last executing test programs:

1.087782692s ago: executing program 0 (id=1271):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000000ffffffff"], 0x38}}, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async, rerun: 32)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async, rerun: 32)
socket(0x40000000015, 0x80000, 0x0) (async, rerun: 32)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) (async)
ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) (async)
r8 = socket(0x10, 0x3, 0x0)
write(r8, 0x0, 0x0) (async)
unshare(0x20000400) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000840)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x2, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x2, 0x5, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xd, 0x5, 0x20006, 0x5, 0x2, 0x400000b, 0x2, 0x1d9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x9, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x3, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff], "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"}}) (async, rerun: 32)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xe, 0x5, 0x81, 0x7ff, 0x1, 0x7, 0x7, 0xa, 0x7f, 0x1ff, 0xffff, 0x2, 0x1, 0x7ff, 0xffffffff, 0xfffffffa, 0x6, 0x5, 0x2, 0x1, 0x800, 0xff, 0xcf}}) (async)
socket$netlink(0x10, 0x3, 0x0)

1.02353629s ago: executing program 0 (id=1274):
pipe(&(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
epoll_create1(0x80000)
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x200000000000000}, 0x0)

1.0192044s ago: executing program 0 (id=1276):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x360)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x2000800)

1.018825468s ago: executing program 0 (id=1278):
r0 = socket$netlink(0x10, 0x3, 0x13)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4144030, r0, 0xb988f000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x5, 0xa9, &(0x7f0000000100)="a9eafaf811051660c449f25ab8073c6e0135a138f2cd6d6127db40278b3b29d59e92b85195352659890084fcc3d71a6780675fd5d7c0fd0923c94f7ee60d51851de92d958323509ef19b9ab74a29f5fde9464bb33b186b60f147e9f4d1074235901e23dfbe0b2ef20c386304d67cf549d44580391d242a4086cb67b73b56cf98ce64ba6ba80b9bc2f8f034009d492523a9cf4d12ffcce67736e6cfe5455871b790a94849412a596c9d", 0x7, 0x4, 0x8, 0x0, 0x3, 0x2, 0xb, 'syz0\x00'})
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

599.664327ms ago: executing program 2 (id=1291):
pipe(&(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
epoll_create1(0x80000)
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x900000000000000}, 0x0)

549.983645ms ago: executing program 2 (id=1293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffffffffffe}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
recvmmsg(r5, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400})
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r6, 0x1, 0x70bd2a, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff1e}}]}, 0x44}}, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r8, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000880)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, @l2={0x1f, 0x3, @any, 0x7ff}, @ax25={0x3, @bcast, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)='pimreg1\x00', 0x4, 0x9, 0x6a5})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r9, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x30, 0x68, 0x0, 0x60, 0x67, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "21f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

410.750729ms ago: executing program 2 (id=1297):
socket$kcm(0x2c, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020027bd7000ffdbdf256a0000000c009900070000007c005e80080002004a000000cc64e97de5a70f9c6bd90f8dd0363541c182b1e24d4b194f170409df1706a4da379546037d3e6a"], 0x2c}}, 0x4c841)
writev(r0, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x50, r2, 0x1, 0x0, 0x25dfdbfb, {0x27}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x51}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0)

410.396921ms ago: executing program 2 (id=1298):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=<r1=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)=r1)
socketpair(0x23, 0x1, 0x101, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x479f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2404c091}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000080)=r1) (async)
socketpair(0x23, 0x1, 0x101, &(0x7f00000000c0)) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x6c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x479f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2404c091}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x40) (async)

350.039135ms ago: executing program 2 (id=1299):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1, 0x3, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRESDEC=r1, @ANYBLOB="310504000180"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1400010000000000f00000000000ffff81"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000070900010073797a310000130030000000030a01010000000000000000010000000900010073797a310000000008000a400000000208000b400000000088000000050a030000000000000000000a00000a090001"], 0x120}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x1000})
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000200)=""/246, 0x208000, 0x1800, 0x2, 0x6}, 0x20)

348.454631ms ago: executing program 2 (id=1301):
unshare(0x22020600)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet6(0xa, 0x3, 0x7)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x19)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

170.469685ms ago: executing program 1 (id=1306):
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socket(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x100000000}, 0x18)
r4 = accept(r2, &(0x7f00000002c0)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000180)=0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x47}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0)
tee(r2, 0xffffffffffffffff, 0xfe, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800bb000000eb75b6b94281661000006110b26a42eb1b0d336300efc2d05b03"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000000000005bb40000000c00000097050000000400000000000010040000000030002e00"], &(0x7f0000000680)=""/135, 0x29, 0x87, 0x1, 0x4}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r9}, 0x20)
close(r10)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xe7, '\x00', r5, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r13, 0x0, 0x20000000}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_ext={0x1c, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000500)='syzkaller\x00', 0x1, 0xdf, &(0x7f0000000540)=""/223, 0x41000, 0x11, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xa, 0x2, 0x1ff}, 0x10, 0x209b3, 0xffffffffffffffff, 0x1, &(0x7f0000000900)=[0x1, r8, r10, 0x1, r11, r12, r13, 0x1], &(0x7f0000000940)=[{0x2, 0x5, 0x2, 0x2}], 0x10, 0x5}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x1000000}, 0xc)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

121.288446ms ago: executing program 0 (id=1307):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x360)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x7000000)

120.58888ms ago: executing program 1 (id=1308):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300030000000800090003000000"], 0x44}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x3b0d}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @rand_addr=0x64010101}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10, 0x800)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000200)={0x2b, @empty, 0x4e23, 0x3, 'rr\x00', 0x16, 0x7bf, 0x6}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000004000000000000000071122b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

120.120057ms ago: executing program 0 (id=1309):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2}, {}], 0x2, 0x7f) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2c048886}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

70.984536ms ago: executing program 1 (id=1310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000100)={'sit0\x00', <r3=>0x0, 0x8000, 0x7, 0x0, 0x70, {{0x1e, 0x4, 0x1, 0x32, 0x78, 0x64, 0x0, 0xd, 0x4, 0x0, @private=0xa010102, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xfb, 0x1, 0xc, [{@broadcast}, {@broadcast, 0xb75a}, {@empty, 0x70}]}, @timestamp_addr={0x44, 0xc, 0x97, 0x1, 0x6, [{@loopback}]}, @timestamp_addr={0x44, 0x3c, 0xf0, 0x1, 0x6, [{@multicast1, 0x81}, {@private=0xa010101, 0x4}, {@broadcast, 0x4a}, {@multicast1, 0x1fa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xab}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x9}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@mcast1, <r4=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', <r10=>0x0})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="7000fbdbdf25010000000800010000000000", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a4, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008030)
close(r0)

70.219298ms ago: executing program 1 (id=1311):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={<r4=>r3, 0xd5, "95f7ec06d19ad45a59e7534089099766bc0e4959b66aec8b739cd6ad2d762f8eaca9255b87b3fd0fd6c0f7790c44be80d2bab3d12780e221cba5cb8efdcf3b39cb5e89addbe27a12b8eda910357f076daad385eae8aef7f77de940a1d1a6350117d2f5dbde26c6c2e4cba1f306c196894a8b99dad4d10bca9c370ab3732d515cc74845329243e4cf866a869736cd93403676f925b867813b8d997a4d298e95daaea3aef05057a8b452122c812daca81290db7dd7118bd17e3cf255fcdd1aef6abb5a547add262f7dc95b9c9d846ddec7fe8edbef8a"}, &(0x7f0000000100)=0xdd)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r4, 0x9}, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f"], 0x58}}, 0x0)

