936983][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.948495][   T54] Bluetooth: hci2: command tx timeout
[  114.988417][ T8846] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  114.995587][ T8837] netlink: 'syz.2.845': attribute type 3 has an invalid length.
[  115.000597][ T8837] netlink: 'syz.2.845': attribute type 3 has an invalid length.
[  115.045595][ T8777] team0: Port device team_slave_0 added
[  115.053727][ T8777] team0: Port device team_slave_1 added
[  115.076859][ T8851] tipc: Can't bind to reserved service type 2
[  115.116679][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.120291][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.135073][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.145658][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.155605][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.173055][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.252994][ T8777] hsr_slave_0: entered promiscuous mode
[  115.256021][ T8777] hsr_slave_1: entered promiscuous mode
[  115.264885][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.269439][ T8777] Cannot create hsr debugfs directory
[  115.486557][ T5840] IPVS: stop unused estimator thread 0...
[  115.727613][ T8886] netlink: 'syz.3.861': attribute type 13 has an invalid length.
[  115.732322][ T8886] __nla_validate_parse: 7 callbacks suppressed
[  115.732329][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'.
[  115.737293][ T8886] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  115.782808][ T8891] netlink: 88 bytes leftover after parsing attributes in process `syz.3.864'.
[  115.786393][ T8891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'.
[  115.867582][ T5861] lo speed is unknown, defaulting to 1000
[  115.872971][ T8894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.863'.
[  115.918767][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'.
[  116.023551][ T8777] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  116.035164][ T8777] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  116.043985][ T8777] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  116.061529][ T8777] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  116.088906][   T33] audit: type=1800 audit(1751702765.565:5): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.868" name=36FFFF dev="tmpfs" ino=1929 res=0 errno=0
[  116.154614][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'.
[  116.173008][ T8937] x_tables: duplicate underflow at hook 4
[  116.205294][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.233778][ T8777] 8021q: adding VLAN 0 to HW filter on device team0
[  116.247697][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.250062][ T6688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.270044][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.272288][ T6688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.292275][ T8944] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.874'.
[  116.379562][ T8957] tls_set_device_offload: netdev not found
[  116.399483][ T8957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'.
[  116.491837][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.494643][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.878'.
[  116.498007][ T8969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.500694][ T8969] IPv6: NLM_F_CREATE should be set when creating new route
[  116.540009][ T8777] veth0_vlan: entered promiscuous mode
[  116.545868][ T8777] veth1_vlan: entered promiscuous mode
[  116.591638][ T8777] veth0_macvtap: entered promiscuous mode
[  116.611896][ T8976] wireguard0: entered promiscuous mode
[  116.613756][ T8976] wireguard0: entered allmulticast mode
[  116.621218][ T8777] veth1_macvtap: entered promiscuous mode
[  116.642344][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.662846][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.704460][ T8982] syzkaller0: entered promiscuous mode
[  116.706415][ T8982] syzkaller0: entered allmulticast mode
[  116.712430][ T8777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.716387][ T8777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.722249][ T8777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.725156][ T8777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.729903][ T8986] netlink: 'syz.2.882': attribute type 21 has an invalid length.
[  116.734362][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'.
