last executing test programs:

1.329951893s ago: executing program 1 (id=624):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r1)
sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x14, r2, 0xb1b2ac2cb93dc4b3, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x20000000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$key(0xf, 0x3, 0x2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
pipe(&(0x7f0000000380))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
shutdown(r5, 0x0)
connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='xen_mc_entry_alloc\x00', r6, 0x0, 0x800}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000000)=0x10008, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)

1.269594956s ago: executing program 1 (id=625):
r0 = socket$kcm(0x25, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac1414"], 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10)
write(r4, &(0x7f0000000080)="240000001e005f0214fffffffffffff8070000001d00000000001100050009000d000000", 0x24)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6}, 0x10)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000d1300e999000000000000589168a7ec880000fc000000000000000000000000000000ac000000000000000000bdc279cb0000000100f20a00", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000280)=0x1, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800820000020601080000000000000000000000001400001500000000000500fdff9c07d3face74ca9893c1fdd96d35c6ac1495d105000400000000000900020073797a31000000000c000300"], 0x58}}, 0x0)
readv(r0, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/88, 0x58}], 0x1)
accept4(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000080)=0x80, 0x80000)

1.198124502s ago: executing program 1 (id=626):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [0x0, 0xffffff00, 0xff, 0xffffff00], 'veth0_macvtap\x00', 'wg1\x00', {}, {}, 0x33, 0x6, 0x0, 0x30}, 0x0, 0xa8, 0x110, 0x0, {0x0, 0x4c00}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x27, 0x6, 0x0, 0x400, 'netbios-ns\x00', 'syz1\x00', {0x1000}}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}, {0xa, 0x42}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff9, 0x7}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1.118791697s ago: executing program 1 (id=627):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x411, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0)

1.116947819s ago: executing program 1 (id=628):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x74, 0x64, 0xf31, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44044)

1.113295708s ago: executing program 0 (id=629):
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8, 0x2})
write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRES16=r0], 0x6)

1.030360276s ago: executing program 0 (id=630):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x100, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000fcffffff0c000000080003512cb7392b560e7ac1969b2a788a0900063eb958e79815f888cb6910975aa637a1f24f94d250a053ad6d7edd0592c4acdd35217efee33ecf8a5455fcf602372c4aca9dd6ba4c0f8a7691d1ee7978a49e5df4bf740ec1bea226b70ffea3746648e905bfb7c864aeb31ec3699b1e6255a11372a9ed2c6c854e1f3e72a40cc5109c9d9931f92dd74bd3eb7a6b25fa4f4877a38169c2096d0415175cf27ab5b8f3dc61ca3ac77845400446fff580119001ab88e3f7a497ab72cee3", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x84, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x84}}, 0x48020)

1.02340864s ago: executing program 1 (id=631):
syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x10, 0x6, 0x5c0, 0x1f8, 0xd0, 0x0, 0xd0, 0x1f8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmmsg$unix(r2, &(0x7f0000000440)=[{{&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000019000109000000000000000002200000fe00fe0300000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2004000}, 0x40)
splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1, 0x3}, 0x50)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0x40000000})
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000007, 0x10013, r9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x3, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5)
close(r1)

970.899665ms ago: executing program 0 (id=632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x18, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0)

968.375283ms ago: executing program 0 (id=633):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000c80)={'ipvlan1\x00', &(0x7f0000000b80)=@ethtool_drvinfo={0x3, "b6a5a4c554b540f610881ddfc60c7c10be18a8a16e1fd36b19b498d996d2e6b1", "a0f5b5b9a6563713536a30f274de5a7be62afd1c93714b68f85659a4f8be4ae1", "53d063674ff30e6064e9f63d13bc359f93623f64dd4b0df3d38ef244e5eb57c4", "a6bceb100f1bcc066a312d29063a1ef04adedf160f1ab07016c4f7465c955a61", "4143967e44cb0bf2bffe750097e64bdeb49558d0cdb6a6324cf75d622f2be2d7", "e48958e49ee4338d590974d4", 0x7fff, 0x9, 0x8a, 0x5}})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffc00, 0x12)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00$'], 0x50}}], 0x1, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x84, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x84}}, 0x24000080)

869.514348ms ago: executing program 0 (id=634):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8)
shutdown(r2, 0x1)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r3=>0x0, 0x2f, 0x3, 0x9, 0x5, 0x8, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x6, 0x8, 0x7}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, 0x0, 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8301}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x6, 0x2, 0x9, 0xffffffffffffffff, 0xffffffffffffffff}, @alu={0x7, 0x0, 0xb, 0x7, 0x1434186d414d6db5, 0xfffffffffffffffc, 0x33a672057b31bc50}, @alu={0x4, 0x0, 0x7, 0x8, 0x0, 0xc, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfc, 0xfe, &(0x7f0000000500)=""/254, 0x41000, 0x88, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000000340)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1312f, r7, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r9, 0x0, 0x483, &(0x7f0000000000)={0x6c, @private=0xa010101, 0x4e24, 0x4, 'wrr\x00', 0xa, 0xf, 0x24}, 0x2c)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000180)={<r10=>r0, 0x58, 0xa2e, 0x4})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000100))

239.436878ms ago: executing program 2 (id=641):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000010a00000a54000000060a0b0400000000000000000200000028000480240001800a000100696e6e657200000014000280080003400000000708000140000000000900010073797a30000000000900020073790000001100010000000000000000000300000ae3a11a0d90205f27091af20d551100710cbe74ac22290e1415405e863625ca674b61fe7a6066c8122f0087c28def5df00a18e4669db8d5a6ec8934d73b711430b42eec749eac2e1c8275c67344dfd36dee6c4fabc5c6365e4d37e0"], 0x7c}}, 0x0)

238.878081ms ago: executing program 2 (id=642):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x4000100)
listen(r3, 0x8)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0xd66771a5e8224ded, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x2c}}, 0x0)

164.988392ms ago: executing program 2 (id=643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280))
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0)

90.388289ms ago: executing program 2 (id=644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c91000007010000000000000000027c000008000180d153ce4a"], 0x1c}}, 0x4000010)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x1000})

86.836214ms ago: executing program 2 (id=645):
r0 = socket$kcm(0x23, 0x2, 0x0)
close(r0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f80000001600010025bd70000000000064010100000000000000000000000000000000000000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYBLOB="e61d71bd0eac45506af4888938f86b0340532af1e5e8c72ae303bc2b2a13413664e8d898be2b09ae65e2559a867d3d80111800f05167703869d713dc92685b1e686dde9b2b9693a9b59a38f301fe7dcde8fcfcba695c5d0a5e2ae7ed66a5274ac4774f38a79a7ecd87587adc56e74060288f4765285dbb3d00a49ec224bcc8deda58dcbac94f433022a40e68df345078dc892fa4cb0f703656342b86b8e9190daa661bf05a39557e59e909931acd2c3d4016394e36c52b376f44ab4fe5de9980a020fd46bffe958d22a04d5084eb3b25892a2589df8c4d16527d59ba584eb69bb24a0e8c3d801aadaa204838b4", @ANYBLOB="00000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

504.751µs ago: executing program 0 (id=646):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x1c, 0x4a, 0xe4da4bea6626a30d, 0x0, 0x2, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

