last executing test programs:

17.254080698s ago: executing program 1 (id=344):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="1119795f624517", 0x7, 0x850, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008", 0x1d)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x11000000, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

17.253165031s ago: executing program 1 (id=345):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0xe, 0x9}, {0x4}, {0xe, 0x1}, {0x3, 0x5}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1}, 0x28)
setsockopt$inet_opts(r1, 0x0, 0x6, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(r2, &(0x7f0000000880)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0xb4807000)
ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xa1, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x73, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0200000002"], 0x10)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r10, r11, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000840)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="449a47ce7d32b2672a13e13a7124287171c58d5c8a1383792b17462d4ffaec8c8c4abafc31a7b53a239566e790fd2f8450f1a08a25038c3be3f0c4aeeb60ef804b4f10f8b31e0d", 0x7c}, {&(0x7f0000000140)="b3f90fb6c0cfadbbd471184f8b64e96c68f383b92e19d012e19ba71554bd8139c66807fe07b8dc879a1e80c8f75f369f802904f9d74973407251551d955bb2cedcc95a0251a6d8ddea3dd75dc0db0916ca7d0b8f71c9cccd538f30bf95264072064d56e3cd9e6f5a59d7fea7e16012786cd0c94ed884789ce5ae66e7cb82d6dcf8dfecaf0a2336903fba43ca2363b0a18f5f85c1db3e01770048a6e36767e887837457b94a030e92f4b6ecca4dc8c37f6f5fca362981fada9695da84e2ca6be81a45768e4f781307", 0xc8}, {&(0x7f0000000240)="3b49a0da9d291427ba45739ab39f62aa7ac499d60424d1e00647700fd875f9b650e49edb8c719b15d5437994cd434bd90af7147497c5ed27395d75193e885b047926f79789aaa79bf1be1dbb1426089ac57696a2d789d91f6a42320be37b3141c88d3db10c924e359087cda6030f425e9eb6dedc62f2da9cf01f6a709ed2476ae1a0d507d4d3447223e91f15670535fe91c3d0337d6f374120b0b5d1af593a6c35c0a6d788c62abac43b7888f7b0cc1a2231d8152794ca9f785f96bba56135d716adfcd547fac7f71e1789df0377575285ba1371358df73d841554aae39280c630bc295bda22", 0xe6}], 0x3, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x57, 0x3, [{0x7, 0x4, "b2a8"}, {0x2, 0x8, "0f8aaf9839d5"}, {0x4, 0x11, "f34e772ba5484d88d1c627aed1b139"}, {0x5, 0x8, "34352c4e6e8a"}, {0x7, 0xc, "600d068db6e0500a79c3"}, {0x6, 0x12, "71b11b1e3fa1ade805d8d30bf7cf7dc5"}, {0x1, 0xa, "17f3224b6514d8bf"}, {0x1, 0x4, "cfa1"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x24}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x22}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x79406ec0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x148}}], 0x2, 0x20040006)

17.102379269s ago: executing program 1 (id=347):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x7}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4000000, @loopback, 0xffffffff}, 0x1c)

16.9314431s ago: executing program 1 (id=350):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x4110, r2, 0xbf373000)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r6, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x40000, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

10.571716714s ago: executing program 1 (id=350):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x4110, r2, 0xbf373000)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r6, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x40000, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.22155161s ago: executing program 1 (id=350):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7fff}, 0x2}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x4110, r2, 0xbf373000)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0x0, 0x0, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r6, 0x431, 0x70bd28, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r7=>0x0})
sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x40000, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.061203169s ago: executing program 0 (id=476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}]}]}], {0x14}}, 0x9c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', <r2=>0x0, 0x40, 0x8, 0x81, 0x7, {{0x8, 0x4, 0x0, 0x36, 0x20, 0x66, 0x0, 0xff, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@delqdisc={0x68, 0x25, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {0x0, 0xfff3}, {0xffff, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4d}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1, 0xc4, 0x1, 0x0, 0x8, 0x200, 0x3}}, {0xa, 0x2, [0x8000, 0xa0ce, 0x7142]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xdf7b}, @TCA_RATE={0x6, 0x5, {0x5, 0xe8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r6)
sendmsg$FOU_CMD_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="04002abd7000fcdbdf25030000324eeeb69d218efb900089f596f9851e100666aaa708d6"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)

1.932251926s ago: executing program 2 (id=477):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fddbdf2510000000080007000600000008000900030000004c000180080003000300000008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d30000000000000080003000300000008000300040000001400020070696d72656700"/56], 0x70}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc, 0x2, 0x0, 0x1, [{0x4, 0x102}, {0x4}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
socket(0x1e, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="44010000100001000000000000000000ac1e0101000000000000000000000000ac1e0101000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000001ec07f380000006c000000000000000000000000000000000000000000000002000000000000000000000007000000000000000000000000000000000000003000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001060000000000000000480003"], 0x144}}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16], 0x24}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800800776c616e3100000006000140000200000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', r4, 0x48d7493aef6e9245, 0x8000, 0x80000000, 0xfff, {{0xd, 0x4, 0x0, 0x21, 0x34, 0x64, 0x0, 0xe0, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@lsrr={0x83, 0x1b, 0x56, [@multicast1, @dev={0xac, 0x14, 0x14, 0x22}, @loopback, @loopback, @private=0xa010102, @empty]}, @end, @end]}}}}})
syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)

1.553043113s ago: executing program 2 (id=478):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="3164d60b78f90a6b5e63b62a91b678e528827af13204f56d481d01e0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100), &(0x7f0000000000)=0x8)
sendto$inet6(r0, 0x0, 0x0, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0xe3, @remote, 0xfffffffe}, 0x1c)
socket$kcm(0x10, 0x2, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4, @ANYBLOB="3e0fe09976de849c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b801000000000088f414fe7a1426c9d4df8e81f99c7bb435835f38656147e1272500"/44, @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80040c0)
syz_emit_ethernet(0x7e, &(0x7f0000003080)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6455d759004800fffc010000000000000000000000000000200100000000000000000000000000028903000000000000c910ff0100000000000000010000000000010708000000020008000011000000010000000000000021020401ab105200fe8000000000000000000000000000aa"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080c8df300000000000000000000000000000000000008494ae5941b323bbd6cd44a86fdd"], 0x50)
socket$inet(0x2, 0x1, 0x15b7)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3100000000080041007278650014003300697036746e6c300000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e3100000000000000002227e97bd0da32c841b9291f96e4bab329022fe08551d0ab4254d18cb1356f038459aa5ef90c8d1d"], 0x60}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10)
r8 = socket(0x1e, 0x4, 0x0)
connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x8001, @empty, 0x10001}, 0x1c)
sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0)
connect$tipc(r8, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0xfffffffe, 0x4}}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)

