last executing test programs:

1.841830542s ago: executing program 2 (id=917):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.772925367s ago: executing program 2 (id=920):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
read(r0, &(0x7f0000000200)=""/189, 0xbd)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20)

1.462213386s ago: executing program 1 (id=925):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000fc0000000aaff02000000000000000000000000000189"], 0xfce)

1.40255518s ago: executing program 0 (id=926):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f00000011c0)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xf7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x53, 0x0, 0x0, 0x0, 0xc, 0x3c, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
setsockopt$ax25_int(r9, 0x101, 0x4, &(0x7f0000000140), 0x4)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.292393713s ago: executing program 2 (id=927):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@hopopts_2292={{0x58, 0x29, 0x36, {0x11, 0x7, '\x00', [@ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x24}}, @generic={0x0, 0x11, "0a6f24886c2919b9c75b6f880f09a62298"}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x62, 0x10, '\x00', [@pad1, @generic={0x5, 0x7c, "77144c56191d964c49d4703e52f7d70508d4df9ad4a602029d09ac49b170792e64ccdd098778bbe18f52274a9114060b7625fe199e3be32af5b9ae22850a7f96252466a346481c449f1bfb7e83eb32c8d1bec069c05b4e6d4ef07728ce52ff0b2483683383e09385a71c415f597157b811adf6fca19d92ac41de15a6"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x87, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x1c, 0x3ff}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x3a}}}], 0x190}}], 0x1, 0x20000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc815}, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket(0x10, 0x803, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan4\x00'})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan4\x00'})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$caif_stream(0x25, 0x1, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r10, 0x116, 0x80, 0x0, 0x0)

1.290483949s ago: executing program 0 (id=928):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000140001002bbd7000fedbdf270a088003", @ANYRES64=r0, @ANYBLOB="08000800e0feffff130002"], 0x34}, 0x1, 0x2}, 0x10)

1.103367436s ago: executing program 0 (id=929):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000100000001"], 0x4c}, 0x2, 0x34005}, 0x0)

1.085918596s ago: executing program 1 (id=930):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80", 0x5f}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9d", 0x4d}, {&(0x7f0000000180)="d7dbdba577061e4e52e720022b7a3b0f40cfb0205e5fc23d7555ac21b674feb3b7bf705d3b4fd1d8", 0x28}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="058b689024f5856c4d324dbf85b9336c5ead807af37bd45fa47fb87f2569a8d718aea199b9373c1acf443182093354ac457174ea38f79bd3be0836d4d8b1b5e253fe528cc924bf03f2ce18ab66cb241231500ac5c7ab3312639a7ac22d78768cd4f6b6aead55567f2a7596da8b5ea6d669b29d2fd610ece14fda55e6dfcae0e9be15eb1f4e462460dc43ae7425a6f3eda5068c41f7e64700c75559cb12fe3c31315c52c49b147ef272f95ca2", 0xac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="252caf3a209539dd4482324da34840047e322d094abd47ba796c5909ccd4e0046bb1cecbad790873c1e322ec988526e2dde59e7ff8a900c525297eea9df0d0bf652b6c78f435436a6ea7fef2d9effe14ba9d43db9cc558c50b7957a51d7e5bdec3a04a8df3113927462bd0027d86c1cc9fa13a3092e8bb88406aba1359947e1e77921c434c50461a14c4181a2dbb29e3509889c98bea7706731524d4384eba2975aef35fdf60aaf6e020ecce5bea413969fc1b26f1414ad72e997edae8c62952f17609b075a00977b79aae56b93d20b21c8a0598c508", 0xd6}, {&(0x7f0000000500)="784c0b01a72ad6f4fe791768f9cd2fac9b24b7ef16af1bd6", 0x18}, {&(0x7f0000000740)="c8c5351002a0d5111dbc320d645daea1a4e0e5bac8a8e61e196784255f1a6ef82bb66e896897bc3c9bce33ccee729652c8d013c8e6c864e0b36c903fcdb20005670600b478fc92de994a575ae4a6dca4eb8ad817066bd2701b02e1517cc3529aa5a6042875dc2946f83c83ab60e795d703d1995852bd326901a0806f822d4223c1369e583376ee67657232", 0x8b}, {&(0x7f0000000980)="efec825407ea802f072bfe7a85c949d8b8d73f094984686008e9690acbf527396af2f9eeea8379b7063a4fdf56cb778e0244b0175c079ea01cc3429d50c76b62b6340f25355199f0fdfe2ba32bec0473f29540dc59b1498855cc19e8ae17ca16129504c4ab5f6e9b22ec046c7406ec5faf7cdd02f1a3e265ad89a73585e8f87a6264e7128db660f81219ec2e3e9760b9cc04080fcd46fa5d15f84b050e5b9e3143b0814fdfbd03f128fedfecaec7842422d764fb475653adc833a6002732d4dcef623ab60a132e88dae48666b63c9bc6eefc027ea34cae4fd9067d2bfd722fdf8349aaa82acc8e394002dd8ef1df944b8c13", 0xf2}], 0x4}}], 0x4, 0x0)

1.019584848s ago: executing program 1 (id=931):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={<r1=>0x0, @multicast1, @multicast2}, &(0x7f0000000040)=0xc)
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x3, {0x1, 0xff, 0x3}}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000d00)=0x205a, 0x4)
recvfrom$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000010701e30000000000000000010000001400078008000240000000800800014080000000"], 0x28}, 0x1, 0x0, 0x0, 0x400e0}, 0x4000000)

1.019159468s ago: executing program 2 (id=932):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206030000000000000000039700000014000780080008000000004008000640000000090900020073797a32000000000500040002000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574000000009b2c3a07594f67cd67db87176ee5300e2b2a42900d13e7fb048032744c0f07a592fc1a8bafee2401557b85fc757ab0ad32370cc1e8f57ec6897989e9bb5c536c775cc4cf8b600d54b807c61d50892d6b99d3c5d0504cc3c9d02d8eff29be"], 0x64}}, 0x80)

1.018144876s ago: executing program 0 (id=933):
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xffffffffffffffff, 0x70bd2c, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9b0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0xe, 0xe3, 0x90}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000100), &(0x7f0000000100)=""/15, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)

991.592109ms ago: executing program 1 (id=934):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x4, [@enum={0xe, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x6}, {0xe, 0x1}, {0x4, 0x4}, {0x8, 0xfffffff9}, {0xa, 0xfffffffa}, {0x3, 0x1}, {0x2, 0x581}, {0x2, 0x6}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum64={0x6, 0xa, 0x0, 0x13, 0x1, 0x5, [{0x4, 0x6, 0x9}, {0x9, 0x1, 0x5}, {0xe, 0x4, 0xc36a66fd}, {0x2, 0xe5, 0x2}, {0x8, 0x5, 0x6}, {0xb, 0x3, 0x9}, {0xc, 0x10001}, {0xf, 0xcc9, 0x6}, {0x2, 0x3, 0xa74b}, {0xe, 0x4, 0xfffffffa}]}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x3b, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x3}}, @const={0x6, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000080)=""/118, 0x154, 0x76, 0x0, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, r3, 0x0, 0x5, 0x4}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x138, 0x138, 0x4, [@enum={0xe, 0x8, 0x0, 0x6, 0x4, [{0xb, 0x6}, {0xe, 0x1}, {0x4, 0x4}, {0x8, 0xfffffff9}, {0xa, 0xfffffffa}, {0x3, 0x1}, {0x2, 0x581}, {0x2, 0x6}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum64={0x6, 0xa, 0x0, 0x13, 0x1, 0x5, [{0x4, 0x6, 0x9}, {0x9, 0x1, 0x5}, {0xe, 0x4, 0xc36a66fd}, {0x2, 0xe5, 0x2}, {0x8, 0x5, 0x6}, {0xb, 0x3, 0x9}, {0xc, 0x10001}, {0xf, 0xcc9, 0x6}, {0x2, 0x3, 0xa74b}, {0xe, 0x4, 0xfffffffa}]}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x3b, 0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x3}}, @const={0x6, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000080)=""/118, 0x154, 0x76, 0x0, 0x10000}, 0x28) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', r2, r3, 0x0, 0x5, 0x4}, 0x50) (async)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) (async)