0s ago: executing program 2 (id=647):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r4], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000e00)={@private0}, &(0x7f0000000e40)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x22500, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x43}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000100), 0x4)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29723' (ED25519) to the list of known hosts.
syzkaller login: [   57.117784][ T5818] cgroup: Unknown subsys name 'net'
[   57.240458][ T5818] cgroup: Unknown subsys name 'cpuset'
[   57.253159][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.544546][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.498019][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.504197][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.507420][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.510510][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.522766][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.529406][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.532251][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.534942][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.537803][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.538158][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.543090][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.549483][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.571054][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.578488][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.581075][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.902642][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.935637][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   64.959240][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   65.041102][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.043780][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.047677][ T5832] bridge_slave_0: entered allmulticast mode
[   65.050665][ T5832] bridge_slave_0: entered promiscuous mode
[   65.059565][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.062519][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.065388][ T5832] bridge_slave_1: entered allmulticast mode
[   65.070257][ T5832] bridge_slave_1: entered promiscuous mode
[   65.133702][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.170299][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.172658][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.175030][ T5836] bridge_slave_0: entered allmulticast mode
[   65.179722][ T5836] bridge_slave_0: entered promiscuous mode
[   65.185781][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.189191][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.191983][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.194751][ T5838] bridge_slave_0: entered allmulticast mode
[   65.199479][ T5838] bridge_slave_0: entered promiscuous mode
[   65.203910][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.207680][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.210516][ T5838] bridge_slave_1: entered allmulticast mode
[   65.215237][ T5838] bridge_slave_1: entered promiscuous mode
[   65.219043][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.221447][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.223704][ T5836] bridge_slave_1: entered allmulticast mode
[   65.227586][ T5836] bridge_slave_1: entered promiscuous mode
[   65.287938][ T5832] team0: Port device team_slave_0 added
[   65.291867][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.299261][ T5832] team0: Port device team_slave_1 added
[   65.302788][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.308252][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.312541][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.376255][ T5836] team0: Port device team_slave_0 added
[   65.379231][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.381998][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.391228][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.398727][ T5838] team0: Port device team_slave_0 added
[   65.402695][ T5836] team0: Port device team_slave_1 added
[   65.407544][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.409734][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.417850][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.423814][ T5838] team0: Port device team_slave_1 added
[   65.472025][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.474746][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.484371][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.490065][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.492797][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.502745][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.508615][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.511353][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.521190][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.527941][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.530060][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.538258][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.583810][ T5832] hsr_slave_0: entered promiscuous mode
[   65.587260][ T5832] hsr_slave_1: entered promiscuous mode
[   65.605005][ T5836] hsr_slave_0: entered promiscuous mode
[   65.608020][ T5836] hsr_slave_1: entered promiscuous mode
[   65.610686][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.613728][ T5836] Cannot create hsr debugfs directory
[   65.663817][ T5838] hsr_slave_0: entered promiscuous mode
[   65.666897][ T5838] hsr_slave_1: entered promiscuous mode
[   65.669630][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.672192][ T5838] Cannot create hsr debugfs directory
[   66.005840][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.014975][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.032512][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.037717][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.103205][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.113969][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.140869][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.149966][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.218138][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.235204][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.247323][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.258751][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.285398][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.332368][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   66.359234][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.362969][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.379240][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.382191][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.479566][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.540931][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   66.558213][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.561174][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.573801][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.588083][ T5223] Bluetooth: hci2: command tx timeout
[   66.590713][ T5223] Bluetooth: hci1: command tx timeout
[   66.592436][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.593014][ T5841] Bluetooth: hci0: command tx timeout
[   66.595852][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.646747][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   66.658233][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.661133][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.687107][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.689903][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.781922][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.837775][ T5832] veth0_vlan: entered promiscuous mode
[   66.860545][ T5832] veth1_vlan: entered promiscuous mode
[   66.909050][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.936265][ T5832] veth0_macvtap: entered promiscuous mode
[   66.952399][ T5832] veth1_macvtap: entered promiscuous mode
[   66.980503][ T5836] veth0_vlan: entered promiscuous mode
[   66.995390][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.003287][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.013768][ T5836] veth1_vlan: entered promiscuous mode
[   67.019797][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.037769][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.041377][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.044778][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.049239][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.101951][ T5836] veth0_macvtap: entered promiscuous mode
[   67.109079][ T5836] veth1_macvtap: entered promiscuous mode
[   67.114752][ T5838] veth0_vlan: entered promiscuous mode
[   67.141186][ T5838] veth1_vlan: entered promiscuous mode
[   67.174833][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.201572][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.229289][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.232756][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.239495][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.242860][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.269868][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.272940][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.302846][ T5838] veth0_macvtap: entered promiscuous mode