411.535µs ago: executing program 1 (id=1312):
pipe(&(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
epoll_create1(0x80000)
close(0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x2400000000000000}, 0x0)

0s ago: executing program 1 (id=1313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c00078008000840006200db05000500020000000500010006000000"], 0x58}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x30, 0x0, 0x61]}}, &(0x7f0000000140)=""/155, 0x1e, 0x9b, 0x0, 0xa6}, 0x28)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r3) (async, rerun: 64)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52091' (ED25519) to the list of known hosts.
syzkaller login: [   40.743755][ T5789] cgroup: Unknown subsys name 'net'
[   40.846010][ T5789] cgroup: Unknown subsys name 'cpuset'
[   40.849983][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.195959][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.522540][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.525925][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.529323][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.532969][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.535669][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.575214][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.578112][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.581784][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.585789][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.588706][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.612803][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.615982][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.618554][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.621566][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.624718][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.707280][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   45.804437][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.807027][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.809459][ T5844] bridge_slave_0: entered allmulticast mode
[   45.812202][ T5844] bridge_slave_0: entered promiscuous mode
[   45.818400][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   45.824642][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.826990][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.829251][ T5844] bridge_slave_1: entered allmulticast mode
[   45.832144][ T5844] bridge_slave_1: entered promiscuous mode
[   45.881611][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.901876][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.951897][ T5844] team0: Port device team_slave_0 added
[   45.974692][ T5844] team0: Port device team_slave_1 added
[   45.977250][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.979582][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.982333][ T5849] bridge_slave_0: entered allmulticast mode
[   45.985870][ T5849] bridge_slave_0: entered promiscuous mode
[   46.002471][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.005707][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.008063][ T5849] bridge_slave_1: entered allmulticast mode
[   46.010767][ T5849] bridge_slave_1: entered promiscuous mode
[   46.029538][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.031940][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.040511][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.045298][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   46.050229][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.052520][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.061820][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.067303][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.077979][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.110073][ T5849] team0: Port device team_slave_0 added
[   46.123861][ T5849] team0: Port device team_slave_1 added
[   46.146680][ T5844] hsr_slave_0: entered promiscuous mode
[   46.149196][ T5844] hsr_slave_1: entered promiscuous mode
[   46.174619][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.176929][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.185277][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.189292][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.191727][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.195272][ T5851] bridge_slave_0: entered allmulticast mode
[   46.198135][ T5851] bridge_slave_0: entered promiscuous mode
[   46.207809][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.210061][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.219113][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.222824][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.225796][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.228290][ T5851] bridge_slave_1: entered allmulticast mode
[   46.230950][ T5851] bridge_slave_1: entered promiscuous mode
[   46.263862][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.286216][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.292428][ T5849] hsr_slave_0: entered promiscuous mode
[   46.295986][ T5849] hsr_slave_1: entered promiscuous mode
[   46.298116][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   46.300019][ T5849] Cannot create hsr debugfs directory
[   46.338745][ T5851] team0: Port device team_slave_0 added
[   46.358980][ T5851] team0: Port device team_slave_1 added
[   46.400395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.402819][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.411540][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.415854][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.418041][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.426209][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.479387][ T5851] hsr_slave_0: entered promiscuous mode
[   46.481816][ T5851] hsr_slave_1: entered promiscuous mode
[   46.484439][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   46.486240][ T5851] Cannot create hsr debugfs directory
[   46.529729][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.542206][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.559255][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.564011][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.602221][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.612423][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.619707][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.628123][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.637055][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.639423][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.642019][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.644372][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.675673][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.678057][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.681101][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.684070][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.698349][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.701610][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.707017][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.709897][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.727189][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.731180][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.735791][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.740119][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.789491][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.809536][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.826290][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   46.834476][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.837751][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.840000][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.845121][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   46.855480][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.857812][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.867943][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.870333][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.878539][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   46.883529][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.885864][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.893451][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.895814][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.919601][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.921964][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.048620][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.078434][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.095762][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.098285][ T5844] veth0_vlan: entered promiscuous mode
[   47.108604][ T5844] veth1_vlan: entered promiscuous mode
[   47.140604][ T5851] veth0_vlan: entered promiscuous mode
[   47.146878][ T5849] veth0_vlan: entered promiscuous mode
[   47.157002][ T5844] veth0_macvtap: entered promiscuous mode
[   47.160090][ T5849] veth1_vlan: entered promiscuous mode
[   47.162574][ T5851] veth1_vlan: entered promiscuous mode
[   47.169850][ T5844] veth1_macvtap: entered promiscuous mode
[   47.184378][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.190825][ T5851] veth0_macvtap: entered promiscuous mode