899.349261ms ago: executing program 0 (id=935):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x5}})
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a00), r12)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, r13, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r14)
ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r16=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r14, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={0x1c, r15, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2004c040)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r11, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r13, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1d}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000800)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r17)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r18, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r19=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r19}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
ioctl$int_in(r20, 0x5452, &(0x7f0000000080)=0x8000000ffffffff)
shutdown(r21, 0x1)

898.672483ms ago: executing program 2 (id=936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f0000000240))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

832.707347ms ago: executing program 1 (id=937):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f0000000240))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

1.547058ms ago: executing program 0 (id=938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd64, 0x0, 0x0, 0xfffffffffffffc8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r6=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0xf4240}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)

807.136µs ago: executing program 2 (id=939):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000007ffffff000000aaff02000000000000000000000000000189"], 0xfce)

0s ago: executing program 1 (id=940):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async, rerun: 32)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000200)=0x4) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x42}, 0x2810)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

kernel console output (not intermixed with test programs):

syzkaller login: [   81.251073][ T1271] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:17705' (ED25519) to the list of known hosts.
[   91.498890][ T5839] cgroup: Unknown subsys name 'net'
[   91.584997][ T5839] cgroup: Unknown subsys name 'cpuset'
[   91.589000][ T5839] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   93.325341][ T5839] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   97.904475][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.907730][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.910430][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.913016][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.915988][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.988491][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.992735][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.996229][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.003166][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.007739][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.024044][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.027519][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.030204][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.034055][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.038482][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.194139][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   98.337482][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.341785][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.344216][ T5852] bridge_slave_0: entered allmulticast mode
[   98.348075][ T5852] bridge_slave_0: entered promiscuous mode
[   98.360893][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.363790][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.366693][ T5852] bridge_slave_1: entered allmulticast mode
[   98.371039][ T5852] bridge_slave_1: entered promiscuous mode
[   98.375107][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   98.451164][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.478470][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.527002][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   98.534521][ T5852] team0: Port device team_slave_0 added
[   98.555627][ T5852] team0: Port device team_slave_1 added
[   98.609281][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.612326][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.615151][ T5857] bridge_slave_0: entered allmulticast mode
[   98.618947][ T5857] bridge_slave_0: entered promiscuous mode
[   98.641685][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.644207][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.646884][ T5857] bridge_slave_1: entered allmulticast mode
[   98.650148][ T5857] bridge_slave_1: entered promiscuous mode
[   98.654254][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.657071][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.668914][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.692975][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.695775][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.705936][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.762738][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.764982][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.767368][ T5861] bridge_slave_0: entered allmulticast mode
[   98.772085][ T5861] bridge_slave_0: entered promiscuous mode
[   98.776786][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.785567][ T5852] hsr_slave_0: entered promiscuous mode
[   98.789192][ T5852] hsr_slave_1: entered promiscuous mode
[   98.795967][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.799171][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.802130][ T5861] bridge_slave_1: entered allmulticast mode
[   98.804896][ T5861] bridge_slave_1: entered promiscuous mode
[   98.810474][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.872063][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.881245][ T5857] team0: Port device team_slave_0 added
[   98.894298][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.898336][ T5857] team0: Port device team_slave_1 added
[   98.955883][ T5861] team0: Port device team_slave_0 added
[   98.964592][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.966673][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.974646][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.978998][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.982264][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.991688][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.996917][ T5861] team0: Port device team_slave_1 added
[   99.046903][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.049561][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.058209][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.064018][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.066350][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.074591][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.118967][ T5857] hsr_slave_0: entered promiscuous mode
[   99.122071][ T5857] hsr_slave_1: entered promiscuous mode
[   99.124544][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   99.126722][ T5857] Cannot create hsr debugfs directory
[   99.211495][ T5861] hsr_slave_0: entered promiscuous mode
[   99.214645][ T5861] hsr_slave_1: entered promiscuous mode
[   99.217493][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   99.220976][ T5861] Cannot create hsr debugfs directory
[   99.358247][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.382423][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.399847][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.421376][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.530308][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   99.537537][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   99.544947][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   99.551667][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   99.641219][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   99.647872][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.659136][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.669132][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.713300][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.743112][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   99.765540][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.768129][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.782951][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.785752][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.794298][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.829093][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   99.855894][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.858515][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.871576][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.874632][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.892541][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.935574][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   99.962903][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.965746][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.971704][   T55] Bluetooth: hci0: command tx timeout
[   99.974384][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.999001][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.001627][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.054521][   T55] Bluetooth: hci2: command tx timeout
[  100.054537][ T5236] Bluetooth: hci1: command tx timeout
[  100.144491][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.184355][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.215692][ T5852] veth0_vlan: entered promiscuous mode
