last executing test programs:

1m59.491133117s ago: executing program 1 (id=227):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x0, 0x0, @private2}}, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0xf7}, &(0x7f0000000040)=0x9b)

1m58.492499719s ago: executing program 1 (id=243):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xb}], 0x10, 0x7ff}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

1m58.251229608s ago: executing program 1 (id=247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800)

1m58.181268344s ago: executing program 1 (id=250):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005})
epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000)
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)

1m58.181057004s ago: executing program 2 (id=251):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50)
ioctl$int_in(0xffffffffffffffff, 0xfc10, &(0x7f0000000200)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
connect$netrom(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

1m58.111058119s ago: executing program 2 (id=253):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90", 0x1e}, {&(0x7f0000000200)="c67f", 0x2}], 0x2)

1m57.900957099s ago: executing program 2 (id=257):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x5}, 0x4)

1m57.840147129s ago: executing program 2 (id=260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x0, 0xfffffffe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x24}}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0)

1m57.748389894s ago: executing program 2 (id=262):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="be", 0x1}], 0x1}}], 0x2, 0x3404c891)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x8002}, 0x8)

1m57.545131605s ago: executing program 0 (id=263):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0)

1m57.440291891s ago: executing program 0 (id=264):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x61, 0x0, 0x0, 0xfffffffe}]})

1m57.370503947s ago: executing program 0 (id=265):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0xffea, @local}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)

1m57.370351977s ago: executing program 0 (id=266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

1m57.308338413s ago: executing program 0 (id=267):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000600)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)

1m57.240859663s ago: executing program 0 (id=268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0)

1m57.240668196s ago: executing program 1 (id=269):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

1m54.197002545s ago: executing program 2 (id=270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket(0x2, 0x3, 0xff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x400ddf}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r8 = openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000340)=0xc05, 0x12)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1m44.546460437s ago: executing program 1 (id=271):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)

1m31.869411878s ago: executing program 32 (id=268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x304)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0)

40.948852053s ago: executing program 33 (id=271):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)

40.415413125s ago: executing program 34 (id=270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket(0x2, 0x3, 0xff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x400ddf}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r8 = openat$cgroup_int(r2, &(0x7f0000000240)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r8, &(0x7f0000000340)=0xc05, 0x12)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.309840937s ago: executing program 5 (id=1049):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0xff0f000020000080)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x0)
socket$netlink(0x10, 0x3, 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001db41d1614c767d507742e2c8ed1d1da06800"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d0000001400"], 0xa8}}, 0x0)
close(0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0)
close(r3)

1.149771017s ago: executing program 5 (id=1054):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028005000a000100000004000e"], 0x40}}, 0x0)

1.080235262s ago: executing program 5 (id=1057):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xda}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x38}}, 0x4040810)

1.079863184s ago: executing program 5 (id=1059):
r0 = socket(0x840000000002, 0x3, 0xfa)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)

869.90089ms ago: executing program 3 (id=1067):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0xfe}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}}, 0x0)

789.686668ms ago: executing program 3 (id=1068):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)

689.876838ms ago: executing program 3 (id=1070):
r0 = socket(0x15, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x873f, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @remote}}}})

689.361682ms ago: executing program 3 (id=1072):
r0 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

619.022041ms ago: executing program 3 (id=1074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffffffe}]}]}]}, 0x38}}, 0x0)

539.848693ms ago: executing program 3 (id=1076):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e23000006000100023fe76b0a407d39b9e8d63b1f6da65df6000000"], 0x38}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="000428bd7000fddbdf253b0000000c0099000100000036000000e2013300402ca100080211000001ffffffffffff50505050505048e60006020202020202ddb9fb1087003ad0bde715bd073ec9a19667433270fbed584942a29f2dbefaf7a6a74fdb9b789ad7ba849b3426271699b69767c7d8a4ea16525bf98ccb4a44e0d87847ec76324cac906da3e521ac03294475768a5ad27a119c9a07fa5fd583a3eb52606ede5260800c27fa7032168b7e07457906d343cc65f04fb4ab5f1784bb674f08928f460a9e0801f3e5844e50ff9f67e7bf53e3295b5f9ac2e6117cbe471620bc1a4c8c156358cb33b459c48dfceb1de7bdbbc63b5ca29343dd15a1105cce1a60f4fed2e062f0f47545dd92e50ed47fddb34945f067d045b6192d1d1616be25e694e397ee467eba9016c5720d16fe9b40e5402a4ed742f46206d73d39b93776d4dc912ace5badc2696af9f5ddcabd8a9e87d2fafeda1a799f14e33edde16d931e49245e49e9aa468c4bf2dcaca331b510787a07de9276475342baf4c299a816a37d691b2a6237e561d882c5739288cf2eeca63a4ac997e9a8428ba8f5167b19a2c947467955a2d045f0c562f1a19e414eff819bd27236ced9a66be2a21dc35b7856ab013ddd35d9237d043be6064ea9207371696412e510541f6892dede69a57ea43ee9ee4cbab75d2a6d20666d3a5424d908e0f64e72594b02b063000008005700ea09000008002201ad0100000500180128000000050018010f0000000800a1006778000008009f000000000008002700000000000800a1000900000008009f0001000000080027000100000004006c000600cd000e000000"], 0x260}}, 0x810)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x25a5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000009000000050000000400000048100000", @ANYRES32=r7, @ANYBLOB="09000000000000000000000000000000005f163a4040ba00000050dbc26ea210cf68bc642360879e2871", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000010000000100"/28], 0x50)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
sendmsg$tipc(r9, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
pipe(&(0x7f00000000c0))
close(r11)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

237.329058ms ago: executing program 4 (id=1081):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000016c0)=@delpolicy={0x5c, 0x14, 0x513, 0x70bd26, 0x25dfdbfd, {{@in=@local, @in=@multicast2, 0x4e20, 0xb, 0x4e23, 0x2, 0x2, 0x20, 0x20, 0x3c}, 0x0, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040818}, 0x20000802)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0xffff}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000039c0)=0xd, 0x4)
listen(r2, 0x1)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'batadv_slave_1\x00', {0x2}, 0xe})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000009ae4000000c5be69b30cd7ec794c7a134a1ce4b02476e8c2544f19dc47"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaa6aaaaaa13000c040000c0020200005af800d576ba2c4b"], &(0x7f00000002c0)={0x1, 0x4, [0x73e, 0x6c5, 0x70, 0x839]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x5}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
r6 = socket(0x1f, 0x1, 0x8)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c1400000001"], 0xa0}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0x0, 0xffffffff, 0xff], [0x0, 0xff000000, 0xff000000], 'veth0_to_hsr\x00', 'nr0\x00', {}, {}, 0x84, 0x4, 0xd}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xbc}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xff0000ff, 0xffffffff, 0xffffff00, 0xff], 'batadv_slave_0\x00', 'vcan0\x00', {}, {0xff}, 0x1d, 0x6, 0x0, 0x60}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "3e3a3c485cabcb21b625e6dacc4590f166002d77dbda4693cb64fe99a08e"}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], [0x0, 0xff, 0x0, 0xff000000], 'vlan1\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x87}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [0xff000000, 0xffffffff, 0x0, 0xff000000], @ipv4=@empty, [0x0, 0xff0000ff], @ipv4=@remote, [0x0, 0xff000000, 0xff000000], @ipv6=@mcast2, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4, 0x83d4, 0x0, 0x4e23, 0x4e23, 0x4e22, 0x4e24, 0xc, 0x540}, 0x40, 0x100, 0x4e23, 0x4e20, 0x4e21, 0x4e23}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), &(0x7f0000000280)='%pB    \x00'}, 0x20)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="89c9157afde08ea4387fbe5739d1766791827bb588e5a143fea3b55347c980460b48a9d8a6579c910b46ee7b5e2ecf067a673b4bd1061bfd94c39247445926593da3717f1907fc9742eb0448d0236a020e606a457553f39c650c01d7702c0e5db4ea9bdc377cfa2b8f58c2b7f7d25c09f8cfa89b483afe93790ddfe1ea26f7c344bb334e6a", 0x85}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0003"], 0xac}}, 0x4000)

