last executing test programs:

1.744740268s ago: executing program 0 (id=1725):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @rose}, [@rose, @remote, @default, @bcast, @default, @remote, @remote, @rose]}, &(0x7f0000000280)=0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$packet(r0, &(0x7f0000000340)="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", 0xfd, 0x4, &(0x7f0000000440)={0x11, 0x6, r3, 0x1, 0x55, 0x6, @broadcast}, 0x14)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000007c000000060a0104000000000000000001000000540004802000018007000100727400001400028008000240000000030800014000000003240001800b00010072656a656374000014000280080001400000000105ff07000000000000000180080001006669620008000b40000000000900010073797a300000000014000000110001"], 0x104}}, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000300))

1.681420823s ago: executing program 0 (id=1728):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffd311a400510000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
listen(r3, 0xa)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x4000000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

772.155426ms ago: executing program 0 (id=1732):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x9302d000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x2, {0x2, 0xf0, 0x4}, {0x0, 0xf0, 0x4}, 0xff, 0xfe}], 0x20)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000e00)={r0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="050200000000000000100f00000008000300", @ANYRES32=r4, @ANYBLOB="4d000e0080000000080211000001ffffffffffff0802110000000000000000000000000064007f5d0100060204022a01022d1a0020190900000000000000c90007001900000008000b0000000400000004000f00080026006c09000008000c006400000008000d00ffffffff0500d50003000000"], 0x90}}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

722.419744ms ago: executing program 0 (id=1733):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x40, 0x98, 0x43, @loopback, @mcast2, 0x80, 0x0, 0x0, 0x6}})
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x40, 0x98, 0x43, @loopback, @mcast2, 0x80, 0x0, 0x0, 0x6}}) (async)

662.546567ms ago: executing program 0 (id=1735):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)={r2}, &(0x7f0000000440)=0x8)
socket$inet(0x2, 0x80805, 0x7)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00M'], 0x48)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002740)={'wlan0\x00', <r7=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43, 0x70000000}}, &(0x7f0000000480)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'})

475.937519ms ago: executing program 2 (id=1738):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x0, 0x4, 0xff, 0x4, 0x1}, 0x50)
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', 0x0})
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dffbf8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendmsg$netlink(r3, 0x0, 0x0)

450.154438ms ago: executing program 0 (id=1739):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001b6c2e04000000000000000000000a0000000061005f616158300000"], 0x0, 0x22}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r4, 0x0, &(0x7f0000000200))
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94)
r10 = epoll_create1(0x80000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001900010000000000ff000000802000"], 0x24}}, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000100)={0x9000000a})
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x125740, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0x9c}}, 0x0)

341.364727ms ago: executing program 1 (id=1740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x12b4, 0x1, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xe}, 0x40, 0xc1, 0x2, 0xeb47, 0x16, 'syz0\x00', "ada400917ba906eaca955637b63a09edf1b62309b66d208f0fe7d101533f12de", "16cf2e24628758795107ad4043a90e9b9560eeac1aaed08e0181957585ca9ca6", [{0x7, 0x37, {0x0, 0xfff}}, {0x3, 0x9, {0x1, 0x400}}, {0x0, 0x7, {0x0, 0x1}}, {0xfffc, 0x8, {0x0, 0x3}}, {0x7, 0x9, {0x1, 0x10}}, {0x400, 0x4, {0x2, 0x80000000}}, {0x0, 0x6, {0x2, 0x7902bce4}}, {0x5, 0x100, {0x2, 0x8}}, {0xfffe, 0x35fc, {0x0, 0xc4b}}, {0x800, 0x0, {0x2, 0xda}}, {0xf47a, 0x51e, {0x1, 0x8771aed6}}, {0x5, 0x4, {0x1, 0x7ff}}, {0x3, 0x40, {0x3, 0x6}}, {0x1, 0x6, {0x1, 0x1}}, {0x400, 0x5, {0x0, 0x8}}, {0x8, 0x3ff, {0x3, 0x6047}}, {0x1, 0x710, {0x3, 0x800}}, {0x3, 0x1, {0x3, 0xfffffc01}}, {0xff, 0x400, {0x1, 0x7f}}, {0x7, 0x2, {0x1, 0x2}}, {0x0, 0xf1, {0x2, 0x1}}, {0x8000, 0x1, {0x3, 0x6}}, {0x1, 0x401, {0x2, 0x9}}, {0x6, 0xf2f9, {0x0, 0x17}}, {0x8, 0x7, {0x2, 0x2}}, {0xffff, 0xfffd, {0x3, 0x200}}, {0x3, 0xa9, {0x3, 0x1}}, {0x6, 0x5, {0x1, 0xffff}}, {0x9, 0x40, {0x3, 0x87d8}}, {0x9, 0x9, {0x3, 0x8001}}, {0x515b, 0x2, {0x1, 0x8}}, {0x7, 0x101, {0x2, 0x7}}, {0x3, 0x5, {0x0, 0x1}}, {0x4, 0x3}, {0x4, 0x1, {0x0, 0x20}}, {0x3, 0x2, {0x1, 0x6}}, {0xf7, 0xd218, {0x3, 0xfffffff0}}, {0x2, 0x8, {0x2, 0x10000}}, {0x6, 0x101, {0x0, 0x1}}, {0xdd, 0x5, {0x2, 0x66918c83}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff9}, 0x7, 0x7, 0xc, 0xfff, 0x1c, 'syz0\x00', "69a5ae006dfda43b89a53a6ecfc7ee0db952b2ff031b9ec42b02aa39a90b2d01", "86afb6c1d60b06019b1d0f17ce021fc5f2a0c8b8783cfe055dcb3487b5327d9f", [{0xfff7, 0xe, {0x0, 0xf200}}, {0x0, 0x5, {0x2, 0xfffffc00}}, {0xe1f6, 0xf, {0x3, 0x4}}, {0xffff, 0xd, {0x2, 0x1000}}, {0x81, 0x1, {0x1, 0x865}}, {0x6, 0x53, {0x0, 0x3}}, {0x437d, 0x0, {0x1, 0x9}}, {0x8, 0x9c75, {0x0, 0xfff}}, {0xa7, 0x9, {0x0, 0x1}}, {0x0, 0x101, {0x1, 0x80000000}}, {0x3, 0xec, {0x2, 0x8}}, {0x1, 0x2, {0x1, 0x2}}, {0x1, 0x2, {0x1, 0x6}}, {0x7, 0x3, {0x2, 0xfffffffa}}, {0x8, 0x5, {0x1, 0x5}}, {0x6, 0x7, {0x1, 0x6}}, {0x9, 0x8, {0x1, 0x23}}, {0x8, 0x6, {0x0, 0x2}}, {0x100, 0x9, {0x1, 0x6}}, {0x69f, 0x2000, {0x3, 0x7ff}}, {0x1, 0x8, {0x0, 0x6}}, {0x2, 0xfffa, {0x3, 0x9}}, {0x3000, 0x7135, {0x2}}, {0x3b44, 0x5, {0x0, 0xfffffffd}}, {0x9, 0x3, {0x0, 0x80000000}}, {0xd, 0x81, {0x1, 0x5a5}}, {0x31, 0x15a2, {0x2, 0xfff}}, {0x1, 0x1, {0x3}}, {0x2, 0x100, {0x0, 0x2}}, {0x5, 0x7, {0x0, 0x1}}, {0x3, 0x0, {0x1, 0x1}}, {0x1000, 0x0, {0x700, 0x1}}, {0x4, 0x92e4, {0x3, 0x4}}, {0x3ff, 0x8, {0x1, 0x5}}, {0x21, 0x1, {0x3, 0xe}}, {0x51e9, 0x2, {0x3, 0x7}}, {0xd, 0x3, {0x2, 0x1}}, {0x5, 0xa21, {0x1, 0xc698}}, {0x8, 0x7, {0x1, 0x9}}, {0xb3, 0x1, {0x3, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x4, 0x1, 0x300, 0x1e, 'syz0\x00', "3babd35be791e60d0d61a80320d61777f68e2b4beff399aeade137e365979ac1", "4e0436433acaf4e615ba22ae10d6cbc873c9c0f5614caa8b9bec6d656f85fb5f", [{0x2, 0x400, {0x3, 0xc}}, {0x7fff, 0x0, {0x0, 0x6}}, {0x9, 0xb, {0x1, 0x9}}, {0x6, 0x7, {0x1, 0x6}}, {0x3ff, 0x1000, {0x2, 0x8}}, {0xc, 0xffc0, {0x3, 0x2}}, {0x1000, 0x7, {0x3, 0xfb}}, {0x27, 0x0, {0x2, 0xaa}}, {0x2, 0x3, {0x3, 0x2af}}, {0x0, 0x9, {0x1, 0x8}}, {0x343, 0x8, {0x3, 0xf}}, {0x5, 0x7, {0x3, 0x5}}, {0x9, 0x81, {0x1, 0x10001}}, {0x6, 0x7, {0xac12b491b5925df9, 0x27a}}, {0xc, 0x3, {0x2, 0xfffffffe}}, {0x2780, 0x401, {0x0, 0x3}}, {0xe, 0x245b, {0x3, 0x539c}}, {0x7, 0x4aa, {0x0, 0x8}}, {0xd, 0x1, {0x0, 0x6}}, {0x2, 0x8886, {0x0, 0x9571}}, {0x67, 0xf100, {0x3, 0x4}}, {0x8, 0x9, {0x2, 0x20}}, {0x8, 0x400, {0x0, 0x8}}, {0x6, 0x38c0, {0x3, 0x8}}, {0x9, 0x7, {0x3, 0x8}}, {0x9, 0x1, {0x3, 0x7}}, {0x3, 0x5, {0x3, 0xffffff00}}, {0x7, 0x9, {0x0, 0xb}}, {0x9, 0x400, {0x3, 0x5}}, {0x6, 0x3, {0x3, 0x9}}, {0x2, 0x4, {0x3, 0x800}}, {0x9, 0x5, {0x1, 0x6431}}, {0xf80e, 0x101, {0x3, 0x6}}, {0x6, 0x800, {0x3, 0x2}}, {0x29a, 0x0, {0x3, 0x2}}, {0x1, 0x65, {0x1, 0x6d}}, {0x8, 0x800, {0x1, 0x9}}, {0x1c64, 0x9, {0x2, 0x7}}, {0xf, 0x8a8b, {0x3, 0x7f}}, {0x44e, 0x40, {0x1, 0xfffffff3}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff8}, 0x7, 0x6, 0xf, 0x5, 0x16, 'syz0\x00', "033f8a0f15b06ecef49eb0055555a65ff0ed15b9825b24e53a8558e736697d56", "b05dcb51f7d3701ec7befec2e375d726c403e2d474560e9e100e2a4daa24621c", [{0x2, 0xfe01, {0x3, 0xfffffffd}}, {0x0, 0x3, {0x1, 0x8b}}, {0xb588, 0x307, {0x0, 0x3}}, {0x8, 0xc, {0x2, 0xff000000}}, {0x8, 0x5, {0x3, 0x401}}, {0x8, 0x4, {0x2, 0x1}}, {0x3, 0x0, {0x1, 0x8}}, {0xd17, 0x6, {0x4cbef578e4f2cc8d, 0x2}}, {0x8, 0x1, {0x0, 0x9}}, {0x4, 0x6, {0x3, 0xff}}, {0x6, 0x6c03, {0x3, 0x9}}, {0x3, 0x3, {0x1, 0xb}}, {0xa, 0x2, {0x3, 0xe2}}, {0x4, 0xb9, {0x2, 0x1}}, {0xc, 0x90ce, {0x3, 0xa}}, {0xb, 0xb3, {0x2, 0xfffffff7}}, {0xff, 0x3}, {0x9, 0xbce, {0x0, 0x2}}, {0xffff, 0x7, {0x3}}, {0x1ff, 0xdbc4, {0x0, 0x5813}}, {0xa74, 0x4, {0x0, 0x6}}, {0x3, 0x8, {0x1, 0x1}}, {0x5, 0x401, {0x0, 0xd}}, {0x4, 0x9, {0x1, 0x9}}, {0x400, 0x4, {0x2, 0x3}}, {0xdd, 0x0, {0x1, 0x3}}, {0xff3f, 0x2, {0x2, 0x4}}, {0x4c, 0xfffc, {0x0, 0x6}}, {0x8, 0x7ff, {0x2, 0xfff}}, {0x3, 0x0, {0x0, 0xe4}}, {0x3800, 0x9, {0x0, 0x9}}, {0xb2, 0x57df, {0x3, 0x6d}}, {0x4, 0x1, {0x0, 0x100}}, {0x8, 0x1, {0x3, 0xfffffffc}}, {0x7, 0x1000, {0x1, 0x39ae}}, {0x2, 0x2, {0x0, 0x5}}, {0x9, 0x3, {0x0, 0x2}}, {0x4e, 0x8001, {0x2, 0x200}}, {0xb, 0xffff, {0x3, 0x8}}, {0x3, 0x7ff, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x0, 0x33, 0x4, 0x8, 0x17, 'syz0\x00', "b00dbb6ccef854224692ce3a5435916b0b7469466556c94bef14c08783bbb0e6", "60d620b8e9afe287c900f98c5b111e2c50c27f111f1e3fac99d621a37d6eea04", [{0x7, 0xfffd, {0x2, 0x3}}, {0x4, 0x7, {0x2, 0xfffffe00}}, {0x8000, 0xf75, {0x0, 0x8}}, {0x4, 0x8000, {0x0, 0x9d}}, {0x8, 0x4, {0x1, 0x4}}, {0x4, 0x3, {0x3, 0x2}}, {0x6, 0x2, {0x3, 0x7}}, {0x7, 0xb, {0x3, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x8, 0x7, {0x0, 0x9}}, {0x7, 0x0, {0x1, 0x401}}, {0x4f48, 0xfff, {0x1, 0x6}}, {0xc73, 0x2, {0x2, 0x80000000}}, {0x1, 0x0, {0x0, 0x40}}, {0x0, 0x3, {0x3, 0x1}}, {0xd, 0x8000, {0x3, 0xffffffff}}, {0x5, 0x7, {0x0, 0xfffff001}}, {0x2f, 0x3, {0x2, 0x80000000}}, {0x101, 0xbe, {0x3, 0x80000000}}, {0xb, 0x4, {0x0, 0x6}}, {0xfffe, 0x8, {0x2, 0xb59}}, {0x2, 0x2, {0x2, 0x7fff}}, {0x6, 0x7, {0x3, 0xfe}}, {0x7b, 0x0, {0x2, 0x10001}}, {0x3, 0x4, {0x1, 0x4}}, {0x5, 0x3, {0x3, 0xe}}, {0x8, 0x7, {0x0, 0x3}}, {0x1, 0x8, {0x1, 0x6}}, {0xec76, 0x9, {0x8629f5b36e5d97dc, 0x10000}}, {0x4, 0x3, {0x2, 0x3485}}, {0x4, 0x26, {0x0, 0x1b}}, {0x4, 0x2da, {0x1, 0x4}}, {0x7fff, 0xffff, {0x3, 0x8}}, {0x800, 0x40, {0x1, 0x8}}, {0x5, 0x1, {0x3, 0x5}}, {0xf800, 0x79, {0x3, 0x8}}, {0x8000, 0xfff8, {0x2}}, {0xa22, 0x8, {0x0, 0x800}}, {0x4, 0x6, {0x3, 0xbd}}, {0xd07, 0x1}]}}}, {{0x254, 0x1, {{0x2, 0x3c1d}, 0x8, 0x42, 0x8b, 0x3, 0x1, 'syz0\x00', "1a38779669a5e308bd00f57f09c75a7d78a446ab1681e2a93be6fbc5290fb383", "93ff3507a7f0a63507df62bc69b537e217cc4f4744a6b9865a8d6fc74bd161d7", [{0x4, 0x3, {0x1, 0xc1}}, {0x8, 0x4, {0x3, 0xffffffff}}, {0x3, 0x0, {0x0, 0x56}}, {0x200, 0x0, {0x1, 0x5}}, {0x1, 0xb679, {0x0, 0x8}}, {0x6, 0x9, {0x1, 0x7fff}}, {0x6, 0x4, {0x1, 0x7eae}}, {0x2, 0x8, {0x1, 0x8}}, {0x8, 0x1}, {0xad, 0x0, {0x0, 0x5f6f}}, {0x9, 0x26, {0x2, 0x4}}, {0x3, 0xaf2f, {0x0, 0x2}}, {0xce9c, 0x3, {0x3, 0xd6}}, {0x9f, 0x9, {0x3, 0xa}}, {0x2, 0x8000, {0x3, 0xe82}}, {0xad, 0x1, {0x2, 0x1ff}}, {0x9, 0x0, {0x3, 0xf}}, {0xa3a, 0xe, {0x2, 0x24}}, {0x6, 0x1c, {0x1, 0xffff}}, {0x6a5, 0x3, {0x0, 0x3}}, {0xa, 0x9, {0x1, 0x2}}, {0x5, 0x2, {0x3, 0xa74a}}, {0x6, 0x4, {0x1, 0x9}}, {0x2, 0x1, {0x0, 0x8bb}}, {0x1000, 0x8, {0x2, 0x7}}, {0x2, 0x7, {0x1, 0xfff}}, {0x7, 0x2, {0x3, 0x4f2f}}, {0x2, 0xff7d, {0x1, 0x9}}, {0x5, 0xfff7, {0x1}}, {0x0, 0xe, {0x2, 0x4}}, {0x85e, 0x1, {0x1, 0x5}}, {0x1, 0x4873, {0x1, 0xc}}, {0x40, 0x6, {0x0, 0x3}}, {0x97fb, 0x8, {0x1, 0x9}}, {0xf000, 0x9, {0x2, 0x10001}}, {0x7f, 0x3, {0x1, 0x40}}, {0x8, 0x2, {0x2, 0x1}}, {0x1, 0x3, {0x2, 0x5}}, {0x200, 0xff31, {0x1, 0x4}}, {0x7f, 0x3, {0x1, 0x3a}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x9, 0xe7, 0x5, 0x0, 0x1d, 'syz1\x00', "00573d83ee4ca07be877e5295215b77249aedb04f4157620b60bc76cdb525e4c", "789a38011eccf0f38299b6cb9f91d88dfc3d9805afccd454df04783f17451a07", [{0x3, 0xfffe, {0x0, 0xffffff09}}, {0x64b7, 0x2, {0x3, 0x5}}, {0x9, 0x0, {0x1, 0xe}}, {0x89, 0x5, {0x0, 0x63d0ab89}}, {0x6, 0x7, {0x2, 0x7}}, {0x6, 0x7, {0x2, 0x6}}, {0x3, 0xc, {0x2, 0x9}}, {0x7fff, 0x358b, {0x1, 0x3}}, {0x7ff, 0x543, {0x3, 0x5}}, {0x8, 0x8, {0x0, 0xda4}}, {0x9, 0xf001, {0x0, 0x100}}, {0xd36, 0x2, {0x0, 0x5}}, {0x7fff, 0x7, {0x0, 0x9}}, {0x300, 0xfd09, {0x0, 0x2}}, {0xa3, 0x5, {0x1, 0xffffcdad}}, {0xc6, 0x80, {0x3, 0x83}}, {0x101, 0x3, {0x2, 0x9}}, {0x2, 0x7fff, {0x3, 0x800000}}, {0x4, 0x6, {0x1, 0x9}}, {0x7, 0x9, {0x1, 0x400000}}, {0x8, 0x1, {0x2, 0x38de}}, {0x6, 0x7, {0x1, 0x8}}, {0x8800, 0xaa30, {0x1, 0x600}}, {0x6, 0x1, {0x2, 0xf2d}}, {0xf, 0x8, {0x1, 0x7}}, {0xdc34, 0x0, {0x2, 0x6}}, {0x9, 0x1, {0x1, 0x3}}, {0x8000, 0x9, {0x0, 0x1}}, {0x3, 0x671, {0x2, 0x3ff}}, {0xb518, 0x9, {0x2, 0x6}}, {0x5, 0xd, {0x1, 0x8}}, {0x10, 0xfffd, {0x2, 0x8}}, {0x5, 0x15ab, {0x3, 0x5d4}}, {0x9, 0x1, {0x0, 0x6}}, {0x0, 0x5, {0x0, 0x80}}, {0x3, 0x40, {0x3, 0x4}}, {0x8, 0x9e, {0x1, 0x2}}, {0x6, 0xbc, {0x1, 0x3}}, {0x200, 0xef0, {0x1, 0x8}}, {0x5, 0xfffb, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x9, 0x5, 0x1000, 0x1, 0x3, 'syz1\x00', "41b1bcdc28aec432792e298945d1a54ca1ffd5a39818a6555d76124c2d7474a1", "aac99e95ebb6959a8723700119fccdc0f0eff027b0245aca9a5dc6e5e4c245e1", [{0x0, 0x6, {0x1, 0x97d}}, {0x5, 0x3, {0x0, 0x1}}, {0x5, 0x81, {0x0, 0xc}}, {0x3, 0x1ff, {0x2, 0x833}}, {0x5, 0x1, {0x2, 0x6}}, {0x4, 0x7, {0x3}}, {0xfeff, 0x8, {0x3, 0x7}}, {0x5, 0x400, {0x2, 0xfffffffe}}, {0x1, 0xf9c, {0x1, 0x1}}, {0x6, 0x7fff, {0x0, 0x1ff}}, {0x9, 0x0, {0x0, 0x4}}, {0x7, 0x7, {0x0, 0x9}}, {0x49c, 0x8, {0x2, 0x8}}, {0x401, 0x4, {0x1, 0x1}}, {0x8001, 0x7ff, {0x0, 0x1}}, {0x1200, 0x7, {0x0, 0x1}}, {0x7, 0x3ff, {0x0, 0x8}}, {0xa, 0xff, {0x2, 0x8}}, {0xa, 0x3, {0x0, 0xff}}, {0x2, 0x0, {0x0, 0x3ff}}, {0x8, 0x8dd, {0x1, 0x5}}, {0x400, 0x1c9, {0x1, 0xffb}}, {0xa79c, 0x7, {0x3, 0x5}}, {0x3, 0x2e, {0x3, 0x400}}, {0xffdb, 0x8, {0x2, 0xf}}, {0x0, 0x4, {0x2, 0x8000}}, {0x8, 0xdd67, {0x0, 0x8}}, {0xf12, 0x7, {0x1, 0x5}}, {0x5, 0x1, {0x2, 0x8001}}, {0x3, 0xfffa, {0x2}}, {0x7fff, 0x6887, {0x3, 0x1}}, {0x0, 0x5, {0x1}}, {0xe, 0x7, {0x3}}, {0x9, 0x0, {0x3, 0x2}}, {0xcae9, 0x163e, {0x1, 0x5}}, {0x7, 0x401, {0x2, 0x6}}, {0xb3, 0xbf67, {0x1, 0xfffffffa}}, {0x1, 0x7, {0x2, 0xc0}}, {0x5, 0x0, {0x3, 0xfffffffc}}, {0x3, 0xbf30, {0x3, 0x7}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x1}, 0x4048000)