[   47.200008][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.204795][ T5851] veth1_macvtap: entered promiscuous mode
[   47.212672][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.219806][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.222367][ T5849] veth0_macvtap: entered promiscuous mode
[   47.229941][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.239910][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.248675][ T5849] veth1_macvtap: entered promiscuous mode
[   47.252543][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.256427][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.261297][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.264569][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.274474][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.278696][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.285410][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.303958][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.319760][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.326891][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.338799][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.341709][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.362140][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.367815][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.383785][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.388408][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.410252][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.415621][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.416097][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.418248][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.455282][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.457889][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.477530][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.488340][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.495322][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.566261][ T5918] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.570609][ T5916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.574522][   T55] Bluetooth: hci0: command tx timeout
[   47.588044][ T5918] syz.0.4 uses obsolete (PF_INET,SOCK_PACKET)
[   47.653600][   T55] Bluetooth: hci1: command tx timeout
[   47.655663][ T5846] Bluetooth: hci2: command tx timeout
[   47.682607][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.686171][ T5925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   47.692511][ T5923] bridge0: entered allmulticast mode
[   47.698681][ T5923] pim6reg: entered allmulticast mode
[   47.700770][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.769519][ T5923] tipc: Started in network mode
[   47.771191][ T5923] tipc: Node identity 66f92862d83, cluster identity 4711
[   47.774098][ T5923] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.787662][ T5922] tipc: Disabling bearer <eth:syzkaller0>
[   47.870131][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   47.892737][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9'.
[   48.008483][ T5950] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9'.
[   48.078488][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.083918][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.086859][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.091009][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.096033][ T5963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17'.
[   48.117823][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.120609][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.324780][ T5985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.331140][ T5993] netlink: 'syz.1.26': attribute type 10 has an invalid length.
[   48.403757][ T5985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.649771][ T6027] netlink: 'syz.1.34': attribute type 11 has an invalid length.
[   48.652503][ T6027] netlink: 'syz.1.34': attribute type 12 has an invalid length.
[   48.751095][ T6040] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   48.754451][ T6040] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   49.653019][ T5846] Bluetooth: hci0: command tx timeout
[   49.733117][ T5846] Bluetooth: hci2: command tx timeout
[   49.733139][   T55] Bluetooth: hci1: command tx timeout
[   49.744392][ T5985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.124367][ T6082] netlink: 'syz.2.50': attribute type 12 has an invalid length.
[   50.126888][ T6082] netlink: 'syz.2.50': attribute type 29 has an invalid length.
[   50.129468][ T6082] Zero length message leads to an empty skb
[   50.328446][ T6089] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[   50.331701][ T6089] netlink: 'syz.2.53': attribute type 2 has an invalid length.
[   50.681866][ T6109] pim6reg1: entered promiscuous mode
[   50.684254][ T6109] pim6reg1: entered allmulticast mode
[   50.809289][ T6111] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.812222][ T6111] team0: Port device bond1 added
[   50.975017][ T6120] veth1_to_bond: entered allmulticast mode
[   51.018092][ T5985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.088768][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.093662][ T6128] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[   51.096374][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.115481][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.123931][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.158702][ T6136] netlink: 'syz.0.69': attribute type 1 has an invalid length.
[   51.161116][ T6136] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   51.227913][ T6150] warning: `syz.2.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.238875][ T6150] syzkaller1: entered promiscuous mode
[   51.240713][ T6150] syzkaller1: entered allmulticast mode
[   51.282705][ T6152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   51.331545][ T6159] netlink: 'syz.2.76': attribute type 1 has an invalid length.
[   51.734499][   T55] Bluetooth: hci0: command tx timeout
[   51.814188][ T5846] Bluetooth: hci2: command tx timeout
[   51.816051][   T55] Bluetooth: hci1: command tx timeout
[   52.686604][ T6226] __nla_validate_parse: 43 callbacks suppressed
[   52.686635][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'.
[   52.862007][ T6240] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   53.004127][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   53.007204][ T6258] openvswitch: netlink: Missing key (keys=40, expected=100)
[   53.012779][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'.
[   53.097188][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'.
[   53.157113][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[   53.171831][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'.
[   53.206063][ T6272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[   53.322682][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.115'.
[   53.326638][ T6281] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   53.329249][ T6281] netlink: 244 bytes leftover after parsing attributes in process `syz.1.115'.
[   53.337855][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[   53.813001][ T5846] Bluetooth: hci0: command tx timeout
[   53.893448][   T55] Bluetooth: hci1: command tx timeout
[   53.894072][ T5846] Bluetooth: hci2: command tx timeout
[   54.667418][ T5885] IPVS: starting estimator thread 0...
[   54.753968][ T6312] IPVS: using max 79 ests per chain, 189600 per kthread
[   54.800476][  T975] IPVS: starting estimator thread 0...
[   54.880297][ T6329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.883382][ T6323] IPVS: using max 78 ests per chain, 187200 per kthread
[   54.913467][ T6332] pim6reg1: entered allmulticast mode
[   55.169177][ T6356] bridge_slave_0: left allmulticast mode
[   55.171049][ T6356] bridge_slave_0: left promiscuous mode
[   55.173303][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.177981][ T6356] bridge_slave_1: left allmulticast mode
[   55.179831][ T6356] bridge_slave_1: left promiscuous mode
[   55.181868][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.195625][ T6356] bond0: (slave bond_slave_0): Releasing backup interface
[   55.200517][ T6356] bond0: (slave bond_slave_1): Releasing backup interface
[   55.207964][ T6356] team0: Port device team_slave_0 removed
[   55.211959][ T6356] team0: Port device team_slave_1 removed
[   55.215057][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.217371][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.220552][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.223818][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.335328][ T6376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.341024][ T6378] syzkaller0: entered promiscuous mode
[   55.346074][ T6378] syzkaller0: entered allmulticast mode
[   55.359909][ T6378] tipc: Resetting bearer <eth:syzkaller0>
[   55.362408][ T6382] sctp: [Deprecated]: syz.0.151 (pid 6382) Use of int in max_burst socket option deprecated.
[   55.362408][ T6382] Use struct sctp_assoc_value instead
[   55.372723][ T6378] tipc: Disabling bearer <eth:syzkaller0>
[   55.770234][ T6438] xfrm0: entered allmulticast mode
[   55.870617][ T6453] veth3: entered allmulticast mode
[   55.972975][ T5846] Bluetooth: hci2: command tx timeout
[   56.099917][ T6469] netlink: 'syz.2.175': attribute type 23 has an invalid length.
