last executing test programs:

1.961225948s ago: executing program 2 (id=392):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6f85, 0x36}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x68, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xfe}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xf}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x77b4}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x940}, 0x81)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1222400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x16c, r6, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x12f, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @from_mac, {0x7, 0x65}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x1, 0x2d, @void, [{0xdd, 0x86, "77ef417b484b3eb10cbf1349b22ca318b86277f8dcc06993993543ddcef6864b2afa37b9f4afd4553e0433907712bde34ba8324f669fa737d21b77a23f17b33d8b4e58980631107fd0915706c32eb381e4515ac66cfb6989fde6ff10c23c60615251200dda9e77a3235de39fb518e1b4cfd285194b0e3ec8f7172fff898bdd20847a0f74e832"}, {0xdd, 0x7f, "3a9b4b70ba6714283767fe2857ff64bc6861f001ffca212d7a8f547aeeb7a51413a15af90aba5a0da9700bf66b60b3ecaf3cac869f527cc367805d8e3f728c79b448800c1b1515f7793868fe9e8c4a369e6bb80f331a8121e5f6f7dc9b764c6298ba9ee5818e431a2acf4d5bf233963b8e99a5bb0118e273b7fda50916ee81"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x840)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r7, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1}]}, 0x40}}, 0x0)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e00000000e6000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c000180080001c008000000050014002010000005000500020000000500010006"], 0x68}}, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="5000000010000104000080000000000000000000", @ANYRESDEC=r4, @ANYRES8=r9], 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))

1.831344911s ago: executing program 2 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)={0x110, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x110}}, 0x20040000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x86}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x4040820)
r11 = socket$kcm(0x10, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0)

1.121395096s ago: executing program 1 (id=396):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000000003", @ANYRESOCT=r1], 0x140}}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x0)

1.120777081s ago: executing program 1 (id=397):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x20, 0x40, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x40}]}]}, 0x20}}, 0x4010)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0x0, 0x917, 0xa7, 0x1000000}, 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000ffffff80000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)

1.051223175s ago: executing program 1 (id=398):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1a, 0xa01, 0x70bd29, 0x0, {0x81}}, 0x14}, 0x1, 0x0, 0x0, 0x40008d5}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000004000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010ef1ade808025cc8bff1b001fff00c5e2b552998865b062250b79c6ef6bff00000000000000e6000000", @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r6)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)

971.419641ms ago: executing program 2 (id=399):
r0 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x0, @loopback}})
listen(r0, 0x9)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvfrom$netrom(r1, &(0x7f0000000040)=""/175, 0xaf, 0x40000001, &(0x7f0000000100)={{0x3, @null, 0x5}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180))
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40040)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x80010, r1, 0xb5ba8000)
sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x4}, 0x18)
pselect6(0x40, &(0x7f0000000440)={0xff, 0xb, 0x8518, 0x100000001, 0x10, 0x10000, 0xffffffff, 0x8}, &(0x7f0000000480)={0x6f1, 0x0, 0xffffffff, 0x5, 0x3, 0x1, 0x0, 0x6}, &(0x7f00000004c0)={0xe78c, 0xf, 0x9, 0x8, 0x9, 0x3, 0x38, 0x5}, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000580)={&(0x7f0000000540)={[0xffff]}, 0x8})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f00000005c0)=""/135, &(0x7f0000000680)=0x87)
r4 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r4, &(0x7f00000006c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={<r6=>0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000007c0)=0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000800)={r6, 0x3}, &(0x7f0000000840)=0x8)
socket$inet_mptcp(0x2, 0x1, 0x106)
read(r1, &(0x7f0000000880)=""/42, 0x2a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000008c0)={'wg2\x00', <r7=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x3, &(0x7f0000000900)={@broadcast, @empty, r7}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1845}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c800}, 0x84)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r8)
sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000000d40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e4, r10, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2a46}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x200000, @remote, 0x90f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @private1, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @remote, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x80000001, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x63}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24008000}, 0x4088000)

911.760223ms ago: executing program 2 (id=400):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r3=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r3, 0x800000, 0x5}, &(0x7f0000000180)=0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3}, 0x8)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004140)={0x18, 0x52, 0x1, 0x70bd30, 0x25dfdbff, {0x1c}, [@nested={0x4, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884)

911.193235ms ago: executing program 1 (id=401):
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000340))
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x2600, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)