158.592421ms ago: executing program 5 (id=1082):
socket$kcm(0x23, 0x2, 0x0)

158.312596ms ago: executing program 4 (id=1083):
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

158.119402ms ago: executing program 4 (id=1084):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000340)="f1043d2a327ba91497018415c83b92d7a7f4c2f8e30155aee84bc156161f962f2160ef978a4ee961b8caf9490438704f4fc9a93513c6c5d76a62df59f4e0d33eb28636a873b14834bdca1bb1a074107084c801bba151876fe7f7af54865c6e44e2237366cd80e8cb3a6ef5ba99815173456220ae740f1b9fc3ee49284b42921907a157bfa1a8c8f812c8a691b06c2722d3b9ef7edc77f4df7dc66abfe2c4e819ebc73edd2c491e8a2b3df2ecfe774737f603b25df057f48afbe745eb6dc99fc375cca7b06ab3f50bb984d32878b111649e6bbbf93dd115cf6d177d16eac6ab26836192", 0xe3}, {0x0}, {&(0x7f0000000500)="b1553d2f88b5520456946cba9461aedc14df821cb7696346129e41fec43fed4b3aff083d8bc58db5c8cfcc4ba53e43a7a16116ee4ccfb3f1d7fe327fa2fd8ea3c2c0f2aefe33ea2237732af448134183ab414cf303658665beac48aacff32381202163688155", 0x66}, {0x0}], 0x6, &(0x7f0000000680)}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

157.982264ms ago: executing program 5 (id=1085):
r0 = socket$netlink(0x10, 0x3, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

90.320126ms ago: executing program 4 (id=1086):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)

181.964µs ago: executing program 4 (id=1087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x14800}, 0x0)