340.917836ms ago: executing program 2 (id=1741):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000100)={0x11, 0x3, 0x0, 0x1, 0xa7, 0x6, @remote}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c801400"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c801400"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000)
ioctl$SIOCAX25DELUID(r0, 0x8918, 0x0)

272.376474ms ago: executing program 1 (id=1742):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x170, 0x170, 0x8, [@datasec={0x3, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x3, 0x5}, {0x1, 0x5, 0x80}], '/'}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x30, 0x1}, @enum64={0x7, 0x5, 0x0, 0x13, 0x1, 0x8, [{0xc, 0x1ab, 0xffffffff}, {0xd, 0x7, 0x8}, {0xf, 0x4, 0x6}, {0xd, 0x7, 0x8aae}, {0xb, 0x1ff, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x9, [{0xa, 0x2, 0x175}, {0x9, 0x0, 0x4}, {0x7, 0x0, 0x2}, {0xc, 0x5, 0x4}, {0x1, 0x1, 0x9}, {0xd, 0x1, 0x3}, {0xc, 0x3, 0xffffffff}, {0x8, 0x7, 0x73}, {0x9, 0x5, 0xe439}, {0xb, 0x4, 0x5}]}, @fwd={0x8}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x6, [{0x10, 0x5, 0x6}, {0x0, 0x0, 0x3}]}, @datasec={0x1, 0x4, 0x0, 0xf, 0x3, [{0x3, 0x9}, {0x5, 0x0, 0xb}, {0x1, 0xe, 0x3}, {0x5, 0x2, 0x7fffffff}], "03d89d"}]}, {0x0, [0x61, 0x0, 0x30, 0x30, 0x0, 0x0]}}, &(0x7f0000000040)=""/27, 0x190, 0x1b, 0x0, 0x5, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002500)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94)
r2 = epoll_create(0x374)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xe})
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40)

271.030151ms ago: executing program 2 (id=1743):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@null, 0xa, 'team0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x3d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x852}, 0x40010)
r3 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r3, &(0x7f00000002c0)="2efe0ab1cea88c3a702c09e3bd30b8cc2f409d93cb6a0ee3971a4df076369f0b208323902a21c29241dbaf9079746a57a560556b06b154eb6377ecc63acd8162b73eac3a1f306198f2cd4f183e68e5ed32ab87b09090ef02a5994d17022820ad420efbad793db1603988bc63745eec24ecfa5b7fff2d68785ec2dbd9b6b4acf5e8d0559a3f73357d7acef17f976810b0de953f10e271ebe889b9d7939a596861d0f805e47ea535764eebe82b", 0xac, 0x20000000, &(0x7f0000000380)={0xa, 0x4e24, 0x1d, @mcast2, 0x5}, 0x1c)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x681}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xfffd}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x40)
syz_emit_ethernet(0x46, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @local, @empty, @broadcast, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, &(0x7f0000000640)={0x0, 0x4, [0x42, 0xfc6, 0xcea, 0x8f3]})
socket$kcm(0x29, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x20010, r5, 0x9f157000)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000680))
r7 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000740)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@newchain={0x6c, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff1, 0x7}, {0x1, 0xfff2}, {0xffff, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0xe0}}, @filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x9, 0x98, 0xbe}, {0x1, 0x7, 0xef, 0x75d6}, {0x3, 0x6, 0x2, 0x10}, {0x7, 0x4, 0x2, 0x8000}, {0x80, 0x1e, 0xfd, 0x3}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1000)
r9 = socket$igmp(0x2, 0x3, 0x2)
listen(r3, 0x6)
ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000880))
r10 = socket(0x2, 0xa, 0xe)
ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f00000008c0))
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x4, 0xb78, 0x2, 0x5, 0xe}, &(0x7f00000009c0)=0x98)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x7}, @ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @fwd={0x6}, @const={0x5}, @fwd={0xa}, @enum64={0xd, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xa, 0x80000000, 0x32}, {0x5, 0x3, 0xffff8a10}, {0xa, 0x3, 0x1}, {0xa, 0x80000001, 0x81}]}, @fwd={0x8}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x3, 0xa}, @enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x0, 0xe924}, {0x3, 0x9}, {0x7, 0x3}]}, @struct={0xb, 0x5, 0x0, 0x4, 0x0, 0x10, [{0x10, 0x3, 0x2}, {0x1, 0x2, 0x7}, {0x7, 0x0, 0x80}, {0x9, 0x3, 0xffffff31}, {0x3, 0x1, 0x8}]}]}, {0x0, [0xeac953acfbca8f36, 0x0]}}, &(0x7f0000000b40)=""/23, 0x120, 0x17, 0x0, 0x3, 0x10000}, 0x28)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r11, 0x8010671f, &(0x7f0000000cc0)={&(0x7f0000000bc0)=""/196, 0xc4})
sendmsg$NL80211_CMD_GET_COALESCE(r10, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x9b6edce0104b3d0b}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000)
ioctl$FS_IOC_READ_VERITY_METADATA(r11, 0xc0286687, &(0x7f0000000e80)={0x3, 0xeb0, 0x7f, &(0x7f0000000e00)=""/127})
setsockopt$sock_int(r10, 0x1, 0x23, &(0x7f0000000ec0)=0x8, 0x4)
ioctl$SIOCAX25DELFWD(r10, 0x89eb, &(0x7f0000000f00)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast})

192.401331ms ago: executing program 1 (id=1744):
r0 = socket$inet6(0x10, 0x2, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x8, 'hsr0\x00', {'veth1_macvtap\x00'}, 0xfff8}) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x8, 'hsr0\x00', {'veth1_macvtap\x00'}, 0xfff8})

191.822291ms ago: executing program 2 (id=1745):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x198, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x3000000}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}]]}, 0x198}, 0x1, 0x0, 0x0, 0x40005}, 0x0)

132.331353ms ago: executing program 1 (id=1746):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) (async)
ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0x6) (async)