847.089155ms ago: executing program 1 (id=402):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2a, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="310000000000000014002b80080001000de616b32680d9496629f8745b411a4139168d134b7ca54e19011cc2e7c4647f990decd1dc7529310682c64a5bd3a47d16f367232331c14d2553a11b8e958d6a1b80026044937d26479113728291d48b230e8e98b0cd00bd716ce58177148a65b630c35f46922940101e253caf5c306f272f76c092fd64a0301b8edfdc40c03d1555465893911aacece7e24b2c41c1e7c26b9b8122b0be4a8b4537e298ca79acffceb6a826a848c65b13126940a60ba443ff247f80be087a794c0e9869de8ebc967be16aa4407e50de044228caaddfbb", @ANYRES32=r3, @ANYBLOB="080003000300000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
sendto(r0, &(0x7f0000002900)="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", 0x1000, 0x4808, &(0x7f0000001900)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x2d, 0x3}, 0x80)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
r7 = socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0xe, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

843.343282ms ago: executing program 1 (id=403):
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe2bd}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xb, 0x5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x9, 0x3, 0x30, 0xffffffffffffffff}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x1}], 0x10, 0xffffffff}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

295.347844ms ago: executing program 0 (id=413):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a093400000000000000000200fffe0900020073797a32000000000900010073797a30000000003800048024000180090001006d65746100000000140002800800014000000001080002400000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000})
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @typedef={0x6, 0x0, 0x0, 0x8, 0x4}, @union={0xc, 0x3, 0x0, 0x5, 0x1, 0xbe, [{0x8, 0x2, 0x89}, {0xc, 0x1, 0x1}, {0x3, 0x0, 0x1}]}, @enum={0x10, 0x2, 0x0, 0x6, 0x4, [{0x8, 0x90}, {0xf}]}, @enum64={0x2, 0x5, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x6, 0x1}, {0xb, 0x1, 0x80000001}, {0x10, 0x100, 0xf}, {0x2, 0x5, 0x31}, {0x7, 0x7fff, 0x6}]}]}, {0x0, [0x2e]}}, &(0x7f0000000380)=""/173, 0xcb, 0xad, 0x0, 0xa, 0x10000, @value=r3}, 0x28)

229.770754ms ago: executing program 0 (id=414):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
write$nci(r6, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @f={0x4, 0x3, 0x2, 0x80, {0x9, 0x1, '/'}, 0x1}}, 0xb)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) (async)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)

131.149357ms ago: executing program 0 (id=415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000180))
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r6, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a", 0xd}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000100)=0x3, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r3, @ANYRESDEC, @ANYRESOCT=r6, @ANYRES16, @ANYRES64=0x0], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)}}], 0x4000230, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000001c0)=0xd, 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000500)={r9, 0xfffffffe}, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r9, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x9, 0x9, 0x2, 0x2, 0x8000, 0x2}, &(0x7f0000000040)=0x9c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000440)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="adffa888e160000028006e0000000018000293d3e8a317b362ed000a0000000004000008000500", @ANYRES32=r12, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r13=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r13, {0xfff5, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

60.237084ms ago: executing program 2 (id=416):
socket$packet(0x11, 0x3, 0x300)
pipe(&(0x7f0000000340))
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0)
sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x8100, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14)

59.336746ms ago: executing program 0 (id=417):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/18, 0x121000, 0x1800, 0x4}, 0x20) (async)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r3=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000240)=0x6, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x13, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r9 = openat$cgroup_ro(r7, &(0x7f00000001c0)='cgroup.events\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r9, 0x0) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0xb4807000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x4505c0, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000340)=0x20000002)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x810) (async)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700ab0400810042ce6162ba83cbbdd4620800003c00000000", 0x24) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r12)

57.378548ms ago: executing program 2 (id=418):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r5=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r6=>0x0) (async)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=<r9=>0x0)
bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r10=>0x0)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=<r12=>0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r16=>0x0)
r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r17, 0x0, &(0x7f00000000c0)=<r18=>0x0) (async)
r19 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r19, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r18], 0x1c}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r20=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r18}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000040)