0s ago: executing program 4 (id=1088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x152}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39733' (ED25519) to the list of known hosts.
syzkaller login: [   49.516434][ T5776] cgroup: Unknown subsys name 'net'
[   49.611160][ T5776] cgroup: Unknown subsys name 'cpuset'
[   49.621170][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.027984][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.741995][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.745808][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.749324][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.753395][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.757057][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.782936][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.786512][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.790311][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.794109][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.797839][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.808370][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.813266][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.817673][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.821830][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.825265][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.045077][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.093070][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.238315][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.255015][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.258662][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.261756][ T5844] bridge_slave_0: entered allmulticast mode
[   55.265361][ T5844] bridge_slave_0: entered promiscuous mode
[   55.277169][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.280220][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.283178][ T5848] bridge_slave_0: entered allmulticast mode
[   55.287863][ T5848] bridge_slave_0: entered promiscuous mode
[   55.292502][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.295106][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.297749][ T5844] bridge_slave_1: entered allmulticast mode
[   55.300368][ T5844] bridge_slave_1: entered promiscuous mode
[   55.310934][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.313916][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.317288][ T5848] bridge_slave_1: entered allmulticast mode
[   55.321167][ T5848] bridge_slave_1: entered promiscuous mode
[   55.395049][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.400593][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.405450][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.413880][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.474116][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.477324][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.479830][ T5851] bridge_slave_0: entered allmulticast mode
[   55.482758][ T5851] bridge_slave_0: entered promiscuous mode
[   55.486005][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.488748][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.491176][ T5851] bridge_slave_1: entered allmulticast mode
[   55.493869][ T5851] bridge_slave_1: entered promiscuous mode
[   55.499499][ T5844] team0: Port device team_slave_0 added
[   55.503644][ T5848] team0: Port device team_slave_0 added
[   55.521017][ T5844] team0: Port device team_slave_1 added
[   55.537936][ T5848] team0: Port device team_slave_1 added
[   55.543523][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.574708][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.589366][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.592309][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.603517][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.619852][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.622176][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.633396][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.646606][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.651313][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.662067][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.676434][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.680068][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.691292][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.707079][ T5851] team0: Port device team_slave_0 added
[   55.718341][ T5851] team0: Port device team_slave_1 added
[   55.757478][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.760348][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.770324][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.801134][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.804018][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.814792][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.836042][ T5844] hsr_slave_0: entered promiscuous mode
[   55.839715][ T5844] hsr_slave_1: entered promiscuous mode
[   55.849614][ T5848] hsr_slave_0: entered promiscuous mode
[   55.851993][ T5848] hsr_slave_1: entered promiscuous mode
[   55.854167][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   55.856473][ T5848] Cannot create hsr debugfs directory
[   55.913903][ T5851] hsr_slave_0: entered promiscuous mode
[   55.918210][ T5851] hsr_slave_1: entered promiscuous mode
[   55.921116][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   55.923478][ T5851] Cannot create hsr debugfs directory
[   56.196089][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.211634][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.225905][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.240068][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.252218][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.264996][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.271622][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.293582][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.361028][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.369298][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.382042][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.389015][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.504853][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.514721][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.543762][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.553345][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.560743][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.563282][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.582541][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.585600][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.591401][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.594371][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.616388][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.632211][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.635097][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.666648][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.689894][  T112] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.692915][  T112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.711576][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.713896][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.788252][ T5239] Bluetooth: hci0: command tx timeout
[   56.809683][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.841157][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.868046][ T5239] Bluetooth: hci2: command tx timeout
[   56.868939][   T54] Bluetooth: hci1: command tx timeout
[   56.882199][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.910517][ T5844] veth0_vlan: entered promiscuous mode
[   56.930899][ T5844] veth1_vlan: entered promiscuous mode
[   56.951189][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.979075][ T5844] veth0_macvtap: entered promiscuous mode
[   56.986403][ T5848] veth0_vlan: entered promiscuous mode
[   56.991989][ T5844] veth1_macvtap: entered promiscuous mode
[   57.012572][ T5848] veth1_vlan: entered promiscuous mode
[   57.026259][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.040013][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.043194][ T5851] veth0_vlan: entered promiscuous mode
[   57.059982][ T5851] veth1_vlan: entered promiscuous mode
[   57.068517][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.072397][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.075455][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.088053][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.116656][ T5848] veth0_macvtap: entered promiscuous mode
[   57.123540][ T5851] veth0_macvtap: entered promiscuous mode
[   57.139457][ T5848] veth1_macvtap: entered promiscuous mode
[   57.144319][ T5851] veth1_macvtap: entered promiscuous mode
[   57.161061][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.193884][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.204908][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.212893][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.222079][ T4604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.226639][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.232478][ T4604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.239491][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.244590][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.252323][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.295748][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.301096][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.304683][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.315406][ T4604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.318767][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.327649][ T4604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.381640][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.384852][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.385687][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.452262][  T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.455765][  T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.468907][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.473472][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.493949][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.496499][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.689042][ T5924] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.792374][ T5924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   57.799189][ T5924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.809310][ T5924] bond0 (unregistering): Released all slaves