[  100.240579][ T5852] veth1_vlan: entered promiscuous mode
[  100.251463][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.274939][ T5857] veth0_vlan: entered promiscuous mode
[  100.295583][ T5852] veth0_macvtap: entered promiscuous mode
[  100.300752][ T5857] veth1_vlan: entered promiscuous mode
[  100.308631][ T5852] veth1_macvtap: entered promiscuous mode
[  100.343305][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.363795][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.369055][ T5857] veth0_macvtap: entered promiscuous mode
[  100.395857][ T5857] veth1_macvtap: entered promiscuous mode
[  100.402186][ T5861] veth0_vlan: entered promiscuous mode
[  100.405187][ T5721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.421474][ T5721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.425114][ T5721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.428854][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.452154][ T5861] veth1_vlan: entered promiscuous mode
[  100.474256][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.511492][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.525943][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.537031][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.553472][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.571376][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.574718][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.588136][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.598001][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.604178][ T5861] veth0_macvtap: entered promiscuous mode
[  100.607670][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.634872][ T5861] veth1_macvtap: entered promiscuous mode
[  100.676043][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.694316][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.728047][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.738003][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.746143][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.784975][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.793939][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.794642][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.800720][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.801008][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.807570][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.830706][ T5916] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.843529][ T5916] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  100.891547][ T5918] tipc: Started in network mode
[  100.894800][ T5918] tipc: Node identity ac14140d, cluster identity 4711
[  100.897308][ T5918] tipc: New replicast peer: 255.255.255.255
[  100.900310][ T5918] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.952380][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.963661][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.003703][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.006625][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.123639][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.127923][ T5926] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  101.135128][ T5926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.140980][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.168617][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[  101.214902][ T5926] Zero length message leads to an empty skb
[  101.377315][ T5933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  101.522862][ T5942] sock: sock_set_timeout: `syz.2.7' (pid 5942) tries to set negative timeout
[  101.526660][ T5942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7'.
[  101.539028][ T5942] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[  101.675065][ T5947] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  101.784574][ T5949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'.
[  101.901280][ T1271] tipc: Node number set to 2886997005
[  101.910652][ T5958] trusted_key: syz.0.12 sent an empty control message without MSG_MORE.
[  102.060150][   T55] Bluetooth: hci0: command tx timeout
[  102.129617][   T55] Bluetooth: hci2: command tx timeout
[  102.129949][ T5236] Bluetooth: hci1: command tx timeout
[  102.871579][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'.
[  103.211916][ T5993] netlink: 'syz.1.23': attribute type 17 has an invalid length.
[  103.491916][  T163] wlan1: Trigger new scan to find an IBSS to join
[  103.541791][ T6016] tipc: Started in network mode
[  103.548439][ T6016] tipc: Node identity ae1d4d850d51, cluster identity 4711
[  103.558077][ T6016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.604179][ T6016] tipc: Resetting bearer <eth:syzkaller0>
[  103.618022][ T6015] tipc: Resetting bearer <eth:syzkaller0>
[  103.627714][ T6015] tipc: Disabling bearer <eth:syzkaller0>
[  103.754403][ T6030] netlink: 'syz.0.34': attribute type 1 has an invalid length.
[  103.757463][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'.
[  103.805708][ T6033] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[  103.808803][ T6033] netlink: 244 bytes leftover after parsing attributes in process `syz.0.36'.
[  103.828548][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.36'.
[  103.845641][ T6033] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.907409][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'.
[  104.146319][ T5236] Bluetooth: hci0: command tx timeout
[  104.209683][ T5236] Bluetooth: hci1: command tx timeout
[  104.219491][ T5236] Bluetooth: hci2: command tx timeout
[  104.373516][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.451814][ T6069] tipc: Started in network mode
[  104.453805][ T6069] tipc: Node identity de08c07ff7ad, cluster identity 4711
[  104.457597][ T6069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.473732][ T6069] syzkaller0: entered promiscuous mode
[  104.475534][ T6069] syzkaller0: entered allmulticast mode
[  104.495360][ T6069] tipc: Resetting bearer <eth:syzkaller0>
[  104.502212][ T6068] tipc: Resetting bearer <eth:syzkaller0>
[  104.515975][ T6068] tipc: Disabling bearer <eth:syzkaller0>
[  104.554650][ T6074] can: request_module (can-proto-0) failed.
[  104.562530][ T6070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.565927][ T6070] batadv_slave_0: entered promiscuous mode
[  104.904503][ T6091] syzkaller1: entered promiscuous mode
[  104.911749][ T6091] syzkaller1: entered allmulticast mode
[  104.924840][ T6091] syzkaller1: left promiscuous mode
[  104.928267][ T6091] syzkaller1: left allmulticast mode
[  105.068096][ T6107] netlink: 'syz.2.59': attribute type 1 has an invalid length.
[  105.408600][ T6135] netlink: 'syz.0.66': attribute type 1 has an invalid length.
[  105.415854][ T6135] openvswitch: netlink: IP tunnel dst address not specified
[  105.537410][ T6140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  105.655697][ T6144] netlink: 'syz.0.71': attribute type 49 has an invalid length.
[  106.212584][ T5236] Bluetooth: hci0: command tx timeout
[  106.234223][ T6183] __nla_validate_parse: 10 callbacks suppressed
[  106.234241][ T6183] netlink: 104 bytes leftover after parsing attributes in process `syz.1.83'.
[  106.293193][ T5236] Bluetooth: hci2: command tx timeout
[  106.293231][   T55] Bluetooth: hci1: command tx timeout
[  106.450118][   T39] wlan1: Trigger new scan to find an IBSS to join
[  106.578189][ T6212] netlink: 'syz.1.92': attribute type 1 has an invalid length.
[  106.581737][ T6212] netlink: 228 bytes leftover after parsing attributes in process `syz.1.92'.
[  106.615971][ T6214] ieee802154 phy0 wpan0: encryption failed: -22
[  106.647351][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'.
[  106.648569][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.767184][ T6229] netlink: 'syz.1.98': attribute type 4 has an invalid length.
[  106.806226][ T6231] netlink: 'syz.1.99': attribute type 3 has an invalid length.
[  106.871112][ T6238] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  106.875751][ T6237] netlink: 'syz.2.100': attribute type 1 has an invalid length.
[  106.884830][ T6237] netlink: 308 bytes leftover after parsing attributes in process `syz.2.100'.
[  106.885544][ T6238] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  106.894395][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[  106.907977][ T6237] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  106.927855][ T6237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.958056][ T6231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.254259][ T6257] netlink: 224 bytes leftover after parsing attributes in process `syz.0.105'.
[  107.412418][ T6265] sctp: [Deprecated]: syz.0.109 (pid 6265) Use of int in max_burst socket option.
[  107.412418][ T6265] Use struct sctp_assoc_value instead
[  107.489043][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[  107.501818][ T6269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.553352][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'.
[  107.614877][ T6283] rdma_op ffff8881188731f0 conn xmit_rdma 0000000000000000
[  107.706316][ T6290] bridge1: entered allmulticast mode
[  107.793034][ T6299] siw: device registration error -23
[  107.820289][ T6299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.924840][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.124'.
[  108.146241][ T6323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.129'.
[  108.220551][ T6325] siw: device registration error -23
[  108.235768][ T6325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.516491][ T6347] validate_nla: 5 callbacks suppressed
[  108.516530][ T6347] netlink: 'syz.0.140': attribute type 3 has an invalid length.
[  108.531647][ T6347] siw: device registration error -23
[  108.545568][ T6347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.072072][ T6372] netlink: 'syz.1.150': attribute type 3 has an invalid length.