1.39261126s ago: executing program 2 (id=479):
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0x25c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x20, 0xa8, @random="3a9c75a5c0e7aa50c53bd03ca718b9435a0fdd8681d02f8666077b66"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe7, 0xa8, @random="cddb612b8815014be6c72541a6c1cea6a00d8896bccd0b0fa22f3c6da422f93d80f5b483c9845f2dbe4e37dc81b20a980c82f0ba1f055069707ced7e821ee97bc50dc95a8bf29d96be660be4576f9b11688ce10334b022baa70f10dc1cde84fe984847adb056f0da8a5dc252ea212fcf7d566ef32cfda7ee1abf73632f7a5166263a57ca4945efe2184099eb8ff67408420be9a1d3fad9e49ae5b4f2c053b34cbaf3f765957ed06bdc3c0352530345ccbc0929c8d1b9ddc367ad78c8c2a313761069c6c78ad0c2285ea308b45397e70bd141b76e3e4b8005791b13c59693a73b740274"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x82, 0xa8, @random="f161044c92b1063366137ec76b729d269c1f2f3701a3e24da58570d0896965098b5f49d45313e948d2d05a9b60c57599eb32f545f4cc2e5ff4f1515573ab6a3f81bac45adbb18b7d11814d88df058e386bf3ae6502551264fac4e6296bf92fd7a2978e4557d9c35b4320dafd8517de630fce0d6f7325769a0b88fbb7da11"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8095}, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110)

1.392184078s ago: executing program 2 (id=480):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92681c0000000000000000000000de00000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25070000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24080001}, 0x4000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x6, 0x3}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x5, @loopback}, 0x1c)
shutdown(r4, 0x2)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x400001, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffeffffffff, 0x0, 0x2, 0x101, 0x10001, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

1.137276289s ago: executing program 2 (id=481):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
unshare(0x400)
recvfrom$inet(r4, 0x0, 0x0, 0x40000100, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c0400001000010400000000000000f700004800", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r3], 0x40c}}, 0x0)

1.135447434s ago: executing program 0 (id=482):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="1119795f624517", 0x7, 0x850, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000004000000000000000000000084180000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
sendmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008", 0x1d)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01170000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x7e)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

310.766449ms ago: executing program 2 (id=483):
socket$netlink(0x10, 0x3, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
r2 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2)
connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000000)=0x1)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38)

308.941256ms ago: executing program 0 (id=484):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x1c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff"], 0xffdd) (rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="609078000000000000"], 0x0)

82.841664ms ago: executing program 0 (id=485):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSNDBUF(r1, 0x400454d4, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
unshare(0x6020480)
poll(&(0x7f0000000000), 0x0, 0x9) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
socket(0x1e, 0x4, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x488c0)
listen(r0, 0x9)

1.908821ms ago: executing program 0 (id=486):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='cachefiles_ondemand_cread\x00', r1, 0x0, 0x6}, 0x18)
r3 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x24, 0xfffffffffffffffe}, 0x15)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
shutdown(r0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