[   57.830118][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   57.885948][ T5938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.003274][ T5942] lo speed is unknown, defaulting to 1000
[   58.007649][ T5942] lo speed is unknown, defaulting to 1000
[   58.011138][ T5942] lo speed is unknown, defaulting to 1000
[   58.071883][ T5943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.185267][ T5892] lo speed is unknown, defaulting to 1000
[   58.188253][ T5892] syz0: Port: 1 Link ACTIVE
[   58.190494][ T5942] infiniband syz0: set active
[   58.192580][ T5942] infiniband syz0: added lo
[   58.238852][ T5942] RDS/IB: syz0: added
[   58.240982][ T5942] smc: adding ib device syz0 with port count 1
[   58.243744][ T5942] smc:    ib device syz0 port 1 has pnetid 
[   58.247546][ T5892] lo speed is unknown, defaulting to 1000
[   58.250656][ T5942] lo speed is unknown, defaulting to 1000
[   58.352453][ T5942] lo speed is unknown, defaulting to 1000
[   58.454092][ T5942] lo speed is unknown, defaulting to 1000
[   58.722755][ T5956] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   58.867179][   T54] Bluetooth: hci0: command tx timeout
[   58.947248][   T54] Bluetooth: hci2: command tx timeout
[   58.957882][   T54] Bluetooth: hci1: command tx timeout
[   59.426474][ T5986] bridge: RTM_NEWNEIGH with invalid state 0x0
[   59.631372][ T6005] tipc: Started in network mode
[   59.633847][ T6005] tipc: Node identity 528f0bd7ee7f, cluster identity 4711
[   59.637805][ T6005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.641399][ T6005] syzkaller0: entered promiscuous mode
[   59.643736][ T6005] syzkaller0: entered allmulticast mode
[   59.676454][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   59.692077][ T6005] tipc: Resetting bearer <eth:syzkaller0>
[   59.730697][ T6004] tipc: Resetting bearer <eth:syzkaller0>
[   59.754903][ T6004] tipc: Disabling bearer <eth:syzkaller0>
[   59.830658][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   59.857233][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'.
[   59.866514][ T6017] pim6reg: entered allmulticast mode
[   59.870666][ T6017] pim6reg: left allmulticast mode
[   59.991738][ T6025] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   60.194191][ T6045] veth3: entered promiscuous mode
[   60.200814][ T6048] Driver unsupported XDP return value 0 on prog  (id 14) dev N/A, expect packet loss!
[   60.282201][ T6052] team0: Device gtp0 is of different type
[   60.484534][ T6070] netlink: 'syz.0.72': attribute type 12 has an invalid length.
[   60.490880][ T6070] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.72'.
[   60.530848][ T6072] syzkaller1: entered promiscuous mode
[   60.533138][ T6072] syzkaller1: entered allmulticast mode
[   60.929304][ T6097] netlink: 10 bytes leftover after parsing attributes in process `syz.0.84'.
[   60.947856][   T54] Bluetooth: hci0: command tx timeout
[   60.959408][ T6099] warning: `syz.0.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.037119][   T54] Bluetooth: hci1: command tx timeout
[   61.037142][ T5239] Bluetooth: hci2: command tx timeout
[   61.135122][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'.
[   61.760264][ T6147] netlink: 788 bytes leftover after parsing attributes in process `syz.2.103'.
[   62.472825][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'.
[   62.806683][ T2361] lo speed is unknown, defaulting to 1000
[   63.027913][ T5239] Bluetooth: hci0: command tx timeout
[   63.108463][ T5239] Bluetooth: hci2: command tx timeout
[   63.118555][ T5239] Bluetooth: hci1: command tx timeout
[   63.850482][ T6231] __nla_validate_parse: 1 callbacks suppressed
[   63.850494][ T6231] netlink: 300 bytes leftover after parsing attributes in process `syz.0.141'.
[   64.013688][ T6241] Zero length message leads to an empty skb
[   64.194618][ T6243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.312497][ T6247] batadv0: entered promiscuous mode
[   64.350066][ T6243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.408514][ T6251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.148'.
[   64.690405][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.703309][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.708870][ T6251] bond0 (unregistering): Released all slaves
[   64.773154][ T6243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.891477][ T6265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.947515][ T6243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.043651][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.046336][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.061475][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.075814][ T5872] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.863976][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'.
[   66.163826][   T33] audit: type=1800 audit(1754924621.461:2): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.180" name="blkio.bfq.time_recursive" dev="tmpfs" ino=338 res=0 errno=0
[   66.199661][ T6326] tipc: Started in network mode
[   66.203797][ T6326] tipc: Node identity 8a0fd96be7a5, cluster identity 4711
[   66.211160][ T6326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.221269][ T6326] syzkaller0: entered promiscuous mode
[   66.225899][ T6326] syzkaller0: entered allmulticast mode
[   66.269664][ T6326] tipc: Resetting bearer <eth:syzkaller0>
[   66.274792][ T6325] tipc: Resetting bearer <eth:syzkaller0>
[   66.295575][ T6325] tipc: Disabling bearer <eth:syzkaller0>
[   66.946701][ T6352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.194'.
[   67.308413][ T6373] netlink: 'syz.2.203': attribute type 21 has an invalid length.
[   68.207976][ T6414] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[   68.325467][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   68.692292][ T6436] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   68.890258][ T6442] openvswitch: netlink: IP tunnel dst address not specified
[   69.154760][ T6452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.162570][ T6452] syzkaller0: entered promiscuous mode
[   69.166360][ T6452] syzkaller0: entered allmulticast mode
[   69.186200][ T6452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   69.243667][ T6452] tipc: Resetting bearer <eth:syzkaller0>
[   69.253695][ T6450] tipc: Resetting bearer <eth:syzkaller0>
[   69.284865][ T6450] tipc: Disabling bearer <eth:syzkaller0>
[   69.630787][ T6472] netlink: 'syz.0.246': attribute type 6 has an invalid length.
[   69.861236][ T6489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.092542][ T6502] netlink: 'syz.0.259': attribute type 3 has an invalid length.
[   70.135381][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   71.317423][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   78.090560][    C0] sched: DL replenish lagged too much
[   90.069682][   T47] cfg80211: failed to load regulatory.db
[  132.901789][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  141.983069][ T5295] udevd[5295]: worker [5845] /devices/virtual/block/loop2 is taking a long time
[  148.330598][ T6548] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  148.334470][ T6548] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  148.338579][ T6548] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  148.341683][ T6548] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  148.344408][ T6548] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  148.382947][ T6548] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  148.389894][ T6548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  148.398160][ T6548] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  148.402571][ T6548] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  148.403667][ T5906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.413272][ T6548] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  148.432402][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  148.435262][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  148.438752][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  148.442249][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  148.444793][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  148.460725][ T6545] lo speed is unknown, defaulting to 1000
[  148.537531][ T5906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.555426][ T6546] lo speed is unknown, defaulting to 1000
[  148.594567][ T5906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.656652][ T5906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.727440][ T6550] lo speed is unknown, defaulting to 1000
[  148.773407][ T6545] chnl_net:caif_netlink_parms(): no params data found
[  148.853614][ T5906] bridge_slave_1: left allmulticast mode
[  148.855730][ T5906] bridge_slave_1: left promiscuous mode
[  148.859358][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.866443][ T5906] bridge_slave_0: left allmulticast mode
[  148.871335][ T5906] bridge_slave_0: left promiscuous mode
[  148.873373][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.142476][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.149586][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.154479][ T5906] bond0 (unregistering): Released all slaves
[  149.251463][ T5906] tipc: Left network mode
[  149.325452][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.333894][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.337669][ T6545] bridge_slave_0: entered allmulticast mode
[  149.341595][ T6545] bridge_slave_0: entered promiscuous mode
[  149.347462][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.350588][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.353708][ T6545] bridge_slave_1: entered allmulticast mode
[  149.358679][ T6545] bridge_slave_1: entered promiscuous mode
[  149.429448][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.501463][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.573696][ T6546] chnl_net:caif_netlink_parms(): no params data found
[  149.644645][ T6545] team0: Port device team_slave_0 added
[  149.661990][ T6545] team0: Port device team_slave_1 added
[  149.692230][ T6550] chnl_net:caif_netlink_parms(): no params data found