[  109.095465][ T6372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.149260][ T6375] netlink: 'syz.1.151': attribute type 30 has an invalid length.
[  109.165556][ T5721] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.168514][ T6375] netlink: 'syz.1.151': attribute type 30 has an invalid length.
[  109.169115][ T5721] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.177262][ T5721] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.181569][ T5721] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.361527][ T6366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.389175][ T6387] openvswitch: netlink: IP tunnel dst address not specified
[  109.394908][ T6387] netlink: 'syz.1.155': attribute type 1 has an invalid length.
[  109.421706][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.444407][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.447192][ T6387] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.453734][ T6387] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  109.492921][  T163] wlan1: Trigger new scan to find an IBSS to join
[  109.508067][ T6391] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  109.654709][ T6396] netlink: 'syz.1.158': attribute type 3 has an invalid length.
[  109.678412][ T6396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.054040][ T6425] netlink: 'syz.0.166': attribute type 3 has an invalid length.
[  110.079171][ T6425] siw: device registration error -23
[  110.094955][ T6425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.402045][  T163] wlan1: Creating new IBSS network, BSSID e6:f3:62:a3:fc:b7
[  110.707941][ T6465] netlink: 'syz.0.176': attribute type 3 has an invalid length.
[  110.719229][ T6465] siw: device registration error -23
[  111.169053][ T6506] netlink: 'syz.0.184': attribute type 3 has an invalid length.
[  111.185268][ T6506] siw: device registration error -23
[  111.578437][ T6543] netlink: 'syz.0.192': attribute type 3 has an invalid length.
[  111.605198][ T6543] siw: device registration error -23
[  111.742654][ T6556] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20000
[  111.960409][ T6566] nbd2: detected capacity change from 0 to 63
[  111.964461][ T6567] nbd: nbd2 already in use
[  111.968725][ T6577] block nbd2: NBD_DISCONNECT
[  111.976739][ T6577] block nbd2: Disconnected due to user request.
[  111.979552][ T6577] block nbd2: shutting down sockets
[  111.986852][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.989748][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  111.992828][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  111.996063][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  111.999176][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.002516][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  112.005441][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.008231][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  112.012261][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.015487][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read
[  112.018435][ T5856] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.022785][ T5856] Buffer I/O error on dev nbd2, logical block 1, async page read
[  112.025630][ T5856] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.028839][ T5856] Buffer I/O error on dev nbd2, logical block 2, async page read
[  112.031995][ T5856] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.035098][ T5856] Buffer I/O error on dev nbd2, logical block 3, async page read
[  112.037806][ T5856] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.041106][ T5856] Buffer I/O error on dev nbd2, logical block 0, async page read
[  112.043657][ T5856] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.046663][ T5856] Buffer I/O error on dev nbd2, logical block 1, async page read
[  112.051508][ T5856] ldm_validate_partition_table(): Disk read failed.
[  112.055594][ T5856] Dev nbd2: unable to read RDB block 0
[  112.060842][ T5856]  nbd2: unable to read partition table
[  112.072829][ T5856] ldm_validate_partition_table(): Disk read failed.
[  112.076971][ T5856] Dev nbd2: unable to read RDB block 0
[  112.091545][ T5856]  nbd2: unable to read partition table
[  112.577629][ T6623] siw: device registration error -23
[  112.758308][ T6636] __nla_validate_parse: 15 callbacks suppressed
[  112.758327][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[  112.790211][ T6636] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.795010][ T6636] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  112.834785][ T6641] bridge_slave_0: left allmulticast mode
[  112.837048][ T6641] bridge_slave_0: left promiscuous mode
[  112.854958][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.864727][ T6641] bridge_slave_1: left allmulticast mode
[  112.867175][ T6641] bridge_slave_1: left promiscuous mode
[  112.870968][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.880496][ T6641] bond0: (slave bond_slave_0): Releasing backup interface
[  112.887579][ T6641] bond0: (slave bond_slave_1): Releasing backup interface
[  112.905413][ T6641] team0: Port device team_slave_0 removed
[  112.916233][ T6641] team0: Port device team_slave_1 removed
[  112.920723][ T6641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.923860][ T6641] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.929177][ T6641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.933016][ T6641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.986778][ T6648] net_ratelimit: 1 callbacks suppressed
[  112.986801][ T6648] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  113.025347][ T6645] siw: device registration error -23
[  113.100030][    C1] Illegal XDP return value 16128 on prog  (id 38) dev lo, expect packet loss!
[  113.186383][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[  113.237106][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'.
[  113.344171][ T6667] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  113.445029][   T33] audit: type=1800 audit(1755617401.346:2): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.217" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=459 res=0 errno=0
[  113.538035][ T6681] validate_nla: 2 callbacks suppressed
[  113.538050][ T6681] netlink: 'syz.0.220': attribute type 3 has an invalid length.
[  113.553799][ T6681] siw: device registration error -23
[  113.575422][ T6641] syz.2.205 (6641) used greatest stack depth: 19864 bytes left
[  113.866828][ T6708] netlink: 'syz.0.228': attribute type 3 has an invalid length.
[  113.880129][ T6708] siw: device registration error -23
[  113.911611][ T6708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.065515][ T6732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.233'.
[  114.169249][ T6741] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[  114.223083][ T6741] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.226296][ T6745] netlink: 'syz.1.238': attribute type 3 has an invalid length.
[  114.272859][ T6741] vlan3: entered allmulticast mode
[  114.274882][ T6741] veth1: entered allmulticast mode
[  114.286089][ T6741] bond3: (slave vlan3): making interface the new active one
[  114.296929][ T6741] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  114.426384][ T6764] pimreg: entered allmulticast mode
[  114.440732][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.243'.
[  114.458447][ T6764] pimreg: left allmulticast mode
[  114.585958][ T6778] netlink: 'syz.2.246': attribute type 3 has an invalid length.
[  114.599180][ T6778] siw: device registration error -23
[  114.863479][ T6799] netlink: 'syz.0.254': attribute type 3 has an invalid length.
[  114.875571][ T6799] siw: device registration error -23
[  114.935148][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'.
[  114.944237][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'.
[  114.948571][ T6806] netlink: 'syz.1.255': attribute type 5 has an invalid length.
[  114.952953][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'.
[  114.969937][ T6798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.995491][ T6798] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.018941][ T6806] geneve2: entered promiscuous mode
[  115.022050][ T6806] geneve2: entered allmulticast mode
[  115.024760][ T6805] syzkaller0: entered allmulticast mode
[  115.032583][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  115.035736][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  115.059046][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  115.064244][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  115.216867][ T6827] netlink: 'syz.1.264': attribute type 3 has an invalid length.
[  115.278796][ T6819] netlink: 'syz.0.263': attribute type 29 has an invalid length.
[  115.292856][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[  115.405395][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'.
[  115.463227][ T6838] netlink: 'syz.2.269': attribute type 1 has an invalid length.
[  115.741796][ T6849] pim6reg1: entered promiscuous mode
[  115.743898][ T6849] pim6reg1: entered allmulticast mode
[  115.844390][ T6854] siw: device registration error -23
[  115.868707][ T6856] netlink: 'syz.2.275': attribute type 11 has an invalid length.
[  116.043386][ T6870] tipc: Enabled bearer <ib:caif0>, priority 14
[  116.510083][ T6904] wg0 speed is unknown, defaulting to 1000
[  116.517684][ T6904] wg0 speed is unknown, defaulting to 1000
[  116.522568][ T6904] wg0 speed is unknown, defaulting to 1000
[  116.701754][ T5914] wg0 speed is unknown, defaulting to 1000
[  116.706789][ T6904] infiniband syz2: set active
[  116.708723][ T6904] infiniband syz2: added wg0
[  116.712022][ T6904] syz2: rxe_create_cq: returned err = -12
[  116.714418][ T6904] infiniband syz2: Couldn't create ib_mad CQ
[  116.716907][ T6904] infiniband syz2: Couldn't open port 1
[  116.756312][ T6904] RDS/IB: syz2: added
[  116.757993][ T6904] smc: adding ib device syz2 with port count 1
[  116.762154][ T6904] smc:    ib device syz2 port 1 has pnetid 
[  116.765563][ T5914] wg0 speed is unknown, defaulting to 1000
[  116.768494][ T6904] wg0 speed is unknown, defaulting to 1000