[   56.105043][ T6468] netlink: 'syz.2.175': attribute type 23 has an invalid length.
[   56.282320][ T6497] IPv6: sit1: Disabled Multicast RS
[   56.325986][ T6504] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   56.329196][ T6502] IPVS: stopping backup sync thread 6504 ...
[   56.417435][ T6516] net veth1_virt_wifi : renamed from virt_wifi0
[   56.449718][ T6523] netlink: 'syz.1.192': attribute type 29 has an invalid length.
[   56.655219][ T6529] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   56.957643][ T6572] syzkaller0: entered promiscuous mode
[   56.959454][ T6572] syzkaller0: entered allmulticast mode
[   57.048024][ T6579] erspan0: entered promiscuous mode
[   57.050700][ T6579] erspan0: left promiscuous mode
[   57.124790][ T6584] syzkaller0: tun_chr_ioctl cmd 3223873159
[   57.127325][ T6584] syzkaller0: create flow: hash 2029926020 index 1
[   57.152772][ T6584] syzkaller0: delete flow: hash 2029926020 index 1
[   57.783749][ T6599] __nla_validate_parse: 28 callbacks suppressed
[   57.783760][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.218'.
[   57.817159][ T6615] syzkaller1: entered promiscuous mode
[   57.818972][ T6615] syzkaller1: entered allmulticast mode
[   57.852359][ T6619] netlink: 'syz.0.221': attribute type 1 has an invalid length.
[   57.854879][ T6619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.221'.
[   57.941447][ T6621] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   58.029961][ T6631] netlink: 84 bytes leftover after parsing attributes in process `syz.0.226'.
[   58.062390][ T6635] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[   58.066024][ T6635] netlink: 2 bytes leftover after parsing attributes in process `syz.1.228'.
[   58.076503][ T6631] netlink: 140 bytes leftover after parsing attributes in process `syz.0.226'.
[   58.149169][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'.
[   58.207221][ T6645] netlink: 212244 bytes leftover after parsing attributes in process `syz.0.233'.
[   58.249486][ T6648] netlink: 96 bytes leftover after parsing attributes in process `syz.0.234'.
[   58.252372][ T6648] netlink: 80 bytes leftover after parsing attributes in process `syz.0.234'.
[   58.257243][ T6648] mac80211_hwsim hwsim3 ": renamed from wlan0 (while UP)
[   58.275137][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   58.966420][ T6707] bridge0: port 3(vlan2) entered blocking state
[   58.968668][ T6707] bridge0: port 3(vlan2) entered disabled state
[   58.970826][ T6707] vlan2: entered allmulticast mode
[   58.972513][ T6707] bridge0: entered allmulticast mode
[   58.975964][ T6707] vlan2: left allmulticast mode
[   58.977616][ T6707] bridge0: left allmulticast mode
[   60.100106][ T6756] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   60.119424][ T6756] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.145804][ T6756] bond2: (slave geneve2): making interface the new active one
[   60.149124][ T6756] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   60.151921][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.157013][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.160004][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.162477][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.185092][ T6762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   60.617750][ T6796] openvswitch: netlink: Flow key attribute not present in set flow.
[   60.638632][ T6798] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20002
[   61.184828][ T6837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.232174][ T6846] tipc: Started in network mode
[   61.234987][ T6846] tipc: Node identity , cluster identity 4711
[   61.236946][ T6846] tipc: Failed to obtain node identity
[   61.238797][ T6846] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.396994][ T6868] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   61.542689][ T6885] netlink: 'syz.0.308': attribute type 27 has an invalid length.
[   61.547105][   T24] cfg80211: failed to load regulatory.db
[   61.761680][ T6910] bridge_slave_0: left allmulticast mode
[   61.764614][ T6910] bridge_slave_0: left promiscuous mode
[   61.766512][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.771209][ T6910] bridge_slave_1: left allmulticast mode
[   61.774675][ T6910] bridge_slave_1: left promiscuous mode
[   61.776551][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.791216][ T6910] bond0: (slave bond_slave_0): Releasing backup interface
[   61.797379][ T6910] bond0: (slave bond_slave_1): Releasing backup interface
[   61.806095][ T6910] team0: Port device team_slave_0 removed
[   61.810734][ T6910] team0: Port device team_slave_1 removed
[   62.091246][ T6967] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[   62.095001][ T6967] netlink: 'syz.2.336': attribute type 2 has an invalid length.
[   62.097734][ T6967] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[   62.179866][ T6977] tipc: Started in network mode
[   62.181450][ T6977] tipc: Node identity 227f41ae47eb, cluster identity 4711
[   62.186780][ T6977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.189904][ T6977] syzkaller0: entered promiscuous mode
[   62.195500][ T6977] syzkaller0: entered allmulticast mode
[   62.205461][ T6977] tipc: Resetting bearer <eth:syzkaller0>
[   62.207752][ T6984] netlink: 'syz.0.342': attribute type 16 has an invalid length.
[   62.210366][ T6976] tipc: Resetting bearer <eth:syzkaller0>
[   62.210903][ T6984] netlink: 'syz.0.342': attribute type 3 has an invalid length.
[   62.220291][ T6976] tipc: Disabling bearer <eth:syzkaller0>
[   62.287895][ T6992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   62.481359][ T7017] macsec1: entered promiscuous mode
[   62.484131][ T7017] team0: entered promiscuous mode
[   62.486017][ T7017] macsec1: entered allmulticast mode
[   62.487799][ T7017] team0: entered allmulticast mode
[   62.489836][ T7017] team0: Device macsec1 is already an upper device of the team interface
[   62.495524][ T7017] team0: left allmulticast mode
[   62.497278][ T7017] team0: left promiscuous mode
[   63.185478][ T7033] veth0_to_team: entered promiscuous mode
[   63.190589][ T7033] veth0_to_team: entered allmulticast mode
[   63.200214][ T7033] __nla_validate_parse: 35 callbacks suppressed
[   63.200222][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[   63.210518][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   63.321403][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'.
[   63.481454][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.372'.
[   63.733007][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   64.253059][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'.
[   64.328248][ T7102] syzkaller1: entered allmulticast mode
[   64.446520][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[   64.516725][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'.
[   64.576205][ T7132] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   64.581419][ T7132] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.385'.
[   65.098239][ T7176] netlink: 'syz.0.404': attribute type 2 has an invalid length.
[   65.222282][ T7186] netlink: 844 bytes leftover after parsing attributes in process `syz.0.406'.
[   65.240892][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.406'.
[   65.684601][ T7206] netlink: 'syz.1.412': attribute type 2 has an invalid length.
[   65.708208][ T7211] openvswitch: netlink: Missing key (keys=40, expected=100)
[   65.711725][ T7211] netlink: 'syz.1.414': attribute type 1 has an invalid length.
[   65.945380][ T7240] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   66.141716][ T7273] vlan2: entered promiscuous mode
[   66.145639][ T7273] bond0: entered promiscuous mode
[   66.147870][ T7273] vlan2: entered allmulticast mode
[   66.149681][ T7273] bond0: entered allmulticast mode
[   66.930691][ T7338] team0: entered promiscuous mode
[   66.932379][ T7338] team_slave_0: entered promiscuous mode
[   66.935371][ T7338] team_slave_1: entered promiscuous mode
[   66.937521][ T7338] bond1: entered promiscuous mode
[   66.950843][ T7338] team0 (unregistering): left promiscuous mode
[   66.953207][ T7338] team_slave_0: left promiscuous mode
[   66.955957][ T7338] team_slave_1: left promiscuous mode
[   66.958263][ T7338] bond1: left promiscuous mode
[   66.963389][ T7338] team0 (unregistering): Port device team_slave_0 removed
[   66.969221][ T7338] team0 (unregistering): Port device team_slave_1 removed
[   66.973502][ T7338] team0 (unregistering): Port device bond1 removed
[   67.029563][ T7343] bridge_slave_0: left allmulticast mode
[   67.031760][ T7343] bridge_slave_0: left promiscuous mode
[   67.033959][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.038675][ T7343] bridge_slave_1: left allmulticast mode
[   67.040580][ T7343] bridge_slave_1: left promiscuous mode
[   67.042719][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.049971][ T7343] bond0: (slave bond_slave_0): Releasing backup interface
[   67.065641][ T7343] bond0: (slave bond_slave_1): Releasing backup interface
[   67.072124][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.076362][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.079595][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.082406][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.285966][ T7363] syzkaller1: entered promiscuous mode