[   67.331146][ T5838] veth1_macvtap: entered promiscuous mode
[   67.344012][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.347978][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.393206][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.448716][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.460347][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.473017][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.476002][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.491732][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.495182][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.499539][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.502978][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.580439][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.586828][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.689935][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.705781][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.737383][ T5901] lo: entered allmulticast mode
[   67.757724][ T5901] lo: left allmulticast mode
[   67.769283][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.773482][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.937376][ T5915] veth1_macvtap: left promiscuous mode
[   67.946995][ T5915] macsec0: entered allmulticast mode
[   67.968088][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'.
[   67.971157][ T5915] netlink: 'syz.0.6': attribute type 7 has an invalid length.
[   67.973546][ T5915] netlink: 'syz.0.6': attribute type 8 has an invalid length.
[   68.000615][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'.
[   68.012822][ T5915] veth1_macvtap: entered promiscuous mode
[   68.023939][ T5915] veth1_macvtap: entered allmulticast mode
[   68.036093][ T5915] macsec0: left allmulticast mode
[   68.038098][ T5915] veth1_macvtap: left allmulticast mode
[   68.094785][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   68.124635][ T5932] pim6reg: entered allmulticast mode
[   68.322341][ T5944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   68.325571][ T5944] IPv6: NLM_F_CREATE should be set when creating new route
[   68.603321][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.631449][ T5961] x_tables: duplicate underflow at hook 2
[   68.669557][ T5841] Bluetooth: hci1: command tx timeout
[   68.672359][ T5841] Bluetooth: hci2: command tx timeout
[   68.759485][ T5971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.763124][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.763137][ T5971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.763168][ T5971] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.766252][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.781610][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[   68.785806][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   68.842940][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.852091][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.917745][ T5965] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.920631][ T5965] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.923312][ T5965] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.927286][ T5965] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.966471][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'.
[   68.969723][ T5968] netlink: 60 bytes leftover after parsing attributes in process `syz.0.24'.
[   69.140249][ T5984] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   69.143038][ T5984] netlink: 'syz.1.26': attribute type 2 has an invalid length.
[   69.193119][ T5984] bridge1: entered promiscuous mode
[   69.203524][ T5986] syz.2.27 uses obsolete (PF_INET,SOCK_PACKET)
[   69.294569][ T5991] Zero length message leads to an empty skb
[   69.351284][ T5995] batadv1: entered allmulticast mode
[   69.354153][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv1
[   69.551983][ T5884] IPVS: starting estimator thread 0...
[   69.573052][   T51] IPVS: starting estimator thread 0...
[   69.580521][ T6013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.636564][ T6014] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.656041][ T6015] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.882976][ T6023] netlink: 'syz.1.38': attribute type 4 has an invalid length.
[   70.407339][ T6052] trusted_key: syz.2.47 sent an empty control message without MSG_MORE.
[   70.746623][ T5841] Bluetooth: hci1: command tx timeout
[   70.748831][ T5223] Bluetooth: hci2: command tx timeout
[   70.991617][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.994423][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.192635][ T6068] netlink: 'syz.1.51': attribute type 10 has an invalid length.
[   71.258214][ T6071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.460336][ T6079] IPv6: sit2: Disabled Multicast RS
[   71.713818][ T6098] netlink: 'syz.1.60': attribute type 10 has an invalid length.
[   71.717522][ T6098] bridge0: port 3(team0) entered blocking state
[   71.720072][ T6098] bridge0: port 3(team0) entered disabled state
[   71.722687][ T6098] team0: entered allmulticast mode
[   71.724617][ T6098] team_slave_0: entered allmulticast mode
[   71.729390][ T6098] team_slave_1: entered allmulticast mode
[   71.735164][ T6098] team0: entered promiscuous mode
[   71.742865][ T6098] team_slave_0: entered promiscuous mode
[   71.747938][ T6098] team_slave_1: entered promiscuous mode
[   71.753125][ T6098] bridge0: port 3(team0) entered blocking state
[   71.755751][ T6098] bridge0: port 3(team0) entered forwarding state
[   71.844241][ T6105] warning: `syz.1.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.107153][ T6123] netlink: 'syz.0.66': attribute type 29 has an invalid length.
[   72.137834][ T6123] bond0: entered promiscuous mode
[   72.141639][ T6123] bond_slave_0: entered promiscuous mode
[   72.146036][ T6123] bond_slave_1: entered promiscuous mode
[   72.150305][ T6123] macvlan1: entered promiscuous mode
[   72.154136][ T6123] hsr1: entered promiscuous mode
[   72.172751][ T6127] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   72.196727][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.207592][ T6127] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   72.210682][ T6127] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   72.214633][ T6127] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   72.218993][ T6127] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   72.229501][ T6127] bond1: (slave geneve2): making interface the new active one
[   72.233602][ T6127] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   72.299028][   T51] IPVS: starting estimator thread 0...
[   72.365345][ T6140] x_tables: duplicate underflow at hook 1
[   72.386094][ T6136] IPVS: using max 39 ests per chain, 93600 per kthread
[   72.461563][ T6146] syz_tun: entered allmulticast mode
[   72.464339][ T6145] syz_tun: left allmulticast mode
[   72.700297][ T6159] netlink: 'syz.0.77': attribute type 12 has an invalid length.
[   72.826123][ T5841] Bluetooth: hci1: command tx timeout
[   72.827886][ T5223] Bluetooth: hci2: command tx timeout
[   72.830318][ T6163] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   73.284078][ T6174] netlink: 'syz.1.82': attribute type 4 has an invalid length.
[   73.288712][ T6173] netlink: 'syz.1.82': attribute type 4 has an invalid length.
[   73.291107][ T6173] netlink: 'syz.1.82': attribute type 17 has an invalid length.
[   73.293516][ T6174] netlink: 'syz.1.82': attribute type 17 has an invalid length.
[   73.300230][ T6173] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[   73.313306][ T6174] veth3: entered promiscuous mode
[   73.363275][ T6173] erspan0: entered allmulticast mode
[   73.400414][ T6177] __nla_validate_parse: 53 callbacks suppressed
[   73.400432][ T6177] netlink: 48 bytes leftover after parsing attributes in process `syz.1.83'.
[   73.401044][ T6178] netlink: 48 bytes leftover after parsing attributes in process `syz.1.83'.
[   73.466394][ T6180] bridge0: port 3(team0) entered disabled state
[   73.474069][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.478236][   T52] wlan0: Trigger new scan to find an IBSS to join
[   73.492418][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.648118][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.654420][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.708174][ T6180] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.710898][ T6180] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.713680][ T6180] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.722164][ T6180] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.791945][ T6180] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   73.795187][ T6180] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   73.800136][ T6180] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   73.803029][ T6180] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   73.998436][ T6201] tipc: Started in network mode
[   74.000948][ T6201] tipc: Node identity 0a22f62d5a43, cluster identity 4711
[   74.011519][ T6201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.016913][ T6201] tipc: Resetting bearer <eth:syzkaller0>
[   74.026207][ T6200] tipc: Disabling bearer <eth:syzkaller0>