[  149.768942][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.771227][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.779406][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.783893][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.786153][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.794727][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.891060][ T5906] hsr_slave_0: left promiscuous mode
[  149.893181][ T5906] hsr_slave_1: left promiscuous mode
[  149.895656][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.899271][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.902147][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.904454][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.916683][ T5906] veth1_macvtap: left promiscuous mode
[  149.919003][ T5906] veth0_macvtap: left promiscuous mode
[  149.921218][ T5906] veth1_vlan: left promiscuous mode
[  149.923374][ T5906] veth0_vlan: left promiscuous mode
[  150.141972][ T5906] team0 (unregistering): Port device team_slave_1 removed
[  150.159738][ T5906] team0 (unregistering): Port device team_slave_0 removed
[  150.387606][ T5239] Bluetooth: hci1: command tx timeout
[  150.466948][ T5239] Bluetooth: hci2: command tx timeout
[  150.469156][ T5239] Bluetooth: hci0: command tx timeout
[  150.481258][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.484305][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.488595][ T6546] bridge_slave_0: entered allmulticast mode
[  150.491704][ T6546] bridge_slave_0: entered promiscuous mode
[  150.495934][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.498817][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.501443][ T6546] bridge_slave_1: entered allmulticast mode
[  150.505474][ T6546] bridge_slave_1: entered promiscuous mode
[  150.510306][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.512612][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.515069][ T6550] bridge_slave_0: entered allmulticast mode
[  150.518179][ T6550] bridge_slave_0: entered promiscuous mode
[  150.521997][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.524865][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.527992][ T6550] bridge_slave_1: entered allmulticast mode
[  150.530767][ T6550] bridge_slave_1: entered promiscuous mode
[  150.550129][ T6545] hsr_slave_0: entered promiscuous mode
[  150.552623][ T6545] hsr_slave_1: entered promiscuous mode
[  150.554982][ T6545] debugfs: 'hsr0' already exists in 'hsr'
[  150.559383][ T6545] Cannot create hsr debugfs directory
[  150.600734][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.606417][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.622886][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.649663][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.710568][ T6550] team0: Port device team_slave_0 added
[  150.731353][ T6546] team0: Port device team_slave_0 added
[  150.739422][ T6550] team0: Port device team_slave_1 added
[  150.752942][ T6546] team0: Port device team_slave_1 added
[  150.764176][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.766612][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.777231][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.806284][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.808836][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.817554][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.825528][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.829848][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.842428][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.876140][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.880286][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.889490][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.969879][ T6550] hsr_slave_0: entered promiscuous mode
[  150.972367][ T6550] hsr_slave_1: entered promiscuous mode
[  150.974622][ T6550] debugfs: 'hsr0' already exists in 'hsr'
[  150.976569][ T6550] Cannot create hsr debugfs directory
[  150.994870][ T5906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.038997][ T6546] hsr_slave_0: entered promiscuous mode
[  151.041386][ T6546] hsr_slave_1: entered promiscuous mode
[  151.043651][ T6546] debugfs: 'hsr0' already exists in 'hsr'
[  151.045816][ T6546] Cannot create hsr debugfs directory
[  151.110811][ T5906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.183150][ T5906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.236004][ T6545] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  151.251043][ T5906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.271442][ T6545] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  151.290252][ T6545] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  151.330668][ T6545] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  151.554977][ T5906] bridge_slave_1: left allmulticast mode
[  151.563165][ T5906] bridge_slave_1: left promiscuous mode
[  151.566132][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.572955][ T5906] bridge_slave_0: left allmulticast mode
[  151.575321][ T5906] bridge_slave_0: left promiscuous mode
[  151.580770][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.789563][ T6550] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  151.801251][ T6550] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  151.808219][ T6550] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  151.850353][ T6550] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  151.932651][ T6546] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  151.942174][ T6546] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  151.949562][ T6546] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  151.955596][ T6546] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  152.021197][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.085473][ T6545] 8021q: adding VLAN 0 to HW filter on device team0
[  152.121870][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.124288][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.134616][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.137795][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.209314][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.260193][ T6546] 8021q: adding VLAN 0 to HW filter on device team0
[  152.321044][ T4604] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.324127][ T4604] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.344548][ T5906] hsr_slave_0: left promiscuous mode
[  152.348617][ T5906] hsr_slave_1: left promiscuous mode
[  152.351392][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.354487][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.365463][ T5906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.369248][ T5906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.386634][ T5906] veth1_macvtap: left promiscuous mode
[  152.391779][ T5906] veth0_macvtap: left promiscuous mode
[  152.394173][ T5906] veth1_vlan: left promiscuous mode
[  152.395992][ T5906] veth0_vlan: left promiscuous mode
[  152.472049][ T6548] Bluetooth: hci1: command tx timeout
[  152.549418][ T6548] Bluetooth: hci0: command tx timeout
[  152.549651][ T5239] Bluetooth: hci2: command tx timeout
[  152.697670][ T5906] team0 (unregistering): Port device team_slave_1 removed
[  152.726047][ T5906] team0 (unregistering): Port device team_slave_0 removed
[  153.001059][   T27] smc: removing ib device syz0
[  153.011094][ T4604] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.013431][ T4604] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.021683][ T5736] lo speed is unknown, defaulting to 1000
[  153.024230][ T5736] syz0: Port: 1 Link DOWN
[  153.038266][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.161252][ T6546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.164761][ T6546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.187953][ T6550] 8021q: adding VLAN 0 to HW filter on device team0
[  153.228188][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.230613][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.248604][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.251938][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.310348][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.455994][ T6545] veth0_vlan: entered promiscuous mode
[  153.517218][ T6545] veth1_vlan: entered promiscuous mode
[  153.523213][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.552721][ T6545] veth0_macvtap: entered promiscuous mode
[  153.556468][ T6545] veth1_macvtap: entered promiscuous mode
[  153.622284][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.642721][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.661599][ T5675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.673705][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.686725][ T5675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.700128][ T5675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.703138][ T5675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.840480][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.843537][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.861515][ T6546] veth0_vlan: entered promiscuous mode
[  153.866492][ T6546] veth1_vlan: entered promiscuous mode
[  153.918973][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.928581][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.950913][ T6546] veth0_macvtap: entered promiscuous mode
[  153.955360][ T6546] veth1_macvtap: entered promiscuous mode
[  153.971724][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.983254][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.998978][ T6601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.018945][ T6601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.054766][ T6601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.060658][ T6601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.208787][ T6550] veth0_vlan: entered promiscuous mode
[  154.212875][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.215371][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.226061][ T6550] veth1_vlan: entered promiscuous mode
[  154.275833][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.287381][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.334215][ T6550] veth0_macvtap: entered promiscuous mode
[  154.341909][ T6550] veth1_macvtap: entered promiscuous mode