[   67.287867][ T7363] syzkaller1: entered allmulticast mode
[   67.317817][ T7362] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.355052][ T7368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.536700][ T7387] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.561740][ T7390] validate_nla: 1 callbacks suppressed
[   67.561749][ T7390] netlink: 'syz.2.475': attribute type 2 has an invalid length.
[   67.592055][ T7393] sctp: [Deprecated]: syz.1.477 (pid 7393) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.592055][ T7393] Use struct sctp_sack_info instead
[   67.597913][ T7393] sctp: [Deprecated]: syz.1.477 (pid 7393) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.597913][ T7393] Use struct sctp_sack_info instead
[   67.798280][ T7418] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   67.812496][ T7418] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   67.904789][ T7422] bond0: entered promiscuous mode
[   67.908127][ T7422] batadv0: entered promiscuous mode
[   67.910700][ T7422] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   67.915588][ T7422] hsr1: entered allmulticast mode
[   67.917334][ T7422] bond0: entered allmulticast mode
[   67.919059][ T7422] batadv0: entered allmulticast mode
[   67.921049][ T7422] 8021q: adding VLAN 0 to HW filter on device hsr1
[   67.925864][ T7422] bond0: left promiscuous mode
[   67.928289][ T7422] batadv0: left promiscuous mode
[   67.985949][ T7430] netlink: 'syz.0.490': attribute type 1 has an invalid length.
[   67.995129][ T7430] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   67.998752][ T7430] gretap1: entered promiscuous mode
[   68.288043][ T7453] __nla_validate_parse: 24 callbacks suppressed
[   68.288056][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.499'.
[   68.585580][ T7473] netlink: 132 bytes leftover after parsing attributes in process `syz.2.509'.
[   68.590840][ T7473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'.
[   68.596286][ T7473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'.
[   68.644853][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'.
[   68.667927][ T7479] netlink: 'syz.1.512': attribute type 21 has an invalid length.
[   68.670380][ T7479] netlink: 156 bytes leftover after parsing attributes in process `syz.1.512'.
[   68.673420][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[   68.689173][ T7479] netlink: 'syz.1.512': attribute type 21 has an invalid length.
[   68.700524][ T7479] netlink: 156 bytes leftover after parsing attributes in process `syz.1.512'.
[   68.712782][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'.
[   68.785050][ T7496] syzkaller0: entered promiscuous mode
[   68.787435][ T7496] syzkaller0: entered allmulticast mode
[   68.830644][ T7500] netlink: 192 bytes leftover after parsing attributes in process `syz.1.518'.
[   69.476035][ T7501] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   69.728610][ T7534] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[   69.754886][ T7534] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.768111][ T7534] ipvlan2: entered allmulticast mode
[   69.769852][ T7534] bond2: entered allmulticast mode
[   69.788407][ T7534] bond2: (slave gretap1): making interface the new active one
[   69.790921][ T7534] gretap1: entered allmulticast mode
[   69.794591][ T7534] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   69.809620][ T7534] syz.2.530 (7534) used greatest stack depth: 19944 bytes left
[   69.895829][ T7557] delete_channel: no stack
[   70.230915][ T7578] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   70.237126][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.857675][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   70.978581][ T7634] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[   71.084127][ T7639] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   71.412795][ T7664] vlan3: entered allmulticast mode
[   71.414595][ T7664] gretap0: entered allmulticast mode
[   71.455653][ T7664] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   72.853256][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   72.888823][ T7754] netlink: 'syz.1.605': attribute type 1 has an invalid length.
[   72.891291][ T7754] netlink: 'syz.1.605': attribute type 2 has an invalid length.
[   73.297237][ T7768] __nla_validate_parse: 36 callbacks suppressed
[   73.297246][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'.
[   73.374592][ T7772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.610'.
[   73.467739][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'.
[   73.571589][ T7781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.613'.
[   73.795318][ T7793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.617'.
[   73.961054][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'.
[   73.985712][ T7819] netem: change failed
[   74.079019][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.624'.
[   74.278817][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.632'.
[   74.286397][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'.
[   74.290146][ T7859] netlink: 'syz.2.632': attribute type 14 has an invalid length.
[   74.292656][ T7859] netlink: 'syz.2.632': attribute type 13 has an invalid length.
[   74.375902][ T7863] netlink: 'syz.2.634': attribute type 7 has an invalid length.
[   74.486532][ T7876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.637'.
[   75.472437][ T7931] tls_set_device_offload: netdev not found
[   75.775375][ T7964] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   76.001799][ T7988] netlink: 'syz.0.675': attribute type 12 has an invalid length.
[   76.078186][ T7994] netlink: 'syz.0.677': attribute type 1 has an invalid length.
[   76.091782][ T7994] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.101476][ T7994] bond1: (slave geneve2): making interface the new active one
[   76.105212][ T7994] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   76.111571][ T7994] bond1: entered promiscuous mode
[   76.113568][ T7994] geneve2: entered promiscuous mode
[   76.206116][ T8001] vlan2: entered promiscuous mode
[   76.208591][ T8001] vlan2: entered allmulticast mode
[   76.210452][ T8001] hsr_slave_1: entered allmulticast mode
[   76.348892][ T8012] tap0: tun_chr_ioctl cmd 35108
[   76.681735][ T8045] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[   76.710140][ T8045] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   76.802145][ T8058] syzkaller1: entered promiscuous mode
[   76.806120][ T8058] syzkaller1: entered allmulticast mode
[   78.083655][ T8138] Driver unsupported XDP return value 0 on prog  (id 134) dev N/A, expect packet loss!
[   78.196134][ T8141] netlink: 'syz.1.740': attribute type 5 has an invalid length.
[   78.247250][ T8149] erspan0: entered promiscuous mode
[   78.249528][ T8149] gretap0: entered promiscuous mode
[   78.295832][ T8154] netlink: 'syz.1.745': attribute type 8 has an invalid length.
[   78.324388][ T8161] __nla_validate_parse: 35 callbacks suppressed
[   78.324397][ T8161] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.747'.
[   78.341871][   T13] syzkaller0: tun_net_xmit 76
[   78.346440][   T13] syzkaller0: tun_net_xmit 48
[   78.363386][   T47] syzkaller0: tun_net_xmit 76
[   79.195299][ T8179] tun0: tun_chr_ioctl cmd 1074025675
[   79.197078][ T8179] tun0: persist enabled
[   79.199171][ T8179] tun0: tun_chr_ioctl cmd 1074025675
[   79.200880][ T8179] tun0: persist enabled
[   79.203358][ T8179] tun0: tun_chr_ioctl cmd 1074025675
[   79.205051][ T8179] tun0: persist enabled
[   79.246121][ T8184] syzkaller1: entered promiscuous mode
[   79.250198][ T8184] syzkaller1: entered allmulticast mode
[   79.260069][ T8184] syzkaller1: left promiscuous mode
[   79.261872][ T8184] syzkaller1: left allmulticast mode
[   79.440336][ T8188] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   79.450717][ T8188] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.755'.
[   79.527594][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'.
[   79.567297][ T8197] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.617205][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[   79.620277][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[   79.625543][ T8204] netlink: 5 bytes leftover after parsing attributes in process `syz.2.760'.
[   79.645327][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[   79.671629][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'.
[   79.678896][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[   79.759590][ T8224] policy can only be matched on NF_INET_PRE_ROUTING
[   79.759602][ T8224] unable to load match
[   79.765607][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.768'.
[   79.771933][ T8224] macsec1: entered promiscuous mode
[   79.777376][ T8224] team0: entered promiscuous mode
[   79.779776][ T8224] macsec1: entered allmulticast mode
[   79.781616][ T8224] team0: entered allmulticast mode
[   79.788303][ T8224] team0: Device macsec1 is already an upper device of the team interface
[   79.791954][ T8224] team0: left allmulticast mode
[   79.794423][ T8224] team0: left promiscuous mode
[   79.900068][ T8233] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[   80.023056][ T8251] lo speed is unknown, defaulting to 1000
[   80.025413][ T8251] lo speed is unknown, defaulting to 1000
[   80.028343][ T8251] lo speed is unknown, defaulting to 1000