131.712477ms ago: executing program 2 (id=1747):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x178, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x148, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x20, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xfc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x178}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x0)

50.652447ms ago: executing program 1 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r6, 0x1, 0x470bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x20000880)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x14c, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5aa2d1111bc36ae0673cbde88046dd6e7b1eefae30f87396"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4d1f195d248a415fffbb1d5f4f6420ac9d5705ab2e48e1f9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d9625c4d25c5a6756734d563ebd39dd06eb260274265a8fa"}]]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd28b34faee4e05e)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x4, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0eb"]}, 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0xb0, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x30, 0xf, [@random={0xff, 0x2a, "baf7a750654c42aef847e6d410aa3fb66ecc860c4696a377ad611c103e7fcf858650ec50863609f55dde"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4015}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r15, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r16 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r17=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r17}, 0x94)

23.415376ms ago: executing program 2 (id=1749):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1c}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x78, 0x3, 0x6, 0x304, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000052}, 0x8081)

0s ago: executing program 1 (id=1750):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x150, 0x15, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x3b}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x3ff, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x4, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6029' (ED25519) to the list of known hosts.
syzkaller login: [   56.587071][ T5814] cgroup: Unknown subsys name 'net'
[   56.766928][ T5814] cgroup: Unknown subsys name 'cpuset'
[   56.773414][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.364117][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.401047][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.405361][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.409382][ T5219] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.415247][ T5219] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.419285][ T5219] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.532066][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.535467][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.539218][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.542687][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.547362][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.613052][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.616481][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.619837][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.623473][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.628920][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.735348][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   64.904069][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.907340][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.910601][ T5830] bridge_slave_0: entered allmulticast mode
[   64.913856][ T5830] bridge_slave_0: entered promiscuous mode
[   64.932185][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.934639][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.937179][ T5830] bridge_slave_1: entered allmulticast mode
[   64.940779][ T5830] bridge_slave_1: entered promiscuous mode
[   64.953668][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   64.995074][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.008857][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.069002][ T5830] team0: Port device team_slave_0 added
[   65.072171][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   65.092202][ T5830] team0: Port device team_slave_1 added
[   65.182375][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.185019][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.195265][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.225014][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.227776][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.236959][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.252594][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.255610][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.259707][ T5835] bridge_slave_0: entered allmulticast mode
[   65.263879][ T5835] bridge_slave_0: entered promiscuous mode
[   65.295604][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.297964][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.300596][ T5835] bridge_slave_1: entered allmulticast mode
[   65.303479][ T5835] bridge_slave_1: entered promiscuous mode
[   65.308278][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.310759][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.314062][ T5838] bridge_slave_0: entered allmulticast mode
[   65.317254][ T5838] bridge_slave_0: entered promiscuous mode
[   65.322638][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.324952][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.327303][ T5838] bridge_slave_1: entered allmulticast mode
[   65.330672][ T5838] bridge_slave_1: entered promiscuous mode
[   65.374512][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.399761][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.404912][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.412914][ T5830] hsr_slave_0: entered promiscuous mode
[   65.415581][ T5830] hsr_slave_1: entered promiscuous mode
[   65.440901][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.479973][ T5835] team0: Port device team_slave_0 added
[   65.493550][ T5835] team0: Port device team_slave_1 added
[   65.497522][ T5838] team0: Port device team_slave_0 added
[   65.507759][ T5838] team0: Port device team_slave_1 added
[   65.544237][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.546572][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.555845][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.577238][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.580395][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.590605][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.594889][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.597094][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.608517][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.625163][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.627537][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.636252][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.689276][ T5838] hsr_slave_0: entered promiscuous mode
[   65.691796][ T5838] hsr_slave_1: entered promiscuous mode
[   65.694044][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.696627][ T5838] Cannot create hsr debugfs directory
[   65.731140][ T5835] hsr_slave_0: entered promiscuous mode
[   65.733752][ T5835] hsr_slave_1: entered promiscuous mode
[   65.736791][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.739885][ T5835] Cannot create hsr debugfs directory
[   65.941005][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.971841][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.979147][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.002525][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.114296][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.129459][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.135645][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.152425][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.231213][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.249061][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.255564][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.265754][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.291157][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.331210][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   66.350165][ T3873] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.353554][ T3873] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.373867][ T3873] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.376832][ T3873] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.439201][ T5219] Bluetooth: hci0: command tx timeout
[   66.444752][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.477471][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.520470][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   66.533060][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.567796][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   66.573696][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.576934][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.583567][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.586029][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.598274][ T5219] Bluetooth: hci1: command tx timeout
[   66.608677][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.611626][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.624524][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.627067][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.678599][ T5219] Bluetooth: hci2: command tx timeout
[   66.711693][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.799890][ T5830] veth0_vlan: entered promiscuous mode
[   66.812707][ T5830] veth1_vlan: entered promiscuous mode
[   66.854750][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.894821][ T5830] veth0_macvtap: entered promiscuous mode
[   66.906668][ T5830] veth1_macvtap: entered promiscuous mode
[   66.930106][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.947583][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.957274][ T5835] veth0_vlan: entered promiscuous mode
[   66.965786][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.974954][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.980276][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.983218][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.985990][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.995857][ T5835] veth1_vlan: entered promiscuous mode
[   67.069063][ T5835] veth0_macvtap: entered promiscuous mode
[   67.073713][ T5838] veth0_vlan: entered promiscuous mode
[   67.091432][ T5835] veth1_macvtap: entered promiscuous mode
[   67.107155][ T5838] veth1_vlan: entered promiscuous mode
[   67.126697][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.155712][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.167689][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.173571][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.176340][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.179528][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.182396][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.185159][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.253745][ T5838] veth0_macvtap: entered promiscuous mode
[   67.267524][ T5838] veth1_macvtap: entered promiscuous mode
[   67.268372][ T3873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.272951][ T3873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.328559][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.335391][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.350227][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.372561][ T3873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.375540][ T3873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.383864][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.410063][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.412905][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.415654][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.426177][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.432110][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.553162][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.556060][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.587583][ T3873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.595100][ T3873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.655696][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.662710][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.777427][ T5904] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   67.979982][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   68.026965][ T5931] bridge0: port 3(erspan0) entered blocking state
[   68.032176][ T5931] bridge0: port 3(erspan0) entered disabled state
[   68.036866][ T5931] erspan0: entered allmulticast mode
[   68.040420][ T5931] erspan0: entered promiscuous mode
[   68.042864][ T5931] bridge0: port 3(erspan0) entered blocking state
[   68.045463][ T5931] bridge0: port 3(erspan0) entered forwarding state
[   68.069973][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   68.158407][ T5941] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   68.162470][ T5941] Cannot find set identified by id 0 to match
[   68.171283][ T5940] tipc: Started in network mode
[   68.173483][ T5940] tipc: Node identity f663ec38f8f3, cluster identity 4711
[   68.180862][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   68.188828][ T5940] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.193014][ T5940] syzkaller0: entered promiscuous mode
[   68.201589][ T5940] syzkaller0: entered allmulticast mode
[   68.206323][ T5937] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   68.212837][ T5937] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   68.269902][ T5940] tipc: Resetting bearer <eth:syzkaller0>
[   68.281664][ T5938] tipc: Resetting bearer <eth:syzkaller0>
[   68.294689][ T5938] tipc: Disabling bearer <eth:syzkaller0>
[   68.483044][ T5951] Cannot find add_set index 0 as target
[   68.519001][ T5219] Bluetooth: hci0: command tx timeout
[   68.547242][ T5955] Zero length message leads to an empty skb
[   68.639871][ T5958] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[   68.655646][ T5961] Cannot find set identified by id 0 to match
[   68.678789][ T5219] Bluetooth: hci1: command tx timeout
[   68.745769][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.758372][ T5219] Bluetooth: hci2: command tx timeout
[   68.796217][ T5972] tipc: Started in network mode
[   68.798486][ T5972] tipc: Node identity 728b3eeb20a, cluster identity 4711
[   68.802924][ T5972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.807448][ T5972] macvtap0: entered promiscuous mode
[   68.814232][ T5972] macvtap0: entered allmulticast mode
[   68.816493][ T5972] veth0_macvtap: entered allmulticast mode
[   68.823715][ T5972] tipc: Resetting bearer <eth:syzkaller0>
[   68.861799][ T5969] tipc: Disabling bearer <eth:syzkaller0>
[   69.024980][ T5984] netlink: 'syz.2.30': attribute type 2 has an invalid length.
[   69.120499][ T5988] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   69.123834][ T5988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.32'.
[   69.140738][ T5988] netlink: 'syz.1.32': attribute type 1 has an invalid length.
[   69.144081][ T5988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.32'.
[   69.294564][ T5999] netlink: 256 bytes leftover after parsing attributes in process `syz.2.35'.
[   69.313739][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   69.619756][ T6014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40'.
[   70.330885][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.380007][ T6032] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.385596][ T6032] bond0: (slave bond1): Enslaving as an active interface with an up link
[   70.598518][ T5219] Bluetooth: hci0: command tx timeout
[   70.760823][ T5219] Bluetooth: hci1: command tx timeout
[   70.838024][ T5219] Bluetooth: hci2: command tx timeout
[   71.043486][ T6067] Cannot find set identified by id 0 to match
[   71.136116][ T6072] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   71.174452][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.178716][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.243397][ T6078] netlink: 'syz.1.60': attribute type 12 has an invalid length.
[   71.303050][ T6080] netlink: 'syz.2.61': attribute type 3 has an invalid length.
[   71.306305][ T6080] netlink: 'syz.2.61': attribute type 1 has an invalid length.
[   71.380469][ T6080] IPVS: Scheduler module ip_vs_sip not found
[   71.491529][ T6087] netem: change failed
[   71.610905][ T6097] netlink: 'syz.2.66': attribute type 2 has an invalid length.
[   71.679394][ T6099] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   71.724170][ T6099] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   71.911526][ T6123] syz.0.72 uses obsolete (PF_INET,SOCK_PACKET)
[   72.206510][ T6143] Cannot find set identified by id 0 to match
[   72.261271][ T6145] netlink: 'syz.1.79': attribute type 21 has an invalid length.
[   72.323755][ T6150] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   72.501081][ T6162] syzkaller0: entered promiscuous mode
[   72.503181][ T6162] syzkaller0: entered allmulticast mode
[   72.679104][ T5219] Bluetooth: hci0: command tx timeout
[   72.838066][ T5219] Bluetooth: hci1: command tx timeout
[   72.910274][ T6180] __nla_validate_parse: 10 callbacks suppressed
[   72.910296][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'.
[   72.923980][ T5219] Bluetooth: hci2: command tx timeout
[   72.933056][ T6180] sctp: [Deprecated]: syz.0.94 (pid 6180) Use of int in max_burst socket option.
[   72.933056][ T6180] Use struct sctp_assoc_value instead
[   74.091671][ T6185] validate_nla: 3 callbacks suppressed
[   74.091702][ T6185] netlink: 'syz.0.95': attribute type 2 has an invalid length.