[  116.994666][ T6928] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.015644][ T6928] bond4: (slave wlan0): Enslaving as an active interface with a down link
[  117.018951][ T6904] wg0 speed is unknown, defaulting to 1000
[  117.160828][  T792] tipc: Node number set to 2739686789
[  117.240175][ T6904] wg0 speed is unknown, defaulting to 1000
[  117.667779][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  117.805567][ T6978] __nla_validate_parse: 9 callbacks suppressed
[  117.805583][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[  117.817760][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[  118.035813][ T5721] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  118.068417][ T7003] netlink: 44 bytes leftover after parsing attributes in process `syz.0.323'.
[  118.116155][ T7003] team0: Port device team_slave_0 removed
[  118.194182][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'.
[  118.803548][ T7017] Bluetooth: MGMT ver 1.23
[  118.860160][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'.
[  118.925634][ T7026] validate_nla: 5 callbacks suppressed
[  118.925660][ T7026] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[  118.949192][ T7026] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.952579][ T7031] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  118.957215][   T12] bond0: (slave bond_slave_0): interface is now down
[  118.963513][   T12] bond0: (slave bond_slave_1): interface is now down
[  119.000031][   T12] bond0: (slave bond_slave_0): interface is now down
[  119.002043][   T12] bond0: (slave bond_slave_1): interface is now down
[  119.005571][   T12] bond0: now running without any active interface!
[  119.056052][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'.
[  119.068273][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'.
[  119.076441][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'.
[  119.081795][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'.
[  119.083053][ T7045] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[  119.085013][ T7039] netlink: 'syz.0.332': attribute type 6 has an invalid length.
[  119.088225][ T7045] netlink: 224 bytes leftover after parsing attributes in process `syz.1.334'.
[  119.160606][ T7052] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[  119.180226][ T7050] can: request_module (can-proto-5) failed.
[  119.349096][ T7070] netlink: 'syz.1.342': attribute type 6 has an invalid length.
[  119.417163][ T7075] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  119.617125][ T7098] netlink: 'syz.0.350': attribute type 6 has an invalid length.
[  119.983441][ T7127] tipc: Enabled bearer <ib:caif0>, priority 14
[  120.056835][ T7131] netlink: 'syz.0.360': attribute type 6 has an invalid length.
[  120.380744][ T7156] netlink: 'syz.1.370': attribute type 6 has an invalid length.
[  120.704007][ T7184] netlink: 'syz.0.380': attribute type 6 has an invalid length.
[  120.896739][ T7196] "syz.2.385" (7196) uses obsolete ecb(arc4) skcipher
[  121.119514][ T1271] tipc: Node number set to 698728575
[  121.145672][  T792] wg0 speed is unknown, defaulting to 1000
[  121.145780][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.147960][  T792] syz2: Port: 1 Link DOWN
[  121.153104][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.159207][  T792] wg0 speed is unknown, defaulting to 1000
[  121.159369][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.166230][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.263108][ T7213] netlink: 'syz.2.390': attribute type 6 has an invalid length.
[  121.588826][ T7245] syzkaller1: tun_chr_ioctl cmd 1074025673
[  121.968930][ T7258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.270776][  T163] tipc: Resetting bearer <eth:syzkaller0>
[  122.506857][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[  123.532306][ T7257] tipc: Disabling bearer <eth:syzkaller0>
[  123.546124][ T7305] batman_adv: batadv0: Adding interface: ipvlan2
[  123.548943][ T7305] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.559775][ T7305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.563385][ T7305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.567326][ T7305] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  123.577684][ T7307] 8021q: VLANs not supported on lo
[  123.580875][ T7308] __nla_validate_parse: 45 callbacks suppressed
[  123.580892][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'.
[  123.604310][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'.
[  123.656556][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'.
[  123.660776][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[  123.664112][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'.
[  123.667384][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[  123.671985][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'.
[  123.800612][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[  123.803460][ T7328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'.
[  123.885971][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'.
[  123.924430][ T7338] smc: removing ib device syz2
[  123.991296][ T7350] validate_nla: 3 callbacks suppressed
[  123.991333][ T7350] netlink: 'syz.0.426': attribute type 6 has an invalid length.
[  124.115198][ T7357] bond0: entered promiscuous mode
[  124.117278][ T7357] bond_slave_0: entered promiscuous mode
[  124.121005][ T7357] bond_slave_1: entered promiscuous mode
[  124.137936][ T7357] bond0: left promiscuous mode
[  124.141217][ T7357] bond_slave_0: left promiscuous mode
[  124.144412][ T7357] bond_slave_1: left promiscuous mode
[  124.189865][ T7360] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  124.334008][ T7364] netlink: 'syz.1.431': attribute type 3 has an invalid length.
[  124.419959][ T7367] syzkaller1: entered promiscuous mode
[  124.421796][ T7367] syzkaller1: entered allmulticast mode
[  124.526083][ T7371] netlink: 'syz.0.434': attribute type 6 has an invalid length.
[  124.917040][ T7395] netlink: 'syz.1.444': attribute type 6 has an invalid length.
[  125.083721][ T7404] netlink: 'syz.1.447': attribute type 21 has an invalid length.
[  125.086359][ T7404] netlink: 'syz.1.447': attribute type 5 has an invalid length.
[  125.088957][ T7404] netlink: 'syz.1.447': attribute type 6 has an invalid length.
[  125.487528][ T7420] netlink: 'syz.0.454': attribute type 6 has an invalid length.
[  126.081919][ T7450] netlink: 'syz.1.464': attribute type 6 has an invalid length.
[  126.182642][ T7457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.512524][ T7475] team0 (unregistering): Port device team_slave_0 removed
[  126.523240][ T7475] team0 (unregistering): Port device team_slave_1 removed
[  126.544542][ T1271] syz0: Port: 1 Link DOWN
[  126.577646][ T7482] netlink: 'syz.0.474': attribute type 6 has an invalid length.
[  126.925428][ T7497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.020360][ T7497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.082316][ T7497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.153765][ T7497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.242370][ T7491] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.268236][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.284596][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.302890][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.335879][ T7509] macvtap1: entered allmulticast mode
[  127.337579][ T7509] batadv0: entered allmulticast mode
[  127.341567][ T7509] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  127.346697][ T7509] batadv0: left allmulticast mode
[  127.631236][ T7536] veth1_macvtap: left promiscuous mode
[  127.633127][ T7536] macsec0: entered allmulticast mode
[  127.642407][ T7536] veth1_macvtap: entered promiscuous mode
[  127.644815][ T7536] veth1_macvtap: entered allmulticast mode
[  127.647237][ T7536] macsec0: left allmulticast mode
[  127.648818][ T7536] veth1_macvtap: left allmulticast mode
[  127.731237][ T7539] nbd: socks must be embedded in a SOCK_ITEM attr
[  127.734271][ T7539] block nbd0: shutting down sockets
[  128.704166][ T7595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.707439][ T7595] syzkaller0: entered promiscuous mode
[  128.710798][ T7595] syzkaller0: entered allmulticast mode
[  128.772682][ T7594] tipc: Resetting bearer <eth:syzkaller0>
[  128.781968][ T7594] tipc: Disabling bearer <eth:syzkaller0>
[  128.853258][ T7597] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  128.983563][ T7607] __nla_validate_parse: 59 callbacks suppressed
[  128.983580][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  128.989140][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'.
[  128.992494][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  128.995811][ T7607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'.
[  129.153475][ T7619] delete_channel: no stack
[  129.156321][ T7619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'.
[  129.312457][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'.
[  129.315711][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'.
[  129.322368][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'.
[  129.326074][ T7627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'.
[  129.328879][ T7627] validate_nla: 6 callbacks suppressed
[  129.328887][ T7627] netlink: 'syz.2.524': attribute type 6 has an invalid length.
[  129.374528][ T7631] netlink: 700 bytes leftover after parsing attributes in process `syz.2.525'.
[  129.420423][ T7634] netlink: 'syz.1.527': attribute type 21 has an invalid length.
[  129.487202][ T7638] netlink: 'syz.2.528': attribute type 14 has an invalid length.
[  129.519361][ T7638] netlink: 'syz.2.528': attribute type 14 has an invalid length.
[  129.617117][ T7658] netlink: 'syz.1.532': attribute type 6 has an invalid length.
[  130.570973][ T7680] 8021q: adding VLAN 0 to HW filter on device bond3
[  130.575080][ T7680] bond0: (slave bond3): Enslaving as an active interface with an up link