0s ago: executing program 0 (id=487):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r3, &(0x7f0000001280)="5449400456c0c04f89d87322156e7f4fbb4db7e6ef03c85d0b8def7bac7f0b99998c70faafbc0b", 0x27, 0x3b00, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={<r7=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000100)={r7, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x7ffffffffffffd, 0x72219, 0x3, 0x8, 0x2, 0x5, 0x4c8, 0x0, 0x0, 0x10, 0x4, 0x0, 0xfffffffffffffffe, 0x9]}, &(0x7f0000000000)=0x100)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="30fbff07e73a90903741857b00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x105d, [{}, {0x0, 0x10000000000000}]}, 0xc9)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280"], 0x24}}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@initdev, @in6=@remote}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c009900410000005f0000000800a00076090000080026006c0900000800270003000000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16056' (ED25519) to the list of known hosts.
syzkaller login: [   48.102754][ T5760] cgroup: Unknown subsys name 'net'
[   48.229742][ T5760] cgroup: Unknown subsys name 'cpuset'
[   48.233967][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.036900][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.428804][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.436865][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.446929][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.451681][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.455478][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.458629][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.461225][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.464076][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.467163][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.478629][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.486550][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.489207][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.491937][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.494730][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.498139][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.798596][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.889646][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.940110][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.982389][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.985309][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.988864][ T5836] bridge_slave_0: entered allmulticast mode
[   54.991712][ T5836] bridge_slave_0: entered promiscuous mode
[   55.020196][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.022540][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.024743][ T5836] bridge_slave_1: entered allmulticast mode
[   55.028389][ T5836] bridge_slave_1: entered promiscuous mode
[   55.090438][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.115848][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.132626][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.135485][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.139240][ T5828] bridge_slave_0: entered allmulticast mode
[   55.143038][ T5828] bridge_slave_0: entered promiscuous mode
[   55.192081][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.194917][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.198044][ T5828] bridge_slave_1: entered allmulticast mode
[   55.201827][ T5828] bridge_slave_1: entered promiscuous mode
[   55.221613][ T5836] team0: Port device team_slave_0 added
[   55.238124][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.240607][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.243185][ T5832] bridge_slave_0: entered allmulticast mode
[   55.246742][ T5832] bridge_slave_0: entered promiscuous mode
[   55.250895][ T5836] team0: Port device team_slave_1 added
[   55.255351][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.259689][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.262126][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.264720][ T5832] bridge_slave_1: entered allmulticast mode
[   55.269375][ T5832] bridge_slave_1: entered promiscuous mode
[   55.274519][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.348267][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.351050][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.362830][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.370623][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.392860][ T5828] team0: Port device team_slave_0 added
[   55.396887][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.399597][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.410068][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.418234][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.423706][ T5828] team0: Port device team_slave_1 added
[   55.463614][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.466647][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.477050][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.503822][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.506050][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.516642][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.523143][ T5832] team0: Port device team_slave_0 added
[   55.545989][ T5832] team0: Port device team_slave_1 added
[   55.574384][ T5836] hsr_slave_0: entered promiscuous mode
[   55.578422][ T5836] hsr_slave_1: entered promiscuous mode
[   55.584707][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.587935][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.598884][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.621975][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.624777][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.633150][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.655992][ T5828] hsr_slave_0: entered promiscuous mode
[   55.659204][ T5828] hsr_slave_1: entered promiscuous mode
[   55.661416][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.663878][ T5828] Cannot create hsr debugfs directory
[   55.759749][ T5832] hsr_slave_0: entered promiscuous mode
[   55.762047][ T5832] hsr_slave_1: entered promiscuous mode
[   55.764219][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.767413][ T5832] Cannot create hsr debugfs directory
[   55.980578][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.994052][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.007662][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.019752][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.045887][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.058767][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.075378][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.082940][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.122328][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.131640][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.138978][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.144726][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.272120][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.308238][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.325677][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.349042][  T165] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.352093][  T165] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.365972][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.381548][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.400141][  T165] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.403037][  T165] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.428580][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.431412][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.459643][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.462475][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.479333][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   56.497510][ T5218] Bluetooth: hci2: command tx timeout
[   56.509360][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.512303][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.531189][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.534015][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.563317][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.577497][ T5218] Bluetooth: hci0: command tx timeout
[   56.580012][ T5218] Bluetooth: hci1: command tx timeout
[   56.639902][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.643163][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.742928][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.781942][ T5832] veth0_vlan: entered promiscuous mode
[   56.790317][ T5832] veth1_vlan: entered promiscuous mode
[   56.821301][ T5832] veth0_macvtap: entered promiscuous mode
[   56.832971][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.848492][ T5832] veth1_macvtap: entered promiscuous mode