840.01µs ago: executing program 0 (id=419):
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_int(r0, 0x1, 0x24, 0xfffffffffffffffe, &(0x7f0000000080))
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0xa3c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa04, 0x3, 0x0, 0x1, [{0x73c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "a9d2b991cbc75db3292e6e8dc75627dd065f454e2495b5ea02955d811e7ea7f80621a11a37458b9ce8e5a6b160905e6af3920b7784a86817115d770dde554306f502a50832d4705779444f31209f8820945cbf12fd98ffa8072913e4dcfdc77223f66b1e82fcc620f967ff20b0c53a40260706e5d632ee9b75c8e2d645ef8df1bfbaf041eb3e104e713efccb4b157010f6562ab461e60e9db08feae159c7"}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "c782f713030c7c7b32040e436380b67bb23582956c2e0f71b02c321a98ab29452fea25ffc470695c2cc81d3e560dfa228903cd376efbba7119d9b6c45244186c8d6ab8fe0a919e92"}, @NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "3a76327a7970d89142fba665a5450a3c99241407e511606001ca6a11f2fc91246c5397e93fc5fbbd7efec86194c4926474b2e540aa95df60ce26ee7fc39067f5a03198a5f02c1d26651861b87a56240415eafc4c966f3ac87b3d392b719a4c4a781441a6df00a66012177ac2e995e0d113d24af0a7daad4044cba0d25a923576f2c5961c59d982479f62dfa01e2b65ce2b9433e1d5e38c6f921304fcf45964de253714"}, @NFTA_SET_ELEM_KEY_END={0x22c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xcb, 0x1, "107e8c37b2afddd0fd7936ba552dad87e6ae06575e281046a57db834ad89758e88e30ce97c11a753cd3ffadb77943025fea8263071285f06868df7a82e19003629b911db99e46ca732d6f59317a4dba30d6a8467686cb290eb5768f67ec74e2d25bda4543be6b7dfcbc899d561f047db42f7ce98b0d8be132bf8d89fba53b90273b3dd38635bb1a8819325e3b2433a5c7ad4865ae1db6afcb70c95312321c55f93c4a41d75d5863d7676d8c558ac670a0beda254c943aa20f481885d923ad46a0c7001b9dd98a6"}, @NFTA_DATA_VALUE={0xca, 0x1, "93a84336c8b60f2ad774603e33a0f30a5870b719cd9d02300c70e3152ac276641af2bfeb4e2322c0219dbd045100c8406fd4ee1b8e3e38e3e938e9add3ec465ab07ff039c085ca48b29c9c15eb444034e0c8a94d0fa920c0e711e0ed2aa9c3c99a0968727950ea9934ca121a0b28f736046788a5ff28817c4e09f82d9b9274ba8f2e697571f3b3339c185b15e576d408ab224798087d8773e4e8e494f99acc7734430062a75311824b58680bfee331808b3576c568f692091a34eadb49372eacb475420640ea"}, @NFTA_DATA_VALUE={0x85, 0x1, "37577828cbafc8c633d291eb7f6edd6bf7ac2b0b455c3c920d3e15f5071781e4dc1c1ed095458b1f13d2b3b52945748a067485efb7a72802f6b0c6b59a16a4d17bd552392a085b2877734cee8ba59b4fbef7305a00f8a250bebdc91f57728944cda5189b6830dcbc37e5935c899ddaf630c39b148ae8e930c26e3edf44fb4f636f"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x7c, 0x6, 0x1, 