[  117.029505][   T54] Bluetooth: hci2: command tx timeout
[  117.658510][ T3862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.661774][ T3862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.727540][ T3862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.731653][ T3862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.854340][ T9012] xt_CT: You must specify a L4 protocol and not use inversions on it
[  117.924517][ T9017] C: renamed from team_slave_0
[  117.935699][ T9017] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  118.139760][ T9038] bridge0: port 3(syz_tun) entered disabled state
[  118.145335][ T9038] syz_tun: left allmulticast mode
[  118.147726][ T9038] bridge0: port 3(syz_tun) entered disabled state
[  118.166399][ T9038] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  118.228892][   T28] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  118.283273][ T9048] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  118.310090][  T970] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  118.973887][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.333889][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  119.339536][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  119.343280][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  119.347726][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  119.352193][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  119.384306][ T9108] lo speed is unknown, defaulting to 1000
[  119.559272][ T9108] chnl_net:caif_netlink_parms(): no params data found
[  119.604833][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.607273][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.609958][ T9108] bridge_slave_0: entered allmulticast mode
[  119.613434][ T9108] bridge_slave_0: entered promiscuous mode
[  119.617542][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.620448][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.623429][ T9108] bridge_slave_1: entered allmulticast mode
[  119.626500][ T9108] bridge_slave_1: entered promiscuous mode
[  119.667825][ T9108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.677957][ T9108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.720790][ T9108] team0: Port device team_slave_0 added
[  119.728763][ T9108] team0: Port device team_slave_1 added
[  119.785598][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.791332][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.802696][ T9108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.809248][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.812276][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.830052][ T9108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.887453][ T9108] hsr_slave_0: entered promiscuous mode
[  119.891211][ T9108] hsr_slave_1: entered promiscuous mode
[  119.894067][ T9108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.897361][ T9108] Cannot create hsr debugfs directory
[  119.953493][ T9132] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  120.155996][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.189445][ T9140] bond5: entered promiscuous mode
[  120.192089][ T9140] 8021q: adding VLAN 0 to HW filter on device bond5
[  120.283630][ T9140] bond5 (unregistering): Released all slaves
[  120.316682][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.435000][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.593475][ T5840] bridge_slave_1: left allmulticast mode
[  120.595937][ T5840] bridge_slave_1: left promiscuous mode
[  120.602181][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.637008][ T5840] bridge_slave_0: left allmulticast mode
[  120.642698][ T5840] bridge_slave_0: left promiscuous mode
[  120.645280][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.945860][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.950839][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.954829][ T5840] bond0 (unregistering): Released all slaves
[  121.428738][   T54] Bluetooth: hci2: command tx timeout
[  121.446615][ T9108] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  121.508506][ T9108] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  121.534194][ T9108] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  121.561162][ T9108] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  121.717181][ T5840] hsr_slave_0: left promiscuous mode
[  121.727152][ T5840] hsr_slave_1: left promiscuous mode
[  121.732548][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.736675][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.743608][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.746665][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.775650][ T5840] veth1_macvtap: left promiscuous mode
[  121.778024][ T5840] veth0_macvtap: left promiscuous mode
[  121.780892][ T5840] veth1_vlan: left promiscuous mode
[  121.782663][ T5840] veth0_vlan: left promiscuous mode
[  122.102707][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  122.124632][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  122.554974][ T9108] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.585956][ T9108] 8021q: adding VLAN 0 to HW filter on device team0
[  122.602013][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.604447][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.624955][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.627326][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.757388][ T9240] validate_nla: 6 callbacks suppressed
[  122.757407][ T9240] netlink: 'syz.2.943': attribute type 10 has an invalid length.
[  122.814654][ T9247] __nla_validate_parse: 17 callbacks suppressed
[  122.814673][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'.
[  122.831228][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'.
[  122.880038][ T9108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.913899][ T9108] veth0_vlan: entered promiscuous mode
[  122.922042][ T9108] veth1_vlan: entered promiscuous mode
[  122.966876][ T9254] batadv2: entered allmulticast mode
[  122.979066][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv2
[  123.006493][ T9108] veth0_macvtap: entered promiscuous mode
[  123.020017][ T9257] netlink: 'syz.2.946': attribute type 1 has an invalid length.
[  123.047628][ T9108] veth1_macvtap: entered promiscuous mode
[  123.083786][ T9257] bond5: (slave gretap3): making interface the new active one
[  123.093434][ T9257] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  123.098597][ T9257] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  123.110642][ T9257] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  123.116761][ T9257] syz.2.946 (9257) used greatest stack depth: 17736 bytes left
[  123.142972][ T9108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.160265][ T9108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.167417][ T9108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.175051][ T9108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.181604][ T9108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.185836][ T9108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.237274][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.240344][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.257822][ T9273] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  123.261907][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.264763][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.403901][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'.
[  123.433314][   T84] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  123.446871][ T9280] bridge_slave_1: left allmulticast mode
[  123.451685][ T9280] bridge_slave_1: left promiscuous mode
[  123.455734][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.464244][ T9280] x9: left allmulticast mode
[  123.466421][ T9280] x9: left promiscuous mode
[  123.472638][ T9280] bridge0: port 1(1x9) entered disabled state
[  123.772817][ T9290] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  123.862476][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.956'.
[  123.955940][ T9300] team0 (unregistering): Port device team_slave_0 removed
[  123.962366][ T9300] team0 (unregistering): Port device team_slave_1 removed
[  123.973050][ T9302] netlink: 'syz.3.956': attribute type 10 has an invalid length.