[  154.361294][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.381779][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.397975][ T6601] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.406656][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.419859][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.422827][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.535441][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.544950][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.547605][ T5239] Bluetooth: hci1: command tx timeout
[  154.597768][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.616184][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.627262][ T5239] Bluetooth: hci2: command tx timeout
[  154.638978][ T5239] Bluetooth: hci0: command tx timeout
[  154.823818][    T9] IPVS: starting estimator thread 0...
[  154.936940][ T6709] IPVS: using max 78 ests per chain, 187200 per kthread
[  155.614544][ T6797] tipc: Started in network mode
[  155.616588][ T6797] tipc: Node identity 6e5cbd805667, cluster identity 4711
[  155.629086][ T6797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.635983][ T6797] syzkaller0: entered promiscuous mode
[  155.657501][ T6797] syzkaller0: entered allmulticast mode
[  155.682708][ T6797] tipc: Resetting bearer <eth:syzkaller0>
[  155.693350][ T6793] tipc: Resetting bearer <eth:syzkaller0>
[  155.718210][ T6793] tipc: Disabling bearer <eth:syzkaller0>
[  156.627307][ T5239] Bluetooth: hci1: command tx timeout
[  156.709122][ T5239] Bluetooth: hci0: command tx timeout
[  156.710934][ T5239] Bluetooth: hci2: command tx timeout
[  157.524641][ T6866] Bluetooth: MGMT ver 1.23
[  157.547603][ T6876] geneve2: entered promiscuous mode
[  157.551931][ T5906] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  157.558811][ T5906] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  157.561820][ T5906] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  157.564632][ T5906] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  157.899412][ T6907] netlink: 120 bytes leftover after parsing attributes in process `syz.5.336'.
[  158.141765][ T6928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  158.554584][ T6965] trusted_key: syz.3.351 sent an empty control message without MSG_MORE.
[  159.280944][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.284383][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.422150][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.433873][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.690446][ T6601] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.702457][ T6601] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.734603][ T6601] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.742497][ T6601] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.822171][ T7037] netlink: 'syz.5.372': attribute type 3 has an invalid length.
[  159.824754][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.372'.
[  159.876481][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'.
[  160.243504][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.381'.
[  160.320769][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.383'.
[  160.395452][ T7072] GUP no longer grows the stack in syz.5.386 (7072): 200000006000-20000000a000 (200000005000)
[  160.400330][ T7072] CPU: 0 UID: 0 PID: 7072 Comm: syz.5.386 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  160.400344][ T7072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.400349][ T7072] Call Trace:
[  160.400354][ T7072]  <TASK>
[  160.400358][ T7072]  dump_stack_lvl+0x189/0x250
[  160.400376][ T7072]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.400387][ T7072]  ? __pfx__printk+0x10/0x10
[  160.400398][ T7072]  ? find_vma+0xe7/0x160
[  160.400417][ T7072]  __get_user_pages+0x24d0/0x2ce0
[  160.400427][ T7072]  ? __lock_acquire+0xab9/0xd20
[  160.400447][ T7072]  ? __gup_longterm_locked+0xc68/0x1660
[  160.400460][ T7072]  __gup_longterm_locked+0xde9/0x1660
[  160.400471][ T7072]  ? try_grab_folio_fast+0x1be/0x4f0
[  160.400484][ T7072]  ? gup_fast_fallback+0x195f/0x2010
[  160.400494][ T7072]  gup_fast_fallback+0x1e6a/0x2010
[  160.400517][ T7072]  ? __pfx_gup_fast_fallback+0x10/0x10
[  160.400525][ T7072]  ? __mutex_lock+0x335/0x1360
[  160.400539][ T7072]  ? is_valid_gup_args+0x11f/0x200
[  160.400549][ T7072]  ? get_user_pages_fast+0x4d/0xb0
[  160.400559][ T7072]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  160.400573][ T7072]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  160.400587][ T7072]  ? wait_for_space+0x24d/0x2d0
[  160.400600][ T7072]  iov_iter_get_pages2+0x5e/0xa0
[  160.400613][ T7072]  __se_sys_vmsplice+0x548/0x10d0
[  160.400631][ T7072]  ? futex_private_hash_put+0x4b/0x280
[  160.400642][ T7072]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  160.400654][ T7072]  ? __pfx_futex_wake+0x10/0x10
[  160.400668][ T7072]  ? __lock_acquire+0xab9/0xd20
[  160.400692][ T7072]  ? do_pipe2+0xf7/0x170
[  160.400738][ T7072]  ? rcu_is_watching+0x15/0xb0
[  160.400753][ T7072]  ? do_syscall_64+0xbe/0x3b0
[  160.400772][ T7072]  do_syscall_64+0xfa/0x3b0
[  160.400785][ T7072]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.400800][ T7072]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.400808][ T7072]  ? exc_page_fault+0x9f/0xf0
[  160.400818][ T7072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.400826][ T7072] RIP: 0033:0x7ff24b98ebe9
[  160.400834][ T7072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.400841][ T7072] RSP: 002b:00007ff24c7ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  160.400849][ T7072] RAX: ffffffffffffffda RBX: 00007ff24bbb5fa0 RCX: 00007ff24b98ebe9
[  160.400855][ T7072] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  160.400859][ T7072] RBP: 00007ff24ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  160.400864][ T7072] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  160.400868][ T7072] R13: 00007ff24bbb6038 R14: 00007ff24bbb5fa0 R15: 00007ffc7e87f078
[  160.400880][ T7072]  </TASK>
[  161.199786][ T7103] netlink: 'syz.3.400': attribute type 6 has an invalid length.
[  161.338570][ T7105] Bluetooth: MGMT ver 1.23
[  161.584901][ T7119] veth1_to_bond: entered allmulticast mode
[  161.595287][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'.
[  161.611585][ T7119] bond0: (slave bond_slave_1): Releasing backup interface
[  161.641533][ T7119] veth1_to_bond (unregistering): left allmulticast mode
[  162.567270][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'.
[  162.572658][ T7150] netlink: 216 bytes leftover after parsing attributes in process `syz.3.420'.
[  162.708296][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'.
[  162.715976][ T7159] syz_tun: entered promiscuous mode
[  162.721399][ T7159] syz_tun: left promiscuous mode
[  163.126406][ T7198] netlink: 56 bytes leftover after parsing attributes in process `syz.3.438'.
[  163.171129][ T7202] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.440'.
[  163.200931][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'.
[  163.234078][ T7208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.382177][ T7226] vlan0: entered promiscuous mode
[  163.502561][ T7242] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.458'.
[  163.506518][ T7242] netlink: zone id is out of range
[  163.510829][ T7242] netlink: get zone limit has 8 unknown bytes
[  164.381594][ T7293] tipc: Started in network mode
[  164.383381][ T7293] tipc: Node identity 2215d76399fb, cluster identity 4711
[  164.385840][ T7293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.389969][ T7293] syzkaller0: entered promiscuous mode
[  164.391903][ T7293] syzkaller0: entered allmulticast mode
[  164.403531][ T7293] tipc: Resetting bearer <eth:syzkaller0>
[  164.406450][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  164.414106][ T7292] tipc: Disabling bearer <eth:syzkaller0>
[  164.992938][ T7323] veth1_to_batadv: entered promiscuous mode
[  165.309235][ T7351] netlink: zone id is out of range
[  165.311066][ T7351] netlink: zone id is out of range
[  165.331148][ T7351] netlink: set zone limit has 4 unknown bytes
[  166.314302][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.510'.
[  166.418923][ T7391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.421816][ T7391] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode
[  166.425567][ T7391] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode
[  166.446302][ T7395] netlink: 52 bytes leftover after parsing attributes in process `syz.5.516'.
[  166.452478][ T7395] netlink: 48 bytes leftover after parsing attributes in process `syz.5.516'.
[  166.459522][ T7391] tipc: Resetting bearer <eth:syzkaller0>
[  166.526190][ T7402] C: renamed from team_slave_0 (while UP)
[  166.541272][ T7402] netlink: 'syz.5.520': attribute type 1 has an invalid length.
[  166.554866][ T7402] netlink: 152 bytes leftover after parsing attributes in process `syz.5.520'.
[  166.561539][ T7402] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  166.880167][ T7422] netlink: 'syz.3.529': attribute type 25 has an invalid length.
[  166.905424][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.530'.
[  166.956873][ T7433] netlink: 248 bytes leftover after parsing attributes in process `syz.3.533'.
[  167.142180][ T7444] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  167.331270][ T7465] netlink: 'syz.5.544': attribute type 18 has an invalid length.
[  167.467754][   T47] tipc: Node number set to 3152992099
[  168.390727][ T7522] netlink: 'syz.3.561': attribute type 1 has an invalid length.
[  168.408058][ T7522] __nla_validate_parse: 4 callbacks suppressed
[  168.408069][ T7522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'.
[  168.871330][ T7587] netlink: 'syz.3.578': attribute type 7 has an invalid length.
[  168.873947][ T7587] netlink: 'syz.3.578': attribute type 3 has an invalid length.
[  168.876435][ T7587] netlink: 224 bytes leftover after parsing attributes in process `syz.3.578'.
[  168.962960][ T7599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'.
[  168.970316][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'.
[  169.426079][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'.
[  169.439280][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'.
[  169.442681][ T7638] netlink: 'syz.4.595': attribute type 15 has an invalid length.
[  169.445390][ T7638] netlink: 'syz.4.595': attribute type 18 has an invalid length.
[  170.115250][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'.
[  170.166200][ T7687] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.590780][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'.