[  130.676704][ T7684] openvswitch: netlink: Message has 4 unknown bytes.
[  130.727755][ T7686] netlink: 'syz.1.541': attribute type 21 has an invalid length.
[  130.738886][ T7686] syzkaller1: entered promiscuous mode
[  130.742950][ T7686] syzkaller1: entered allmulticast mode
[  130.746819][ T7688] netlink: 'syz.2.542': attribute type 6 has an invalid length.
[  130.794215][ T7690] netlink: 'syz.2.543': attribute type 83 has an invalid length.
[  130.798155][ T7690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.881237][ T7694] netlink: 'syz.1.545': attribute type 14 has an invalid length.
[  131.071483][ T7708] netlink: 'syz.1.550': attribute type 6 has an invalid length.
[  131.158413][ T7715] bridge3: entered promiscuous mode
[  131.318575][ T7719] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  131.717153][ T7736] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.088959][ T7778] batman_adv: batadv0: Adding interface: gretap1
[  132.093146][ T7778] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.109419][ T7778] batman_adv: batadv0: Interface activated: gretap1
[  132.469250][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.962488][ T7867] bridge_slave_0: left allmulticast mode
[  132.965273][ T7867] bridge_slave_0: left promiscuous mode
[  132.967390][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.975951][ T7867] bridge_slave_1: left allmulticast mode
[  132.977789][ T7867] bridge_slave_1: left promiscuous mode
[  132.982114][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.988913][ T7867] bond0: (slave bond_slave_0): Releasing backup interface
[  132.996729][ T7867] bond0: (slave bond_slave_1): Releasing backup interface
[  133.006746][ T7867] team0: Port device team_slave_1 removed
[  133.012159][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.015338][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.017659][ T7867] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.027930][ T7867] bond4: (slave wlan0): Releasing active interface
[  133.042002][ T7867] bond3: (slave vlan3): Releasing active interface
[  133.048196][ T7867] batman_adv: batadv0: Removing interface: ipvlan2
[  133.053570][ T7867] batman_adv: batadv0: Interface deactivated: gretap1
[  133.056658][ T7867] batman_adv: batadv0: Removing interface: gretap1
[  133.793809][ T7937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  134.152525][ T7958] tipc: New replicast peer: 255.255.255.255
[  134.155400][ T7958] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.487624][ T7973] __nla_validate_parse: 76 callbacks suppressed
[  134.487636][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.640'.
[  134.648890][ T7984] tipc: New replicast peer: 255.255.255.255
[  134.656716][ T7984] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.803674][ T7998] validate_nla: 12 callbacks suppressed
[  134.803689][ T7998] netlink: 'syz.1.652': attribute type 6 has an invalid length.
[  134.811148][ T8000] netlink: 'syz.1.652': attribute type 6 has an invalid length.
[  135.023826][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'.
[  135.027432][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[  135.035376][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'.
[  135.039009][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[  135.045003][ T8018] netlink: 'syz.2.658': attribute type 6 has an invalid length.
[  135.067240][ T8023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.150554][ T8034] netlink: 'syz.0.665': attribute type 13 has an invalid length.
[  135.169828][ T8034] gretap0: refused to change device tx_queue_len
[  135.172394][ T8034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  135.185458][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  135.401778][ T8060] sctp: [Deprecated]: syz.2.671 (pid 8060) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.401778][ T8060] Use struct sctp_sack_info instead
[  135.825262][ T8080] infiniband syz1: set down
[  135.826932][ T8080] infiniband syz1: added bond0
[  135.850716][ T8080] RDS/IB: syz1: added
[  135.852452][ T8080] smc: adding ib device syz1 with port count 1
[  135.854436][ T8080] smc:    ib device syz1 port 1 has pnetid 
[  136.383517][ T8128] sctp: [Deprecated]: syz.0.687 (pid 8128) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.383517][ T8128] Use struct sctp_sack_info instead
[  136.394855][ T8128] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[  136.416171][ T8128] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.542678][ T8140] netlink: 'syz.2.690': attribute type 22 has an invalid length.
[  136.551475][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[  136.577661][ T7491] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.577724][ T8140] netlink: 'syz.2.690': attribute type 22 has an invalid length.
[  136.581502][ T7491] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.587762][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'.
[  136.591586][ T7491] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.597362][ T7491] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.646843][ T8144] netlink: 'syz.2.693': attribute type 1 has an invalid length.
[  136.674588][ T8144] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.704065][ T8144] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.707427][ T8144] bond4: (slave vcan1): The slave device specified does not support setting the MAC address
[  136.715455][ T8144] bond4: (slave vcan1): Error -95 calling set_mac_address
[  136.761906][ T8148] gretap1: entered promiscuous mode
[  136.768937][ T8148] bond4: (slave gretap1): making interface the new active one
[  136.769784][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  136.776952][ T8148] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  136.778432][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  136.967902][ T8157] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[  136.984631][ T8157] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.992416][ T8160] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  137.002620][ T8157] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.005360][ T8157] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  137.010410][ T8157] bond2: (slave vcan1): Error -95 calling set_mac_address
[  137.149949][ T8163] geneve3: entered promiscuous mode
[  137.152202][ T8163] geneve3: entered allmulticast mode
[  137.315303][ T8169] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[  137.479033][ T8144] Bluetooth: hci2: Opcode 0x0c20 failed: -4
[  137.544251][ T8173] team0: Port device dummy0 added
[  137.547817][ T8173] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.553989][ T8173] team0: Failed to send options change via netlink (err -105)
[  137.557167][ T8173] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  137.560988][ T8173] team0: Port device dummy0 removed
[  137.565719][ T8173] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  137.612419][ T8175] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.628747][ T8175] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.632263][ T8175] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  137.638011][ T8175] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  137.654659][ T8176] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.956020][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.849744][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  138.923955][ T8245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.932137][ T8245] syzkaller0: entered promiscuous mode
[  138.934369][ T8245] syzkaller0: entered allmulticast mode
[  138.994263][ T8245] tipc: Resetting bearer <eth:syzkaller0>
[  139.007866][ T8244] tipc: Resetting bearer <eth:syzkaller0>
[  139.063161][ T8244] tipc: Disabling bearer <eth:syzkaller0>
[  139.415069][ T8102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.418241][ T8102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.533386][ T8280] __nla_validate_parse: 22 callbacks suppressed
[  139.533404][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'.
[  139.626360][ T8280] macvlan3: entered promiscuous mode
[  139.628504][ T8280] macvlan3: entered allmulticast mode
[  139.632166][ T8280] bond6: (slave macvlan3): Opening slave failed
[  139.641435][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'.
[  139.885317][ T8305] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  139.912689][ T8317] validate_nla: 7 callbacks suppressed
[  139.912711][ T8317] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  139.922981][ T8317] netlink: 224 bytes leftover after parsing attributes in process `syz.2.745'.
[  139.962381][ T8317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.745'.
[  139.987510][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.746'.
[  140.064499][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.747'.
[  140.283706][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  140.288014][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'.
[  140.294508][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'.
[  140.298117][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'.
[  140.304142][ T8335] netlink: 'syz.1.752': attribute type 6 has an invalid length.
[  140.758346][ T8364] gretap0: entered promiscuous mode
[  140.768383][ T8363] gretap0: left promiscuous mode
[  140.816724][ T8367] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.823538][ T8368] syzkaller0: entered promiscuous mode
[  140.828130][ T8368] syzkaller0: entered allmulticast mode
[  140.866707][ T8366] tipc: Resetting bearer <eth:syzkaller0>
[  140.885277][ T8366] tipc: Disabling bearer <eth:syzkaller0>
[  141.031703][ T8388] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002
[  141.062304][ T8381] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  141.231740][ T8405] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  141.239034][ T8405] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  141.352036][ T8416] netlink: 'syz.2.777': attribute type 8 has an invalid length.