[   80.038284][ T8251] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   80.047647][ T8251] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   80.069004][ T8251] lo speed is unknown, defaulting to 1000
[   80.071938][ T8251] lo speed is unknown, defaulting to 1000
[   80.077510][ T8251] lo speed is unknown, defaulting to 1000
[   80.091597][ T8253] netlink: 'syz.2.778': attribute type 10 has an invalid length.
[   80.091613][ T8254] netlink: 'syz.2.778': attribute type 10 has an invalid length.
[   80.555543][   T10] tipc: Node number set to 1704214958
[   80.569434][ T8312] lo speed is unknown, defaulting to 1000
[   81.316756][ T8347] syzkaller0: entered promiscuous mode
[   81.318636][ T8347] syzkaller0: entered allmulticast mode
[   81.325117][ T8347] macsec0: entered promiscuous mode
[   81.560026][ T8350] netlink: 'syz.0.803': attribute type 6 has an invalid length.
[   81.618564][ T8353] netlink: 'syz.0.803': attribute type 6 has an invalid length.
[   82.370264][ T8405] netlink: 'syz.2.821': attribute type 7 has an invalid length.
[   82.381992][ T8405] : entered promiscuous mode
[   82.439696][ T8406] netlink: 'syz.2.821': attribute type 2 has an invalid length.
[   82.888721][ T8449] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.036204][ T8467] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   83.120023][ T8480] netlink: 'syz.2.849': attribute type 7 has an invalid length.
[   83.228455][ T8480] netlink: 'syz.2.849': attribute type 29 has an invalid length.
[   83.252416][ T8484] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   83.364813][ T8499] __nla_validate_parse: 17 callbacks suppressed
[   83.364823][ T8499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'.
[   83.391898][ T8499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.855'.
[   83.449009][ T8510] IPVS: set_ctl: invalid protocol: 103 172.20.20.27:19998
[   83.455432][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[   83.788047][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.872'.
[   83.878028][ T8574] openvswitch: netlink: Message has 16 unknown bytes.
[   83.959334][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'.
[   83.987960][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.885'.
[   84.062105][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[   84.143704][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.895'.
[   84.192626][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'.
[   84.195718][ T8621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'.
[   84.198641][ T8621] netlink: 'syz.1.898': attribute type 12 has an invalid length.
[   84.908611][ T8670] netlink: zone id is out of range
[   84.910269][ T8670] netlink: zone id is out of range
[   84.911897][ T8670] netlink: zone id is out of range
[   84.914412][ T8670] netlink: zone id is out of range
[   84.916063][ T8670] netlink: zone id is out of range
[   84.917717][ T8670] netlink: zone id is out of range
[   84.919339][ T8670] netlink: zone id is out of range
[   84.920949][ T8670] netlink: zone id is out of range
[   85.185722][ T8685] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   85.402476][ T8714] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[   85.957367][ T8759] syzkaller0: entered promiscuous mode
[   85.959278][ T8759] syzkaller0: entered allmulticast mode
[   87.888058][ T8811] bond0: option mode: unable to set because the bond device is up
[   87.914710][ T8813] wg2: entered promiscuous mode
[   87.916387][ T8813] wg2: entered allmulticast mode
[   88.637414][ T8849] lo speed is unknown, defaulting to 1000
[   88.768722][ T8868] __nla_validate_parse: 22 callbacks suppressed
[   88.768732][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[   88.799208][ T8870] bond2: (slave gretap1): Releasing active interface
[   88.801338][ T8870] gretap1: left allmulticast mode
[   88.857650][ T8876] batadv_slave_0: entered promiscuous mode
[   88.860630][ T8874] batadv_slave_0: left promiscuous mode
[   89.012816][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'.
[   89.039457][ T8901] ieee802154 phy1 wpan1: encryption failed: -22
[   89.047574][ T8901] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.098091][ T8901] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.129781][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'.
[   89.137287][ T8901] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.155611][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.994'.
[   89.176745][ T8901] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.251308][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.256484][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.266500][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.278861][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'.
[   89.283736][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.680301][ T8924] netlink: 248 bytes leftover after parsing attributes in process `syz.0.996'.
[  105.701570][ T8927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.707460][ T8927] syzkaller0: entered promiscuous mode
[  105.709267][ T8927] syzkaller0: entered allmulticast mode
[  105.749159][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  105.752102][ T8933] netlink: 312 bytes leftover after parsing attributes in process `syz.2.998'.
[  105.755770][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  105.832391][ T8937] tipc: Resetting bearer <eth:syzkaller0>
[  105.838676][ T8936] ip6tnl4: entered promiscuous mode
[  105.871100][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'.
[  105.887039][ T8936] tipc: Resetting bearer <ib:ip6gre0>
[  105.960481][ T8936] veth1_to_bond: left allmulticast mode
[  105.966012][ T8941] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  105.999398][ T8936] net_ratelimit: 31 callbacks suppressed
[  105.999410][ T8936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.126859][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'.
[  106.130498][ T8946] netlink: 'syz.2.1002': attribute type 10 has an invalid length.
[  106.135898][ T8946] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  106.138507][ T8946] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.287850][ T8957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1006'.
[  106.433559][ T8963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.436227][ T8963] syzkaller0: entered promiscuous mode
[  106.438157][ T8963] syzkaller0: entered allmulticast mode
[  106.441277][ T8963] netlink: 'syz.2.1009': attribute type 12 has an invalid length.
[  106.446755][ T8963] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1009'.
[  106.449688][ T8963] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1009'.
[  106.459855][ T8962] tipc: Resetting bearer <eth:syzkaller0>
[  106.470287][ T8962] tipc: Disabling bearer <eth:syzkaller0>
[  106.509169][ T8923] tipc: Resetting bearer <eth:syzkaller0>
[  106.518132][ T8923] tipc: Disabling bearer <eth:syzkaller0>
[  106.827967][ T8973] siw: device registration error -23
[  106.856284][ T8975] vlan2: entered promiscuous mode
[  106.857965][ T8975] bond0: entered promiscuous mode
[  106.859734][ T8975] vlan2: entered allmulticast mode
[  106.861401][ T8975] bond0: entered allmulticast mode
[  107.085154][ T8987] syzkaller0: entered promiscuous mode
[  107.087013][ T8987] syzkaller0: entered allmulticast mode
[  107.253627][ T8995] netlink: 542 bytes leftover after parsing attributes in process `syz.2.1020'.
[  107.954609][ T9043] lo speed is unknown, defaulting to 1000
[  108.111089][ T9051] syzkaller0: entered promiscuous mode
[  108.113076][ T9051] syzkaller0: entered allmulticast mode
[  108.149613][ T9051] batadv0: entered promiscuous mode
[  108.152594][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.821493][ T9058] veth7: entered allmulticast mode
[  108.875261][ T9064] netlink: 'syz.2.1043': attribute type 18 has an invalid length.
[  108.981073][ T9068] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  108.985167][ T9068] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  109.009716][ T9073] netlink: 'syz.2.1046': attribute type 1 has an invalid length.
[  109.034316][ T9073] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.037098][ T9077] netlink: 'syz.1.1047': attribute type 1 has an invalid length.
[  109.045272][ T9073] ipvlan0: entered allmulticast mode
[  109.047165][ T9073] bond4: entered allmulticast mode
[  109.076279][ T9081] openvswitch: netlink: IPv4 tun info is not correct
[  109.097900][ T9083] netlink: 'syz.2.1049': attribute type 4 has an invalid length.
[  109.105734][ T9083] netlink: 'syz.2.1049': attribute type 4 has an invalid length.
[  109.287505][ T9103] syzkaller1: entered promiscuous mode
[  109.289376][ T9103] syzkaller1: entered allmulticast mode
[  109.294886][ T9101] netlink: 'syz.1.1055': attribute type 10 has an invalid length.
[  109.301203][ T9101] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  109.303885][ T9101] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  109.307750][ T9101] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.399957][ T9108] syzkaller0: entered promiscuous mode
[  109.401815][ T9108] syzkaller0: entered allmulticast mode
[  109.437878][ T9118] tipc: Can't bind to reserved service type 0
[  110.176652][ T9133] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  110.307104][ T5885] IPVS: starting estimator thread 0...
[  110.392997][ T9148] IPVS: using max 78 ests per chain, 187200 per kthread