[   74.119433][ T6206] IPv6: NLM_F_REPLACE set, but no existing node found!
[   74.138916][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'.
[   74.191144][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'.
[   74.236696][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[   74.582614][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[   74.662654][ T6226] xt_hashlimit: size too large, truncated to 1048576
[   74.958652][ T6234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   75.053953][ T6234] bridge_slave_0: left allmulticast mode
[   75.059312][ T6234] bridge_slave_0: left promiscuous mode
[   75.062033][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.074304][ T6234] bridge_slave_1: left allmulticast mode
[   75.082199][ T6234] bridge_slave_1: left promiscuous mode
[   75.084695][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.094028][ T6234] bond0: (slave bond_slave_0): Releasing backup interface
[   75.100799][ T6234] bond_slave_0: left promiscuous mode
[   75.111638][ T6234] bond0: (slave bond_slave_1): Releasing backup interface
[   75.118592][ T6234] bond_slave_1: left promiscuous mode
[   75.136284][ T6234] team0: Port device team_slave_0 removed
[   75.147382][ T6234] team0: Port device team_slave_1 removed
[   75.150812][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.153930][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.159434][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.162539][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.321687][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.105'.
[   75.404159][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   75.422979][ T6250] syzkaller1: entered promiscuous mode
[   75.424096][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   75.425168][ T6250] syzkaller1: entered allmulticast mode
[   75.439941][ T6252] netlink: 'syz.1.107': attribute type 13 has an invalid length.
[   75.654791][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'.
[   76.129478][ T6301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   76.215941][ T6305] syz.0.117 (6305) used greatest stack depth: 19768 bytes left
[   76.410156][ T6316] netlink: 'syz.1.122': attribute type 2 has an invalid length.
[   76.585929][ T6328] netlink: 'syz.1.126': attribute type 10 has an invalid length.
[   76.593762][ T6328] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   76.691038][ T6334] netlink: 'syz.1.128': attribute type 19 has an invalid length.
[   76.737343][ T6338] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.741015][ T6338] bond1: (slave bond2): Enslaving as an active interface with an up link
[   76.747188][ T6338] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.751242][ T6342] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   77.296653][ T6370] syzkaller0: entered promiscuous mode
[   77.302447][ T6370] syzkaller0: entered allmulticast mode
[   77.451022][ T6386] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   77.461905][ T6386] veth0: entered promiscuous mode
[   77.779294][ T6384] veth0: left promiscuous mode
[   77.807944][ T6440] xt_socket: unknown flags 0xd0
[   78.195395][ T6459] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   78.395120][ T6472] pim6reg9: entered allmulticast mode
[   78.507376][ T6444] wlan0: Trigger new scan to find an IBSS to join
[   78.608199][ T6478] __nla_validate_parse: 19 callbacks suppressed
[   78.608224][ T6478] netlink: 100 bytes leftover after parsing attributes in process `syz.1.156'.
[   78.752021][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'.
[   78.756644][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'.
[   78.834417][ T6501] pimreg: entered allmulticast mode
[   78.849588][ T6501] pimreg: left allmulticast mode
[   78.966040][ T6502] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   79.159759][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'.
[   79.164208][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'.
[   79.397720][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.716335][ T6526] netlink: 'syz.2.167': attribute type 13 has an invalid length.
[   79.719526][ T6526] netlink: 'syz.2.167': attribute type 17 has an invalid length.
[   79.807512][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.811435][ T6526] 8021q: adding VLAN 0 to HW filter on device team0
[   79.819250][ T6526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.826868][ T6533] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.168'.
[   79.893303][ T6526] syz.2.167 (6526) used greatest stack depth: 19352 bytes left
[   80.001568][ T6545] xt_CT: No such helper "pptp"
[   80.210219][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'.
[   80.216011][ T6556] x_tables: duplicate underflow at hook 1
[   80.289600][ T6560] netlink: 48 bytes leftover after parsing attributes in process `syz.2.176'.
[   80.292852][ T6558] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.175'.
[   80.298581][ T6560] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.309892][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'.
[   80.343685][ T6563] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   80.387959][ T6563] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[   80.434414][ T6569] netlink: 'syz.1.177': attribute type 21 has an invalid length.
[   80.598711][ T6563] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.601605][ T6563] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.604327][ T6563] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.607833][ T6563] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.640760][ T6569] netlink: 'syz.1.177': attribute type 6 has an invalid length.
[   81.228630][ T2427] cfg80211: failed to load regulatory.db
[   81.275914][ T6614] set match dimension is over the limit!
[   81.464703][ T6628] Illegal XDP return value 4294967289 on prog  (id 45) dev N/A, expect packet loss!
[   82.137707][ T6673] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   82.337676][ T6683] bridge_slave_0: left allmulticast mode
[   82.340608][ T6683] bridge_slave_0: left promiscuous mode
[   82.344334][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.355078][ T6683] bridge_slave_1: left allmulticast mode
[   82.358739][ T6683] bridge_slave_1: left promiscuous mode
[   82.363837][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.381277][ T6683] bond0: (slave bond_slave_0): Releasing backup interface
[   82.388767][ T6683] bond0: (slave bond_slave_1): Releasing backup interface
[   82.400642][ T6683] team0: Port device team_slave_0 removed
[   82.412557][ T6683] team0: Port device team_slave_1 removed
[   82.416477][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.420547][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.436718][ T6683] bond1: (slave bond2): Releasing backup interface
[   82.871301][ T6714] xt_TCPMSS: Only works on TCP SYN packets
[   83.193386][ T6725] xt_CT: You must specify a L4 protocol and not use inversions on it
[   83.644448][ T6773] netlink: 'syz.0.226': attribute type 1 has an invalid length.
[   84.005458][ T6796] IPVS: Error connecting to the multicast addr
[   84.107206][ T6802] tipc: Started in network mode
[   84.108844][ T6802] tipc: Node identity 22c2ba102694, cluster identity 4711
[   84.111188][ T6802] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.113686][ T6802] syzkaller0: entered promiscuous mode
[   84.115442][ T6802] syzkaller0: entered allmulticast mode
[   84.124567][ T6802] tipc: Resetting bearer <eth:syzkaller0>
[   84.132463][ T6800] tipc: Resetting bearer <eth:syzkaller0>
[   84.148339][ T6800] tipc: Disabling bearer <eth:syzkaller0>
[   84.184619][ T6805] __nla_validate_parse: 19 callbacks suppressed
[   84.184636][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'.
[   84.396519][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.243'.
[   84.578111][ T6832] netlink: 788 bytes leftover after parsing attributes in process `syz.0.243'.
[   85.496773][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'.
[   85.542316][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[   85.547708][ T6862] netlink: 'syz.2.255': attribute type 7 has an invalid length.
[   85.551186][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.255'.
[   85.710479][ T6873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.731669][ T6873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.259'.
[   85.882457][ T6887] netlink: 'syz.1.263': attribute type 2 has an invalid length.
[   85.882776][ T6888] netlink: 'syz.0.262': attribute type 9 has an invalid length.
[   85.888205][ T6888] netlink: 'syz.0.262': attribute type 6 has an invalid length.
[   86.113716][ T6893] tipc: Started in network mode
[   86.115344][ T6893] tipc: Node identity ac14140f, cluster identity 4711
[   86.151852][ T6893] tipc: New replicast peer: 255.255.255.255
[   86.154319][ T6893] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.163893][ T6891] vxcan3: entered allmulticast mode
[   86.207254][ T6893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.264'.
[   86.519576][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[   86.524000][ T6909] netlink: 'syz.1.270': attribute type 4 has an invalid length.
[   86.529293][ T6909] netlink: 'syz.1.270': attribute type 4 has an invalid length.
[   86.619724][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'.
[   87.022744][ T6927] @: renamed from vlan0
[   87.277029][ T6170] tipc: Node number set to 2886997007