[   74.565025][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.587226][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.593237][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.596731][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.601102][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.605376][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.608955][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.612519][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.615954][ T6209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.708410][ T6217] bridge0: port 3(erspan0) entered disabled state
[   74.712023][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.715079][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.730234][ T6221] batadv0: entered promiscuous mode
[   74.732556][ T6221] macsec1: entered allmulticast mode
[   74.734743][ T6221] batadv0: entered allmulticast mode
[   74.741341][ T6221] batadv0: left allmulticast mode
[   74.743462][ T6221] batadv0: left promiscuous mode
[   74.763539][ T6223] tipc: Started in network mode
[   74.765512][ T6223] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   74.774869][ T6223] tipc: Enabled bearer <udp:s>, priority 10
[   75.194552][ T6249] warning: `syz.2.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.630463][ T6270] Cannot find set identified by id 0 to match
[   75.679282][ T6272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.682247][ T6272] syzkaller0: entered promiscuous mode
[   75.684285][ T6272] syzkaller0: entered allmulticast mode
[   75.780824][ T5297] tipc: Node number set to 4269801488
[   76.818758][ T5297] tipc: Node number set to 1378565867
[   77.405335][ T6288] netlink: 'syz.0.123': attribute type 2 has an invalid length.
[   77.413644][ T6271] tipc: Resetting bearer <eth:syzkaller0>
[   77.429353][ T6271] tipc: Disabling bearer <eth:syzkaller0>
[   77.552637][ T6294] xt_CT: No such helper "snmp"
[   79.117437][ T6324] __nla_validate_parse: 30 callbacks suppressed
[   79.117461][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'.
[   79.124771][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.133'.
[   79.180981][ T6334] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   79.241672][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.137'.
[   79.260115][ T6338] syzkaller0: entered promiscuous mode
[   79.264210][ T6338] syzkaller0: entered allmulticast mode
[   79.314053][ T6343] netlink: 'syz.0.139': attribute type 15 has an invalid length.
[   79.337347][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.340744][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.343833][ T6347] netlink: 'syz.1.141': attribute type 14 has an invalid length.
[   79.346737][ T6347] netlink: 'syz.1.141': attribute type 11 has an invalid length.
[   79.365964][ T6347] netlink: 76 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.378260][ T6348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.493492][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   79.506711][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   79.519261][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'.
[   79.665512][ T6369] Cannot find set identified by id 0 to match
[   79.791932][ T6378] netlink: 'syz.0.148': attribute type 2 has an invalid length.
[   80.224018][ T6414] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   80.388562][ T6422] netlink: 'syz.0.156': attribute type 29 has an invalid length.
[   80.711944][ T6444] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   80.716773][ T6446] Cannot find set identified by id 0 to match
[   80.779689][ T6448] syz_tun: entered allmulticast mode
[   80.864370][ T6453] netlink: 'syz.0.169': attribute type 2 has an invalid length.
[   80.916359][ T6456] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.941123][ T6456] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   80.967064][ T6456] bridge1: the hash_elasticity option has been deprecated and is always 16
[   81.024853][ T6460] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   81.050448][   T96] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   81.291936][ T6480] syz.1.176: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.297213][ T6480] CPU: 0 UID: 0 PID: 6480 Comm: syz.1.176 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   81.297230][ T6480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.297238][ T6480] Call Trace:
[   81.297243][ T6480]  <TASK>
[   81.297295][ T6480]  dump_stack_lvl+0x189/0x250
[   81.297332][ T6480]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.297344][ T6480]  ? __pfx__printk+0x10/0x10
[   81.297358][ T6480]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.297371][ T6480]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.297383][ T6480]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.297394][ T6480]  warn_alloc+0x214/0x310
[   81.297403][ T6480]  ? stack_depot_save_flags+0x429/0x900
[   81.297414][ T6480]  ? __pfx_warn_alloc+0x10/0x10
[   81.297422][ T6480]  ? kasan_save_track+0x4f/0x80
[   81.297434][ T6480]  ? xskq_create+0x56/0x170
[   81.297443][ T6480]  ? xsk_init_queue+0xb0/0x110
[   81.297449][ T6480]  ? xsk_setsockopt+0x43f/0x710
[   81.297462][ T6480]  ? do_sock_setsockopt+0x17c/0x1b0
[   81.297475][ T6480]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   81.297485][ T6480]  ? do_syscall_64+0xfa/0x3b0
[   81.297496][ T6480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.297515][ T6480]  __vmalloc_node_range_noprof+0x125/0x12f0
[   81.297545][ T6480]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.297560][ T6480]  ? xskq_create+0x56/0x170
[   81.297570][ T6480]  ? __kasan_kmalloc+0x93/0xb0
[   81.297584][ T6480]  vmalloc_user_noprof+0xad/0xf0
[   81.297599][ T6480]  ? xskq_create+0xbf/0x170
[   81.297607][ T6480]  xskq_create+0xbf/0x170
[   81.297618][ T6480]  xsk_init_queue+0xb0/0x110
[   81.297626][ T6480]  xsk_setsockopt+0x43f/0x710
[   81.297640][ T6480]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.297653][ T6480]  ? __fget_files+0x2a/0x420
[   81.297661][ T6480]  ? aa_sock_opt_perm+0x74/0x110
[   81.297672][ T6480]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   81.297681][ T6480]  ? __pfx_xsk_setsockopt+0x10/0x10
[   81.297694][ T6480]  do_sock_setsockopt+0x17c/0x1b0
[   81.297707][ T6480]  __x64_sys_setsockopt+0x13f/0x1b0
[   81.297721][ T6480]  do_syscall_64+0xfa/0x3b0
[   81.297730][ T6480]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.297738][ T6480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.297747][ T6480]  ? exc_page_fault+0x9f/0xf0
[   81.297756][ T6480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.297766][ T6480] RIP: 0033:0x7f55ca18e9a9
[   81.297776][ T6480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.297800][ T6480] RSP: 002b:00007f55caf49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.297810][ T6480] RAX: ffffffffffffffda RBX: 00007f55ca3b6080 RCX: 00007f55ca18e9a9
[   81.297834][ T6480] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   81.297840][ T6480] RBP: 00007f55ca210d69 R08: 0000000000000004 R09: 0000000000000000
[   81.297846][ T6480] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.297852][ T6480] R13: 0000000000000000 R14: 00007f55ca3b6080 R15: 00007ffe7b4adc58
[   81.297868][ T6480]  </TASK>
[   81.438885][ T6480] Mem-Info:
[   81.440191][ T6480] active_anon:5040 inactive_anon:0 isolated_anon:0
[   81.440191][ T6480]  active_file:975 inactive_file:38209 isolated_file:0
[   81.440191][ T6480]  unevictable:1768 dirty:1460 writeback:0
[   81.440191][ T6480]  slab_reclaimable:9077 slab_unreclaimable:52936
[   81.440191][ T6480]  mapped:18113 shmem:2441 pagetables:919
[   81.440191][ T6480]  sec_pagetables:0 bounce:0
[   81.440191][ T6480]  kernel_misc_reclaimable:0
[   81.440191][ T6480]  free:304620 free_pcp:19333 free_cma:0
[   81.440244][   T52] cfg80211: failed to load regulatory.db
[   81.455543][ T6480] Node 0 active_anon:11904kB inactive_anon:0kB active_file:2256kB inactive_file:150128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50604kB dirty:5196kB writeback:0kB shmem:4644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4176kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.469474][ T6480] Node 1 active_anon:8256kB inactive_anon:0kB active_file:1644kB inactive_file:2708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:21848kB dirty:644kB writeback:0kB shmem:5120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7312kB pagetables:1364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.485495][ T6480] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.501962][ T6480] lowmem_reserve[]: 0 812 812 812 812
[   81.504108][ T6480] Node 0 DMA32 free:295208kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11904kB inactive_anon:0kB active_file:2256kB inactive_file:150128kB unevictable:3536kB writepending:5196kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:35856kB local_pcp:17032kB free_cma:0kB
[   81.523104][ T6480] lowmem_reserve[]: 0 0 0 0 0
[   81.525468][ T6480] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   81.544149][ T6480] lowmem_reserve[]: 0 0 854 854 854
[   81.546612][ T6480] Node 1 Normal free:448668kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8392kB inactive_anon:0kB active_file:1644kB inactive_file:2708kB unevictable:3536kB writepending:644kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41488kB local_pcp:19304kB free_cma:0kB
[   81.557709][ T6480] lowmem_reserve[]: 0 0 0 0 0
[   81.561222][ T6480] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   81.566176][ T6480] Node 0 DMA32: 631*4kB (UME) 425*8kB (UME) 216*16kB (UME) 99*32kB (ME) 115*64kB (UME) 51*128kB (UME) 12*256kB (UM) 9*512kB (UME) 7*1024kB (UM) 6*2048kB (UM) 59*4096kB (M) = 295236kB
[   81.572841][ T6480] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   81.578514][ T6488] Cannot find set identified by id 0 to match
[   81.582170][ T6480] Node 1 Normal: 643*4kB (UME) 852*8kB (UME) 207*16kB (UE) 100*32kB (UME) 66*64kB (UME) 16*128kB (UME) 10*256kB (UME) 8*512kB (UME) 8*1024kB (UME) 5*2048kB (UM) 98*4096kB (UM) = 448668kB
[   81.588957][ T6480] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.592765][ T6480] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   81.601946][ T6480] 41625 total pagecache pages
[   81.603641][ T6480] 0 pages in swap cache
[   81.605103][ T6480] Free swap  = 124996kB
[   81.606730][ T6480] Total swap = 124996kB
[   81.611491][ T6480] 786301 pages RAM
[   81.613163][ T6480] 0 pages HighMem/MovableOnly
[   81.615764][ T6480] 241056 pages reserved
[   81.621791][ T6480] 0 pages cma reserved
[   81.623458][ T6491] xt_l2tp: v2 doesn't support IP mode
[   81.629486][ T6474] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   81.634240][ T6474] Bluetooth: MGMT ver 1.23
[   81.638884][ T6485] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   81.849459][ T6503] Cannot find add_set index 3 as target
[   81.922035][ T6507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.959914][   T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   82.957705][ T6549] team0: No ports can be present during mode change
[   83.718139][ T5219] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   83.762307][ T6568] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[   84.102904][ T6594] netlink: 'syz.1.211': attribute type 11 has an invalid length.
[   84.363926][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv1
[   84.381784][ T6607] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   84.384679][ T6607] team0: Failed to send options change via netlink (err -105)
[   84.387206][ T6607] team0: Port device batadv1 added
[   84.395048][ T6609] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   84.445573][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.469922][ T6609] veth3: entered promiscuous mode
[   84.478576][ T6609] bond2: (slave veth3): Enslaving as a backup interface with a down link
[   84.501735][ T6609] bridge_slave_0: left allmulticast mode
[   84.504279][ T6609] bridge_slave_0: left promiscuous mode
[   84.508516][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.523524][ T6609] bridge_slave_1: left allmulticast mode
[   84.525972][ T6609] bridge_slave_1: left promiscuous mode
[   84.531696][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.545853][ T6609] bond0: (slave bond_slave_0): Releasing backup interface
[   84.560716][ T6609] bond0: (slave bond_slave_1): Releasing backup interface
[   84.604315][ T6609] team0: Port device team_slave_0 removed
[   84.613520][   T36] wlan0: Trigger new scan to find an IBSS to join
[   84.622981][ T6609] team0: Port device team_slave_1 removed
[   84.626997][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.633237][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.640716][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.643963][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.663275][ T6609] bond2: (slave veth3): Releasing backup interface
[   84.719782][ T6615] __nla_validate_parse: 15 callbacks suppressed
[   84.719798][ T6615] netlink: 204 bytes leftover after parsing attributes in process `syz.1.218'.
[   84.746186][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   84.874084][ T5279] udevd[5279]: worker [5832] terminated by signal 33 (Unknown signal 33)
[   84.891913][ T6622] trusted_key: syz.1.221 sent an empty control message without MSG_MORE.
[   84.892422][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'.
[   85.019197][ T6630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.223'.
[   85.025191][ T6630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.223'.
[   85.073897][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'.
[   85.134048][ T6642] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   85.225804][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'.
[   85.373695][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'.
[   85.511321][ T6672] netlink: 72 bytes leftover after parsing attributes in process `syz.1.236'.
[   86.375195][ T6686] netlink: 'syz.2.240': attribute type 39 has an invalid length.
[   86.414579][ T6691] ipt_ECN: cannot use operation on non-tcp rule
[   86.574164][ T6705] netlink: 'syz.0.244': attribute type 2 has an invalid length.
[   86.739392][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   86.745122][ T6716] veth1: entered promiscuous mode
[   86.757693][ T6716] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   86.782764][ T6716] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   86.822990][ T6720] veth0_vlan: entered allmulticast mode
[   86.855977][ T6720] : renamed from vlan0
[   86.992500][ T6726] bridge_slave_1: left allmulticast mode
[   86.995191][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.111918][ T6737] netlink: 'syz.1.257': attribute type 2 has an invalid length.
[   87.356504][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   87.565836][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.592084][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.639945][ T1088] wlan0: Trigger new scan to find an IBSS to join
[   87.733777][ T6754] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.737328][ T6754] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.740894][ T6754] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.744025][ T6754] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.842514][ T6761] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   88.217411][ T6769] Cannot find set identified by id 0 to match
[   88.375058][ T6789] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000
[   88.620921][ T6801] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   88.769070][ T6808] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   88.812279][ T6810] Cannot find set identified by id 0 to match
[   88.932504][ T6815] sctp: [Deprecated]: syz.0.277 (pid 6815) Use of int in maxseg socket option.
[   88.932504][ T6815] Use struct sctp_assoc_value instead
[   89.063519][ T6820] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   89.285442][ T6839] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   89.341817][ T6842] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   89.560110][ T6854] nbd: illegal input index -381222912
[   89.629193][ T6858] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   89.695565][ T6866] bridge0: port 1(erspan0) entered blocking state
[   89.704526][ T6866] bridge0: port 1(erspan0) entered disabled state
[   89.706872][ T6866] erspan0: entered allmulticast mode
[   89.709698][ T6866] erspan0: entered promiscuous mode
[   89.712936][ T6866] bridge0: port 1(erspan0) entered blocking state
[   89.715171][ T6866] bridge0: port 1(erspan0) entered forwarding state
[   89.765832][ T6869] Cannot find set identified by id 0 to match
[   89.781789][ T6871] __nla_validate_parse: 73 callbacks suppressed
[   89.781802][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'.
[   89.860309][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'.
[   89.930254][ T6880] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   89.944318][ T6877] syzkaller0: entered promiscuous mode
[   89.946253][ T6877] syzkaller0: entered allmulticast mode
[   91.060277][ T6894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   91.540002][ T6894] chnl_net:caif_netlink_parms(): no params data found
[   91.575462][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   91.654218][   T10] IPVS: starting estimator thread 0...
[   91.658948][ T6903] vcan0: tx drop: invalid sa for name 0xfbfffffffffffffd
[   91.681182][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'.
[   91.743035][ T6907] IPVS: using max 61 ests per chain, 146400 per kthread
[   91.810605][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   91.811826][ T6919] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   91.817159][ T6919] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   91.818061][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   91.820662][ T6919] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   91.827585][ T6919] netlink: 'syz.1.311': attribute type 3 has an invalid length.
[   91.832715][ T6918] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   91.837347][ T6918] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   91.946958][ T6930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.315'.
[   91.951424][ T6930] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   92.316146][ T6947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.320'.
[   92.763484][ T6968] Cannot find set identified by id 0 to match