[  170.593852][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.615'.
[  170.597819][ T7700] netlink: 'syz.5.615': attribute type 13 has an invalid length.
[  170.600333][ T7700] netlink: 'syz.5.615': attribute type 17 has an invalid length.
[  170.609808][ T7700] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  170.815515][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.622'.
[  172.085184][ T7839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.564784][ T6532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.568523][ T6532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.840353][ T7888] team0: Device gtp0 is of different type
[  173.014329][ T7903] erspan0: entered promiscuous mode
[  173.401879][ T7934] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  173.403346][ T7932] IPVS: stopping backup sync thread 7934 ...
[  173.417937][ T7932] __nla_validate_parse: 3 callbacks suppressed
[  173.417951][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'.
[  173.430589][ T7932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.692'.
[  173.658625][ T6601] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.663964][ T6601] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.674490][ T6601] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.682001][ T6601] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.110067][ T7988] netlink: 'syz.5.719': attribute type 32 has an invalid length.
[  174.868855][ T8009] tipc: Started in network mode
[  174.870716][ T8009] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  174.874005][ T8009] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  175.429834][ T8063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.753'.
[  175.609016][ T8077] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.630227][ T8077] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  175.633778][ T8077] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  175.726591][ T5906] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  175.824437][ T8101] netlink: 'syz.4.772': attribute type 9 has an invalid length.
[  175.827516][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'.
[  175.836299][ T8101] macvlan3: entered promiscuous mode
[  175.840246][ T8101] hsr0: entered promiscuous mode
[  175.842163][ T8101] macvlan3: entered allmulticast mode
[  175.844253][ T8101] hsr0: entered allmulticast mode
[  175.846001][ T8101] hsr_slave_0: entered allmulticast mode
[  175.848287][ T6601] bond1: (slave macvlan2): link status up again after 0 ms
[  175.850908][ T6601] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  175.854844][ T8101] hsr_slave_1: entered allmulticast mode
[  175.866963][ T5879] IPVS: starting estimator thread 0...
[  175.868838][ T5906] bond1: (slave macvlan2): link status up again after 0 ms
[  175.871660][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  175.981443][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  176.017270][ T8104] IPVS: using max 77 ests per chain, 184800 per kthread
[  176.085110][ T8116] netlink: 92 bytes leftover after parsing attributes in process `syz.3.779'.
[  176.089190][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  176.182719][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'.
[  176.201645][ T8128] vlan2: entered promiscuous mode
[  176.203425][ T8128] team0: entered promiscuous mode
[  176.205215][ T8128] team_slave_0: entered promiscuous mode
[  176.210264][ T8128] team_slave_1: entered promiscuous mode
[  176.227129][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  176.339538][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  176.446946][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  177.393805][ T8177] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  177.658108][ T8203] netlink: 428 bytes leftover after parsing attributes in process `syz.4.817'.
[  177.664188][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.820'.
[  177.683765][ T8203] netlink: 32 bytes leftover after parsing attributes in process `syz.4.817'.
[  177.748790][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'.
[  178.093384][ T8234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.103260][ T8234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.112860][ T8234] bond0 (unregistering): Released all slaves
[  178.131254][ T8236] netlink: 'syz.4.834': attribute type 6 has an invalid length.
[  178.547874][ T8278] tipc: Can't bind to reserved service type 2
[  179.192768][ T8333] netlink: 'syz.5.874': attribute type 3 has an invalid length.
[  179.632834][ T8371] netlink: 'syz.4.890': attribute type 3 has an invalid length.
[  179.739018][ T8379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.894'.
[  179.786365][ T8383] netlink: 'syz.3.896': attribute type 1 has an invalid length.
[  180.113100][ T8401] netlink: 36 bytes leftover after parsing attributes in process `syz.5.904'.
[  180.118509][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.121584][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.153136][ T8403] gre0: entered promiscuous mode
[  180.154864][ T8403] gre0: entered allmulticast mode
[  180.746894][ T5906] net_ratelimit: 38 callbacks suppressed
[  180.746906][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  180.804400][ T8412] netlink: 'syz.4.909': attribute type 10 has an invalid length.
[  180.814455][ T8412] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  180.833888][ T8414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'.
[  180.878566][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  180.936293][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'.
[  180.990939][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.085974][ T8434] IPVS: length: 163 != 8
[  181.097545][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.215730][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.329036][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.415388][ T8461] geneve2: entered promiscuous mode
[  181.420141][ T5906] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.423585][ T5906] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.437586][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.440862][ T5906] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.445966][ T5906] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.548893][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.594681][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'.
[  181.599996][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'.
[  181.657683][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  181.780810][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  182.379154][ T6601] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.507484][ T8551] netlink: 68 bytes leftover after parsing attributes in process `syz.3.976'.
[  182.986092][ T8569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.981'.
[  182.991392][ T8569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.981'.
[  182.995176][ T8569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.981'.
[  183.855408][ T8591] netlink: 'syz.3.991': attribute type 5 has an invalid length.
[  184.268440][ T8630] sctp: [Deprecated]: syz.4.1007 (pid 8630) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.268440][ T8630] Use struct sctp_sack_info instead
[  185.124250][ T8660] __nla_validate_parse: 6 callbacks suppressed
[  185.124260][ T8660] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1019'.
[  185.413072][ T8686] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.776977][ T6601] net_ratelimit: 34 callbacks suppressed
[  185.777018][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  185.897079][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.007259][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.116950][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.231456][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.337394][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.458777][ T5906] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.471056][ T8716] netlink: 'syz.3.1040': attribute type 27 has an invalid length.
[  186.567164][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.677709][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  186.791145][ T6601] bond1: (slave macvlan2): failed to get link speed/duplex
[  187.163696][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'.
[  187.377773][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1076'.
[  187.386506][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1076'.
[  187.569207][ T8800] netlink: 'syz.3.1076': attribute type 1 has an invalid length.
[  187.589045][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  187.792303][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'.
[  187.942907][ T8819] ------------[ cut here ]------------
[  187.945059][ T8819] WARNING: CPU: 0 PID: 8819 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  187.948812][ T8819] Modules linked in:
[  187.950312][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.4.1088 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  187.956335][ T8819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  187.960892][ T8819] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  187.963680][ T8819] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 ad d0 f6 90 0f 0b 90 eb e1 e8 a7 ad d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  187.972628][ T8819] RSP: 0018:ffffc90006876f70 EFLAGS: 00010287
[  187.975280][ T8819] RAX: ffffffff8aeefe09 RBX: ffff88802a794000 RCX: 0000000000080000
[  187.979286][ T8819] RDX: ffffc90003cd1000 RSI: 00000000000002f9 RDI: 00000000000002fa
[  187.982889][ T8819] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeef923
[  187.986298][ T8819] R10: dffffc0000000000 R11: ffffed10054f2831 R12: 1ffff110054f280a
[  187.989996][ T8819] R13: ffff888115900e40 R14: 0000000000000001 R15: ffffffff8aeef923
[  187.993242][ T8819] FS:  00007f58448da6c0(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  187.997265][ T8819] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.000040][ T8819] CR2: 0000200000001040 CR3: 000000012f772000 CR4: 00000000000006f0
[  188.003288][ T8819] Call Trace:
[  188.004739][ T8819]  <TASK>
[  188.006014][ T8819]  rate_control_rate_init_all_links+0x109/0x1a0
[  188.008917][ T8819]  sta_apply_auth_flags+0x1c2/0x400
[  188.011141][ T8819]  sta_apply_parameters+0xe4b/0x15b0