[  141.382514][ T8413] netlink: 'syz.1.776': attribute type 21 has an invalid length.
[  141.612486][ T8430] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  141.718688][ T8436] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  141.934940][ T8443] macvlan0: entered allmulticast mode
[  141.937036][ T8443] veth1_vlan: entered allmulticast mode
[  143.997805][ T8490] netlink: 'syz.0.805': attribute type 7 has an invalid length.
[  144.322879][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.326985][ T8507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.337402][ T8508] syzkaller0: entered promiscuous mode
[  144.339187][ T8508] syzkaller0: entered allmulticast mode
[  144.355096][ T8512] tipc: Resetting bearer <eth:syzkaller0>
[  144.366232][ T8512] tipc: Disabling bearer <eth:syzkaller0>
[  144.437998][ T8514] syzkaller1: entered promiscuous mode
[  144.443950][ T8514] syzkaller1: entered allmulticast mode
[  144.583927][ T8522] netlink: 'syz.0.819': attribute type 10 has an invalid length.
[  144.595465][ T8522] veth0_vlan: left promiscuous mode
[  144.598333][ T8522] veth0_vlan: entered promiscuous mode
[  144.604788][ T8522] team0: Device veth0_vlan failed to register rx_handler
[  144.620342][ T8522] syz.0.819 (8522) used greatest stack depth: 19768 bytes left
[  144.692187][ T8102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.694766][ T8102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.777717][ T8536] syzkaller0: entered promiscuous mode
[  144.782949][ T8536] syzkaller0: entered allmulticast mode
[  144.785625][ T8540] netlink: 'syz.0.826': attribute type 11 has an invalid length.
[  145.491347][ T8570] __nla_validate_parse: 18 callbacks suppressed
[  145.491366][ T8570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.832'.
[  145.972730][ T8583] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.837'.
[  145.989731][ T8583] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.837'.
[  146.073137][ T8595] netlink: 'syz.1.842': attribute type 58 has an invalid length.
[  146.076284][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.842'.
[  146.097561][ T8596] !: renamed from dummy0 (while UP)
[  146.403999][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'.
[  146.406823][ T8607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.847'.
[  146.533027][ T8621] erspan0: entered promiscuous mode
[  146.674064][ T8627] netlink: 'syz.0.860': attribute type 1 has an invalid length.
[  146.677364][ T8627] netlink: 224 bytes leftover after parsing attributes in process `syz.0.860'.
[  147.156375][ T8656] netlink: 2 bytes leftover after parsing attributes in process `syz.0.863'.
[  147.388233][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  147.393262][ T8672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  147.396999][ T8672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  147.397297][ T8673] netlink: 'syz.2.867': attribute type 4 has an invalid length.
[  147.515972][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  147.547387][ T8676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  148.634445][ T8719] @: renamed from bond_slave_0 (while UP)
[  148.901731][ T8735] netlink: 'syz.2.890': attribute type 2 has an invalid length.
[  148.905557][ T8735] netlink: 'syz.2.890': attribute type 2 has an invalid length.
[  149.001980][ T8739] netlink: 'syz.2.892': attribute type 1 has an invalid length.
[  149.008079][ T8739] openvswitch: netlink: Message has 1 unknown bytes.
[  149.011830][ T8739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.267919][ T8747] netlink: 'syz.0.895': attribute type 10 has an invalid length.
[  149.281337][ T8747] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.287335][ T8747] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  149.295936][ T8748] netlink: 'syz.0.895': attribute type 10 has an invalid length.
[  149.299229][ T8748] batadv0: entered promiscuous mode
[  149.303271][ T8748] batadv0: entered allmulticast mode
[  149.307170][ T8748] bond0: (slave batadv0): Releasing backup interface
[  149.316246][ T8748] bridge0: port 1(batadv0) entered blocking state
[  149.319167][ T8748] bridge0: port 1(batadv0) entered disabled state
[  149.332417][ T8731] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  149.336351][ T8731] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  149.570676][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  150.078688][ T8794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.081955][ T8795] syzkaller0: entered promiscuous mode
[  150.086731][ T8795] syzkaller0: entered allmulticast mode
[  150.112378][ T8794] tipc: Resetting bearer <eth:syzkaller0>
[  150.143986][ T8793] tipc: Resetting bearer <eth:syzkaller0>
[  150.156870][ T8793] tipc: Disabling bearer <eth:syzkaller0>
[  150.529054][ T8825] ip6erspan0: entered promiscuous mode
[  150.531582][ T8827] netlink: 'syz.0.914': attribute type 1 has an invalid length.
[  150.669057][   T10] IPVS: starting estimator thread 0...
[  150.672190][ T8837] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  150.759633][ T8839] IPVS: using max 41 ests per chain, 98400 per kthread
[  150.829494][   T33] audit: type=1800 audit(1755617438.736:3): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.922" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1607 res=0 errno=0
[  151.214615][ T8867] netlink: 'syz.2.927': attribute type 10 has an invalid length.
[  151.221488][ T8867] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.227716][ T8867] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.239618][ T8868] __nla_validate_parse: 15 callbacks suppressed
[  151.239636][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'.
[  151.467567][ T8881] netlink: 108 bytes leftover after parsing attributes in process `syz.0.933'.
[  151.514692][ T8885] IPv6: sit1: Disabled Multicast RS
[  151.517662][ T8885] sit1: entered allmulticast mode
[  152.440742][ T8105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.445560][ T8105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.479975][ T1271] ------------[ cut here ]------------
[  152.481896][ T1271] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  152.486179][ T1271] WARNING: CPU: 1 PID: 1271 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  152.490146][ T1271] Modules linked in:
[  152.492034][ T1271] CPU: 1 UID: 0 PID: 1271 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  152.496428][ T1271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.500403][ T1271] Workqueue: mld mld_ifc_work
[  152.502282][ T1271] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  152.504708][ T1271] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 8a 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  152.511411][ T1271] RSP: 0018:ffffc900078e64d8 EFLAGS: 00010246
[  152.513355][ T1271] RAX: b003e7a8936cf800 RBX: 000000000000000c RCX: ffff888108945640
[  152.515820][ T1271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  152.518288][ T1271] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  152.520965][ T1271] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810d5bc1a8
[  152.524100][ T1271] R13: 0000000000000000 R14: ffff888108178e40 R15: ffff88810817b0d8
[  152.527291][ T1271] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  152.530987][ T1271] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.533626][ T1271] CR2: 0000200000000000 CR3: 000000003c0ca000 CR4: 00000000000006f0
[  152.536980][ T1271] Call Trace:
[  152.538312][ T1271]  <TASK>
[  152.539728][ T1271]  rate_control_send_low+0x194/0x7a0
[  152.541780][ T1271]  rate_control_get_rate+0x20b/0x5d0
[  152.544019][ T1271]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  152.546290][ T1271]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  152.548764][ T1271]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  152.551385][ T1271]  invoke_tx_handlers_late+0xb6/0x1820
[  152.553609][ T1271]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  152.555495][ T1271]  ieee80211_tx_dequeue+0x308e/0x4360
[  152.557203][ T1271]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  152.559117][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.561355][ T1271]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  152.563289][ T1271]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  152.565321][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.566974][ T1271]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  152.568765][ T1271]  ? do_raw_spin_unlock+0x4d/0x240
[  152.570459][ T1271]  ieee80211_queue_skb+0x1a31/0x21c0
[  152.572102][ T1271]  ieee80211_tx+0x297/0x420
[  152.573760][ T1271]  ? __pfx_ieee80211_tx+0x10/0x10
[  152.575492][ T1271]  ? ieee80211_xmit+0x315/0x400
[  152.577246][ T1271]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  152.579737][ T1271]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  152.582202][ T1271]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  152.584809][ T1271]  ? skb_network_protocol+0x508/0x760
[  152.586960][ T1271]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  152.589439][ T1271]  ieee80211_subif_start_xmit+0xe0/0x510
[  152.591643][ T1271]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  152.594119][ T1271]  ? __lock_acquire+0xab9/0xd20
[  152.596087][ T1271]  dev_hard_start_xmit+0x2d7/0x830
[  152.598101][ T1271]  __dev_queue_xmit+0x1b8d/0x3b50
[  152.600208][ T1271]  ? register_lock_class+0x51/0x320
[  152.602211][ T1271]  ? __dev_queue_xmit+0x27b/0x3b50
[  152.604212][ T1271]  ? __pfx___dev_queue_xmit+0x10/0x10
[  152.606333][ T1271]  ? read_seqbegin+0x122/0x250
[  152.608218][ T1271]  ? neigh_resolve_output+0x438/0x750
[  152.610466][ T1271]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.612237][ T8917] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[  152.612579][ T1271]  ? read_seqbegin+0x1ac/0x250
[  152.615611][ T8917] netlink: 232 bytes leftover after parsing attributes in process `syz.1.941'.
[  152.617428][ T1271]  ? __pfx_read_seqbegin+0x10/0x10
[  152.617454][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.617471][ T1271]  ? eth_header+0x11b/0x200