[  124.009304][ T9302] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  124.013863][ T9302] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  124.374252][ T5840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.511195][ T9313] netlink: 'syz.3.960': attribute type 2 has an invalid length.
[  124.716229][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.720086][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.723588][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.727109][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.730558][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.764923][ T9326] lo speed is unknown, defaulting to 1000
[  124.874139][ T9335] syzkaller1: entered promiscuous mode
[  124.882710][ T9335] syzkaller1: entered allmulticast mode
[  125.012757][ T9326] chnl_net:caif_netlink_parms(): no params data found
[  125.094451][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.096820][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.101876][ T9326] bridge_slave_0: entered allmulticast mode
[  125.105737][ T9326] bridge_slave_0: entered promiscuous mode
[  125.110916][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.114057][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.116546][ T9326] bridge_slave_1: entered allmulticast mode
[  125.121026][ T9326] bridge_slave_1: entered promiscuous mode
[  125.155029][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.162265][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.169841][ T9346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'.
[  125.204200][ T9326] team0: Port device team_slave_0 added
[  125.220931][ T9326] team0: Port device team_slave_1 added
[  125.256323][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.259842][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.271298][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.277364][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.282054][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.293405][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.348050][ T5840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.365017][ T9326] hsr_slave_0: entered promiscuous mode
[  125.369639][ T9326] hsr_slave_1: entered promiscuous mode
[  125.372531][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  125.375625][ T9326] Cannot create hsr debugfs directory
[  125.536663][ T9358] rdma_rxe: rxe_newlink: failed to add lo
[  125.746536][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  125.754959][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[  125.854372][ T9388] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.985'.
[  126.024781][ T9404] netlink: 'syz.2.989': attribute type 7 has an invalid length.
[  126.137983][ T9415] netlink: 56 bytes leftover after parsing attributes in process `syz.2.995'.
[  126.387412][ T5840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.402212][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.406698][ T9433] batadv_slave_1: entered promiscuous mode
[  126.415976][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'.
[  126.463949][ T5840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.464990][ T9439] netlink: 'syz.2.1004': attribute type 33 has an invalid length.
[  126.600704][ T5840] bridge_slave_1: left allmulticast mode
[  126.602635][ T5840] bridge_slave_1: left promiscuous mode
[  126.604620][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.623321][ T5840] bridge_slave_0: left allmulticast mode
[  126.625787][ T5840] bridge_slave_0: left promiscuous mode
[  126.636544][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.788972][   T54] Bluetooth: hci2: command tx timeout
[  126.945491][ T5840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.952962][ T5840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.958475][ T5840] bond0 (unregistering): Released all slaves
[  127.483308][ T9326] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  127.513344][ T9326] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  127.526882][ T5840] hsr_slave_0: left promiscuous mode
[  127.529558][ T5840] hsr_slave_1: left promiscuous mode
[  127.531918][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.534382][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.545763][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.550141][ T5840] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.561697][ T5840] veth1_macvtap: left promiscuous mode
[  127.563855][ T5840] veth0_macvtap: left promiscuous mode
[  127.565801][ T5840] veth1_vlan: left promiscuous mode
[  127.572522][ T5840] veth0_vlan: left promiscuous mode
[  128.046038][ T5840] team0 (unregistering): Port device team_slave_1 removed
[  128.083706][ T5840] team0 (unregistering): Port device team_slave_0 removed
[  128.358584][ T9326] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  128.375748][ T9326] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  128.545886][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.549838][   T84] IPVS: nq: UDP 127.0.0.1:0 - no destination available
[  128.559377][ T9326] 8021q: adding VLAN 0 to HW filter on device team0
[  128.575308][ T6688] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.577659][ T6688] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.589809][ T6688] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.592262][ T6688] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.868727][   T54] Bluetooth: hci2: command tx timeout
[  128.923394][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.996731][ T9326] veth0_vlan: entered promiscuous mode
[  129.007309][ T9326] veth1_vlan: entered promiscuous mode
[  129.064692][ T9326] veth0_macvtap: entered promiscuous mode
[  129.079965][ T9326] veth1_macvtap: entered promiscuous mode
[  129.111799][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.131039][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.159086][ T9326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.162753][ T9326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.166439][ T9326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.178300][ T9326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.366379][ T9534] __nla_validate_parse: 7 callbacks suppressed
[  129.366398][ T9534] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1023'.