[   56.871608][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.884049][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.902030][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.909973][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.913054][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.915772][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.920124][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.948595][ T5836] veth0_vlan: entered promiscuous mode
[   56.975596][ T5836] veth1_vlan: entered promiscuous mode
[   57.022669][ T5828] veth0_vlan: entered promiscuous mode
[   57.051706][ T5828] veth1_vlan: entered promiscuous mode
[   57.071472][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.074594][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.106563][ T2163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.109705][ T2163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.122232][ T5836] veth0_macvtap: entered promiscuous mode
[   57.133133][ T5828] veth0_macvtap: entered promiscuous mode
[   57.138357][ T5836] veth1_macvtap: entered promiscuous mode
[   57.148425][ T5828] veth1_macvtap: entered promiscuous mode
[   57.178365][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.185676][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.191118][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.203151][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.208342][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.218801][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.221507][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.224161][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.247951][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.254204][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.264490][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.268496][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.272474][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.425909][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.429627][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.442135][ T5902] netlink: 'syz.1.4': attribute type 7 has an invalid length.
[   57.506369][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.506605][ T2163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.508809][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.527596][ T2163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.582811][  T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.586222][  T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.772308][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.811621][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.814642][ T5918] batadv_slave_1: entered promiscuous mode
[   57.837514][ T5899] IPVS: starting estimator thread 0...
[   57.845641][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.855332][ T5913] batadv_slave_0: entered promiscuous mode
[   57.883427][ T5913] batadv_slave_0: entered allmulticast mode
[   57.926504][ T5920] IPVS: using max 62 ests per chain, 148800 per kthread
[   57.967686][ T5925] pim6reg1: entered promiscuous mode
[   57.969623][ T5925] pim6reg1: entered allmulticast mode
[   58.062849][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.068584][ T5927] bond0: (slave rose0): Enslaving as an active interface with an up link
[   58.072802][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   58.079799][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   58.330728][ T5942] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   58.586484][ T5218] Bluetooth: hci2: command tx timeout
[   58.657891][ T5218] Bluetooth: hci1: command tx timeout
[   58.660677][ T5830] Bluetooth: hci0: command tx timeout
[   58.769107][ T5956] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[   58.784192][ T5956] warning: `syz.0.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.127008][ T5962] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   59.226224][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.401175][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.462665][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   59.543706][ T5974] xt_cgroup: invalid path, errno=-2
[   59.655783][ T5978] Zero length message leads to an empty skb
[   59.674341][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'.
[   59.677785][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'.
[   59.819806][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.822564][ T5998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.860704][ T6002] syzkaller0: entered promiscuous mode
[   59.863192][ T6002] syzkaller0: entered allmulticast mode
[   60.002935][ T6012] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   60.015766][ T6013] geneve1: entered promiscuous mode
[   60.018196][ T6013] geneve1: entered allmulticast mode
[   60.656521][ T5830] Bluetooth: hci2: command tx timeout
[   60.736676][ T5218] Bluetooth: hci1: command tx timeout
[   60.738757][ T5830] Bluetooth: hci0: command tx timeout
[   60.769369][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   60.772196][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   61.889996][ T6121] netlink: 'syz.0.57': attribute type 4 has an invalid length.
[   62.229648][ T6133] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   62.740417][ T5830] Bluetooth: hci2: command tx timeout
[   62.828798][ T5218] Bluetooth: hci1: command tx timeout
[   62.830632][ T5830] Bluetooth: hci0: command tx timeout
[   63.052850][ T6157] netlink: 'syz.1.66': attribute type 4 has an invalid length.
[   63.246705][ T6170] syz.0.69 uses obsolete (PF_INET,SOCK_PACKET)
[   63.316657][ T6162] __nla_validate_parse: 4 callbacks suppressed
[   63.316672][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   63.348012][ T6186] xt_ecn: cannot match TCP bits for non-tcp packets
[   63.637690][ T6200] netlink: 'syz.0.76': attribute type 4 has an invalid length.
[   63.752627][ T6202] netlink: 'syz.0.77': attribute type 83 has an invalid length.
[   63.832713][ T6206] netlink: 'syz.2.78': attribute type 11 has an invalid length.
[   63.853285][ T6208] netlink: zone id is out of range
[   63.858666][ T6208] netlink: zone id is out of range
[   63.862202][ T6208] netlink: zone id is out of range
[   63.884352][ T6208] netlink: zone id is out of range
[   63.888880][ T6208] netlink: zone id is out of range
[   63.892161][ T6208] netlink: zone id is out of range
[   63.895121][ T6208] netlink: zone id is out of range
[   63.900505][ T6208] netlink: zone id is out of range
[   63.907794][ T6208] netlink: zone id is out of range
[   63.913032][ T6208] netlink: zone id is out of range
[   64.018549][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'.
[   64.098471][ T6213] unknown channel width for channel at 909000KHz?
[   64.110517][ T6213] unknown channel width for channel at 909000KHz?
[   64.115697][ T6213] unknown channel width for channel at 909000KHz?
[   64.988066][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.990908][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.993815][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.998369][ T6269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'.
[   65.615177][ T6288] pim6reg1: entered promiscuous mode
[   65.622981][ T6288] pim6reg1: entered allmulticast mode
[   65.939160][ T6298] tipc: Started in network mode
[   65.943244][ T6298] tipc: Node identity 529f902f9824, cluster identity 4711
[   65.950644][ T6298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.957280][ T6298] syzkaller0: entered allmulticast mode
[   66.005012][ T6293] tipc: Disabling bearer <eth:syzkaller0>
[   66.039940][ T6292] infiniband syz1: set active
[   66.041711][ T6292] infiniband syz1: added macvlan1
[   66.044527][ T6292] syz1: rxe_create_cq: returned err = -12
[   66.050385][ T6292] infiniband syz1: Couldn't create ib_mad CQ
[   66.052498][ T6292] infiniband syz1: Couldn't open port 1
[   66.063321][ T6292] RDS/IB: syz1: added
[   66.065117][ T6292] smc: adding ib device syz1 with port count 1
[   66.068956][ T6292] smc:    ib device syz1 port 1 has pnetid 
[   66.321494][ T6313] xt_time: unknown flags 0x4
[   66.673137][ T6342] netlink: 34 bytes leftover after parsing attributes in process `syz.1.116'.
[   66.932972][ T6357] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   66.946361][ T6357] netlink: 224 bytes leftover after parsing attributes in process `syz.2.121'.
[   67.199979][ T6374] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   67.815561][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.125'.
[   67.830554][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.125'.
[   68.656956][ T5830] Bluetooth: hci2: command tx timeout
[   68.864773][ T6421] raw_sendmsg: syz.1.134 forgot to set AF_INET. Fix it!
[   69.079083][ T6438] team_slave_0: entered promiscuous mode
[   69.081478][ T6438] team_slave_1: entered promiscuous mode
[   69.097165][ T6438] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   69.226621][ T6443] IPVS: set_ctl: invalid protocol: 232 224.0.0.1:20003
[   69.485770][ T6455] __nla_validate_parse: 2 callbacks suppressed
[   69.485782][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[   69.565744][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   69.599793][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   69.753380][ T6468] No such timeout policy "syz0"