[  110.544723][ T9184] siw: device registration error -23
[  110.547061][ T9183] Bluetooth: MGMT ver 1.23
[  110.641757][ T9196] 8021q: VLANs not supported on gre0
[  110.645162][ T9195] 8021q: VLANs not supported on gre0
[  110.722048][ T9208] __nla_validate_parse: 23 callbacks suppressed
[  110.722060][ T9208] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1090'.
[  111.808146][ T9272] nbd: must specify at least one socket
[  111.884066][ T9282] lo speed is unknown, defaulting to 1000
[  111.958372][ T9289] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1114'.
[  111.958807][ T9287] lo speed is unknown, defaulting to 1000
[  112.046923][ T9298] netlink: 'syz.2.1117': attribute type 9 has an invalid length.
[  112.057817][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'.
[  112.071210][ T9298] netlink: 'syz.2.1117': attribute type 9 has an invalid length.
[  112.080710][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'.
[  112.092276][   T47] IPVS: starting estimator thread 0...
[  112.183024][ T9299] IPVS: using max 78 ests per chain, 187200 per kthread
[  112.200434][ T9312] netlink: 'syz.2.1120': attribute type 3 has an invalid length.
[  112.212630][ T9312] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1120'.
[  112.225162][ T9312] netlink: 'syz.2.1120': attribute type 1 has an invalid length.
[  112.245983][ T9312] bond5: entered promiscuous mode
[  112.248009][ T9312] 8021q: adding VLAN 0 to HW filter on device bond5
[  112.262377][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1120'.
[  112.326282][ T9317] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  112.390080][   T13] IPVS: stop unused estimator thread 0...
[  112.644257][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'.
[  112.698163][ T9357] 8021q: adding VLAN 0 to HW filter on device bond3
[  112.728863][ T9361] tipc: Invalid UDP bearer configuration
[  112.728893][ T9361] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.787974][ T9361] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  113.257675][ T9381] IPVS: set_ctl: invalid protocol: 43 172.20.20.10:20001
[  113.428328][ T9396] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000
[  113.464867][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1147'.
[  113.475227][ T9398] netlink: 'syz.0.1144': attribute type 6 has an invalid length.
[  113.512384][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'.
[  113.516016][ T9404] netlink: 'syz.2.1149': attribute type 21 has an invalid length.
[  113.617737][ T9418] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1154'.
[  113.687706][ T9423] netlink: zone id is out of range
[  113.689680][ T9423] netlink: zone id is out of range
[  113.691388][ T9423] netlink: zone id is out of range
[  113.708009][ T9428] netlink: 'syz.1.1158': attribute type 9 has an invalid length.
[  113.715549][ T9423] netlink: zone id is out of range
[  113.717280][ T9423] netlink: zone id is out of range
[  113.719235][ T9423] netlink: zone id is out of range
[  113.721453][ T9423] netlink: zone id is out of range
[  113.725531][ T9423] netlink: zone id is out of range
[  113.727736][ T9423] netlink: zone id is out of range
[  113.810429][ T9439] mac80211_hwsim hwsim7 pimreg: entered promiscuous mode
[  113.812768][ T9439] mac80211_hwsim hwsim7 pimreg: entered allmulticast mode
[  113.832290][ T9440] can: request_module (can-proto-0) failed.
[  114.407904][ T9478] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001
[  114.865620][ T9504] sch_tbf: burst 1476 is lower than device bridge4 mtu (1514) !
[  114.890707][ T9508] netlink: 'syz.1.1185': attribute type 6 has an invalid length.
[  114.895101][ T9508] netlink: 'syz.1.1185': attribute type 6 has an invalid length.
[  114.896613][ T9509] netlink: 'syz.1.1185': attribute type 6 has an invalid length.
[  115.000118][ T9520] bridge0: port 1(vlan0) entered blocking state
[  115.002355][ T9520] bridge0: port 1(vlan0) entered disabled state
[  115.006316][ T9520] vlan0: entered allmulticast mode
[  115.008038][ T9520] bridge0: entered allmulticast mode
[  115.013640][ T9520] vlan0: left allmulticast mode
[  115.015320][ T9520] bridge0: left allmulticast mode
[  115.079444][ T9532] macvtap0: entered promiscuous mode
[  115.081400][ T9532] erspan0: entered promiscuous mode
[  115.083998][ T9532] macvtap0: entered allmulticast mode
[  115.087225][ T9532] erspan0: entered allmulticast mode
[  115.096824][ T9532] erspan0: left allmulticast mode
[  115.101569][ T9532] erspan0: left promiscuous mode
[  115.219647][ T9542] syzkaller1: entered promiscuous mode
[  115.221655][ T9542] syzkaller1: entered allmulticast mode
[  115.561224][ T9571] ip6gre1: entered allmulticast mode
[  115.750957][ T9592] ip6tnl3: entered promiscuous mode
[  115.752996][ T9592] ip6tnl3: entered allmulticast mode
[  115.755855][ T9592] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  115.844402][ T9597] __nla_validate_parse: 28 callbacks suppressed
[  115.844413][ T9597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1212'.
[  116.059152][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.089958][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1217'.
[  116.131439][ T9619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1219'.
[  116.389434][ T9641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1226'.
[  116.430089][ T9650] netlink: 'syz.1.1229': attribute type 11 has an invalid length.
[  116.438835][ T9650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'.
[  116.441906][ T9650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1229'.
[  116.445065][ T9650] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1229'.
[  116.579936][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'.
[  116.704032][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1235'.
[  116.988216][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  117.180752][ T9704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.185676][ T9704] syzkaller0: entered promiscuous mode
[  117.187627][ T9704] syzkaller0: entered allmulticast mode
[  117.202028][ T9704] tipc: Resetting bearer <eth:syzkaller0>
[  117.205878][ T9703] tipc: Resetting bearer <eth:syzkaller0>
[  117.213423][ T9703] tipc: Disabling bearer <eth:syzkaller0>
[  117.322652][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.329663][ T9713] bond0: (slave rose0): Enslaving as an active interface with an up link
[  118.402179][ T9768] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  118.968602][ T9809] validate_nla: 4 callbacks suppressed
[  118.968614][ T9809] netlink: 'syz.1.1284': attribute type 2 has an invalid length.
[  119.204422][ T9838] syzkaller1: entered promiscuous mode
[  119.206259][ T9838] syzkaller1: entered allmulticast mode
[  119.329820][ T9848] netlink: 'syz.2.1298': attribute type 1 has an invalid length.
[  119.560602][ T9874] ip6gre2: entered promiscuous mode
[  119.725806][ T9890] syzkaller0: entered promiscuous mode
[  119.727703][ T9890] syzkaller0: entered allmulticast mode
[  119.751581][    C0] ------------[ cut here ]------------
[  119.753602][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  119.757065][    C0] WARNING: CPU: 0 PID: 0 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  119.760207][    C0] Modules linked in:
[  119.761688][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  119.765936][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.769144][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  119.771193][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  119.777468][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  119.779458][    C0] RAX: eebc9cea7ac29400 RBX: 000000000000000c RCX: ffffffff8de95100
[  119.782050][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  119.784677][    C0] RBP: dffffc0000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  119.787259][    C0] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff8880315ae328
[  119.789746][    C0] R13: 0000000000000000 R14: ffff888110738e40 R15: ffff88811073b0d8
[  119.792203][    C0] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  119.794954][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.797022][    C0] CR2: 00007f03615d9fc8 CR3: 000000011010c000 CR4: 00000000000006f0
[  119.799727][    C0] Call Trace:
[  119.800835][    C0]  <IRQ>
[  119.801790][    C0]  rate_control_send_low+0x194/0x7a0
[  119.803630][    C0]  rate_control_get_rate+0x20b/0x5d0
[  119.805334][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  119.807214][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  119.809259][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  119.810998][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  119.812910][    C0]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  119.814739][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  119.816705][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.818474][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.820341][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.822158][    C0]  __ieee80211_beacon_get+0x118e/0x1880
[  119.823985][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.825753][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  119.827548][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  119.829613][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  119.831437][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  119.833841][    C0]  __iterate_interfaces+0x2ab/0x590