[  188.013445][ T8819]  ieee80211_add_station+0x424/0x6a0
[  188.015791][ T8819]  rdev_add_station+0x108/0x290
[  188.018168][ T8819]  nl80211_new_station+0x1755/0x1b70
[  188.020480][ T8819]  ? __pfx_nl80211_new_station+0x10/0x10
[  188.022807][ T8819]  ? netdev_run_todo+0xe1d/0xea0
[  188.024962][ T8819]  ? nl80211_pre_doit+0x4f1/0x930
[  188.027378][ T8819]  genl_family_rcv_msg_doit+0x215/0x300
[  188.029756][ T8819]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.032329][ T8819]  ? bpf_lsm_capable+0x9/0x20
[  188.034294][ T8819]  ? security_capable+0x7e/0x2e0
[  188.036382][ T8819]  genl_rcv_msg+0x60e/0x790
[  188.038500][ T8819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.040674][ T8819]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  188.042970][ T8819]  ? __pfx_nl80211_new_station+0x10/0x10
[  188.045413][ T8819]  ? __pfx_nl80211_post_doit+0x10/0x10
[  188.047944][ T8819]  netlink_rcv_skb+0x208/0x470
[  188.049998][ T8819]  ? __lock_acquire+0xab9/0xd20
[  188.052030][ T8819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.054136][ T8819]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.056378][ T8819]  ? down_read+0x1ad/0x2e0
[  188.058403][ T8819]  genl_rcv+0x28/0x40
[  188.060143][ T8819]  netlink_unicast+0x82f/0x9e0
[  188.061925][ T8819]  ? __pfx_netlink_unicast+0x10/0x10
[  188.063979][ T8819]  ? netlink_sendmsg+0x642/0xb30
[  188.066105][ T8819]  ? skb_put+0x11b/0x210
[  188.067889][ T8819]  netlink_sendmsg+0x805/0xb30
[  188.069846][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.071644][ T8819]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.073698][ T8819]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.075465][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.077353][ T8819]  __sock_sendmsg+0x21c/0x270
[  188.078961][ T8819]  ____sys_sendmsg+0x505/0x830
[  188.080773][ T8819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.082966][ T8819]  ? import_iovec+0x74/0xa0
[  188.085180][ T8819]  ___sys_sendmsg+0x21f/0x2a0
[  188.087369][ T8819]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.089656][ T8819]  ? __fget_files+0x2a/0x420
[  188.091729][ T8819]  ? __fget_files+0x3a0/0x420
[  188.093774][ T8819]  __x64_sys_sendmsg+0x19b/0x260
[  188.095932][ T8819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.098618][ T8819]  ? rcu_is_watching+0x15/0xb0
[  188.100690][ T8819]  ? do_syscall_64+0xbe/0x3b0
[  188.102721][ T8819]  do_syscall_64+0xfa/0x3b0
[  188.104704][ T8819]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.107162][ T8819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.109805][ T8819]  ? exc_page_fault+0x9f/0xf0
[  188.111914][ T8819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.114481][ T8819] RIP: 0033:0x7f584398ebe9
[  188.116454][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.124677][ T8819] RSP: 002b:00007f58448da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.128494][ T8819] RAX: ffffffffffffffda RBX: 00007f5843bb5fa0 RCX: 00007f584398ebe9
[  188.131939][ T8819] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  188.135146][ T8819] RBP: 00007f5843a11e19 R08: 0000000000000000 R09: 0000000000000000
[  188.138786][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.141932][ T8819] R13: 00007f5843bb6038 R14: 00007f5843bb5fa0 R15: 00007ffd95d2bd08
[  188.145033][ T8819]  </TASK>
[  188.146368][ T8819] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  188.148988][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.4.1088 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  188.153279][ T8819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.156713][ T8819] Call Trace:
[  188.157887][ T8819]  <TASK>
[  188.158916][ T8819]  dump_stack_lvl+0x99/0x250
[  188.160608][ T8819]  ? __asan_memcpy+0x40/0x70
[  188.162127][ T8819]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.163924][ T8819]  ? __pfx__printk+0x10/0x10
[  188.165485][ T8819]  vpanic+0x281/0x750
[  188.166897][ T8819]  ? __pfx__printk+0x10/0x10
[  188.168648][ T8819]  ? __pfx_vpanic+0x10/0x10
[  188.170647][ T8819]  ? is_bpf_text_address+0x292/0x2b0
[  188.172883][ T8819]  panic+0xb9/0xc0
[  188.174526][ T8819]  ? __pfx_panic+0x10/0x10
[  188.176486][ T8819]  __warn+0x31b/0x4b0
[  188.178234][ T8819]  ? rate_control_rate_init+0x64a/0x6e0
[  188.180629][ T8819]  ? rate_control_rate_init+0x64a/0x6e0
[  188.183017][ T8819]  report_bug+0x2be/0x4f0
[  188.184907][ T8819]  ? rate_control_rate_init+0x64a/0x6e0
[  188.187275][ T8819]  ? rate_control_rate_init+0x64a/0x6e0
[  188.189596][ T8819]  ? rate_control_rate_init+0x64c/0x6e0
[  188.191945][ T8819]  handle_bug+0x84/0x160
[  188.193816][ T8819]  exc_invalid_op+0x1a/0x50
[  188.195809][ T8819]  asm_exc_invalid_op+0x1a/0x20
[  188.197934][ T8819] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  188.200595][ T8819] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b2 ad d0 f6 90 0f 0b 90 eb e1 e8 a7 ad d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  188.208600][ T8819] RSP: 0018:ffffc90006876f70 EFLAGS: 00010287
[  188.211226][ T8819] RAX: ffffffff8aeefe09 RBX: ffff88802a794000 RCX: 0000000000080000
[  188.214674][ T8819] RDX: ffffc90003cd1000 RSI: 00000000000002f9 RDI: 00000000000002fa
[  188.218072][ T8819] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeef923
[  188.221267][ T8819] R10: dffffc0000000000 R11: ffffed10054f2831 R12: 1ffff110054f280a
[  188.224650][ T8819] R13: ffff888115900e40 R14: 0000000000000001 R15: ffffffff8aeef923
[  188.227801][ T8819]  ? rate_control_rate_init+0x163/0x6e0
[  188.230065][ T8819]  ? rate_control_rate_init+0x163/0x6e0
[  188.232319][ T8819]  ? rate_control_rate_init+0x649/0x6e0
[  188.234604][ T8819]  rate_control_rate_init_all_links+0x109/0x1a0
[  188.237193][ T8819]  sta_apply_auth_flags+0x1c2/0x400
[  188.239487][ T8819]  sta_apply_parameters+0xe4b/0x15b0
[  188.241759][ T8819]  ieee80211_add_station+0x424/0x6a0
[  188.244084][ T8819]  rdev_add_station+0x108/0x290
[  188.246197][ T8819]  nl80211_new_station+0x1755/0x1b70
[  188.248480][ T8819]  ? __pfx_nl80211_new_station+0x10/0x10
[  188.250893][ T8819]  ? netdev_run_todo+0xe1d/0xea0
[  188.253039][ T8819]  ? nl80211_pre_doit+0x4f1/0x930
[  188.255225][ T8819]  genl_family_rcv_msg_doit+0x215/0x300
[  188.257550][ T8819]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  188.260152][ T8819]  ? bpf_lsm_capable+0x9/0x20
[  188.262167][ T8819]  ? security_capable+0x7e/0x2e0
[  188.264216][ T8819]  genl_rcv_msg+0x60e/0x790
[  188.266056][ T8819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.267861][ T8819]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  188.269682][ T8819]  ? __pfx_nl80211_new_station+0x10/0x10
[  188.272092][ T8819]  ? __pfx_nl80211_post_doit+0x10/0x10
[  188.274377][ T8819]  netlink_rcv_skb+0x208/0x470
[  188.276240][ T8819]  ? __lock_acquire+0xab9/0xd20
[  188.277928][ T8819]  ? __pfx_genl_rcv_msg+0x10/0x10
[  188.279652][ T8819]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  188.281460][ T8819]  ? down_read+0x1ad/0x2e0
[  188.283014][ T8819]  genl_rcv+0x28/0x40
[  188.284465][ T8819]  netlink_unicast+0x82f/0x9e0
[  188.286123][ T8819]  ? __pfx_netlink_unicast+0x10/0x10
[  188.287943][ T8819]  ? netlink_sendmsg+0x642/0xb30
[  188.289648][ T8819]  ? skb_put+0x11b/0x210
[  188.291484][ T8819]  netlink_sendmsg+0x805/0xb30
[  188.293235][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.295101][ T8819]  ? aa_sock_msg_perm+0xf1/0x1d0
[  188.296776][ T8819]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  188.298596][ T8819]  ? __pfx_netlink_sendmsg+0x10/0x10
[  188.300347][ T8819]  __sock_sendmsg+0x21c/0x270
[  188.301988][ T8819]  ____sys_sendmsg+0x505/0x830
[  188.303820][ T8819]  ? __pfx_____sys_sendmsg+0x10/0x10
[  188.306086][ T8819]  ? import_iovec+0x74/0xa0
[  188.307980][ T8819]  ___sys_sendmsg+0x21f/0x2a0
[  188.309902][ T8819]  ? __pfx____sys_sendmsg+0x10/0x10
[  188.312089][ T8819]  ? __fget_files+0x2a/0x420
[  188.314096][ T8819]  ? __fget_files+0x3a0/0x420
[  188.316060][ T8819]  __x64_sys_sendmsg+0x19b/0x260
[  188.318178][ T8819]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  188.320420][ T8819]  ? rcu_is_watching+0x15/0xb0
[  188.322489][ T8819]  ? do_syscall_64+0xbe/0x3b0
[  188.324420][ T8819]  do_syscall_64+0xfa/0x3b0
[  188.326346][ T8819]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.328410][ T8819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.331141][ T8819]  ? exc_page_fault+0x9f/0xf0
[  188.333189][ T8819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.335678][ T8819] RIP: 0033:0x7f584398ebe9
[  188.337526][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.345231][ T8819] RSP: 002b:00007f58448da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.348682][ T8819] RAX: ffffffffffffffda RBX: 00007f5843bb5fa0 RCX: 00007f584398ebe9
[  188.351973][ T8819] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  188.355233][ T8819] RBP: 00007f5843a11e19 R08: 0000000000000000 R09: 0000000000000000
[  188.358501][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  188.361831][ T8819] R13: 00007f5843bb6038 R14: 00007f5843bb5fa0 R15: 00007ffd95d2bd08
[  188.365167][ T8819]  </TASK>
[  188.367351][ T8819] Kernel Offset: disabled
[  188.369269][ T8819] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:05:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000105af RDI=00000000000105b0 RBP=00000000000003f8 RSP=ffffc90006876710
R8 =ffff888020ce0237 R9 =1ffff1100419c046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48d4 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58448da6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001040 CR3=000000012f772000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f58446ed100 00007f5843b87460 XMM05=00007f5843b87478 00007f5843b874c0
XMM06=00007f5843b874b8 00007f5843b874b0 XMM07=00007f5843b874a8 00007f5843b874a0
XMM08=0000000000000000 00007f5843a12ee7 XMM09=0000000000000000 00007f5843a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=5ad76d4c8a849d00 RBX=ffffffff81968308 RCX=5ad76d4c8a849d00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055935383c000 CR3=000000012f770000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff24bb87498 00007ff24bb87470 XMM03=00007ff24bb874a8 00007ff24bb874a0
XMM04=00007ff24c6ed100 00007ff24bb87460 XMM05=00007ff24bb87478 00007ff24bb874c0
XMM06=00007ff24bb874b8 00007ff24bb874b0 XMM07=00007ff24bb874a8 00007ff24bb874a0
XMM08=0000000000000000 00007ff24ba12ee7 XMM09=0000000000000000 00007ff24ba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