0x0, "69fc5c8048f49828f0ecdca278276d18a798c75e9dea2461d0003234e23d0acf4bb2b5d5a793cdf62853d5dbd8fc419da77e236a6ed43f0c5c18212e219ed98cd59e7749f866502fa51b278e403c57709ed8fe9dbd1ae5b95b4537d49ffd613d9b16671491a2ae904e56a0ec4c4e0c6db53a2eac7e371df3"}, @NFTA_SET_ELEM_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x87, 0x1, "a2078773c08d48d42898c59d9c534e337608c6dd171700825b14299f9d29812babc84a4df9939c7b793e563ee801a9a562106d16d54ba0cb02b53208f59e60dcb0832b8d624c2e4856ecc3cbe46f90cf222a9e25a706d95ac6b0b1341eec9867bb6920bb77d2f26648adeb9ffb171b8330a0c5fea176ca6ee4a7e1c1324b9a3bfe9e10"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xfd, 0x6, 0x1, 0x0, "706d62a52ed8a8ba1adbdf2e132166439737f75e88957386822fafd2542759875da7e4ef1b5220608c66f4db339ea694e9001d93fdc402733cca5e8caed706a9925b7f8e56d5e8f4f45a317b4cd7854d1591f2158215cf6ffa1bf1399236ebe9359bdddb512fe662eb5add6c999013ea9c9d8204adef1a57b0ecbf760f5514c6cb2f17df40f13003452ddb626515e3b1f721e5daf62bf82f90fe6dcbf258ffad8302198cd4acca5e7f189fbe20c4c16319b80c10f8e25f54354535592903ec3db831d0fd0f5e2e395633476d14b6c5614e560a47acf576176011efcb4f2049fcdbe3174bd31906ef79c9b0d20d20e783a453cfa0655f375bd5"}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "f2e02eaf3209448d36f07981b59dc15d18baa59152e34eebc05bc52a6232ee30c4cf8e708653453b4db60140bed49537f3545310fb60ae5cf39aa409d13ab52879c51c3c63930a8e934f9c1241d81c7b3398cf057d0e7d10f6eb0af830e6ee291f9067444fac1d2a97718e3d271ddc8638f3930e36522888b3aa18a68cf0029c2f69429a9f1520f713e8d153d399f3eebdfcf3b3f3cbd91a33079b1a41aa10331567dd670122ef4b6aba66"}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9, 0x1, "7e219872f7"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x57}]}}}, {0x4c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x57, 0x1, "e758e9b0ffa3bee4f996f96cae73448927cdfab2e31b87fc8ef83441bbe9b1b91addb46c2eaded2c0d1162ebb3589017e7cb2884d74a5044f5652df2017afa56a65748759ee320574d1cab8df6cae7a41c12ab"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xc7, 0x6, 0x1, 0x0, "1cac5e84b6584755761e1a42075806edb6ba7f5eb2cee0f018b62c4ccc0d9bfc285bf5981b17e0b69c7896d67dec49729615ca22e20bb611425115404ac3f14bfb41ba04d23cb1d3b692ec1fa23e1ea45bd496cc24c5982fa46011a9bd0ba00485981b3971273c94f77caadcb7d90e6f86b5a9a739729b79190b2ed43a0aa25397e1dbde6f16ea21a1ecdde04fee7071f3926165a9799815dbedc765f2444e051592ba6cd125f704d0fa53cdd2f6626b02c7faabeef0a89bc67ac5535ff8003ef1ed11"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}]}]}], {0x14}}, 0xa94}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4b77657962fad848}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4805}, 0x810)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14230008000100", @ANYRES32=r7, @ANYBLOB], 0x40}}, 0x0)
sendto$packet(r3, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14)