[   70.105226][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   70.114658][ T6483] netlink: 'syz.2.151': attribute type 21 has an invalid length.
[   70.117824][ T6483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.151'.
[   70.884075][ T6503] netlink: 27 bytes leftover after parsing attributes in process `syz.0.155'.
[   71.061424][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.265396][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[   71.334080][ T6527] Cannot find add_set index 0 as target
[   71.372880][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'.
[   71.375683][ T6527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.160'.
[   71.381835][ T6527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'.
[   71.385601][ T6527] netlink: 'syz.1.160': attribute type 6 has an invalid length.
[   71.468128][ T6536] netlink: 'syz.2.162': attribute type 1 has an invalid length.
[   71.510682][ T6536] xt_CT: No such helper "snmp"
[   71.569439][ T6544] Bluetooth: MGMT ver 1.23
[   72.669290][ T6564] tipc: Started in network mode
[   72.671256][ T6564] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   72.689622][ T6564] tipc: Enabled bearer <udp:s>, priority 10
[   72.692807][ T6567] netlink: 'syz.0.170': attribute type 83 has an invalid length.
[   72.738113][ T6569] Cannot find set identified by id 0 to match
[   72.909582][ T6580] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   72.983569][ T6591] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   73.261645][ T6611] 8021q: VLANs not supported on ipvlan1
[   73.817599][ T5296] tipc: Node number set to 4269801488
[   73.919508][ T6646] xt_CT: No such helper "snmp"
[   74.717761][ T6657] __nla_validate_parse: 11 callbacks suppressed
[   74.717775][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'.
[   75.082497][ T6664] batadv_slave_0: entered promiscuous mode
[   75.085920][ T6664] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   75.111591][ T6664] batadv_slave_0: left promiscuous mode
[   75.134285][ T6666] netlink: 'syz.0.199': attribute type 21 has an invalid length.
[   75.139443][ T6666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.142643][ T6666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'.
[   75.652321][ T6690] netlink: 'syz.2.206': attribute type 10 has an invalid length.
[   75.655564][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'.
[   75.660870][ T6690] dummy0: entered promiscuous mode
[   75.662886][ T6690] dummy0: entered allmulticast mode
[   75.669880][ T6690] bridge0: port 3(dummy0) entered blocking state
[   75.673617][ T6692] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[   75.677089][ T6690] bridge0: port 3(dummy0) entered disabled state
[   75.686198][ T6690] bridge0: port 3(dummy0) entered blocking state
[   75.688853][ T6690] bridge0: port 3(dummy0) entered forwarding state
[   75.813714][ T6695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.207'.
[   75.822470][ T6695] netlink: 'syz.2.207': attribute type 2 has an invalid length.
[   75.910745][ T6692] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   76.020591][ T6703] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[   76.601934][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'.
[   76.612956][ T6727] ip6_vti0: entered promiscuous mode
[   76.614709][ T6727] ip6_vti0: entered allmulticast mode
[   76.932877][ T6741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.221'.
[   76.957198][ T6739] netlink: 'syz.2.219': attribute type 1 has an invalid length.
[   76.989082][ T6743] netlink: 'syz.0.222': attribute type 4 has an invalid length.
[   77.282590][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   77.285711][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.289044][ T6757] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.293345][ T6757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.295929][ T6757] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.842575][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[   77.994329][ T6784] Cannot find add_set index 0 as target
[   77.999491][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'.
[   78.002569][ T6784] netlink: 'syz.1.233': attribute type 6 has an invalid length.
[   78.035678][ T6787] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   78.123076][ T6797] caif0: entered promiscuous mode
[   78.376388][ T6818] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   78.381111][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.385074][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.570070][ T6825] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.597476][ T6828] x_tables: unsorted underflow at hook 4
[   78.622500][ T6830] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   78.635220][ T6831] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   78.767072][ T6837] xt_HMARK: proto mask must be zero with L3 mode
[   78.832269][ T6838] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.840779][ T6838] bond0: (slave bond1): Enslaving as an active interface with an up link
[   78.901436][ T6850] bridge0: port 3(dummy0) entered disabled state
[   78.916315][ T6850] bridge_slave_0: left allmulticast mode
[   78.920176][ T6850] bridge_slave_0: left promiscuous mode
[   78.922159][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.936535][ T6850] bridge_slave_1: left allmulticast mode
[   78.938510][ T6850] bridge_slave_1: left promiscuous mode
[   78.940804][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.954863][ T6850] bond0: (slave bond_slave_0): Releasing backup interface
[   78.962611][ T6850] bond0: (slave bond_slave_1): Releasing backup interface
[   78.985359][ T6850] team0: Port device team_slave_0 removed
[   79.007812][ T6850] team0: Port device team_slave_1 removed
[   79.012077][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.014886][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.022387][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.025167][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.038983][ T6850] bond0: (slave bond1): Releasing backup interface
[   79.093503][ T6852] team0: Mode changed to "loadbalance"
[   79.098173][ T6850] syz.2.255 (6850) used greatest stack depth: 19728 bytes left
[   79.230458][ T6855] siw: device registration error -23
[   80.002732][ T6900] __nla_validate_parse: 8 callbacks suppressed
[   80.003418][ T6900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'.
[   80.052967][ T6900] netlink: 'syz.1.270': attribute type 4 has an invalid length.
[   80.422987][ T6926] syz.0.276 (6926) used greatest stack depth: 19000 bytes left
[   80.743774][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[   80.749550][ T6939] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   81.300958][   T51] cfg80211: failed to load regulatory.db
[   81.312843][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'.
[   81.317952][ T6964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'.
[   81.321561][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'.
[   81.325160][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'.
[   81.852494][    C0] net_ratelimit: 6 callbacks suppressed
[   81.852536][    C0] IPv4: Oversized IP packet from 127.0.0.1
[   82.378076][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.293'.
[   82.421052][ T7000] netlink: 'syz.1.293': attribute type 21 has an invalid length.
[   82.424263][ T7000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.293'.
[   82.437878][ T7002] netlink: 'syz.2.294': attribute type 4 has an invalid length.
[   82.446652][ T7000] netlink: 'syz.1.293': attribute type 13 has an invalid length.
[   82.449786][ T7000] netlink: 'syz.1.293': attribute type 17 has an invalid length.
[   82.738389][ T7005] netlink: 'syz.2.295': attribute type 2 has an invalid length.
[   82.741174][ T7004] netlink: 'syz.2.295': attribute type 2 has an invalid length.
[   82.770835][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'.
[   82.779270][ T7005] netlink: 'syz.2.295': attribute type 30 has an invalid length.
[   82.815406][ T7005] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.818742][ T7005] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.821371][ T7005] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.824785][ T7005] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.842227][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'.
[   82.846773][ T7005] netlink: 'syz.2.295': attribute type 30 has an invalid length.
[   83.092412][ T7016] IPVS: length: 130 != 8
[   83.895973][ T7038] Cannot find del_set index 0 as target
[   84.321059][ T7056] netlink: 'syz.0.310': attribute type 7 has an invalid length.
[   84.376840][ T7061] netlink: 'syz.2.312': attribute type 6 has an invalid length.
[   84.879054][ T7090] bridge0: port 3(erspan0) entered blocking state
[   84.884779][ T7090] bridge0: port 3(erspan0) entered disabled state
[   84.891272][ T7090] erspan0: entered allmulticast mode
[   84.900758][ T7090] erspan0: entered promiscuous mode
[   84.903904][ T7091] erspan0: left allmulticast mode
[   84.905814][ T7091] erspan0: left promiscuous mode
[   84.909484][ T7091] bridge0: port 3(erspan0) entered disabled state