[   92.822502][ T6970] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   92.918080][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   92.932571][ T6970] batadv_slave_0: entered promiscuous mode
[   93.020446][ T6978] netlink: 'syz.2.331': attribute type 2 has an invalid length.
[   93.082065][ T6984] xt_connbytes: Forcing CT accounting to be enabled
[   93.086960][ T6984] set match dimension is over the limit!
[   93.091352][ T6986] veth0: entered promiscuous mode
[   93.093169][ T6984] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   93.129098][ T6988] tipc: Can't bind to reserved service type 0
[   93.231370][ T6985] veth0: left promiscuous mode
[   93.803831][ T7013] netlink: 14 bytes leftover after parsing attributes in process `syz.2.343'.
[   93.810484][ T7013] hsr_slave_0: left promiscuous mode
[   93.813508][ T7013] hsr_slave_1: left promiscuous mode
[   94.867649][ T7089] __nla_validate_parse: 5 callbacks suppressed
[   94.867668][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'.
[   94.932776][ T7093] openvswitch: netlink: Message has 24 unknown bytes.
[   94.996016][ T7098] netlink: 348 bytes leftover after parsing attributes in process `syz.2.377'.
[   95.120257][ T7101] xt_TPROXY: Can be used only with -p tcp or -p udp
[   95.289505][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'.
[   95.327195][ T7114] x_tables: duplicate underflow at hook 2
[   95.368549][ T7117] netlink: 'syz.2.381': attribute type 1 has an invalid length.
[   95.372100][ T7117] netlink: 84 bytes leftover after parsing attributes in process `syz.2.381'.
[   95.671025][ T7127] netlink: 'syz.1.384': attribute type 9 has an invalid length.
[   95.673710][ T7128] netlink: 'syz.0.385': attribute type 1 has an invalid length.
[   95.678799][ T7128] netlink: 'syz.0.385': attribute type 2 has an invalid length.
[   95.756554][ T7128] Bluetooth: MGMT ver 1.23
[   95.872953][ T7136] Cannot find set identified by id 0 to match
[   95.992316][ T7143] netlink: 'syz.1.389': attribute type 13 has an invalid length.
[   96.002860][ T7144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.089713][ T7143] bridge0: port 3(erspan0) entered blocking state
[   96.091973][ T7143] bridge0: port 3(erspan0) entered forwarding state
[   96.102993][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.109059][ T7143] 8021q: adding VLAN 0 to HW filter on device team0
[   96.136122][ T7143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.234281][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'.
[   96.348112][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[   96.402419][   T10] IPVS: starting estimator thread 0...
[   96.404648][ T7158] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   96.447165][ T7163] IPv6: sit1: Disabled Multicast RS
[   96.455940][ T7163] sit1: entered allmulticast mode
[   96.498070][ T7164] IPVS: using max 52 ests per chain, 124800 per kthread
[   96.591401][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'.
[   96.595535][ T7173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.402'.
[   96.633049][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'.
[   96.862312][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'.
[   97.318127][ T5219] Bluetooth: hci2: command tx timeout
[   97.360298][ T7248] validate_nla: 1 callbacks suppressed
[   97.360313][ T7248] netlink: 'syz.0.426': attribute type 10 has an invalid length.
[   97.382317][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[   97.386626][ T7248] bond0: (slave team0): Enslaving as an active interface with an up link
[   97.410122][ T7248] netlink: 'syz.0.426': attribute type 11 has an invalid length.
[   97.412722][ T7248] netlink: 'syz.0.426': attribute type 11 has an invalid length.
[   98.202240][ T7291] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   98.232522][ T7293] x_tables: ip6_tables: mh match: only valid for protocol 135
[   98.274317][ T7295] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   98.336526][ T7299] delete_channel: no stack
[   99.221966][ T7316] syz.2.448 uses old SIOCAX25GETINFO
[   99.460386][ T7324] mac80211_hwsim hwsim4 .: renamed from wlan0 (while UP)
[   99.674021][ T7340] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[  100.002951][ T7358] __nla_validate_parse: 13 callbacks suppressed
[  100.002993][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'.
[  100.233493][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'.
[  100.238268][ T7376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.465'.
[  100.243364][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'.
[  100.255832][ T7377] bridge0: port 1(erspan0) entered disabled state
[  100.274409][ T7377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'.
[  101.046574][ T7387] netlink: 'syz.2.469': attribute type 3 has an invalid length.
[  101.050835][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'.
[  101.098585][ T7389] netlink: 'syz.2.470': attribute type 33 has an invalid length.
[  101.101507][ T7389] netlink: 152 bytes leftover after parsing attributes in process `syz.2.470'.
[  101.545007][ T7430] netlink: 'syz.0.476': attribute type 3 has an invalid length.
[  101.548486][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  101.625170][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[  101.644151][ T7435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.477'.
[  102.332581][ T7490] netlink: 'syz.2.479': attribute type 1 has an invalid length.
[  102.728310][ T7514] netlink: 'syz.2.489': attribute type 3 has an invalid length.
[  102.881399][ T7527] Cannot find set identified by id 0 to match
[  102.963786][ T7535] veth3: entered promiscuous mode
[  103.070550][ T7542] netlink: 'syz.2.496': attribute type 3 has an invalid length.
[  103.077625][ T7543] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  103.147454][ T7539] bond0: Unable to set up delay as MII monitoring is disabled
[  103.497786][ T7571] netlink: 'syz.2.509': attribute type 2 has an invalid length.
[  103.910304][ T7585] Cannot find set identified by id 0 to match
[  103.993297][    C0] Unknown status report in ack skb
[  104.266365][ T7600] netlink: 'syz.1.518': attribute type 2 has an invalid length.
[  104.270247][ T7600] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[  104.273013][ T7600] netlink: 'syz.1.518': attribute type 1 has an invalid length.
[  104.594003][ T7611] netlink: 'syz.0.522': attribute type 1 has an invalid length.
[  104.932918][ T7613] netlink: 'syz.2.523': attribute type 2 has an invalid length.
[  104.983237][ T7615] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  105.281354][ T7620] ipt_ECN: cannot use operation on non-tcp rule
[  105.384741][ T7626] __nla_validate_parse: 20 callbacks suppressed
[  105.384757][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[  105.392407][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'.
[  105.421332][ T7630] netlink: 'syz.2.530': attribute type 2 has an invalid length.
[  105.617155][ T7639] bpq0: entered promiscuous mode
[  105.620174][ T7639] bpq0: entered allmulticast mode
[  105.704537][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'.
[  105.707416][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'.
[  105.811020][ T7656] netlink: 'syz.1.539': attribute type 2 has an invalid length.
[  105.853153][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.541'.
[  105.857041][ T7661] bridge0: port 3(erspan0) entered disabled state
[  105.872927][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.541'.
[  105.989414][ T7668] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  106.252899][ T7681] syzkaller0: entered promiscuous mode
[  106.254779][ T7681] syzkaller0: entered allmulticast mode
[  106.257696][ T7680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.261990][ T7681] lo speed is unknown, defaulting to 1000
[  106.265302][ T7681] lo speed is unknown, defaulting to 1000
[  106.271712][ T7681] lo speed is unknown, defaulting to 1000
[  106.277795][ T7681] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.286385][ T7681] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  106.305949][ T7681] lo speed is unknown, defaulting to 1000
[  106.311994][ T7681] lo speed is unknown, defaulting to 1000
[  106.318689][ T7681] lo speed is unknown, defaulting to 1000
[  106.334929][ T7681] tipc: Resetting bearer <eth:syzkaller0>
[  106.346950][ T7681] tipc: Disabling bearer <eth:syzkaller0>
[  106.376883][ T7685] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.445855][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.552'.
[  106.523459][ T7695] : renamed from bridge_slave_0 (while UP)
[  106.613107][ T7700] netlink: 516 bytes leftover after parsing attributes in process `syz.0.555'.
[  106.621281][ T7701] netlink: 516 bytes leftover after parsing attributes in process `syz.0.555'.
[  106.712029][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[  106.844996][ T7720] openvswitch: netlink: Flow key attr not present in new flow.
[  107.155118][ T7749] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.201547][ T7749] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  107.239007][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.242082][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.249423][ T7754] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.251875][ T7754] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.494268][ T7767] veth0: entered promiscuous mode
[  107.576764][ T7767] veth0 (unregistering): left promiscuous mode
[  107.757566][ T7786] delete_channel: no stack
[  107.905818][ T7798] validate_nla: 1 callbacks suppressed
[  107.905829][ T7798] netlink: 'syz.0.578': attribute type 2 has an invalid length.
[  107.995128][ T7805] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[  108.009772][ T7805] netlink: 'syz.2.580': attribute type 13 has an invalid length.
[  108.013012][ T7805] netlink: 'syz.2.580': attribute type 12 has an invalid length.
[  108.121465][ T7805] bond0: (slave bond_slave_1): Releasing backup interface
[  108.494433][ T7849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.549980][ T7849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.562822][ T7847] pim6reg: entered allmulticast mode
[  108.566100][ T7847] pim6reg: left allmulticast mode
[  108.652238][ T7849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.732089][ T7849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.790869][ T7863] netlink: 'syz.1.586': attribute type 2 has an invalid length.
[  108.820679][ T7849] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.837579][ T7849] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.855957][ T7849] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.869519][ T7849] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.909906][ T7865] lo speed is unknown, defaulting to 1000
[  109.490568][ T7904] netlink: 'syz.1.599': attribute type 12 has an invalid length.
[  109.571146][ T7908] Cannot find set identified by id 0 to match
[  110.492142][ T7937] __nla_validate_parse: 37 callbacks suppressed
[  110.492152][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'.
[  110.559321][ T7940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  110.562795][ T7940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  110.607324][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.610'.
[  110.891612][ T7948] ipt_ECN: cannot use operation on non-tcp rule
[  110.936481][ T7950] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  110.985172][ T7952] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  111.005820][ T7952] veth1: entered promiscuous mode
[  111.186283][ T7954] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  111.276864][ T7959] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.280080][ T7959] syzkaller0: entered promiscuous mode
[  111.281863][ T7959] syzkaller0: entered allmulticast mode
[  111.288626][ T7959] tipc: Resetting bearer <eth:syzkaller0>
[  111.304761][ T7961] vxcan3: entered allmulticast mode
[  111.338939][ T7963] syzkaller0: Caught tx_queue_len zero misconfig
[  111.433379][ T7966] netlink: 256 bytes leftover after parsing attributes in process `syz.2.620'.
[  111.531952][ T7977] Cannot find set identified by id 0 to match
[  111.620398][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'.
[  111.623336][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'.
[  111.823344][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.628'.
[  112.022589][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  112.031566][ T8001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.629'.
[  112.038056][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  112.397513][ T8006] xt_hashlimit: size too large, truncated to 1048576
[  112.578948][ T8011] Cannot find set identified by id 0 to match
[  112.633081][ T8013] netlink: 72 bytes leftover after parsing attributes in process `syz.2.633'.
[  112.935747][ T8028] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[  112.970346][ T8028] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.172769][ T8033] xt_NFQUEUE: number of total queues is 0
[  113.241692][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.245881][ T8037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.296674][ T8042] xt_hashlimit: size too large, truncated to 1048576
[  113.310602][ T8043] syz.1.643: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.319314][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.1.643 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  113.319337][ T8043] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.319345][ T8043] Call Trace:
[  113.319352][ T8043]  <TASK>
[  113.319359][ T8043]  dump_stack_lvl+0x189/0x250
[  113.319387][ T8043]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.319404][ T8043]  ? __pfx__printk+0x10/0x10
[  113.319424][ T8043]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.319443][ T8043]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  113.319462][ T8043]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  113.319482][ T8043]  warn_alloc+0x214/0x310
[  113.319503][ T8043]  ? __pfx_warn_alloc+0x10/0x10
[  113.319521][ T8043]  ? __get_vm_area_node+0x28f/0x300
[  113.319542][ T8043]  ? htable_create+0xfc/0x7a0
[  113.319560][ T8043]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  113.319604][ T8043]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.319629][ T8043]  ? rcu_is_watching+0x15/0xb0
[  113.319646][ T8043]  ? htable_create+0xfc/0x7a0
[  113.319658][ T8043]  ? htable_create+0xfc/0x7a0
[  113.319669][ T8043]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  113.319690][ T8043]  ? htable_create+0xfc/0x7a0
[  113.319701][ T8043]  ? hashlimit_pernet+0x23/0x240
[  113.319719][ T8043]  htable_create+0xfc/0x7a0
[  113.319739][ T8043]  hashlimit_mt_check_common+0x719/0xa10
[  113.319761][ T8043]  hashlimit_mt_check_v1+0x221/0x360
[  113.319777][ T8043]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  113.319796][ T8043]  ? xt_find_match+0x1f7/0x250
[  113.319823][ T8043]  xt_check_match+0x3d1/0xab0
[  113.319843][ T8043]  ? __pfx___mutex_lock+0x10/0x10
[  113.319863][ T8043]  ? __pfx_xt_check_match+0x10/0x10
[  113.319885][ T8043]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  113.319941][ T8043]  ? xt_find_match+0x1f7/0x250
[  113.319964][ T8043]  translate_table+0x150b/0x2000
[  113.320000][ T8043]  ? __pfx_translate_table+0x10/0x10
[  113.320020][ T8043]  ? __might_fault+0xb0/0x130
[  113.320055][ T8043]  ? _copy_from_user+0x94/0xb0
[  113.320080][ T8043]  do_ipt_set_ctl+0x967/0xcd0
[  113.320103][ T8043]  ? rcu_is_watching+0x15/0xb0
[  113.320125][ T8043]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  113.320154][ T8043]  ? __pfx___mutex_lock+0x10/0x10
[  113.320166][ T8043]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  113.320179][ T8043]  ? aa_sk_perm+0x81e/0x950
[  113.320205][ T8043]  ? __pfx_aa_sk_perm+0x10/0x10
[  113.320230][ T8043]  nf_setsockopt+0x26f/0x290
[  113.320253][ T8043]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  113.320273][ T8043]  do_sock_setsockopt+0x17c/0x1b0
[  113.320298][ T8043]  __x64_sys_setsockopt+0x13f/0x1b0
[  113.320322][ T8043]  do_syscall_64+0xfa/0x3b0
[  113.320339][ T8043]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.320352][ T8043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.320366][ T8043]  ? exc_page_fault+0x9f/0xf0
[  113.320380][ T8043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.320394][ T8043] RIP: 0033:0x7f55ca18e9a9
[  113.320407][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  113.320419][ T8043] RSP: 002b:00007f55caf49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.320434][ T8043] RAX: ffffffffffffffda RBX: 00007f55ca3b6080 RCX: 00007f55ca18e9a9
[  113.320444][ T8043] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005
[  113.320452][ T8043] RBP: 00007f55ca210d69 R08: 0000000000000518 R09: 0000000000000000
[  113.320460][ T8043] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000
[  113.320469][ T8043] R13: 0000000000000000 R14: 00007f55ca3b6080 R15: 00007ffe7b4adc58
[  113.320492][ T8043]  </TASK>
[  113.320498][ T8043] Mem-Info:
[  113.460660][ T8043] active_anon:4325 inactive_anon:0 isolated_anon:0
[  113.460660][ T8043]  active_file:1009 inactive_file:38224 isolated_file:0
[  113.460660][ T8043]  unevictable:1768 dirty:98 writeback:0
[  113.460660][ T8043]  slab_reclaimable:9402 slab_unreclaimable:66932
[  113.460660][ T8043]  mapped:17916 shmem:2449 pagetables:828
[  113.460660][ T8043]  sec_pagetables:0 bounce:0
[  113.460660][ T8043]  kernel_misc_reclaimable:0
[  113.460660][ T8043]  free:288071 free_pcp:20783 free_cma:0
[  113.478640][ T8043] Node 0 active_anon:10696kB inactive_anon:0kB active_file:2256kB inactive_file:150128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49652kB dirty:192kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4204kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.491860][ T8043] Node 1 active_anon:6604kB inactive_anon:0kB active_file:1780kB inactive_file:2768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22012kB dirty:200kB writeback:0kB shmem:5140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7336kB pagetables:1036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.504976][ T8043] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.516689][ T8043] lowmem_reserve[]: 0 812 812 812 812