0s ago: executing program 0 (id=420):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0xffe4}, {0xffe0, 0x10}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x1}}]}, 0x2c}}, 0x2000c800)
sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005600651ef62bc4cefbdbdf2507000000655f1319b4a19c6773c5053548026e64bd60f43421a5c12b6d803a39909bbf608b809461b7645f4d20ef83126b999d3b160ef66b27e4815a3583eaa9aa517f81e9d5abc7c0d6c388dc42776c0691375bf9a90dbadb1af44cc754cce4869dfffff175cc1f4a8f6299adee92794b15ee0ae54469da9afede", @ANYRES32=r4], 0x18}, 0x1, 0x0, 0x0, 0x18cf9a542a78622}, 0x40004)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r2})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0xfffffda8)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x7}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x4, 0x3, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8000, 0x20, 0x400, 0x4}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'pimreg1\x00'})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000600)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x5, 0x7, 0x22, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast2, 0x7800, 0x7, 0x10a0de, 0x6e9e}})
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10)
recvmmsg(r8, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001880)={'wg0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)={0x48, r12, 0x8, 0x70bd2d, 0x1, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r11}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0xffffffffffffff88}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000fcffffff0100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r11], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)
shutdown(r3, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:23315' (ED25519) to the list of known hosts.
syzkaller login: [   40.834638][ T5766] cgroup: Unknown subsys name 'net'
[   40.920219][ T5766] cgroup: Unknown subsys name 'cpuset'
[   40.924991][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.711179][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.510960][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.524583][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.527392][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.530190][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.532727][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.547328][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.550316][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.552966][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.555729][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.556918][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.559477][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.561694][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.563646][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.590232][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.592910][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.730888][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   46.772615][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.775315][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.778209][ T5846] bridge_slave_0: entered allmulticast mode
[   46.780935][ T5846] bridge_slave_0: entered promiscuous mode
[   46.786492][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.789288][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.791924][ T5846] bridge_slave_1: entered allmulticast mode
[   46.794667][ T5846] bridge_slave_1: entered promiscuous mode
[   46.801504][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   46.831014][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.849080][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.883488][ T5846] team0: Port device team_slave_0 added
[   46.890423][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   46.898901][ T5846] team0: Port device team_slave_1 added
[   46.929107][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.932043][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.934873][ T5842] bridge_slave_0: entered allmulticast mode
[   46.939028][ T5842] bridge_slave_0: entered promiscuous mode
[   46.950411][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.953113][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.963416][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.967998][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.970732][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.973543][ T5842] bridge_slave_1: entered allmulticast mode
[   46.976667][ T5842] bridge_slave_1: entered promiscuous mode
[   46.995376][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.998107][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.006468][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.048445][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.054265][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.058649][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.061658][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.064524][ T5838] bridge_slave_0: entered allmulticast mode
[   47.068221][ T5838] bridge_slave_0: entered promiscuous mode
[   47.072177][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.075072][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.078548][ T5838] bridge_slave_1: entered allmulticast mode
[   47.081780][ T5838] bridge_slave_1: entered promiscuous mode
[   47.116838][ T5846] hsr_slave_0: entered promiscuous mode
[   47.119278][ T5846] hsr_slave_1: entered promiscuous mode
[   47.122905][ T5842] team0: Port device team_slave_0 added
[   47.135515][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.140690][ T5842] team0: Port device team_slave_1 added
[   47.144466][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.192942][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.195821][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.207506][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.212550][ T5838] team0: Port device team_slave_0 added
[   47.214899][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.217943][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.228485][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.236697][ T5838] team0: Port device team_slave_1 added
[   47.269094][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.271741][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.280434][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.301070][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.303381][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.313318][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.321355][ T5842] hsr_slave_0: entered promiscuous mode
[   47.323598][ T5842] hsr_slave_1: entered promiscuous mode
[   47.325785][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   47.328311][ T5842] Cannot create hsr debugfs directory
[   47.383743][ T5838] hsr_slave_0: entered promiscuous mode
[   47.386176][ T5838] hsr_slave_1: entered promiscuous mode
[   47.390021][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   47.391888][ T5838] Cannot create hsr debugfs directory