[   87.354700][ T6937] netlink: zone id is out of range
[   87.357038][ T6936] C: renamed from team_slave_0
[   87.358809][ T6937] netlink: zone id is out of range
[   87.361684][ T6936] netlink: 'syz.2.278': attribute type 2 has an invalid length.
[   87.364408][ T6936] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   87.369993][ T6937] netlink: zone id is out of range
[   87.371602][ T6937] netlink: zone id is out of range
[   87.373196][ T6937] netlink: zone id is out of range
[   87.374970][ T6937] netlink: zone id is out of range
[   87.382258][ T6937] netlink: zone id is out of range
[   87.383954][ T6937] netlink: zone id is out of range
[   87.623922][ T6946] erspan0: entered promiscuous mode
[   87.634947][ T6946] batman_adv: batadv0: Adding interface: macvlan2
[   87.646447][ T6946] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.660051][ T6946] batman_adv: batadv0: Interface activated: macvlan2
[   87.844225][ T6959] ip6tnl1: entered promiscuous mode
[   87.854241][ T6959] ip6tnl1: entered allmulticast mode
[   88.037669][ T6975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.084541][ T6981] netlink: 'syz.1.294': attribute type 11 has an invalid length.
[   88.169616][ T6986] netlink: 'syz.1.296': attribute type 13 has an invalid length.
[   88.172360][ T6986] netlink: 'syz.1.296': attribute type 17 has an invalid length.
[   88.187028][ T6986] erspan0: left allmulticast mode
[   88.223421][ T6986] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.227645][ T6986] 8021q: adding VLAN 0 to HW filter on device team0
[   88.368537][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.437691][ T6986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.493249][ T6986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.187195][ T7027] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   89.193419][ T7027] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   89.231783][ T7035] 8021q: VLANs not supported on ipvlan1
[   89.276775][ T7034] __nla_validate_parse: 13 callbacks suppressed
[   89.276800][ T7034] netlink: 720 bytes leftover after parsing attributes in process `syz.1.310'.
[   89.297863][ T7034] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   89.301759][ T7034] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   89.490945][ T7046] lo speed is unknown, defaulting to 1000
[   89.497193][ T7046] lo speed is unknown, defaulting to 1000
[   89.501508][ T7046] lo speed is unknown, defaulting to 1000
[   89.534381][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.313'.
[   89.812581][ T7046] infiniband syz0: set active
[   89.814395][ T7046] infiniband syz0: added lo
[   89.821075][   T24] lo speed is unknown, defaulting to 1000
[   89.885903][ T7046] RDS/IB: syz0: added
[   89.887856][ T7046] smc: adding ib device syz0 with port count 1
[   89.891722][ T7046] smc:    ib device syz0 port 1 has pnetid 
[   89.894963][   T24] lo speed is unknown, defaulting to 1000
[   89.900365][ T7046] lo speed is unknown, defaulting to 1000
[   90.059956][ T7080] Bluetooth: MGMT ver 1.23
[   90.110627][ T7046] lo speed is unknown, defaulting to 1000
[   90.379589][ T7097] batman_adv: batadv0: Interface deactivated: macvlan2
[   90.381686][ T7097] batman_adv: batadv0: Removing interface: macvlan2
[   90.422103][ T7046] lo speed is unknown, defaulting to 1000
[   90.474827][ T7107] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.502362][ T7106] ipvlan2: entered allmulticast mode
[   90.504021][ T7106] bond2: entered allmulticast mode
[   90.522295][ T7107] bond2: (slave gretap2): making interface the new active one
[   90.524695][ T7107] gretap2: entered allmulticast mode
[   90.543500][ T7107] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   90.563270][ T7112] batman_adv: batadv0: Adding interface: team0
[   90.568333][ T7112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.580148][ T7112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   90.580197][ T7113] validate_nla: 6 callbacks suppressed
[   90.580233][ T7113] netlink: 'syz.2.328': attribute type 10 has an invalid length.
[   90.615749][ T7113] netlink: 2 bytes leftover after parsing attributes in process `syz.2.328'.
[   90.618594][ T7113] team0: entered promiscuous mode
[   90.623755][ T7113] 8021q: adding VLAN 0 to HW filter on device team0
[   90.628100][ T7113] batman_adv: batadv0: Interface activated: team0
[   90.632037][ T7113] batman_adv: batadv0: Interface deactivated: team0
[   90.634702][ T7113] batman_adv: batadv0: Removing interface: team0
[   90.648040][ T7113] bridge0: port 1(team0) entered blocking state
[   90.650588][ T7113] bridge0: port 1(team0) entered disabled state
[   90.652963][ T7113] team0: entered allmulticast mode
[   90.723248][ T7118] lo speed is unknown, defaulting to 1000
[   90.779892][ T7122] IPVS: Scheduler module ip_vs_sip not found
[   90.798169][ T7122] vlan0: entered allmulticast mode
[   90.805675][ T7122] dummy0: entered allmulticast mode
[   90.934039][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'.
[   91.048834][ T7128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'.
[   91.118787][ T7128] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   91.194806][ T7134] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20002
[   91.504853][ T7150] netlink: 164 bytes leftover after parsing attributes in process `syz.1.339'.
[   91.780955][ T7161] netlink: 104 bytes leftover after parsing attributes in process `syz.0.344'.
[   91.952854][ T7172] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.348'.
[   91.959902][ T7172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.965044][ T7172] net_ratelimit: 4059 callbacks suppressed
[   91.965056][ T7172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.365357][ T7175] netlink: 224 bytes leftover after parsing attributes in process `syz.1.349'.
[   92.374637][ T7175] netlink: 96 bytes leftover after parsing attributes in process `syz.1.349'.
[   92.991535][ T7212] netlink: 'syz.0.360': attribute type 11 has an invalid length.
[   93.250500][ T7229] netlink: 'syz.2.368': attribute type 1 has an invalid length.
[   93.278677][ T7229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   93.281824][ T7229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   93.285289][ T7229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.289549][ T7229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.297748][ T7229] bond3: (slave geneve2): making interface the new active one
[   93.300780][ T7229] bond3: (slave geneve2): Enslaving as an active interface with an up link
[   93.320316][ T7229] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.391974][ T7241] lo speed is unknown, defaulting to 1000
[   93.394108][ T7241] lo speed is unknown, defaulting to 1000
[   93.398093][ T7241] lo speed is unknown, defaulting to 1000
[   93.413998][ T7241] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.423252][ T7241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   93.439339][ T7246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.448380][ T7245] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   93.499593][ T7244] syzkaller0: entered promiscuous mode
[   93.501548][ T7244] syzkaller0: entered allmulticast mode
[   93.503757][ T7244] tipc: Resetting bearer <eth:syzkaller0>
[   93.505920][ T7241] lo speed is unknown, defaulting to 1000
[   93.509998][ T7241] lo speed is unknown, defaulting to 1000
[   93.512991][ T7241] lo speed is unknown, defaulting to 1000
[   93.515389][ T7243] tipc: Resetting bearer <eth:syzkaller0>
[   94.495664][ T5884] tipc: Node number set to 1348597293
[   94.763193][ T7243] tipc: Disabling bearer <eth:syzkaller0>
[   94.842967][ T7268] __nla_validate_parse: 7 callbacks suppressed
[   94.842980][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'.
[   94.880540][ T7269] netlink: 'syz.0.377': attribute type 1 has an invalid length.
[   94.901091][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[   94.904126][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[   94.949990][ T7268] netlink: 'syz.2.378': attribute type 2 has an invalid length.
[   94.997057][ T7268] lo speed is unknown, defaulting to 1000
[   95.172914][ T7268] lo speed is unknown, defaulting to 1000
[   95.335904][ T7280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.381'.
[   95.716003][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[   95.719077][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'.
[   95.722196][ T7284] netlink: 'syz.0.382': attribute type 12 has an invalid length.
[   95.725344][ T7284] netlink: 'syz.0.382': attribute type 14 has an invalid length.
[   96.134711][ T5884] lo speed is unknown, defaulting to 1000
[   96.142936][ T5884] syz0: Port: 1 Link DOWN
[   96.148182][ T5884] lo speed is unknown, defaulting to 1000
[   96.222054][ T7309] netlink: 'syz.1.390': attribute type 1 has an invalid length.
[   96.224422][ T7309] netlink: 2 bytes leftover after parsing attributes in process `syz.1.390'.
[   96.322855][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.393'.
[   96.331619][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[   96.705904][ T7345] pim6reg1: entered promiscuous mode
[   96.707602][ T7345] pim6reg1: entered allmulticast mode
[   96.923790][ T7358] netlink: 116 bytes leftover after parsing attributes in process `syz.2.404'.
[   96.962733][ T7362] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   97.122705][ T7364] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   97.127016][ T7364] tipc: Enabled bearer <udp:syz1>, priority 10