[  119.835527][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  119.837522][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  119.839907][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  119.841925][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  119.844294][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  119.846000][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  119.847911][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  119.849625][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  119.851494][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  119.853414][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  119.855094][    C0]  handle_softirqs+0x286/0x870
[  119.856718][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  119.858318][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  119.860166][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  119.861851][    C0]  __irq_exit_rcu+0xca/0x1f0
[  119.863397][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  119.865107][    C0]  irq_exit_rcu+0x9/0x30
[  119.866515][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  119.868363][    C0]  </IRQ>
[  119.869350][    C0]  <TASK>
[  119.870336][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.872302][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  119.874221][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  119.880451][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  119.882456][    C0] RAX: eebc9cea7ac29400 RBX: ffffffff81968308 RCX: eebc9cea7ac29400
[  119.885096][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  119.887687][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  119.890268][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa34730
[  119.892926][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  119.895517][    C0]  ? do_idle+0x1e8/0x510
[  119.896911][    C0]  default_idle+0x13/0x20
[  119.898352][    C0]  default_idle_call+0x74/0xb0
[  119.899969][    C0]  do_idle+0x1e8/0x510
[  119.901339][    C0]  ? __pfx_do_idle+0x10/0x10
[  119.902934][    C0]  cpu_startup_entry+0x44/0x60
[  119.904513][    C0]  rest_init+0x2de/0x300
[  119.905911][    C0]  start_kernel+0x3a9/0x410
[  119.907413][    C0]  x86_64_start_reservations+0x24/0x30
[  119.909195][    C0]  x86_64_start_kernel+0x143/0x1c0
[  119.910891][    C0]  common_startup_64+0x13e/0x147
[  119.912540][    C0]  </TASK>
[  119.913629][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  119.915940][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  119.919780][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.923055][    C0] Call Trace:
[  119.924162][    C0]  <IRQ>
[  119.925125][    C0]  dump_stack_lvl+0x99/0x250
[  119.926665][    C0]  ? __asan_memcpy+0x40/0x70
[  119.928189][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.929899][    C0]  ? __pfx__printk+0x10/0x10
[  119.931435][    C0]  vpanic+0x281/0x750
[  119.932754][    C0]  ? __pfx__printk+0x10/0x10
[  119.934300][    C0]  ? __pfx_vpanic+0x10/0x10
[  119.935798][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  119.937538][    C0]  panic+0xb9/0xc0
[  119.938791][    C0]  ? __pfx_panic+0x10/0x10
[  119.940315][    C0]  __warn+0x31b/0x4b0
[  119.941652][    C0]  ? __rate_control_send_low+0x5df/0x820
[  119.943509][    C0]  ? __rate_control_send_low+0x5df/0x820
[  119.945362][    C0]  report_bug+0x2be/0x4f0
[  119.946800][    C0]  ? __rate_control_send_low+0x5df/0x820
[  119.948648][    C0]  ? __rate_control_send_low+0x5df/0x820
[  119.950433][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  119.952223][    C0]  handle_bug+0x84/0x160
[  119.953635][    C0]  exc_invalid_op+0x1a/0x50
[  119.955137][    C0]  asm_exc_invalid_op+0x1a/0x20
[  119.956743][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  119.958789][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 62 14 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  119.965175][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  119.967096][    C0] RAX: eebc9cea7ac29400 RBX: 000000000000000c RCX: ffffffff8de95100
[  119.969628][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  119.972194][    C0] RBP: dffffc0000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  119.974732][    C0] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff8880315ae328
[  119.977241][    C0] R13: 0000000000000000 R14: ffff888110738e40 R15: ffff88811073b0d8
[  119.979843][    C0]  ? __rate_control_send_low+0x5de/0x820
[  119.981708][    C0]  rate_control_send_low+0x194/0x7a0
[  119.983426][    C0]  rate_control_get_rate+0x20b/0x5d0
[  119.985104][    C0]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  119.986975][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  119.989007][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  119.990735][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  119.992556][    C0]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  119.994361][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  119.996325][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.998132][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  119.999982][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  120.001738][    C0]  __ieee80211_beacon_get+0x118e/0x1880
[  120.003502][    C0]  ? __ieee80211_beacon_get+0x36/0x1880
[  120.005319][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  120.007101][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  120.009097][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  120.010892][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  120.013228][    C0]  __iterate_interfaces+0x2ab/0x590
[  120.014934][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  120.016921][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  120.019320][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  120.021336][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  120.023568][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  120.025294][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  120.027187][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  120.028909][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  120.030772][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  120.032677][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  120.034357][    C0]  handle_softirqs+0x286/0x870
[  120.035945][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  120.037522][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  120.039298][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  120.041020][    C0]  __irq_exit_rcu+0xca/0x1f0
[  120.042556][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  120.044267][    C0]  irq_exit_rcu+0x9/0x30
[  120.045675][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  120.047511][    C0]  </IRQ>
[  120.048505][    C0]  <TASK>
[  120.049492][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  120.051445][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  120.053315][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 77 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  120.059559][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  120.061557][    C0] RAX: eebc9cea7ac29400 RBX: ffffffff81968308 RCX: eebc9cea7ac29400
[  120.064119][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b494b RDI: ffffffff8be32680
[  120.066692][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  120.069370][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa34730
[  120.072009][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  120.074571][    C0]  ? do_idle+0x1e8/0x510
[  120.075930][    C0]  default_idle+0x13/0x20
[  120.077314][    C0]  default_idle_call+0x74/0xb0
[  120.078857][    C0]  do_idle+0x1e8/0x510
[  120.080210][    C0]  ? __pfx_do_idle+0x10/0x10
[  120.081728][    C0]  cpu_startup_entry+0x44/0x60
[  120.083309][    C0]  rest_init+0x2de/0x300
[  120.084681][    C0]  start_kernel+0x3a9/0x410
[  120.086195][    C0]  x86_64_start_reservations+0x24/0x30
[  120.087993][    C0]  x86_64_start_kernel+0x143/0x1c0
[  120.089674][    C0]  common_startup_64+0x13e/0x147
[  120.091322][    C0]  </TASK>
[  120.093007][    C0] Kernel Offset: disabled
[  120.094446][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:34:07  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002e RBX=000000000000002e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006cd0
R8 =ffff888020360237 R9 =1ffff1100406c046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48c7 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f03615d9fc8 CR3=000000011010c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0100000085000000 00000004b7000000 XMM03=08000003b7ffffff f800000207000000
XMM04=9500000070000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 00256c6920000001
XMM08=0000000000000000 00007fa5dd012ee7 XMM09=0000000000000000 00007fa5dd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff3364901 RBX=ffffffffffffffff RCX=ffffffff822e433b RDX=0000000000000000
RSI=0000000000000004 RDI=ffff888101e19438 RBP=ffff888101e193f0 RSP=ffffc90002bff558
R8 =ffff888101e1943b R9 =1ffff110203c3287 R10=dffffc0000000000 R11=ffffed10203c3287
R12=0000000000000001 R13=0000000000000001 R14=ffffed10203c3288 R15=1ffff110203c3287
RIP=ffffffff8222fe5f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555586734500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