[   85.071613][ T7099] __nla_validate_parse: 11 callbacks suppressed
[   85.071627][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'.
[   85.079680][ T7102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'.
[   85.213626][ T7103] team_slave_0: left promiscuous mode
[   85.221002][ T7103] team_slave_1: left promiscuous mode
[   85.429568][ T7103] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.433988][ T7103] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.439055][ T7103] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.442137][ T7103] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.790595][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.332'.
[   85.972802][ T7147] netlink: 224 bytes leftover after parsing attributes in process `syz.1.337'.
[   86.010281][ T7147] xt_CT: No such helper "snmp"
[   86.232632][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[   86.238481][ T7156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.242863][ T7156] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   86.246746][ T7156] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   86.364531][ T7160] bond0: option min_links: invalid value (18446744073709551604)
[   86.368900][ T7160] bond0: option min_links: allowed values 0 - 2147483647
[   86.439415][ T7160] ip6t_rpfilter: unknown options
[   86.641751][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'.
[   86.811730][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[   86.891661][ T7177] bridge_slave_1: left allmulticast mode
[   86.894000][ T7177] bridge_slave_1: left promiscuous mode
[   86.895945][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.903970][ T7177] bridge_slave_0: left allmulticast mode
[   86.905911][ T7177] bridge_slave_0: left promiscuous mode
[   86.909380][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.183043][ T7198] x_tables: unsorted underflow at hook 3
[   87.184997][ T7198] x_tables: unsorted underflow at hook 3
[   87.263754][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.267893][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.270813][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.274382][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.278332][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.781972][ T7208] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.786931][ T7208] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.790476][ T7208] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.793418][ T7208] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.852648][   T51] syz1: Port: 1 Link DOWN
[   88.017190][ T7215] validate_nla: 4 callbacks suppressed
[   88.017229][ T7215] netlink: 'syz.0.360': attribute type 12 has an invalid length.
[   88.021851][ T7215] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.360'.
[   88.052939][ T7205] chnl_net:caif_netlink_parms(): no params data found
[   88.128082][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.130400][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.132717][ T7205] bridge_slave_0: entered allmulticast mode
[   88.135571][ T7205] bridge_slave_0: entered promiscuous mode
[   88.139164][ T7225] tipc: Started in network mode
[   88.140924][ T7225] tipc: Node identity 82dc8a2c15b5, cluster identity 4711
[   88.143391][ T7225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.145938][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.150498][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.153553][ T7205] bridge_slave_1: entered allmulticast mode
[   88.158308][ T7205] bridge_slave_1: entered promiscuous mode
[   88.188583][ T7225] syzkaller0: entered promiscuous mode
[   88.190963][ T7225] syzkaller0: entered allmulticast mode
[   88.193736][ T7225] tipc: Resetting bearer <eth:syzkaller0>
[   88.228617][ T7224] tipc: Resetting bearer <eth:syzkaller0>
[   89.208533][   T10] tipc: Node number set to 2540276268
[   89.299889][ T5830] Bluetooth: hci1: command tx timeout
[   89.438489][ T7224] tipc: Disabling bearer <eth:syzkaller0>
[   89.451047][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.462615][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.499458][ T7205] team0: Port device team_slave_0 added
[   89.503474][ T7205] team0: Port device team_slave_1 added
[   89.543248][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.545948][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.555544][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.560778][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.562944][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.577039][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.586793][ T7238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'.
[   89.617493][ T7205] hsr_slave_0: entered promiscuous mode
[   89.619847][ T7205] hsr_slave_1: entered promiscuous mode
[   89.621930][ T7205] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.624251][ T7205] Cannot create hsr debugfs directory
[   89.876458][ T7266] netlink: 'syz.2.369': attribute type 4 has an invalid length.
[   90.251426][ T7268] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.254424][ T7268] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.260217][ T7268] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.263334][ T7268] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.319423][ T7268] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.322340][ T7268] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.325117][ T7268] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.328112][ T7268] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.612121][ T7205] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.619205][ T7205] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.624239][ T7205] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.630103][ T7205] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.694451][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.715717][ T7205] 8021q: adding VLAN 0 to HW filter on device team0
[   90.723694][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.726176][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.735273][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.737840][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.924470][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.984312][ T7205] veth0_vlan: entered promiscuous mode
[   90.998886][ T7205] veth1_vlan: entered promiscuous mode
[   91.027752][ T7205] veth0_macvtap: entered promiscuous mode
[   91.045891][ T7294] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.050222][ T7294] bond0: (slave bond1): Enslaving as an active interface with an up link
[   91.062825][ T7205] veth1_macvtap: entered promiscuous mode
[   91.079938][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.092065][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.099570][ T7205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.102409][ T7205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.105186][ T7205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.109671][ T7205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.182828][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.185442][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.209103][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.211595][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.393821][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'.
[   91.432022][ T7310] netlink: 'syz.2.379': attribute type 4 has an invalid length.
[   91.532347][ T7315] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   91.792804][ T7337] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   91.828496][ T7337] netlink: 'syz.2.386': attribute type 4 has an invalid length.
[   91.973722][ T7351] TCP: TCP_TX_DELAY enabled
[   92.060139][ T7355] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[   92.898540][ T7372] netlink: 'syz.2.395': attribute type 4 has an invalid length.
[   93.062174][ T7384] netlink: 'syz.0.400': attribute type 2 has an invalid length.
[   93.072673][ T7386] netlink: 'syz.2.401': attribute type 15 has an invalid length.
[   93.078064][ T7384] netlink: 'syz.0.400': attribute type 4 has an invalid length.
[   93.269859][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[   93.274734][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.713931][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.718984][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.722839][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.725595][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.728638][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.911133][ T7418] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.949785][ T7418] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   94.090376][ T7421] netlink: 'syz.2.410': attribute type 4 has an invalid length.
[   94.136018][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   94.295176][ T7410] chnl_net:caif_netlink_parms(): no params data found
[   94.387575][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.390161][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.393005][ T7410] bridge_slave_0: entered allmulticast mode