[  113.520395][ T8043] Node 0 DMA32 free:279196kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10764kB inactive_anon:0kB active_file:2256kB inactive_file:150128kB unevictable:3536kB writepending:192kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:39172kB local_pcp:18040kB free_cma:0kB
[  113.533669][ T8043] lowmem_reserve[]: 0 0 0 0 0
[  113.535593][ T8043] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  113.547967][ T8043] lowmem_reserve[]: 0 0 854 854 854
[  113.550130][ T8043] Node 1 Normal free:399236kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6604kB inactive_anon:0kB active_file:1780kB inactive_file:2768kB unevictable:3536kB writepending:200kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:43872kB local_pcp:21176kB free_cma:0kB
[  113.563350][ T8043] lowmem_reserve[]: 0 0 0 0 0
[  113.565789][ T8043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  113.571013][ T8043] Node 0 DMA32: 675*4kB (UME) 240*8kB (UM) 159*16kB (UME) 120*32kB (UME) 149*64kB (UME) 69*128kB (UME) 19*256kB (UME) 16*512kB (UME) 9*1024kB (UME) 5*2048kB (UME) 53*4096kB (M) = 278972kB
[  113.578554][ T8043] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  113.584965][ T8043] Node 1 Normal: 317*4kB (U) 776*8kB (U) 817*16kB (UME) 642*32kB (UE) 266*64kB (UE) 75*128kB (UE) 23*256kB (UE) 12*512kB (UM) 12*1024kB (UME) 6*2048kB (U) 72*4096kB (UM) = 399236kB
[  113.592108][ T8043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.595798][ T8043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.600572][ T8043] 41682 total pagecache pages
[  113.604546][ T8043] 0 pages in swap cache
[  113.606348][ T8043] Free swap  = 124996kB
[  113.608163][ T8043] Total swap = 124996kB
[  113.609763][ T8043] 786301 pages RAM
[  113.611227][ T8043] 0 pages HighMem/MovableOnly
[  113.613102][ T8043] 241056 pages reserved
[  113.614756][ T8043] 0 pages cma reserved
[  113.651116][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  113.663695][    C0] Unknown status report in ack skb
[  113.792541][ T8059] "syz.0.649" (8059) uses obsolete ecb(arc4) skcipher
[  113.904426][ T8073] xt_TCPMSS: Only works on TCP SYN packets
[  114.028071][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.035763][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.038594][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.041286][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.043952][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.046532][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.049244][ T8083] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  114.624849][ T8112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.630174][ T8112] syzkaller0: entered promiscuous mode
[  114.633125][ T8112] syzkaller0: entered allmulticast mode
[  114.670514][ T8112] tipc: Resetting bearer <eth:syzkaller0>
[  114.674331][ T8110] tipc: Resetting bearer <eth:syzkaller0>
[  114.691903][ T8110] tipc: Disabling bearer <eth:syzkaller0>
[  115.345629][ T8172] bond5: entered promiscuous mode
[  115.347503][ T8172] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.417613][ T8172] bond5 (unregistering): Released all slaves
[  115.550618][ T8179] __nla_validate_parse: 11 callbacks suppressed
[  115.550634][ T8179] netlink: 5 bytes leftover after parsing attributes in process `syz.1.685'.
[  115.574404][ T8179] netlink: 'syz.1.685': attribute type 21 has an invalid length.
[  115.577018][ T8179] netlink: 'syz.1.685': attribute type 1 has an invalid length.
[  115.847722][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'.
[  115.854645][ T8186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'.
[  116.284382][ T8201] atomic_op ffff88801fc60998 conn xmit_atomic 0000000000000000
[  116.290032][ T8201] x_tables: duplicate underflow at hook 4
[  116.353054][ T8202] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.356486][ T8202] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.359762][ T8202] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.362950][ T8202] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.729747][ T8204] net_ratelimit: 3323 callbacks suppressed
[  116.729758][ T8204] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  116.995507][ T8216] netlink: 'syz.1.699': attribute type 2 has an invalid length.
[  117.066642][ T8220] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  117.264034][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'.
[  117.272618][ T8238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'.
[  117.278349][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.284053][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.708'.
[  117.304640][    C0] Unknown status report in ack skb
[  117.437416][ T8252] ip6gre2: entered promiscuous mode
[  117.451165][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[  117.461626][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.712'.
[  117.569136][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  118.107778][ T8296] netlink: 'syz.2.727': attribute type 1 has an invalid length.
[  118.156931][ T8296] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  118.536306][ T8333] netlink: 'syz.1.738': attribute type 2 has an invalid length.
[  118.577544][ T8339] ipt_ECN: cannot use operation on non-tcp rule
[  118.615441][ T8342] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  118.742627][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.745010][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.811198][ T8361] netlink: 'syz.0.746': attribute type 2 has an invalid length.
[  119.022928][ T8380] netlink: 'syz.2.752': attribute type 83 has an invalid length.
[  119.395746][ T8397] erspan0: entered promiscuous mode
[  119.398138][ T8397] erspan0: entered allmulticast mode
[  119.500137][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.717091][ T8410] Cannot find set identified by id 0 to match
[  119.958134][ T5219] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  120.062791][ T8419] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  120.079661][ T8419] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  120.391192][ T8438] lo speed is unknown, defaulting to 1000
[  120.435063][ T8443] lo speed is unknown, defaulting to 1000
[  120.602712][ T8454] __nla_validate_parse: 13 callbacks suppressed
[  120.602730][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'.
[  120.711487][ T8443] syzkaller1: entered promiscuous mode
[  120.713796][ T8443] syzkaller1: entered allmulticast mode
[  120.730316][ T8460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.778'.
[  121.169720][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'.
[  121.172976][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'.
[  121.291748][ T8488] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  121.352508][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.791'.
[  121.356115][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'.
[  121.364387][ T8490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.790'.
[  121.390330][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'.
[  121.394199][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.793'.
[  121.400119][ T8501] netlink: 'syz.2.794': attribute type 2 has an invalid length.
[  121.614494][ T8521] Cannot find set identified by id 0 to match
[  121.648518][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  121.652937][ T8525] netlink: 'syz.1.801': attribute type 2 has an invalid length.
[  121.665399][ T8524] bond0: entered promiscuous mode
[  121.667545][ T8524] bond_slave_0: entered promiscuous mode
[  121.674675][ T8524] bond0: left promiscuous mode
[  121.676561][ T8524] bond_slave_0: left promiscuous mode
[  121.718424][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.910842][ T8543] ipt_ECN: cannot use operation on non-tcp rule
[  121.921471][ T8545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  122.091519][ T8559] netlink: 'syz.2.813': attribute type 1 has an invalid length.
[  122.126058][ T8559] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  122.131793][ T8559] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  122.214889][ T8559] gretap1: entered promiscuous mode
[  122.233787][ T8559] bond2: (slave gretap1): making interface the new active one
[  122.241665][ T8559] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  122.269433][ T8559] macvlan3: entered promiscuous mode
[  122.271242][ T8559] macvlan3: entered allmulticast mode
[  122.288800][ T8559] bond2: entered promiscuous mode
[  122.291720][ T8559] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  122.310020][ T8559] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  122.316713][ T8559] bond2: left promiscuous mode
[  122.432458][ T8585] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  122.576464][ T8600] netlink: 'syz.0.823': attribute type 2 has an invalid length.
[  122.731288][ T8613] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  122.785572][ T8619] geneve1: entered promiscuous mode
[  122.788074][ T8619] geneve1: entered allmulticast mode
[  122.924663][ T8632] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  122.969977][ T8632] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  122.975386][ T8632] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  123.046790][ T8640] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  123.140734][ T8649] netlink: 'syz.0.838': attribute type 5 has an invalid length.
[  123.242440][ T8658] netlink: 'syz.1.842': attribute type 38 has an invalid length.
[  123.246026][ T8658] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[  123.627757][ T8668] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[  123.662704][ T8668] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  123.665920][ T8668] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  123.669797][ T8668] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  123.672983][ T8668] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  123.677496][ T8668] bond4: (slave geneve2): making interface the new active one
[  123.681191][ T8668] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  123.689746][ T8668] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.803245][ T8672] pimreg: entered allmulticast mode
[  124.563964][ T8670] pimreg: left allmulticast mode
[  124.659008][ T8698] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.950937][ T8722] Cannot find set identified by id 0 to match
[  125.064671][ T8724] lo speed is unknown, defaulting to 1000
[  125.131644][ T8731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  125.256864][ T8731] netlink: 'syz.1.867': attribute type 10 has an invalid length.
[  125.295302][ T8731] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  125.467474][ T8752] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  125.471200][ T8752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.572419][ T8764] netlink: 'syz.0.875': attribute type 2 has an invalid length.
[  125.846807][ T8783] syzkaller1: entered promiscuous mode
[  125.849151][ T8783] syzkaller1: entered allmulticast mode
[  126.048072][ T8791] __nla_validate_parse: 17 callbacks suppressed
[  126.048090][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'.
[  126.147779][ T8793] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  126.436366][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.886'.
[  126.445949][ T8796] netlink: 'syz.1.886': attribute type 7 has an invalid length.
[  126.449841][ T8796] netlink: 'syz.1.886': attribute type 8 has an invalid length.
[  126.450773][ T8798] netlink: 'syz.2.887': attribute type 1 has an invalid length.
[  126.452207][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'.
[  126.457553][ T8798] netlink: 'syz.2.887': attribute type 2 has an invalid length.
[  126.460502][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[  126.471487][ T8796] xt_socket: unknown flags 0xd0
[  126.480642][ T8796] netlink: 5 bytes leftover after parsing attributes in process `syz.1.886'.
[  126.484294][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'.
[  126.488610][ T8796] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  126.790478][ T8810] syzkaller0: entered promiscuous mode
[  126.792361][ T8810] syzkaller0: entered allmulticast mode
[  126.884219][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.893'.
[  127.343359][ T8836] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.900'.
[  127.460795][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.904'.
[  127.474515][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'.
[  127.565053][ T8851] lo speed is unknown, defaulting to 1000
[  127.651967][ T8857] delete_channel: no stack
[  127.832945][ T8869] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.867312][ T8869] bond5: (slave gretap1): making interface the new active one
[  127.877524][ T8869] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  127.932192][ T8869] syz.1.913 (8869) used greatest stack depth: 19592 bytes left
[  128.210844][ T8898] validate_nla: 3 callbacks suppressed
[  128.210860][ T8898] netlink: 'syz.1.922': attribute type 6 has an invalid length.
[  128.297195][ T8902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.327277][ T8902] syzkaller0: entered promiscuous mode
[  128.329169][ T8902] syzkaller0: entered allmulticast mode
[  128.331340][ T8902] tipc: Resetting bearer <eth:syzkaller0>
[  128.458173][ T8900] tipc: Resetting bearer <eth:syzkaller0>
[  129.308998][   T24] tipc: Node number set to 244378680
[  130.245239][ T8872] Set syz1 is full, maxelem 65536 reached
[  130.263061][ T8900] tipc: Disabling bearer <eth:syzkaller0>
[  130.552393][ T8928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  130.558601][ T8928] netlink: 'syz.0.933': attribute type 12 has an invalid length.
[  130.695978][ T8945] netlink: 'syz.1.940': attribute type 2 has an invalid length.
[  130.761489][ T8950] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  130.764524][ T8950] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  130.949824][ T8965] netlink: 'syz.0.946': attribute type 1 has an invalid length.
[  131.532766][ T8976] __nla_validate_parse: 14 callbacks suppressed
[  131.532783][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'.
[  131.539801][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'.
[  131.606098][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'.
[  131.668985][ T8980] netlink: 'syz.1.953': attribute type 2 has an invalid length.
[  131.702497][ T8986] ipt_ECN: cannot use operation on non-tcp rule
[  131.953100][ T9009] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  131.955572][ T9009] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  132.101792][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'.
[  132.104862][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'.
[  132.108102][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'.
[  132.112368][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'.
[  132.300285][ T9030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.971'.
[  132.344658][ T9034] ipt_ECN: cannot use operation on non-tcp rule
[  132.531332][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.977'.
[  132.534961][ T9049] netlink: 'syz.1.977': attribute type 7 has an invalid length.
[  132.539178][ T9049] netlink: 'syz.1.977': attribute type 8 has an invalid length.
[  132.542195][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'.
[  132.580280][ T9051] netlink: 'syz.0.978': attribute type 2 has an invalid length.
[  132.601571][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.605037][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.694772][ T9059] ipt_ECN: cannot use operation on non-tcp rule
[  132.755776][ T9067] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  133.305536][ T9104] netlink: 'syz.2.994': attribute type 2 has an invalid length.
[  133.970594][ T9112] syzkaller0: left promiscuous mode
[  133.973022][ T9112] syzkaller0: left allmulticast mode
[  134.388736][ T9121] netlink: 'syz.1.1001': attribute type 2 has an invalid length.
[  134.392082][ T9121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  134.472110][ T9128] netlink: 'syz.2.1003': attribute type 9 has an invalid length.
[  134.477113][ T9128] netlink: 'syz.2.1003': attribute type 6 has an invalid length.
[  134.580871][ T9128] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.584215][ T9128] bridge0: port 1() entered disabled state
[  134.759997][ T9128] veth0_macvtap: left allmulticast mode
[  134.775750][ T9128] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.779945][ T9128] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.783556][ T9128] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.787235][ T9128] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.835041][ T9128] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  134.842199][ T9128] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  134.845852][ T9128] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  134.851649][ T9128] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  135.001945][ T9141] netlink: 'syz.2.1007': attribute type 2 has an invalid length.
[  135.137387][ T9149] netlink: 'syz.0.1010': attribute type 1 has an invalid length.
[  135.663136][ T9186] openvswitch: netlink: IP tunnel dst address not specified
[  136.327330][ T9204] lo speed is unknown, defaulting to 1000
[  136.949287][ T9230] ipt_ECN: cannot use operation on non-tcp rule
[  137.205316][ T9242] __nla_validate_parse: 19 callbacks suppressed
[  137.205338][ T9242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1042'.
[  137.215442][ T9242] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1042'.
[  137.254071][ T9245] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1043'.
[  137.291031][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1043'.
[  137.477249][ T9256] lo speed is unknown, defaulting to 1000
[  137.593830][ T9260] netlink: 'syz.0.1047': attribute type 2 has an invalid length.
[  137.727390][ T9267] ipt_ECN: cannot use operation on non-tcp rule
[  137.900412][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1051'.
[  137.983236][ T9275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1052'.
[  138.202318][ T9249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.574354][ T9288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.577603][ T9288] syzkaller0: entered promiscuous mode