[   47.458825][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.464118][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.476997][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.482084][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.518481][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.530282][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.535874][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.538991][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.542055][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.544919][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.554486][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.558774][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.586753][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.595820][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.601985][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.613074][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.620985][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.623813][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.626829][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.629846][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.661345][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.664312][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.667466][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.670358][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.702990][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.717761][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.721767][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.725190][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.732940][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.736348][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.741478][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.744424][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.761747][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   47.778031][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.784673][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.791649][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.794309][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.806019][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.808854][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.812435][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.814749][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.826199][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.828553][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.851731][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   47.863236][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.865529][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.872618][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.884427][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.887430][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.895505][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.935614][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.948389][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.017853][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.044406][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.060244][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.074073][ T5846] veth0_vlan: entered promiscuous mode
[   48.092951][ T5846] veth1_vlan: entered promiscuous mode
[   48.127730][ T5842] veth0_vlan: entered promiscuous mode
[   48.138254][ T5838] veth0_vlan: entered promiscuous mode
[   48.142515][ T5846] veth0_macvtap: entered promiscuous mode
[   48.148982][ T5842] veth1_vlan: entered promiscuous mode
[   48.152393][ T5846] veth1_macvtap: entered promiscuous mode
[   48.159589][ T5838] veth1_vlan: entered promiscuous mode
[   48.176700][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.191453][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.213588][ T5838] veth0_macvtap: entered promiscuous mode
[   48.219667][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.224010][ T5842] veth0_macvtap: entered promiscuous mode
[   48.228523][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.234751][ T5838] veth1_macvtap: entered promiscuous mode
[   48.240909][ T5842] veth1_macvtap: entered promiscuous mode
[   48.246450][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.250354][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.276670][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.289124][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.302141][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.306036][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.322405][ T5870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.334371][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.338733][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.345833][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.351027][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.355638][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.361096][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.373616][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.382216][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.394929][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.418311][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.421434][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.436092][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.445477][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.462777][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.473416][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.483681][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.506919][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.510763][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.529060][ T5908] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   48.546035][ T5908] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.563292][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.566720][ T5911] Zero length message leads to an empty skb
[   48.571133][ T5912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.575451][ T5908] bridge_slave_0: left allmulticast mode
[   48.579275][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.583336][ T5908] bridge_slave_0: left promiscuous mode
[   48.585252][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.589325][ T5908] bridge_slave_1: left allmulticast mode
[   48.591268][ T5908] bridge_slave_1: left promiscuous mode
[   48.594319][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.599043][ T5840] Bluetooth: hci0: command tx timeout
[   48.601248][ T5840] Bluetooth: hci2: command tx timeout
[   48.614190][ T5908] bond0: (slave bond_slave_0): Releasing backup interface
[   48.621652][ T5908] bond0: (slave bond_slave_1): Releasing backup interface
[   48.628348][ T5908] team0: Port device team_slave_0 removed
[   48.633285][ T5908] team0: Port device team_slave_1 removed
[   48.636344][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.641115][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.646406][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.650026][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.676862][ T5908] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   48.679595][ T5840] Bluetooth: hci1: command tx timeout
[   48.721986][ T5908] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   48.731722][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.739166][ T5908] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   48.749059][ T5918] vlan2: entered promiscuous mode
[   48.751175][ T5918] macvtap0: entered promiscuous mode
[   48.767592][ T5917] dummy0: entered promiscuous mode
[   48.776713][ T5916] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4'.
[   48.876726][ T5932] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   48.933914][ T5932] gretap1: entered promiscuous mode
[   48.990269][ T5932] macvlan2: entered promiscuous mode
[   48.993892][ T5932] macvlan2: entered allmulticast mode