[   94.405724][ T7410] bridge_slave_0: entered promiscuous mode
[   94.410087][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.412361][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.414733][ T7410] bridge_slave_1: entered allmulticast mode
[   94.421376][ T7410] bridge_slave_1: entered promiscuous mode
[   94.438626][ T7445] netlink: 248 bytes leftover after parsing attributes in process `syz.2.417'.
[   94.445308][ T7445] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   94.449018][ T7410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.454821][ T7410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.470189][ T7445] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.417'.
[   94.485217][ T7410] team0: Port device team_slave_0 added
[   94.490049][ T7410] team0: Port device team_slave_1 added
[   94.505716][ T7447] netlink: 68 bytes leftover after parsing attributes in process `syz.2.418'.
[   94.513035][ T7447] netlink: 'syz.2.418': attribute type 4 has an invalid length.
[   94.513673][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.519303][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.527804][ T7410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.532615][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.534738][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.546895][ T7410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.579216][ T7410] hsr_slave_0: entered promiscuous mode
[   94.581977][ T7410] hsr_slave_1: entered promiscuous mode
[   94.584593][ T7410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.587574][ T7410] Cannot create hsr debugfs directory
[   94.665113][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'.
[   94.670797][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[   95.140448][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.211390][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.282295][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.492053][   T12] bridge_slave_1: left allmulticast mode
[   95.494181][   T12] bridge_slave_1: left promiscuous mode
[   95.499291][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.517129][   T12] bridge_slave_0: left allmulticast mode
[   95.521666][   T12] bridge_slave_0: left promiscuous mode
[   95.524049][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.781723][ T5218] Bluetooth: hci1: command tx timeout
[   95.909153][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.915069][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.921125][   T12] bond0 (unregistering): Released all slaves
[   95.932441][ T7475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.953030][ T7476] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   96.000852][ T7480] Set syz0 is full, maxelem 0 reached
[   96.132355][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'.
[   96.262001][ T7492] tap0: tun_chr_ioctl cmd 1074025677
[   96.268077][ T7492] tap0: linktype set to 1
[   96.390755][   T12] hsr_slave_0: left promiscuous mode
[   96.393189][   T12] hsr_slave_1: left promiscuous mode
[   96.395291][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.414786][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.428638][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.431000][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.462833][   T12] veth1_macvtap: left promiscuous mode
[   96.464934][   T12] veth0_macvtap: left promiscuous mode
[   96.469115][   T12] veth1_vlan: left promiscuous mode
[   96.471014][   T12] veth0_vlan: left promiscuous mode
[   96.804254][   T12] team0 (unregistering): Port device team_slave_1 removed
[   96.831186][   T12] team0 (unregistering): Port device team_slave_0 removed
[   97.169076][ T7410] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.176988][ T7410] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.188039][ T7410] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.199272][ T7410] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.358903][ T7410] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.382657][ T7410] 8021q: adding VLAN 0 to HW filter on device team0
[   97.400514][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'.
[   97.402456][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.403419][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'.
[   97.405945][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.441592][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.444488][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.725219][ T7410] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.775638][ T7410] veth0_vlan: entered promiscuous mode
[   97.782884][ T7410] veth1_vlan: entered promiscuous mode
[   97.806140][ T7410] veth0_macvtap: entered promiscuous mode
[   97.813434][ T7410] veth1_macvtap: entered promiscuous mode
[   97.827994][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.841108][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.851385][ T7410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.857534][ T5218] Bluetooth: hci1: command tx timeout
[   97.859992][ T7410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.863544][ T7410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.868996][ T7410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.954682][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.960040][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.985396][ T7548] bridge0: entered promiscuous mode
[   97.994608][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.997857][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.280397][ T7556] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   98.296806][ T7556] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[   98.408432][ T7561] netlink: 80 bytes leftover after parsing attributes in process `syz.0.452'.
[   98.411984][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'.
[   98.420407][ T7561] ip6_vti0: left promiscuous mode
[   98.422498][ T7561] ip6_vti0: left allmulticast mode
[   98.544739][ T7569] netlink: 64 bytes leftover after parsing attributes in process `syz.0.455'.
[   99.588683][ T7595] veth0_to_bridge: entered promiscuous mode
[   99.958661][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.187823][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  100.191823][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  100.196396][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  100.202191][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  100.206022][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  100.305304][ T7594] veth0_to_bridge: left promiscuous mode
[  100.621212][ T7627] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  100.674790][ T7609] chnl_net:caif_netlink_parms(): no params data found
[  100.935252][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.946529][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.953408][ T7609] bridge_slave_0: entered allmulticast mode
[  100.964552][ T7609] bridge_slave_0: entered promiscuous mode
[  101.009802][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.018026][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.025016][ T7609] bridge_slave_1: entered allmulticast mode
[  101.034332][ T7609] bridge_slave_1: entered promiscuous mode
[  101.198079][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.228985][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.388496][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.401205][ T7609] team0: Port device team_slave_0 added
[  101.428816][ T7609] team0: Port device team_slave_1 added
[  101.492635][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.532080][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.544613][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.560023][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.576414][ T7647] syz1: rxe_newlink: already configured on macvlan1
[  101.579748][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.591058][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'.
[  101.620649][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.636275][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.645376][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.693499][ T7651] netlink: 'syz.0.475': attribute type 4 has an invalid length.
[  101.728073][ T7609] hsr_slave_0: entered promiscuous mode
[  101.731622][ T7609] hsr_slave_1: entered promiscuous mode
[  101.734557][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.737940][ T7609] Cannot create hsr debugfs directory
[  101.898863][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'.
[  101.912799][ T5860] bridge_slave_1: left allmulticast mode
[  101.915421][ T5860] bridge_slave_1: left promiscuous mode
[  101.918346][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'.
[  101.921309][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.924787][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.477'.
[  101.931568][ T5860] bridge_slave_0: left allmulticast mode
[  101.933355][ T5860] bridge_slave_0: left promiscuous mode