[   97.276656][ T7375] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   97.553631][ T7381] netlink: 'syz.1.412': attribute type 4 has an invalid length.
[   98.138700][ T7402] delete_channel: no stack
[   98.296739][ T7409] syzkaller0: entered promiscuous mode
[   98.299122][ T7409] syzkaller0: entered allmulticast mode
[   98.335108][ T7411] netlink: zone id is out of range
[   98.341797][ T7411] netlink: zone id is out of range
[   98.344108][ T7411] netlink: zone id is out of range
[   98.348725][ T7411] netlink: zone id is out of range
[   98.352406][ T7411] netlink: zone id is out of range
[   98.354467][ T7411] netlink: zone id is out of range
[   98.358934][ T7411] netlink: zone id is out of range
[   98.363266][ T7411] netlink: zone id is out of range
[   98.366507][ T7411] netlink: zone id is out of range
[   98.368134][ T7411] netlink: zone id is out of range
[   98.751008][ T7433] netlink: 'syz.2.429': attribute type 1 has an invalid length.
[   98.834303][ T7435] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   98.848318][ T7435] bond4: (slave vxcan3): Error -95 calling set_mac_address
[   98.868870][ T7433] gretap1: entered promiscuous mode
[   98.872289][ T7433] bond4: (slave gretap1): making interface the new active one
[   98.875174][ T7433] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   98.942134][ T7449] batman_adv: batadv0: Adding interface: macvlan2
[   98.948557][ T7449] batman_adv: batadv0: Interface activated: macvlan2
[   99.058330][ T7453] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.061511][ T7453] syzkaller0: entered promiscuous mode
[   99.063648][ T7453] syzkaller0: entered allmulticast mode
[   99.071407][ T7453] sctp: [Deprecated]: syz.2.436 (pid 7453) Use of int in maxseg socket option.
[   99.071407][ T7453] Use struct sctp_assoc_value instead
[   99.092860][ T7453] tipc: Resetting bearer <eth:syzkaller0>
[   99.097844][ T7452] tipc: Resetting bearer <eth:syzkaller0>
[   99.113189][ T7452] tipc: Disabling bearer <eth:syzkaller0>
[   99.528479][ T7480] netlink: 'syz.0.444': attribute type 1 has an invalid length.
[   99.581270][ T7482] IPVS: Scheduler module ip_vs_sip not found
[   99.585140][ T7482] IPVS: length: 8 != 446622349272
[   99.728488][ T7494] block nbd0: Unsupported socket: shutdown callout must be supported.
[   99.796194][ T7499] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   99.804438][ T7499] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   99.807762][ T7499] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   99.810644][ T7499] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   99.818569][ T7499] geneve3: entered promiscuous mode
[  100.224764][ T7512] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  100.497487][ T7531] netlink: 'syz.2.459': attribute type 1 has an invalid length.
[  100.592541][ T7533] syzkaller0: entered promiscuous mode
[  100.594770][ T7533] syzkaller0: entered allmulticast mode
[  100.626111][ T7540] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  100.880311][ T7549] netlink: 'syz.2.465': attribute type 21 has an invalid length.
[  100.883365][ T7549] IPv6: NLM_F_CREATE should be specified when creating new route
[  101.978155][ T7562] __nla_validate_parse: 11 callbacks suppressed
[  101.978166][ T7562] netlink: 52 bytes leftover after parsing attributes in process `syz.2.467'.
[  101.984097][ T7562] netlink: 52 bytes leftover after parsing attributes in process `syz.2.467'.
[  101.988754][ T7562] netlink: 52 bytes leftover after parsing attributes in process `syz.2.467'.
[  102.001496][ T7556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.004656][ T7556] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.010177][ T7556] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.013214][ T7556] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  102.018322][ T7556] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  102.021218][ T7556] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  102.024421][ T7556] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  102.029081][ T7556] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  102.033290][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'.
[  102.047976][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.467'.
[  102.195889][ T7571] nbd: must specify at least one socket
[  102.220505][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[  102.223825][ T7571] netlink: 52 bytes leftover after parsing attributes in process `syz.0.471'.
[  102.246060][ T7566] team0: left allmulticast mode
[  102.247798][ T7566] team_slave_0: left allmulticast mode
[  102.249507][ T7566] team_slave_1: left allmulticast mode
[  102.251146][ T7566] team0: left promiscuous mode
[  102.252548][ T7566] team_slave_0: left promiscuous mode
[  102.254340][ T7566] team_slave_1: left promiscuous mode
[  102.258282][ T7566] bridge0: port 3(team0) entered disabled state
[  102.262366][ T7566] bridge_slave_0: left allmulticast mode
[  102.264076][ T7566] bridge_slave_0: left promiscuous mode
[  102.266136][ T7566] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.270657][ T7566] bridge_slave_1: left allmulticast mode
[  102.272383][ T7566] bridge_slave_1: left promiscuous mode
[  102.274152][ T7566] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.282454][ T7566] bond0: (slave bond_slave_0): Releasing backup interface
[  102.286357][ T7566] bond0: (slave bond_slave_1): Releasing backup interface
[  102.291131][ T7566] team0: Port device team_slave_0 removed
[  102.294599][ T7566] team0: Port device team_slave_1 removed
[  102.296825][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.299479][ T7566] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.302809][ T7566] bond0: (slave wlan1): Releasing backup interface
[  102.312205][ T7566] bond1: (slave geneve2): Releasing active interface
[  102.317931][ T7566] batman_adv: batadv0: Interface deactivated: macvlan2
[  102.320177][ T7566] batman_adv: batadv0: Removing interface: macvlan2
[  102.333796][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'.
[  102.355416][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'.
[  102.374544][ T7575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.491123][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  102.526078][ T7588] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  102.650677][ T7591] lo speed is unknown, defaulting to 1000
[  102.796300][ T7591] lo speed is unknown, defaulting to 1000
[  102.796512][ T7592] lo speed is unknown, defaulting to 1000
[  102.935781][ T7592] lo speed is unknown, defaulting to 1000
[  103.545710][ T7625] bridge5: entered promiscuous mode
[  103.548006][ T7625] bridge5: entered allmulticast mode
[  103.630601][ T7629] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  103.635397][ T7629] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  103.759804][ T7632] lo speed is unknown, defaulting to 1000
[  103.877239][ T7637] netlink: 'syz.1.488': attribute type 1 has an invalid length.
[  103.970004][ T7632] lo speed is unknown, defaulting to 1000
[  104.135112][ T5864] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.138804][ T5864] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.155752][ T1277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.178314][ T1277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  104.190990][ T7654] batadv_slave_1: entered promiscuous mode
[  104.222481][ T7659] netlink: 'syz.1.494': attribute type 12 has an invalid length.
[  104.340593][ T7653] batadv_slave_1: left promiscuous mode
[  104.406759][ T7676] lo speed is unknown, defaulting to 1000
[  104.453848][ T7685] netlink: 'syz.2.501': attribute type 30 has an invalid length.
[  104.464172][ T7685] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.467569][ T7685] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.470371][ T7685] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.472920][ T7685] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.481373][ T7685] netlink: 'syz.2.501': attribute type 30 has an invalid length.
[  104.560197][ T7676] lo speed is unknown, defaulting to 1000
[  105.065087][ T7720] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[  105.069366][ T7720] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[  105.072164][ T7720] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[  105.074960][ T7720] netlink: 'syz.1.513': attribute type 1 has an invalid length.
[  105.086123][ T7720] netlink: 'syz.1.513': attribute type 2 has an invalid length.
[  105.145808][ T1277] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  105.244882][ T7732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.422056][ T7746] sctp: [Deprecated]: syz.1.519 (pid 7746) Use of int in max_burst socket option deprecated.
[  105.422056][ T7746] Use struct sctp_assoc_value instead
[  105.667832][ T7762] delete_channel: no stack
[  105.671223][ T7762] net_ratelimit: 4 callbacks suppressed
[  105.671240][ T7762] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  105.754835][ T7771] lo speed is unknown, defaulting to 1000
[  105.885072][ T7771] lo speed is unknown, defaulting to 1000
[  106.002629][ T7777] IPVS: Error joining to the multicast group
[  106.233119][ T7786] x_tables: duplicate underflow at hook 1
[  106.608912][ T7797] veth7: entered promiscuous mode