[  138.580738][ T9288] syzkaller0: entered allmulticast mode
[  138.599912][ T9288] tipc: Resetting bearer <eth:syzkaller0>
[  138.604729][ T9287] tipc: Resetting bearer <eth:syzkaller0>
[  138.619150][ T9287] tipc: Disabling bearer <eth:syzkaller0>
[  138.769630][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  138.800754][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  138.847327][ T9298] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1059'.
[  139.004114][ T9301] openvswitch: netlink: IPv4 tun info is not correct
[  139.042539][ T9308] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1061'.
[  139.065559][ T9310] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  139.764256][ T5891] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  139.780643][ T9334] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  139.964222][ T9348] ipt_ECN: cannot use operation on non-tcp rule
[  140.157324][ T9364] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  140.226838][ T9369] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[  140.248813][ T9369] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[  140.532435][ T9395] netlink: 'syz.1.1089': attribute type 14 has an invalid length.
[  140.535215][ T9395] netlink: 'syz.1.1089': attribute type 14 has an invalid length.
[  140.672290][ T9402] netlink: 'syz.2.1092': attribute type 83 has an invalid length.
[  141.462221][ T9422] netlink: 'syz.0.1096': attribute type 5 has an invalid length.
[  141.648063][   T26] wlan1: Trigger new scan to find an IBSS to join
[  141.881951][ T9439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.928718][ T9439] syzkaller0: entered promiscuous mode
[  141.931240][ T9439] syzkaller0: entered allmulticast mode
[  141.934267][ T9439] tipc: Resetting bearer <eth:syzkaller0>
[  141.952081][ T9438] tipc: Resetting bearer <eth:syzkaller0>
[  143.748449][ T9438] tipc: Disabling bearer <eth:syzkaller0>
[  143.864643][ T9461] __nla_validate_parse: 17 callbacks suppressed
[  143.864658][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'.
[  143.870288][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1110'.
[  144.093632][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  144.096780][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1120'.
[  144.232767][ T9496] netlink: 'syz.0.1122': attribute type 8 has an invalid length.
[  144.289231][ T9491] netlink: 'syz.1.1121': attribute type 2 has an invalid length.
[  144.292494][ T9491] netlink: 'syz.1.1121': attribute type 1 has an invalid length.
[  144.370724][ T9504] netlink: 'syz.1.1125': attribute type 23 has an invalid length.
[  144.528087][ T9513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.530866][ T9513] syzkaller0: entered promiscuous mode
[  144.532626][ T9513] syzkaller0: entered allmulticast mode
[  144.557547][ T9513] tipc: Resetting bearer <eth:syzkaller0>
[  144.598857][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  144.603889][ T9516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1130'.
[  144.721682][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  144.948272][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'.
[  145.059789][ T9550] syzkaller0: entered promiscuous mode
[  145.062131][ T9550] syzkaller0: entered allmulticast mode
[  147.018076][ T9565] syzkaller0: Caught tx_queue_len zero misconfig
[  147.073095][ T9569] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  147.086530][ T9569] macsec1: entered promiscuous mode
[  147.089225][ T9569] macsec1: entered allmulticast mode
[  147.090980][ T9569] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  147.327391][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'.
[  147.460276][ T9588] team0: Port device ip6gretap2 added
[  147.606892][ T9600] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1154'.
[  147.638390][   T27] wlan1: Creating new IBSS network, BSSID ae:18:92:20:aa:37
[  147.790533][ T9607] ipt_ECN: cannot use operation on non-tcp rule
[  147.835111][ T9609] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1158'.
[  151.181832][ T9631] ip6gre1: entered allmulticast mode
[  151.933158][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  152.213449][ T9653] gtp1: entered promiscuous mode
[  152.215550][ T9653] gtp1: entered allmulticast mode
[  152.226661][ T9654] gtp2: entered promiscuous mode
[  152.232451][ T9654] gtp2: entered allmulticast mode
[  152.238071][ T9657] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  152.839227][ T9696] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1186'.
[  152.908644][ T9700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'.
[  152.965424][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'.
[  152.973794][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'.
[  152.981136][ T9704] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  152.987683][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.050191][ T9708] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  153.119772][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1191'.
[  153.123594][ T9712] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1191'.
[  153.185602][ T9706] dvmrp0: entered allmulticast mode
[  153.226701][ T9716] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1193'.
[  153.227223][ T9719] validate_nla: 1 callbacks suppressed
[  153.227239][ T9719] netlink: 'syz.1.1192': attribute type 10 has an invalid length.
[  153.278537][ T9719] bridge0: port 3(erspan0) entered blocking state
[  153.281480][ T9719] bridge0: port 3(erspan0) entered listening state
[  153.287727][ T9719] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  153.292761][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'.
[  153.362689][ T9721] erspan0: left allmulticast mode
[  153.364959][ T9721] erspan0: left promiscuous mode
[  153.372891][ T9721] bridge0: port 3(erspan0) entered disabled state
[  153.380012][ T9721] bridge_slave_0: left allmulticast mode
[  153.382571][ T9721] bridge_slave_0: left promiscuous mode
[  153.386409][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.411443][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'.
[  153.430992][ T9721] bond0: (slave bridge0): Releasing backup interface
[  153.490706][ T9727] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  153.552429][ T9727] bond5: (slave bridge3): making interface the new active one
[  153.555847][ T9727] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  153.630829][ T9734] netlink: 'syz.2.1198': attribute type 7 has an invalid length.
[  153.634625][ T9734] netlink: 'syz.2.1198': attribute type 8 has an invalid length.
[  153.639187][ T9734] netlink: 'syz.2.1198': attribute type 15 has an invalid length.
[  154.657787][ T9751] veth5: entered promiscuous mode
[  154.871854][ T9782] openvswitch: netlink: Missing valid actions attribute.
[  154.874222][ T9782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.899348][ T9782] delete_channel: no stack
[  154.941035][ T9787] netlink: 'syz.1.1214': attribute type 2 has an invalid length.
[  155.470997][ T9834] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  155.816586][ T9862] netlink: 'syz.0.1236': attribute type 2 has an invalid length.
[  156.132306][ T9879] xt_nfacct: accounting object `syz1' does not exists
[  156.399640][ T9897] sch_tbf: burst 88 is lower than device veth1 mtu (1514) !
[  156.510505][ T9908] netlink: 'syz.1.1253': attribute type 1 has an invalid length.
[  156.513710][ T9910] netlink: 'syz.0.1254': attribute type 1 has an invalid length.
[  156.546706][ T9910] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  156.568611][ T9910] veth5: entered promiscuous mode
[  156.580667][ T9910] erspan0: left allmulticast mode
[  156.582352][ T9910] erspan0: left promiscuous mode
[  156.584504][ T9910] bridge0: port 1(erspan0) entered disabled state
[  156.607937][ T9910] bond0: (slave team0): Releasing backup interface
[  156.627766][ T9910] bond4: (slave ip6gretap1): Releasing backup interface
[  156.659907][ T9915] netlink: 'syz.1.1256': attribute type 1 has an invalid length.
[  156.686764][ T9915] 8021q: adding VLAN 0 to HW filter on device bond6
[  156.697106][ T9915] vlan2: entered allmulticast mode
[  156.703770][ T9915] geneve1: entered allmulticast mode
[  156.706481][ T9915] bond6: (slave vlan2): Opening slave failed
[  156.950594][ T9937] syzkaller1: entered promiscuous mode
[  156.952992][ T9937] syzkaller1: entered allmulticast mode
[  157.550648][ T9990] xt_l2tp: invalid flags combination: c
[  157.583600][ T9987] __nla_validate_parse: 10 callbacks suppressed
[  157.583618][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1281'.
[  157.643252][ T9995] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1284'.
[  157.854309][T10013] netlink: zone id is out of range
[  157.856551][T10013] netlink: zone id is out of range
[  158.021938][T10029] x_tables: duplicate underflow at hook 1
[  158.023925][T10030] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1292'.
[  158.112881][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'.
[  158.724168][T10046] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1300'.
[  158.768405][T10049] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.790761][T10050] netlink: 4184 bytes leftover after parsing attributes in process `syz.1.1299'.
[  159.020666][T10059] validate_nla: 5 callbacks suppressed
[  159.020683][T10059] netlink: 'syz.2.1304': attribute type 1 has an invalid length.
[  159.026321][T10059] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1304'.
[  159.259443][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'.
[  159.399033][T10080] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1311'.
[  159.427205][T10080] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  159.480979][T10084] netlink: zone id is out of range
[  159.495586][T10084] ieee802154 phy0 wpan0: encryption failed: -22
[  159.505886][T10084] ieee802154 phy0 wpan0: encryption failed: -22
[  159.515671][T10084] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1313'.
[  159.580758][T10093] netlink: 'syz.1.1316': attribute type 2 has an invalid length.
[  160.025002][T10132] netlink: 'syz.2.1324': attribute type 2 has an invalid length.
[  160.132412][T10143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.148252][T10147] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  160.208949][T10151] lo speed is unknown, defaulting to 1000
[  161.120731][T10162] netlink: 'syz.1.1333': attribute type 2 has an invalid length.
[  161.444142][T10173] lo speed is unknown, defaulting to 1000
[  161.480934][T10171] sctp: [Deprecated]: syz.0.1336 (pid 10171) Use of int in max_burst socket option.
[  161.480934][T10171] Use struct sctp_assoc_value instead
[  161.606563][T10181] batadv2: entered promiscuous mode
[  161.641182][T10183] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  161.736995][T10187] netlink: 'syz.0.1342': attribute type 2 has an invalid length.
[  162.243933][T10217] nbd: must specify at least one socket
[  162.253681][T10217] dvmrp0: left allmulticast mode
[  162.430880][T10233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.479137][T10236] netlink: 'syz.0.1359': attribute type 1 has an invalid length.
[  162.715833][T10253] __nla_validate_parse: 4 callbacks suppressed
[  162.715853][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'.
[  162.764443][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'.
[  162.768850][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'.
[  162.856269][T10267] lo speed is unknown, defaulting to 1000
[  163.020091][T10273] syzkaller1: entered promiscuous mode
[  163.021765][T10273] syzkaller1: entered allmulticast mode
[  163.093626][T10267] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000
[  163.096597][T10270] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000
[  163.105547][T10267] geneve0: entered promiscuous mode
[  163.107694][T10267] geneve0: entered allmulticast mode
[  163.267426][T10282] netlink: 'syz.1.1376': attribute type 2 has an invalid length.
[  163.326769][T10285] netlink: 'syz.1.1377': attribute type 3 has an invalid length.
[  163.332118][T10285] netlink: 'syz.1.1377': attribute type 3 has an invalid length.
[  163.641812][T10306] netlink: 'syz.2.1384': attribute type 2 has an invalid length.
[  163.790907][T10318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'.
[  163.794665][T10318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'.
[  163.825514][T10323] erspan0: left promiscuous mode
[  163.827089][T10323] erspan0: left allmulticast mode
[  163.834343][T10323] macvtap0: left promiscuous mode
[  163.836122][T10323] macvtap0: left allmulticast mode
[  163.838292][T10323] geneve1: left promiscuous mode
[  163.844719][T10323] geneve1: left allmulticast mode
[  163.857392][T10323] veth3: left promiscuous mode
[  163.859814][T10323] gretap1: left promiscuous mode
[  163.862331][T10323] ip6gre1: left allmulticast mode
[  163.867224][T10323] veth5: left promiscuous mode
[  163.894814][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'.
[  163.942841][T10339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'.
[  163.949754][T10339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'.
[  163.952662][T10339] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1396'.
[  164.076702][T10347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'.
[  164.286161][T10369] lo speed is unknown, defaulting to 1000
[  164.641653][T10389] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  164.645884][T10389] batadv_slave_1: entered promiscuous mode
[  164.650593][T10389] hsr0: Slave A (netdevsim2) is not up; please bring it up to get a fully working HSR network
[  164.653936][T10389] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.813927][T10398] netlink: 'syz.2.1412': attribute type 1 has an invalid length.
[  164.816807][T10398] NCSI netlink: No device for ifindex 813332851
[  165.261826][T10419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.595158][T10438] netlink: 'syz.0.1427': attribute type 1 has an invalid length.
[  165.620312][T10438] 8021q: adding VLAN 0 to HW filter on device bond5
[  165.907352][T10455] ip6gre3: entered allmulticast mode
[  165.960822][T10457] netlink: 'syz.1.1433': attribute type 2 has an invalid length.
[  166.064022][T10462] 0: renamed from hsr_slave_1
[  166.069957][T10462] 0: entered allmulticast mode
[  166.072720][T10462] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  166.443559][T10476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.509091][T10481] ipt_ECN: cannot use operation on non-tcp rule
[  166.607089][T10489] sctp: [Deprecated]: syz.1.1444 (pid 10489) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.607089][T10489] Use struct sctp_sack_info instead
[  167.121714][T10540] ipt_ECN: cannot use operation on non-tcp rule
[  167.170963][T10542] bond6: entered promiscuous mode
[  167.173167][T10542] 8021q: adding VLAN 0 to HW filter on device bond6
[  167.230069][T10549] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  167.327389][T10556] Cannot find add_set index 3 as target
[  167.504675][T10570] xt_CT: You must specify a L4 protocol and not use inversions on it
[  167.642200][  T950] wlan0: Trigger new scan to find an IBSS to join
[  167.725683][T10588] 8021q: VLANs not supported on ip_vti0
[  167.866042][T10599] __nla_validate_parse: 32 callbacks suppressed
[  167.866063][T10599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1477'.
[  167.897360][T10599] tun0: tun_chr_ioctl cmd 1074025675
[  167.899847][T10599] tun0: persist enabled
[  167.908551][T10599] tun0: tun_chr_ioctl cmd 1074025675
[  167.910937][T10599] tun0: persist disabled
[  167.985301][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'.
[  168.005965][T10615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1481'.
[  168.076718][T10620] netlink: 'syz.1.1483': attribute type 10 has an invalid length.
[  168.079577][T10620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1483'.
[  168.082952][T10620] dummy0: entered promiscuous mode
[  168.084932][T10620] dummy0: entered allmulticast mode
[  168.094309][T10620] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  168.101097][T10617] lo speed is unknown, defaulting to 1000
[  168.307142][T10637] openvswitch: netlink: Multiple metadata blocks provided
[  168.384363][T10641] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  168.440264][T10643] ipt_ECN: cannot use operation on non-tcp rule
[  168.475593][T10645] x_tables: ip_tables: icmp match: only valid for protocol 1
[  168.692980][T10667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1498'.
[  168.771059][T10674] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  168.795077][T10680] netlink: 'syz.0.1500': attribute type 2 has an invalid length.
[  168.883625][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'.
[  168.889857][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1501'.
[  168.963237][T10687] lo speed is unknown, defaulting to 1000
[  168.972364][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  168.979150][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  168.982798][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1504'.
[  169.452743][T10717] x_tables: duplicate underflow at hook 3
[  169.633248][T10734] xt_cgroup: xt_cgroup: no path or classid specified
[  169.833829][T10749] ipt_ECN: cannot use operation on non-tcp rule
[  170.115062][T10773] gretap0: entered promiscuous mode
[  170.464883][T10800] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  170.678293][ T6586] wlan0: Trigger new scan to find an IBSS to join
[  170.749774][T10823] lo speed is unknown, defaulting to 1000
[  171.195986][T10869] x_tables: duplicate entry at hook 1
[  171.378102][T10880] netlink: 'syz.2.1559': attribute type 1 has an invalid length.
[  171.793164][T10882] xt_l2tp: invalid flags combination: c
[  172.311996][T10901] xt_l2tp: invalid flags combination: c
[  172.465993][T10924] netlink: 'syz.1.1574': attribute type 21 has an invalid length.
[  172.475302][T10924] netlink: 'syz.1.1574': attribute type 6 has an invalid length.
[  172.536998][T10931] ipt_ECN: cannot use operation on non-tcp rule
[  173.029952][T10900] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  173.072194][T10968] __nla_validate_parse: 20 callbacks suppressed
[  173.072212][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1586'.