[  101.935261][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.168784][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.173583][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.179664][ T5860] bond0 (unregistering): Released all slaves
[  102.256971][ T5830] Bluetooth: hci1: command tx timeout
[  102.323507][ T7661] bridge3: entered promiscuous mode
[  102.325291][ T7661] bridge3: entered allmulticast mode
[  102.332054][ T7661] team0: Port device bridge3 added
[  102.339302][ T7661] rdma_rxe: rxe_newlink: failed to add macvlan1
[  102.523014][ T7665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.525655][ T7665] syzkaller0: entered promiscuous mode
[  102.528914][ T7665] syzkaller0: entered allmulticast mode
[  102.539355][ T7664] tipc: Resetting bearer <eth:syzkaller0>
[  102.557720][ T7664] tipc: Disabling bearer <eth:syzkaller0>
[  102.680086][ T5860] hsr_slave_0: left promiscuous mode
[  102.682494][ T5860] hsr_slave_1: left promiscuous mode
[  102.684588][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.689129][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.692270][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.695260][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.731863][ T5860] veth1_macvtap: left promiscuous mode
[  102.735733][ T5860] veth0_macvtap: left promiscuous mode
[  102.738012][ T5860] veth1_vlan: left promiscuous mode
[  102.739861][ T5860] veth0_vlan: left promiscuous mode
[  102.780062][ T7676] netlink: 'syz.0.482': attribute type 4 has an invalid length.
[  103.056894][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  103.083865][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  103.429594][ T7673] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  103.445262][ T7609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  103.455103][ T7609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  103.477206][ T7609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  103.490460][ T7609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  103.623275][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.644465][ T7609] 8021q: adding VLAN 0 to HW filter on device team0
[  103.651866][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.654868][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.663598][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.666625][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.708540][ T7609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.901475][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.932555][ T7609] veth0_vlan: entered promiscuous mode
[  103.950182][ T7609] veth1_vlan: entered promiscuous mode
[  104.022156][ T7609] veth0_macvtap: entered promiscuous mode
[  104.030398][ T7609] veth1_macvtap: entered promiscuous mode
[  104.061505][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.082076][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.093902][ T7609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.098614][ T7609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.104155][ T7609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.108571][ T7609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.233429][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.238127][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.256919][ T5861] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI
[  104.260997][ T5861] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
[  104.264049][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: kworker/1:4 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  104.268754][ T5861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.272293][ T5861] Workqueue: events l2cap_info_timeout
[  104.274188][ T5861] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  104.276013][ T5861] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[  104.282270][ T5861] RSP: 0018:ffffc900045cf7a8 EFLAGS: 00010206
[  104.284200][ T5861] RAX: dffffc0000000000 RBX: ffffffff894e1558 RCX: 513e6ef47895c100
[  104.286883][ T5861] RDX: 0000000000000000 RSI: ffffffff894e1558 RDI: 000000000000004b
[  104.289831][ T5861] RBP: ffffffff8a7a63d5 R08: 0000000000000001 R09: 0000000000000000
[  104.292569][ T5861] R10: dffffc0000000000 R11: ffffffff8a7a6390 R12: 0000000000000000
[  104.295284][ T5861] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001
[  104.297985][ T5861] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  104.301048][ T5861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.303387][ T5861] CR2: 00007fe63b374980 CR3: 000000001fd9e000 CR4: 00000000000006f0
[  104.306460][ T5861] Call Trace:
[  104.307794][ T5861]  <TASK>
[  104.308868][ T5861]  __kasan_check_byte+0x12/0x40
[  104.310543][ T5861]  lock_acquire+0x8d/0x360
[  104.312159][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.314136][ T5861]  ? __cancel_work+0x254/0x2e0
[  104.315689][ T5861]  lock_sock_nested+0x48/0x100
[  104.317163][ T5861]  ? l2cap_sock_ready_cb+0x45/0x140
[  104.318775][ T5861]  l2cap_sock_ready_cb+0x45/0x140
[  104.320366][ T5861]  l2cap_conn_start+0x76d/0xe50
[  104.321876][ T5861]  ? __pfx_l2cap_conn_start+0x10/0x10
[  104.323589][ T5861]  ? l2cap_info_timeout+0x60/0xa0
[  104.325250][ T5861]  ? __lock_acquire+0xab9/0xd20
[  104.326908][ T5861]  ? __pfx___mutex_lock+0x10/0x10
[  104.328676][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  104.330743][ T5861]  l2cap_info_timeout+0x68/0xa0
[  104.332326][ T5861]  ? process_scheduled_works+0x9ef/0x17b0
[  104.334194][ T5861]  process_scheduled_works+0xae1/0x17b0
[  104.335979][ T5861]  ? __pfx_process_scheduled_works+0x10/0x10
[  104.337948][ T5861]  worker_thread+0x8a0/0xda0
[  104.339530][ T5861]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  104.341534][ T5861]  ? __kthread_parkme+0x7b/0x200
[  104.343123][ T5861]  kthread+0x711/0x8a0
[  104.344445][ T5861]  ? __pfx_worker_thread+0x10/0x10
[  104.346175][ T5861]  ? __pfx_kthread+0x10/0x10
[  104.347667][ T5861]  ? _raw_spin_unlock_irq+0x23/0x50
[  104.349556][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[  104.351261][ T5861]  ? __pfx_kthread+0x10/0x10
[  104.352788][ T5861]  ret_from_fork+0x3fc/0x770
[  104.354313][ T5861]  ? __pfx_ret_from_fork+0x10/0x10
[  104.355917][ T5861]  ? __switch_to_asm+0x39/0x70
[  104.357478][ T5861]  ? __switch_to_asm+0x33/0x70
[  104.359104][ T5861]  ? __pfx_kthread+0x10/0x10
[  104.360631][ T5861]  ret_from_fork_asm+0x1a/0x30
[  104.362186][ T5861]  </TASK>
[  104.363177][ T5861] Modules linked in:
[  104.364915][ T5861] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  104.371666][ T5830] Bluetooth: hci1: command tx timeout
[  104.458322][ T5861] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  104.460636][ T5861] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e
[  104.486479][ T5861] RSP: 0018:ffffc900045cf7a8 EFLAGS: 00010206
[  104.488614][ T5861] RAX: dffffc0000000000 RBX: ffffffff894e1558 RCX: 513e6ef47895c100
[  104.491132][ T5861] RDX: 0000000000000000 RSI: ffffffff894e1558 RDI: 000000000000004b
[  104.493830][ T5861] RBP: ffffffff8a7a63d5 R08: 0000000000000001 R09: 0000000000000000
[  104.506485][ T5861] R10: dffffc0000000000 R11: ffffffff8a7a6390 R12: 0000000000000000
[  104.509098][ T5861] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001
[  104.511646][ T5861] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  104.514520][ T5861] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.522276][ T5861] CR2: 0000557448fa8e10 CR3: 000000001fd9e000 CR4: 00000000000006f0
[  104.524811][ T5861] Kernel panic - not syncing: Fatal exception
[  104.527296][ T5861] Kernel Offset: disabled
[  104.528676][ T5861] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:42:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000063a84 RBX=ffff88804b032f58 RCX=227689d433e1e200 RDX=ffffffff90bc0801
RSI=ffffffff8be29da0 RDI=ffffffff8be29d60 RBP=dffffc0000000000 RSP=ffffc900030c6850
R8 =ffffc900030c6a07 R9 =0000000000000000 R10=ffffc900030c69f8 R11=fffff52000618d41
R12=ffffc900030c7ad0 R13=ffffffff8172aae5 R14=ffffffff8dbbec70 R15=dffffc0000000000
RIP=ffffffff81a73017 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555563e5a500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5132ed9b8 CR3=0000000039b8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=002700080000096c 0026000800000976
XMM02=0000000300270008 0000096c00260008 XMM03=0000097600a00008 0000005f00000041
XMM04=0f2aeadbb9b4b283 e6510d85d116f2fe XMM05=5ee0c5607f90fc33 74b16b9e4f250679
XMM06=be0a9ff67be6503f f7ce5737685da7cd XMM07=dc2df2d1792fd78c 7de3039738900f2a
XMM08=eadbb9b4b283e651 0d85d116f2fe5233 XMM09=0000000000000000 00007fe63b411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000043 RBX=0000000000000043 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900045cef30
R8 =ffff8880215d0237 R9 =1ffff110042ba046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9898 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe63b374980 CR3=000000001fd9e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000141 0000000036324c6c
XMM06=ffffffffffff0000 ffffffff00000000 XMM07=0000000000ff0000 0000000000000000
XMM08=ffffffffffff0000 ffffffff00000000 XMM09=0000000000000141 0000000036326c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