[  106.634405][ T7803] gretap0: entered promiscuous mode
[  106.640539][ T7803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  106.649152][ T7801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.651725][   T24] lo speed is unknown, defaulting to 1000
[  106.653490][   T24] syz0: Port: 1 Link ACTIVE
[  106.664194][ T7801] syzkaller0: entered promiscuous mode
[  106.668126][ T7801] syzkaller0: entered allmulticast mode
[  106.670386][ T7801] tipc: Resetting bearer <eth:syzkaller0>
[  106.673118][   T24] lo speed is unknown, defaulting to 1000
[  106.695965][ T7801] tipc: Resetting bearer <eth:syzkaller0>
[  106.726914][ T7805] validate_nla: 2 callbacks suppressed
[  106.726926][ T7805] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[  106.752971][ T7809] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[  106.905958][ T7826] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  106.983226][ T7834] macsec0: entered promiscuous mode
[  106.984996][ T7834] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  106.990771][ T7834] macsec0: entered allmulticast mode
[  106.992470][ T7834] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  107.688034][ T6170] tipc: Node number set to 72792592
[  107.842426][ T7844] __nla_validate_parse: 27 callbacks suppressed
[  107.842436][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.556'.
[  107.917145][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  107.942084][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'.
[  107.981660][ T7859] netlink: 88 bytes leftover after parsing attributes in process `syz.0.561'.
[  107.985026][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.561'.
[  108.067275][ T7869] gtp0: entered promiscuous mode
[  108.068949][ T7869] gtp0: entered allmulticast mode
[  108.072409][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[  108.105715][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.114857][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.1.568'.
[  108.155066][ T7877] pimreg: entered allmulticast mode
[  108.164516][ T7877] pimreg: left allmulticast mode
[  108.183533][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.567'.
[  108.221795][ T7880] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.569'.
[  108.225141][ T7880] netlink: zone id is out of range
[  108.231173][ T7880] netlink: zone id is out of range
[  108.233051][ T7880] netlink: zone id is out of range
[  108.234767][ T7880] netlink: zone id is out of range
[  108.236721][ T7880] netlink: zone id is out of range
[  108.238502][ T7880] netlink: zone id is out of range
[  108.240115][ T7880] netlink: zone id is out of range
[  108.241978][ T7880] netlink: zone id is out of range
[  108.969450][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'.
[  109.079643][ T7898] @: renamed from bond_slave_0
[  109.116032][ T7899] pimreg: entered allmulticast mode
[  109.120468][ T7899] pimreg: left allmulticast mode
[  109.141163][ T7901] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  109.145046][ T7901] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  109.157333][ T7901] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  109.160633][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.0.576 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  109.160652][ T7901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.160662][ T7901] Call Trace:
[  109.160669][ T7901]  <TASK>
[  109.160716][ T7901]  dump_stack_lvl+0x189/0x250
[  109.160743][ T7901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.160761][ T7901]  ? __pfx__printk+0x10/0x10
[  109.160782][ T7901]  ? kernfs_path_from_node+0x2c/0x260
[  109.160803][ T7901]  ? kernfs_path_from_node+0x2c/0x260
[  109.160821][ T7901]  ? kernfs_path_from_node+0x2c/0x260
[  109.160842][ T7901]  ? kernfs_path_from_node+0x22c/0x260
[  109.160860][ T7901]  ? kernfs_path_from_node+0x2c/0x260
[  109.160883][ T7901]  sysfs_warn_dup+0x8e/0xa0
[  109.160903][ T7901]  sysfs_do_create_link_sd+0xc0/0x110
[  109.160925][ T7901]  device_add_class_symlinks+0x1cf/0x240
[  109.160950][ T7901]  device_add+0x475/0xb50
[  109.160972][ T7901]  wiphy_register+0x199a/0x26b0
[  109.161004][ T7901]  ? __pfx_wiphy_register+0x10/0x10
[  109.161020][ T7901]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  109.161045][ T7901]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  109.161068][ T7901]  ieee80211_register_hw+0x33e1/0x4120
[  109.161103][ T7901]  ? ieee80211_register_hw+0x1481/0x4120
[  109.161130][ T7901]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  109.161153][ T7901]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.161180][ T7901]  ? __hrtimer_setup+0x187/0x210
[  109.161196][ T7901]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  109.161220][ T7901]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  109.161292][ T7901]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  109.161310][ T7901]  ? trace_kmalloc+0x1f/0xd0
[  109.161326][ T7901]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  109.161344][ T7901]  ? kstrndup+0xbf/0x160
[  109.161375][ T7901]  hwsim_new_radio_nl+0xea4/0x1b10
[  109.161395][ T7901]  ? __pfx___nla_validate_parse+0x10/0x10
[  109.161424][ T7901]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.161454][ T7901]  ? __nla_parse+0x40/0x60
[  109.161472][ T7901]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  109.161499][ T7901]  genl_family_rcv_msg_doit+0x215/0x300
[  109.161527][ T7901]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  109.161561][ T7901]  ? bpf_lsm_capable+0x9/0x20
[  109.161578][ T7901]  ? security_capable+0x7e/0x2e0
[  109.161606][ T7901]  genl_rcv_msg+0x60e/0x790
[  109.161633][ T7901]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.161653][ T7901]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  109.161684][ T7901]  netlink_rcv_skb+0x208/0x470
[  109.161702][ T7901]  ? __pfx_genl_rcv_msg+0x10/0x10
[  109.161724][ T7901]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  109.161758][ T7901]  ? down_read+0x1ad/0x2e0
[  109.161776][ T7901]  genl_rcv+0x28/0x40
[  109.161795][ T7901]  netlink_unicast+0x75b/0x8d0
[  109.161821][ T7901]  netlink_sendmsg+0x805/0xb30
[  109.161847][ T7901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.161868][ T7901]  ? aa_sock_msg_perm+0x94/0x160
[  109.161893][ T7901]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.161905][ T7901]  ? __pfx_netlink_sendmsg+0x10/0x10
[  109.161924][ T7901]  __sock_sendmsg+0x21c/0x270
[  109.161941][ T7901]  ____sys_sendmsg+0x505/0x830
[  109.161963][ T7901]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.161987][ T7901]  ? import_iovec+0x74/0xa0
[  109.162005][ T7901]  ___sys_sendmsg+0x21f/0x2a0
[  109.162023][ T7901]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.162074][ T7901]  ? __fget_files+0x2a/0x420
[  109.162094][ T7901]  ? __fget_files+0x3a0/0x420
[  109.162122][ T7901]  __x64_sys_sendmsg+0x19b/0x260
[  109.162144][ T7901]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  109.162172][ T7901]  ? rcu_is_watching+0x15/0xb0
[  109.162196][ T7901]  ? do_syscall_64+0xbe/0x3b0
[  109.162215][ T7901]  do_syscall_64+0xfa/0x3b0
[  109.162227][ T7901]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.162241][ T7901]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.162284][ T7901]  ? exc_page_fault+0x9f/0xf0
[  109.162308][ T7901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.162322][ T7901] RIP: 0033:0x7f7b0038e929
[  109.162337][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.162348][ T7901] RSP: 002b:00007f7b011a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  109.162366][ T7901] RAX: ffffffffffffffda RBX: 00007f7b005b5fa0 RCX: 00007f7b0038e929
[  109.162376][ T7901] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000007
[  109.162385][ T7901] RBP: 00007f7b00410b39 R08: 0000000000000000 R09: 0000000000000000
[  109.162394][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  109.162402][ T7901] R13: 0000000000000000 R14: 00007f7b005b5fa0 R15: 00007ffe10c796a8
[  109.162427][ T7901]  </TASK>
[  109.518446][ T7917] delete_channel: no stack
[  109.576576][ T7922] vlan0: entered promiscuous mode
[  109.578780][ T7922] team0: entered promiscuous mode
[  109.690098][ T7930] netlink: 'syz.1.580': attribute type 4 has an invalid length.
[  109.988818][ T7953] pimreg: entered allmulticast mode
[  110.003141][ T7953] pimreg: left allmulticast mode
[  110.104517][ T7963] xt_connbytes: Forcing CT accounting to be enabled
[  110.109429][ T7963] Cannot find set identified by id 0 to match
[  110.112481][ T7963] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  110.925005][ T8007] bond0: entered promiscuous mode
[  110.929504][ T8007] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  110.934938][ T8007] Cannot create hsr debugfs directory
[  110.941485][ T8007] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  110.956757][ T8007] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  110.962860][ T8007] 8021q: adding VLAN 0 to HW filter on device hsr1
[  111.131927][ T8018] lo speed is unknown, defaulting to 1000
[  111.332428][ T8018] lo speed is unknown, defaulting to 1000
[  111.335294][ T8024] lo speed is unknown, defaulting to 1000
[  111.512280][ T8024] lo speed is unknown, defaulting to 1000
[  111.523649][ T8041] lo speed is unknown, defaulting to 1000
[  111.563251][ T8042] netlink: 'syz.0.600': attribute type 21 has an invalid length.
[  111.567301][ T8042] netlink: 'syz.0.600': attribute type 6 has an invalid length.