[  173.153083][T10974] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode
[  173.291509][T10982] netlink: 'syz.1.1591': attribute type 2 has an invalid length.
[  173.401220][T10987] netlink: 'syz.2.1593': attribute type 1 has an invalid length.
[  173.572697][T10998] syzkaller1: tun_chr_ioctl cmd 1074025672
[  173.575342][T10998] syzkaller1: ignored: set checksum disabled
[  173.654571][T11003] netlink: 'syz.0.1600': attribute type 2 has an invalid length.
[  173.884726][T11027] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1607'.
[  173.891605][T11027] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1607'.
[  173.915879][T11028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'.
[  174.656008][T11038] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1610'.
[  174.694428][T11040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.851937][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'.
[  174.979555][T11066] IPVS: length: 125 != 8
[  174.982752][T11066] netlink: 'syz.2.1621': attribute type 11 has an invalid length.
[  175.032374][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'.
[  175.036023][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'.
[  175.111047][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  175.276558][T11086] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1630'.
[  175.449471][T11102] netlink: 'syz.0.1637': attribute type 10 has an invalid length.
[  175.454366][T11102] batman_adv: batadv0: Adding interface: team0
[  175.456989][T11102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.471913][T11102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  175.494076][T11106] netlink: 'syz.0.1637': attribute type 10 has an invalid length.
[  175.496962][T11106] team0: entered promiscuous mode
[  175.503502][T11106] 8021q: adding VLAN 0 to HW filter on device team0
[  175.521282][T11106] batman_adv: batadv0: Interface activated: team0
[  175.524181][T11106] batman_adv: batadv0: Interface deactivated: team0
[  175.526949][T11106] batman_adv: batadv0: Removing interface: team0
[  175.535676][T11106] bridge0: port 1(team0) entered blocking state
[  175.540214][T11106] bridge0: port 1(team0) entered disabled state
[  175.543269][T11106] team0: entered allmulticast mode
[  175.580391][T11108] netlink: 'syz.2.1639': attribute type 1 has an invalid length.
[  176.128282][T11135] netlink: 'syz.0.1649': attribute type 2 has an invalid length.
[  176.970706][T11181] netlink: 'syz.2.1668': attribute type 6 has an invalid length.
[  177.179774][   T33] audit: type=1800 audit(1752851798.549:2): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1671" name=33FFFF dev="tmpfs" ino=2602 res=0 errno=0
[  177.391906][T11210] lo speed is unknown, defaulting to 1000
[  177.662259][T11230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  177.942179][T11247] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  178.358055][T11282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.394529][T11285] __nla_validate_parse: 23 callbacks suppressed
[  178.394550][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'.
[  178.404162][T11285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1703'.
[  178.412051][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'.
[  178.416242][T11286] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1703'.
[  178.440085][T11289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1705'.
[  178.476219][T11291] netlink: 'syz.1.1704': attribute type 3 has an invalid length.
[  178.496088][T11291] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1704'.
[  178.546232][T11296] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  178.560220][T11296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  178.581941][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'.
[  178.585540][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'.
[  178.646278][T11303] netlink: 'syz.1.1710': attribute type 2 has an invalid length.
[  178.807432][T11309] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1713'.
[  178.904384][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1712'.
[  179.053091][T11322] netlink: 'syz.1.1718': attribute type 1 has an invalid length.
[  179.095899][T11322] 8021q: adding VLAN 0 to HW filter on device bond7
[  179.098543][T11327] netlink: 'syz.0.1719': attribute type 1 has an invalid length.
[  180.369387][T11369] syzkaller1: entered promiscuous mode
[  180.371596][T11369] syzkaller1: entered allmulticast mode
[  180.580941][T11379] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING
[  180.695345][T11389] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  180.701087][T11389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  181.040323][    C0] ------------[ cut here ]------------
[  181.043009][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  181.047667][    C0] WARNING: CPU: 0 PID: 11411 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  181.051889][    C0] Modules linked in:
[  181.054126][    C0] CPU: 0 UID: 0 PID: 11411 Comm: syz.2.1749 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  181.060555][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.064790][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  181.067446][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 9a 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  181.074459][    C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00010246
[  181.076894][    C0] RAX: dc766dc1c73b0600 RBX: 000000000000000c RCX: ffff888041799cc0
[  181.080267][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  181.083943][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  181.087306][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88803c8e6928
[  181.090603][    C0] R13: 0000000000000000 R14: ffff888039d00e40 R15: ffff888039d030d8
[  181.093760][    C0] FS:  00007fe36d81c6c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  181.097706][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  181.100626][    C0] CR2: 000000110c3704ae CR3: 0000000026c5e000 CR4: 00000000000006f0
[  181.104073][    C0] Call Trace:
[  181.105519][    C0]  <IRQ>
[  181.106736][    C0]  rate_control_send_low+0x194/0x7a0
[  181.108998][    C0]  rate_control_get_rate+0x20b/0x5d0
[  181.111223][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  181.113744][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  181.116349][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  181.118749][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  181.121068][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  181.123365][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  181.125926][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.128350][    C0]  ? ieee80211_get_buffered_bc+0x99/0x8c0
[  181.130756][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.133038][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  181.135243][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.137516][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  181.139726][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  181.142214][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  181.144599][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  181.147647][    C0]  __iterate_interfaces+0x2ab/0x590
[  181.149849][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.151878][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  181.154551][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.157114][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  181.160170][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  181.162447][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.164798][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  181.166903][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  181.169362][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  181.171546][    C0]  handle_softirqs+0x286/0x870
[  181.173610][    C0]  ? do_softirq+0xec/0x180
[  181.175469][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  181.177639][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.179827][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.181885][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.184176][    C0]  do_softirq+0xec/0x180
[  181.185929][    C0]  </IRQ>
[  181.187214][    C0]  <TASK>
[  181.188587][    C0]  ? __pfx_do_softirq+0x10/0x10
[  181.190682][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  181.193430][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  181.195682][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  181.198004][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  181.200287][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.202264][    C0]  ? netif_receive_skb_list+0xc0/0x450
[  181.204613][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.207012][    C0]  bpf_test_run_xdp_live+0x1868/0x1b10
[  181.209580][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.211946][    C0]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  181.214349][    C0]  ? 0xffffffffa0003d80
[  181.216055][    C0]  ? 0xffffffffa0003d80
[  181.217942][    C0]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  181.220368][    C0]  ? _copy_from_user+0x94/0xb0
[  181.222350][    C0]  ? bpf_test_init+0x133/0x170
[  181.224371][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  181.226775][    C0]  bpf_prog_test_run_xdp+0x713/0x1000
[  181.229211][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.231649][    C0]  ? __fget_files+0x2a/0x420
[  181.233574][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.235929][    C0]  bpf_prog_test_run+0x2c7/0x340
[  181.238075][    C0]  __sys_bpf+0x4a4/0x860
[  181.239895][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  181.242001][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.244137][    C0]  __x64_sys_bpf+0x7c/0x90
[  181.246068][    C0]  do_syscall_64+0xfa/0x3b0
[  181.248085][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.250169][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.252607][    C0]  ? exc_page_fault+0x9f/0xf0
[  181.254595][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.257147][    C0] RIP: 0033:0x7fe36c98e9a9
[  181.259174][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.267084][    C0] RSP: 002b:00007fe36d81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  181.270522][    C0] RAX: ffffffffffffffda RBX: 00007fe36cbb5fa0 RCX: 00007fe36c98e9a9
[  181.273844][    C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  181.277235][    C0] RBP: 00007fe36ca10d69 R08: 0000000000000000 R09: 0000000000000000
[  181.280610][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.283842][    C0] R13: 0000000000000000 R14: 00007fe36cbb5fa0 R15: 00007ffc3212c568
[  181.287215][    C0]  </TASK>
[  181.288674][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  181.291698][    C0] CPU: 0 UID: 0 PID: 11411 Comm: syz.2.1749 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  181.296706][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.300885][    C0] Call Trace:
[  181.302345][    C0]  <IRQ>
[  181.303586][    C0]  dump_stack_lvl+0x99/0x250
[  181.305402][    C0]  ? __asan_memcpy+0x40/0x70
[  181.307334][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.309382][    C0]  ? __pfx__printk+0x10/0x10
[  181.311286][    C0]  panic+0x2db/0x790
[  181.312981][    C0]  ? __pfx_panic+0x10/0x10
[  181.314918][    C0]  __warn+0x31b/0x4b0
[  181.316626][    C0]  ? __rate_control_send_low+0x5df/0x820
[  181.318957][    C0]  ? __rate_control_send_low+0x5df/0x820
[  181.321350][    C0]  report_bug+0x2be/0x4f0
[  181.323166][    C0]  ? __rate_control_send_low+0x5df/0x820
[  181.325459][    C0]  ? __rate_control_send_low+0x5df/0x820
[  181.327788][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  181.330078][    C0]  handle_bug+0x84/0x160
[  181.331854][    C0]  exc_invalid_op+0x1a/0x50
[  181.333773][    C0]  asm_exc_invalid_op+0x1a/0x20
[  181.335851][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  181.338455][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 32 9a 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  181.346153][    C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00010246
[  181.348720][    C0] RAX: dc766dc1c73b0600 RBX: 000000000000000c RCX: ffff888041799cc0
[  181.352031][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  181.355291][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  181.358425][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88803c8e6928
[  181.361783][    C0] R13: 0000000000000000 R14: ffff888039d00e40 R15: ffff888039d030d8
[  181.364944][    C0]  ? __rate_control_send_low+0x5de/0x820
[  181.367300][    C0]  rate_control_send_low+0x194/0x7a0
[  181.369507][    C0]  rate_control_get_rate+0x20b/0x5d0
[  181.371736][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  181.374179][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  181.376793][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  181.378976][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  181.381332][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  181.383668][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  181.386132][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.388364][    C0]  ? ieee80211_get_buffered_bc+0x99/0x8c0
[  181.390768][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.393062][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  181.395449][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  181.397759][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  181.399999][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  181.402532][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  181.404761][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  181.407650][    C0]  __iterate_interfaces+0x2ab/0x590
[  181.409774][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.412299][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  181.415303][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  181.417681][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  181.420451][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  181.422650][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  181.425133][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  181.427362][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  181.429805][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  181.432036][    C0]  handle_softirqs+0x286/0x870
[  181.434065][    C0]  ? do_softirq+0xec/0x180
[  181.435965][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  181.438177][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.440150][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.442203][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.444574][    C0]  do_softirq+0xec/0x180
[  181.446326][    C0]  </IRQ>
[  181.447608][    C0]  <TASK>
[  181.448829][    C0]  ? __pfx_do_softirq+0x10/0x10
[  181.450839][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  181.453544][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  181.455722][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  181.457796][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  181.460070][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.462142][    C0]  ? netif_receive_skb_list+0xc0/0x450
[  181.464353][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.466622][    C0]  bpf_test_run_xdp_live+0x1868/0x1b10
[  181.468886][    C0]  ? bpf_test_run_xdp_live+0x38e/0x1b10
[  181.471208][    C0]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  181.473591][    C0]  ? 0xffffffffa0003d80
[  181.475273][    C0]  ? 0xffffffffa0003d80
[  181.477043][    C0]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  181.479497][    C0]  ? _copy_from_user+0x94/0xb0
[  181.481497][    C0]  ? bpf_test_init+0x133/0x170
[  181.483509][    C0]  ? xdp_convert_md_to_buff+0x5b/0x330
[  181.485756][    C0]  bpf_prog_test_run_xdp+0x713/0x1000
[  181.487929][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.490283][    C0]  ? __fget_files+0x2a/0x420
[  181.492167][    C0]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  181.494543][    C0]  bpf_prog_test_run+0x2c7/0x340
[  181.496580][    C0]  __sys_bpf+0x4a4/0x860
[  181.498290][    C0]  ? __pfx___sys_bpf+0x10/0x10
[  181.500290][    C0]  ? rcu_is_watching+0x15/0xb0
[  181.502269][    C0]  __x64_sys_bpf+0x7c/0x90
[  181.504086][    C0]  do_syscall_64+0xfa/0x3b0
[  181.505917][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.507962][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.510347][    C0]  ? exc_page_fault+0x9f/0xf0
[  181.512186][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.514491][    C0] RIP: 0033:0x7fe36c98e9a9
[  181.516254][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.523860][    C0] RSP: 002b:00007fe36d81c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  181.527182][    C0] RAX: ffffffffffffffda RBX: 00007fe36cbb5fa0 RCX: 00007fe36c98e9a9
[  181.530319][    C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  181.533484][    C0] RBP: 00007fe36ca10d69 R08: 0000000000000000 R09: 0000000000000000
[  181.536616][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.539665][    C0] R13: 0000000000000000 R14: 00007fe36cbb5fa0 R15: 00007ffc3212c568
[  181.542890][    C0]  </TASK>
[  181.544845][    C0] Kernel Offset: disabled
[  181.546640][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:16:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006d70
R8 =ffff888020b80237 R9 =1ffff11004170046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee897 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe36d81c6c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3704ae CR3=0000000026c5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fe36ca11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=2917b45a91c10200 RDX=0000000000000000
RSI=ffffffff8be28c20 RDI=ffffffff8be28be0 RBP=ffffffff822d69ed RSP=ffffc90003ccf2c8
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff940008b6799
R12=0000000000000002 R13=ffffffff8e13f160 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819e3e80 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555581a66500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f55caee56c0 CR3=0000000027948000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3ecc211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