[  129.484103][ T3862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.487482][ T3862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.523749][ T9538] syzkaller1: entered promiscuous mode
[  129.525728][ T9538] syzkaller1: entered allmulticast mode
[  129.531995][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.536993][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.712277][ T9557] No such timeout policy "syz0"
[  129.724223][ T9557] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  129.732464][ T9557] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  129.995856][ T9573] syzkaller1: entered promiscuous mode
[  129.997799][ T9573] syzkaller1: entered allmulticast mode
[  130.169672][ T9580] netlink: 'syz.2.1034': attribute type 12 has an invalid length.
[  130.172672][ T9580] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1034'.
[  130.264215][ T9588] pim6reg1: entered promiscuous mode
[  130.266099][ T9588] pim6reg1: entered allmulticast mode
[  130.383033][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'.
[  130.451528][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.454837][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.461635][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.470313][ T9597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.504589][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1040'.
[  130.524735][    C1] ------------[ cut here ]------------
[  130.525387][ T9606] veth0_to_bond: entered promiscuous mode
[  130.526584][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  130.532747][    C1] WARNING: CPU: 1 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  130.536194][    C1] Modules linked in:
[  130.537885][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  130.543523][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.547020][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  130.549293][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  130.555987][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  130.558215][    C1] RAX: 772969a066102f00 RBX: 000000000000000c RCX: ffff8881006b8000
[  130.561417][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  130.564292][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  130.567049][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88812c2ce7a8
[  130.569751][    C1] R13: 0000000000000000 R14: ffff888127d20e40 R15: ffff888127d230d8
[  130.572743][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  130.576017][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.578444][    C1] CR2: 000000110c2bb521 CR3: 000000010f15c000 CR4: 00000000000006f0
[  130.581253][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  130.584084][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  130.586802][    C1] Call Trace:
[  130.588018][    C1]  <IRQ>
[  130.589243][    C1]  rate_control_send_low+0x194/0x7a0
[  130.591422][    C1]  rate_control_get_rate+0x20b/0x5d0
[  130.593508][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  130.595468][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  130.597686][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  130.599679][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  130.601808][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.603797][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.605593][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  130.607379][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.609428][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  130.611171][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  130.613165][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  130.615063][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  130.617549][    C1]  __iterate_interfaces+0x2ab/0x590
[  130.619397][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  130.621917][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  130.624574][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  130.626592][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  130.629150][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  130.630949][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.632949][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  130.634717][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  130.636662][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  130.638819][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  130.640679][    C1]  handle_softirqs+0x286/0x870
[  130.642427][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  130.644356][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  130.646215][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  130.648048][    C1]  __irq_exit_rcu+0xca/0x1f0
[  130.649917][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  130.652224][    C1]  irq_exit_rcu+0x9/0x30
[  130.653751][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  130.655690][    C1]  </IRQ>
[  130.656739][    C1]  <TASK>
[  130.657761][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.659265][ T9606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1040'.
[  130.659980][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  130.659997][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  130.660004][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  130.660013][    C1] RAX: 772969a066102f00 RBX: ffffffff81974d58 RCX: 772969a066102f00
[  130.660019][    C1] RDX: 0000000000000001 RSI: ffffffff8d9822d0 RDI: ffffffff8be28d40
[  130.660024][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  130.660029][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa10cf0
[  130.686709][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  130.690100][    C1]  ? do_idle+0x1e8/0x510
[  130.691878][    C1]  default_idle+0x13/0x20
[  130.693463][    C1]  default_idle_call+0x74/0xb0
[  130.695172][    C1]  do_idle+0x1e8/0x510
[  130.696609][    C1]  ? __pfx_do_idle+0x10/0x10
[  130.698341][    C1]  cpu_startup_entry+0x44/0x60
[  130.700020][    C1]  start_secondary+0x101/0x110
[  130.701646][    C1]  common_startup_64+0x13e/0x147
[  130.703326][    C1]  </TASK>