[  152.617487][ T1271]  ? __asan_memcpy+0x40/0x70
[  152.628773][ T1271]  ip6_finish_output2+0x11fe/0x16a0
[  152.631009][ T1271]  ? ip6_finish_output2+0x701/0x16a0
[  152.632645][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'.
[  152.633065][ T1271]  ? ip6_mtu+0x7d/0x3f0
[  152.638007][ T1271]  ? __pfx_ip6_finish_output2+0x10/0x10
[  152.640306][ T1271]  ? ip6_mtu+0x7d/0x3f0
[  152.641944][ T1271]  ? ip6_mtu+0x321/0x3f0
[  152.643449][ T1271]  ? ip6_finish_output+0x2ef/0x4e0
[  152.645095][ T1271]  NF_HOOK+0x9e/0x380
[  152.646387][ T1271]  ? __pfx_NF_HOOK+0x10/0x10
[  152.648158][ T1271]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  152.650605][ T1271]  ? do_raw_spin_unlock+0x4d/0x240
[  152.652621][ T1271]  ? icmp6_dst_alloc+0x3a5/0x420
[  152.654330][ T1271]  ? icmp6_dst_alloc+0x3a5/0x420
[  152.656055][ T1271]  mld_sendpack+0x800/0xd80
[  152.657556][ T1271]  ? mld_sendpack+0x1de/0xd80
[  152.659051][ T1271]  ? __pfx_mld_sendpack+0x10/0x10
[  152.661034][ T1271]  mld_ifc_work+0x83e/0xd60
[  152.662800][ T1271]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.664950][ T1271]  ? process_scheduled_works+0x9ef/0x17b0
[  152.667222][ T1271]  process_scheduled_works+0xae1/0x17b0
[  152.669576][ T1271]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.671994][ T1271]  worker_thread+0x8a0/0xda0
[  152.673851][ T1271]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.676379][ T1271]  ? __kthread_parkme+0x7b/0x200
[  152.678234][ T1271]  kthread+0x711/0x8a0
[  152.679125][ T8919] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[  152.680008][ T1271]  ? __pfx_worker_thread+0x10/0x10
[  152.680029][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.686409][ T1271]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.688424][ T1271]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.690566][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.692360][ T1271]  ret_from_fork+0x3fc/0x770
[  152.694236][ T1271]  ? __pfx_ret_from_fork+0x10/0x10
[  152.696263][ T1271]  ? __switch_to_asm+0x39/0x70
[  152.698200][ T1271]  ? __switch_to_asm+0x33/0x70
[  152.700298][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.702157][ T1271]  ret_from_fork_asm+0x1a/0x30
[  152.702571][ T8919] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.704095][ T1271]  </TASK>
[  152.704109][ T1271] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  152.704122][ T1271] CPU: 1 UID: 0 PID: 1271 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  152.704138][ T1271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.704148][ T1271] Workqueue: mld mld_ifc_work
[  152.704168][ T1271] Call Trace:
[  152.704176][ T1271]  <TASK>
[  152.704183][ T1271]  dump_stack_lvl+0x99/0x250
[  152.704202][ T1271]  ? __asan_memcpy+0x40/0x70
[  152.704219][ T1271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.704236][ T1271]  ? __pfx__printk+0x10/0x10
[  152.704269][ T1271]  vpanic+0x281/0x750
[  152.704285][ T1271]  ? __pfx__printk+0x10/0x10
[  152.704304][ T1271]  ? __pfx_vpanic+0x10/0x10
[  152.704320][ T1271]  ? is_bpf_text_address+0x292/0x2b0
[  152.704350][ T1271]  panic+0xb9/0xc0
[  152.704366][ T1271]  ? __pfx_panic+0x10/0x10
[  152.704397][ T1271]  __warn+0x31b/0x4b0
[  152.704412][ T1271]  ? __rate_control_send_low+0x5df/0x820
[  152.704435][ T1271]  ? __rate_control_send_low+0x5df/0x820
[  152.704456][ T1271]  report_bug+0x2be/0x4f0
[  152.704476][ T1271]  ? __rate_control_send_low+0x5df/0x820
[  152.704498][ T1271]  ? __rate_control_send_low+0x5df/0x820
[  152.704518][ T1271]  ? __rate_control_send_low+0x5e1/0x820
[  152.704539][ T1271]  handle_bug+0x84/0x160
[  152.704553][ T1271]  exc_invalid_op+0x1a/0x50
[  152.704567][ T1271]  asm_exc_invalid_op+0x1a/0x20
[  152.704582][ T1271] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  152.704612][ T1271] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6c b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 8a 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  152.704624][ T1271] RSP: 0018:ffffc900078e64d8 EFLAGS: 00010246
[  152.704638][ T1271] RAX: b003e7a8936cf800 RBX: 000000000000000c RCX: ffff888108945640
[  152.704649][ T1271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  152.704657][ T1271] RBP: dffffc0000000000 R08: ffff888136624253 R09: 1ffff11026cc484a
[  152.704668][ T1271] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff88810d5bc1a8
[  152.704679][ T1271] R13: 0000000000000000 R14: ffff888108178e40 R15: ffff88810817b0d8
[  152.704706][ T1271]  ? __rate_control_send_low+0x5de/0x820
[  152.704741][ T1271]  rate_control_send_low+0x194/0x7a0
[  152.704768][ T1271]  rate_control_get_rate+0x20b/0x5d0
[  152.704798][ T1271]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  152.704871][ T1271]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  152.704900][ T1271]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  152.704922][ T1271]  invoke_tx_handlers_late+0xb6/0x1820
[  152.704953][ T1271]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  152.704983][ T1271]  ieee80211_tx_dequeue+0x308e/0x4360
[  152.705053][ T1271]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  152.705073][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.705117][ T1271]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  152.705145][ T1271]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  152.705165][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.705180][ T1271]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  152.705196][ T1271]  ? do_raw_spin_unlock+0x4d/0x240
[  152.705220][ T1271]  ieee80211_queue_skb+0x1a31/0x21c0
[  152.705268][ T1271]  ieee80211_tx+0x297/0x420
[  152.705291][ T1271]  ? __pfx_ieee80211_tx+0x10/0x10
[  152.705332][ T1271]  ? ieee80211_xmit+0x315/0x400
[  152.705357][ T1271]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  152.705374][ T1271]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  152.705400][ T1271]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  152.705417][ T1271]  ? skb_network_protocol+0x508/0x760
[  152.705434][ T1271]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  152.705453][ T1271]  ieee80211_subif_start_xmit+0xe0/0x510
[  152.705471][ T1271]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  152.705494][ T1271]  ? __lock_acquire+0xab9/0xd20
[  152.705525][ T1271]  dev_hard_start_xmit+0x2d7/0x830
[  152.705557][ T1271]  __dev_queue_xmit+0x1b8d/0x3b50
[  152.705574][ T1271]  ? register_lock_class+0x51/0x320
[  152.705640][ T1271]  ? __dev_queue_xmit+0x27b/0x3b50
[  152.705672][ T1271]  ? __pfx___dev_queue_xmit+0x10/0x10
[  152.705690][ T1271]  ? read_seqbegin+0x122/0x250
[  152.705708][ T1271]  ? neigh_resolve_output+0x438/0x750
[  152.705726][ T1271]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.705746][ T1271]  ? read_seqbegin+0x1ac/0x250
[  152.705764][ T1271]  ? __pfx_read_seqbegin+0x10/0x10
[  152.705781][ T1271]  ? __local_bh_enable_ip+0x12d/0x1c0
[  152.705794][ T1271]  ? eth_header+0x11b/0x200
[  152.705844][ T1271]  ? __asan_memcpy+0x40/0x70
[  152.705887][ T1271]  ip6_finish_output2+0x11fe/0x16a0
[  152.705911][ T1271]  ? ip6_finish_output2+0x701/0x16a0
[  152.705934][ T1271]  ? ip6_mtu+0x7d/0x3f0
[  152.705950][ T1271]  ? __pfx_ip6_finish_output2+0x10/0x10
[  152.705969][ T1271]  ? ip6_mtu+0x7d/0x3f0
[  152.705983][ T1271]  ? ip6_mtu+0x321/0x3f0
[  152.706000][ T1271]  ? ip6_finish_output+0x2ef/0x4e0
[  152.706021][ T1271]  NF_HOOK+0x9e/0x380
[  152.706043][ T1271]  ? __pfx_NF_HOOK+0x10/0x10
[  152.706061][ T1271]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  152.706076][ T1271]  ? do_raw_spin_unlock+0x4d/0x240
[  152.706095][ T1271]  ? icmp6_dst_alloc+0x3a5/0x420
[  152.706114][ T1271]  ? icmp6_dst_alloc+0x3a5/0x420
[  152.706135][ T1271]  mld_sendpack+0x800/0xd80
[  152.706169][ T1271]  ? mld_sendpack+0x1de/0xd80
[  152.706187][ T1271]  ? __pfx_mld_sendpack+0x10/0x10
[  152.706223][ T1271]  mld_ifc_work+0x83e/0xd60
[  152.706241][ T1271]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.706259][ T1271]  ? process_scheduled_works+0x9ef/0x17b0
[  152.706276][ T1271]  process_scheduled_works+0xae1/0x17b0
[  152.706314][ T1271]  ? __pfx_process_scheduled_works+0x10/0x10
[  152.706343][ T1271]  worker_thread+0x8a0/0xda0
[  152.706360][ T1271]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  152.706385][ T1271]  ? __kthread_parkme+0x7b/0x200
[  152.706409][ T1271]  kthread+0x711/0x8a0
[  152.706431][ T1271]  ? __pfx_worker_thread+0x10/0x10
[  152.706444][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.706463][ T1271]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.706479][ T1271]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.706495][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.706513][ T1271]  ret_from_fork+0x3fc/0x770
[  152.706532][ T1271]  ? __pfx_ret_from_fork+0x10/0x10
[  152.706552][ T1271]  ? __switch_to_asm+0x39/0x70
[  152.706569][ T1271]  ? __switch_to_asm+0x33/0x70
[  152.706595][ T1271]  ? __pfx_kthread+0x10/0x10
[  152.706613][ T1271]  ret_from_fork_asm+0x1a/0x30
[  152.706646][ T1271]  </TASK>
[  152.707416][ T1271] Kernel Offset: disabled

VM DIAGNOSIS:
15:30:40  Registers:
info registers vcpu 0

CPU#0
RAX=56f1bd8aed9e9100 RBX=ffffffff819683a8 RCX=56f1bd8aed9e9100 RDX=0000000000000001
RSI=ffffffff8d9b6935 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555572805808 CR3=0000000026604000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000ff0000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000043 RBX=0000000000000043 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900078e5c70
R8 =ffff888107360237 R9 =1ffff11020e6c046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98f0 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000003c0ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 00007fab6d812e53
XMM06=0000000000000000 00007fab6d812e4d XMM07=0000000000000000 00007fab6d812e61
XMM08=0000000000000000 00007fab6d812ee7 XMM09=0000000000000000 00007fab6d812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