[  111.703795][ T8041] lo speed is unknown, defaulting to 1000
[  111.929849][ T8051] lo speed is unknown, defaulting to 1000
[  112.049821][ T8051] lo speed is unknown, defaulting to 1000
[  112.228249][ T8070] netlink: 'syz.1.607': attribute type 1 has an invalid length.
[  112.285249][ T8073] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.307171][ T8073] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.309740][ T8073] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  112.314176][ T8073] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  112.848707][ T8103] netlink: 'syz.0.618': attribute type 1 has an invalid length.
[  112.856614][ T8103] __nla_validate_parse: 13 callbacks suppressed
[  112.856633][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.618'.
[  112.950006][ T8105] net_ratelimit: 13 callbacks suppressed
[  112.950023][ T8105] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  113.135181][ T8113] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20004
[  113.203079][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  113.275152][ T8119] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  113.476543][ T8130] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  113.710713][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'.
[  113.770329][ T8146] ip6t_srh: unknown srh match flags  4000
[  113.778412][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  113.992429][ T8156] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  114.551828][ T8177] netlink: 'syz.2.641': attribute type 2 has an invalid length.
[  114.632118][ T8181] ip6tnl1: left promiscuous mode
[  114.633888][ T8181] ip6tnl1: left allmulticast mode
[  114.636190][ T8181] gretap1: left promiscuous mode
[  114.637950][ T8181] geneve3: left promiscuous mode
[  114.644143][ T8181] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.647664][ T8181] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.650963][ T8181] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.654559][ T8181] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.775138][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  114.904751][ T8189] syz_tun: entered allmulticast mode
[  114.909390][ T8193] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.912249][ T8188] syz_tun: left allmulticast mode
[  114.918772][ T8193] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  114.922523][ T8193] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  114.925944][ T8193] CPU: 0 UID: 0 PID: 8193 Comm: syz.0.648 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  114.930585][ T8193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.934007][ T8193] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  114.936132][ T8193] Code: 89 ef e8 d0 5d ab f8 4d 89 ef 85 db 74 0d e8 04 da 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 99 5d ab f8 48 8b
[  114.942786][ T8193] RSP: 0018:ffffc9000783f0c8 EFLAGS: 00010202
[  114.945171][ T8193] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  114.948325][ T8193] RDX: ffff888029390000 RSI: 0000000000000000 RDI: 0000000000000000
[  114.951131][ T8193] RBP: 0000000000000000 R08: ffff888029390000 R09: 0000000000000002
[  114.953575][ T8193] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  114.955936][ T8193] R13: ffff8881078f7000 R14: dffffc0000000000 R15: ffff8881078f7000
[  114.958302][ T8193] FS:  00007f7b011a66c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  114.961008][ T8193] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  114.963030][ T8193] CR2: 0000200000002280 CR3: 0000000037c26000 CR4: 00000000000006f0
[  114.965409][ T8193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  114.968178][ T8193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  114.970662][ T8193] Call Trace:
[  114.972036][ T8193]  <TASK>
[  114.973254][ T8193]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  114.975041][ T8193]  pie_change+0x96d/0xca0
[  114.976320][ T8193]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  114.978123][ T8193]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.979720][ T8193]  ? __pfx_pie_change+0x10/0x10
[  114.981243][ T8193]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.983098][ T8193]  ? timer_init_key+0x171/0x2d0
[  114.984870][ T8193]  ? __pfx_pie_init+0x10/0x10
[  114.986280][ T8193]  pie_init+0x2a3/0x3f0
[  114.987549][ T8193]  qdisc_create+0x7ac/0xea0
[  114.988949][ T8193]  tc_modify_qdisc+0x1426/0x2010
[  114.990411][ T8193]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  114.992006][ T8193]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  114.993589][ T8193]  rtnetlink_rcv_msg+0x77c/0xb70
[  114.995065][ T8193]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  114.996552][ T8193]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  114.998171][ T8193]  netlink_rcv_skb+0x208/0x470
[  114.999628][ T8193]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  115.001302][ T8193]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  115.002937][ T8193]  ? netlink_deliver_tap+0x2e/0x1b0
[  115.004489][ T8193]  ? netlink_deliver_tap+0x2e/0x1b0
[  115.006102][ T8193]  netlink_unicast+0x75b/0x8d0
[  115.007524][ T8193]  netlink_sendmsg+0x805/0xb30
[  115.008974][ T8193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.010566][ T8193]  ? aa_sock_msg_perm+0x94/0x160
[  115.012058][ T8193]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  115.013682][ T8193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  115.015327][ T8193]  __sock_sendmsg+0x21c/0x270
[  115.016776][ T8193]  ____sys_sendmsg+0x505/0x830
[  115.018250][ T8193]  ? __pfx_____sys_sendmsg+0x10/0x10
[  115.019803][ T8193]  ? import_iovec+0x74/0xa0
[  115.021167][ T8193]  ___sys_sendmsg+0x21f/0x2a0
[  115.022608][ T8193]  ? __pfx____sys_sendmsg+0x10/0x10
[  115.024220][ T8193]  ? __fget_files+0x2a/0x420
[  115.025655][ T8193]  ? __fget_files+0x3a0/0x420
[  115.027161][ T8193]  __x64_sys_sendmsg+0x19b/0x260
[  115.028704][ T8193]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  115.030431][ T8193]  ? rcu_is_watching+0x15/0xb0
[  115.031950][ T8193]  ? do_syscall_64+0xbe/0x3b0
[  115.033435][ T8193]  do_syscall_64+0xfa/0x3b0
[  115.034836][ T8193]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.036408][ T8193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.038227][ T8193]  ? exc_page_fault+0x9f/0xf0
[  115.039692][ T8193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.041532][ T8193] RIP: 0033:0x7f7b0038e929
[  115.042936][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.048805][ T8193] RSP: 002b:00007f7b011a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  115.051333][ T8193] RAX: ffffffffffffffda RBX: 00007f7b005b5fa0 RCX: 00007f7b0038e929
[  115.053679][ T8193] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000007
[  115.056113][ T8193] RBP: 00007f7b00410b39 R08: 0000000000000000 R09: 0000000000000000
[  115.058522][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.060893][ T8193] R13: 0000000000000000 R14: 00007f7b005b5fa0 R15: 00007ffe10c796a8
[  115.063285][ T8193]  </TASK>
[  115.064242][ T8193] Modules linked in:
[  115.065620][ T8193] ---[ end trace 0000000000000000 ]---
[  115.067298][ T8193] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  115.069201][ T8193] Code: 89 ef e8 d0 5d ab f8 4d 89 ef 85 db 74 0d e8 04 da 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 99 5d ab f8 48 8b
[  115.075051][ T8193] RSP: 0018:ffffc9000783f0c8 EFLAGS: 00010202
[  115.076959][ T8193] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  115.079373][ T8193] RDX: ffff888029390000 RSI: 0000000000000000 RDI: 0000000000000000
[  115.081843][ T8193] RBP: 0000000000000000 R08: ffff888029390000 R09: 0000000000000002
[  115.084285][ T8193] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  115.087021][ T8193] R13: ffff8881078f7000 R14: dffffc0000000000 R15: ffff8881078f7000
[  115.089477][ T8193] FS:  00007f7b011a66c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  115.092232][ T8193] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.094276][ T8193] CR2: 0000200000002280 CR3: 0000000037c26000 CR4: 00000000000006f0
[  115.096775][ T8193] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  115.099192][ T8193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  115.101652][ T8193] Kernel panic - not syncing: Fatal exception in interrupt
[  115.104563][ T8193] Kernel Offset: disabled
[  115.105978][ T8193] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:04:08  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000fc5 RDI=0000000000000fc6 RBP=ffffffff99dfc9f0 RSP=ffffc9000783e890
R8 =ffff888107e88237 R9 =1ffff11020fd1046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7b011a66c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=0000000037c26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f7b010ed100 00007f7b00585440 XMM05=00007f7b00585458 00007f7b005854a0
XMM06=00007f7b00585498 00007f7b00585490 XMM07=00007f7b00585488 00007f7b00585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7b00411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=9bc87979d9822600 RBX=ffffffff81975d58 RCX=9bc87979d9822600 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d3000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30906ff8 CR3=000000010a7a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007efd74211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