[  130.704442][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  130.706954][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  130.711577][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.715375][    C1] Call Trace:
[  130.716543][    C1]  <IRQ>
[  130.717528][    C1]  dump_stack_lvl+0x99/0x250
[  130.719100][    C1]  ? __asan_memcpy+0x40/0x70
[  130.721048][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.723088][    C1]  ? __pfx__printk+0x10/0x10
[  130.724711][    C1]  panic+0x2db/0x790
[  130.726173][    C1]  ? __pfx_panic+0x10/0x10
[  130.727736][    C1]  ? common_startup_64+0x13e/0x147
[  130.729548][    C1]  __warn+0x31b/0x4b0
[  130.730968][    C1]  ? __rate_control_send_low+0x5df/0x820
[  130.732984][    C1]  ? __rate_control_send_low+0x5df/0x820
[  130.734966][    C1]  report_bug+0x2be/0x4f0
[  130.736538][    C1]  ? __rate_control_send_low+0x5df/0x820
[  130.738421][    C1]  ? __rate_control_send_low+0x5df/0x820
[  130.740578][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  130.742538][    C1]  handle_bug+0x84/0x160
[  130.744026][    C1]  exc_invalid_op+0x1a/0x50
[  130.745804][    C1]  asm_exc_invalid_op+0x1a/0x20
[  130.747493][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  130.749691][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  130.756298][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  130.758305][    C1] RAX: 772969a066102f00 RBX: 000000000000000c RCX: ffff8881006b8000
[  130.760999][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  130.763916][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  130.767205][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88812c2ce7a8
[  130.770390][    C1] R13: 0000000000000000 R14: ffff888127d20e40 R15: ffff888127d230d8
[  130.773588][    C1]  ? __rate_control_send_low+0x5de/0x820
[  130.775791][    C1]  rate_control_send_low+0x194/0x7a0
[  130.777691][    C1]  rate_control_get_rate+0x20b/0x5d0
[  130.779542][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  130.781610][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  130.783826][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  130.785744][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  130.787658][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.789623][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.791664][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  130.793561][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  130.795611][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  130.797586][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  130.799796][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  130.801772][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  130.804362][    C1]  __iterate_interfaces+0x2ab/0x590
[  130.806180][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  130.808280][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  130.810926][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  130.813044][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  130.815477][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  130.817332][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  130.819472][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  130.821236][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  130.823220][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  130.825604][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  130.827762][    C1]  handle_softirqs+0x286/0x870
[  130.829779][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  130.831803][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  130.834024][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  130.836244][    C1]  __irq_exit_rcu+0xca/0x1f0
[  130.838019][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  130.840218][    C1]  irq_exit_rcu+0x9/0x30
[  130.841835][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  130.843784][    C1]  </IRQ>
[  130.844796][    C1]  <TASK>
[  130.845949][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  130.848180][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  130.850108][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  130.857048][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  130.859143][    C1] RAX: 772969a066102f00 RBX: ffffffff81974d58 RCX: 772969a066102f00
[  130.862472][    C1] RDX: 0000000000000001 RSI: ffffffff8d9822d0 RDI: ffffffff8be28d40
[  130.865341][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  130.868052][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa10cf0
[  130.870685][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d7000
[  130.873366][    C1]  ? do_idle+0x1e8/0x510
[  130.874806][    C1]  default_idle+0x13/0x20
[  130.876282][    C1]  default_idle_call+0x74/0xb0
[  130.877888][    C1]  do_idle+0x1e8/0x510
[  130.879412][    C1]  ? __pfx_do_idle+0x10/0x10
[  130.881107][    C1]  cpu_startup_entry+0x44/0x60
[  130.882871][    C1]  start_secondary+0x101/0x110
[  130.884477][    C1]  common_startup_64+0x13e/0x147
[  130.886166][    C1]  </TASK>
[  130.887901][    C1] Kernel Offset: disabled
[  130.889375][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:06:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8e13ee60 RBP=ffffffff822efbcd RSP=ffffc900031ef2c8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff94000090439
R12=0000000000000002 R13=ffffffff8e13ee60 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e21ca RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555c004500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f467a4e56c0 CR3=000000010f79c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f72aa984478 00007f72aa984450 XMM03=00007f72aa984488 00007f72aa984480
XMM04=00007f72ab4ed100 00007f72aa984440 XMM05=00007f72aa984458 00007f72aa9844a0
XMM06=00007f72aa984498 00007f72aa984490 XMM07=00007f72aa984488 00007f72aa984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f72aa811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff888021740237 R9 =1ffff110042e8046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48de R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2bb521 CR3=000000010f15c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f72aa811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