[   49.039646][ T5936] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.054669][ T5936] batman_adv: batadv0: Adding interface: dummy0
[   49.059490][ T5936] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.073417][ T5936] batman_adv: batadv0: Interface activated: dummy0
[   49.090663][ T5936] batadv0: mtu less than device minimum
[   49.093468][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.098220][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.102143][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.105647][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.110008][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.113741][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.117986][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.122100][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.126238][ T5936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   49.161648][ T5936] batman_adv: batadv0: Adding interface: ip6gretap1
[   49.163795][ T5936] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.172885][ T5936] batman_adv: batadv0: Interface activated: ip6gretap1
[   49.335222][ T5907] dummy0: left promiscuous mode
[   49.355347][   T10] cfg80211: failed to load regulatory.db
[   50.168658][ T5980] netlink: 128 bytes leftover after parsing attributes in process `syz.1.15'.
[   50.176536][ T5980] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   50.265828][ T5989] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   50.280477][ T5989] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   50.283265][ T5982] ipvlan2: entered promiscuous mode
[   50.310870][ T5991] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.19'.
[   50.316900][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   50.346853][ T5997] netlink: 60 bytes leftover after parsing attributes in process `syz.0.20'.
[   50.352084][ T5997] netlink: 'syz.0.20': attribute type 3 has an invalid length.
[   50.396574][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   50.423957][ T5999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21'.
[   50.467251][ T6009] tipc: Started in network mode
[   50.469053][ T6009] tipc: Node identity fa404865906c, cluster identity 4711
[   50.471925][ T6009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.475258][ T6009] syzkaller0: entered promiscuous mode
[   50.479184][ T6009] syzkaller0: entered allmulticast mode
[   50.490021][ T6009] tipc: Resetting bearer <eth:syzkaller0>
[   50.502727][ T6006] tipc: Resetting bearer <eth:syzkaller0>
[   50.506247][ T6006] tipc: Disabling bearer <eth:syzkaller0>
[   50.677462][ T5849] Bluetooth: hci0: command tx timeout
[   50.680187][ T5840] Bluetooth: hci2: command tx timeout
[   50.757335][ T5840] Bluetooth: hci1: command tx timeout
[   50.842381][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   51.439278][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'.
[   51.447994][ T6036] bridge0: port 3(vlan2) entered blocking state
[   51.450348][ T6036] bridge0: port 3(vlan2) entered disabled state
[   51.452875][ T6036] vlan2: entered allmulticast mode
[   51.454796][ T6036] bridge0: entered allmulticast mode
[   51.458395][ T6036] vlan2: left allmulticast mode
[   51.460222][ T6036] bridge0: left allmulticast mode
[   51.601452][ T6046] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET)
[   52.053011][ T6064] veth1_macvtap: left promiscuous mode
[   52.094825][ T6066] netlink: 'syz.1.42': attribute type 1 has an invalid length.
[   52.108172][ T6066] gretap1: entered allmulticast mode
[   52.165499][ T6070] syzkaller1: entered promiscuous mode
[   52.167763][ T6070] syzkaller1: entered allmulticast mode
[   52.434291][    T9] IPVS: starting estimator thread 0...
[   52.529248][ T6095] IPVS: using max 66 ests per chain, 158400 per kthread
[   52.533100][ T6103] Bluetooth: MGMT ver 1.23
[   52.595265][ T6107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.598406][ T6107] syzkaller0: entered promiscuous mode
[   52.600220][ T6107] syzkaller0: entered allmulticast mode
[   52.606399][ T6107] tipc: Resetting bearer <eth:syzkaller0>
[   52.633537][ T6107] tipc: Resetting bearer <eth:syzkaller0>
[   52.647436][ T6107] tipc: Disabling bearer <eth:syzkaller0>
[   52.726441][ T5853] IPVS: stop unused estimator thread 0...
[   52.757631][ T5840] Bluetooth: hci2: command tx timeout
[   52.760009][ T5849] Bluetooth: hci0: command tx timeout
[   52.837862][ T5840] Bluetooth: hci1: command tx timeout
[   53.025704][ T6134] ip6tnl1: entered promiscuous mode
[   53.028906][ T6134] ip6tnl1: entered allmulticast mode
[   53.095806][ T6141] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.104219][ T6140] IPVS: set_ctl: invalid protocol: 50 172.20.20.18:20001
[   53.162319][ T6147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.206380][ T6150] 0: renamed from hsr0 (while UP)
[   53.210447][ T6150] 0: entered allmulticast mode
[   53.212565][ T6150] hsr_slave_0: entered allmulticast mode
[   53.214816][ T6150] hsr_slave_1: entered allmulticast mode
[   53.223072][ T6150] 8021q: adding VLAN 0 to HW filter on device batadv1
[   53.225931][ T6150] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   53.231109][ T6150] team0: Failed to send options change via netlink (err -105)
[   53.233892][ T6150] team0: Port device batadv1 added
[   53.242406][ T6147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.319741][ T6147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.347169][ T6159] netem: incorrect gi model size
[   53.349892][ T6159] netem: change failed
[   53.384718][ T6147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.433226][ T6166] netlink: 'syz.2.75': attribute type 10 has an invalid length.
[   53.440550][ T6166] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   53.458375][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.465246][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.472952][ T5870] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.480324][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.510151][ T6168] xt_HMARK: proto mask must be zero with L3 mode
[   53.566777][ T6175] netlink: 'syz.2.80': attribute type 1 has an invalid length.
[   53.575131][ T6175] netlink: 'syz.2.80': attribute type 2 has an invalid length.
[   53.581795][ T6175] netlink: 'syz.2.80': attribute type 8 has an invalid length.
[   53.625528][ T6180] bond0: (slave wlan1): Releasing backup interface
[   53.635300][ T6180] team0: Port device batadv1 removed
[   53.672073][ T6183] tipc: Started in network mode
[   53.673807][ T6183] tipc: Node identity 1ae99989bdd1, cluster identity 4711
[   53.676258][ T6183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.679699][ T6183] syzkaller0: entered promiscuous mode
[   53.681723][ T6183] syzkaller0: entered allmulticast mode
[   53.693536][ T6182] tipc: Resetting bearer <eth:syzkaller0>
[   53.697033][ T6182] tipc: Disabling bearer <eth:syzkaller0>
[   53.789552][ T6194] __nla_validate_parse: 18 callbacks suppressed
[   53.789567][ T6194] netlink: 80 bytes leftover after parsing attributes in process `syz.2.86'.
[   53.789568][ T6193] netlink: 80 bytes leftover after parsing attributes in process `syz.2.86'.
[   53.868095][ T6202] wg1 speed is unknown, defaulting to 1000
[   53.870190][ T6202] wg1 speed is unknown, defaulting to 1000
[   53.872862][ T6202] wg1 speed is unknown, defaulting to 1000
[   53.878772][ T6202] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   53.885154][ T6202] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   53.900448][ T6202] wg1 speed is unknown, defaulting to 1000
[   53.910030][ T6202] wg1 speed is unknown, defaulting to 1000
[   53.976223][ T6202] wg1 speed is unknown, defaulting to 1000
[   54.101321][ T5755] IPVS: starting estimator thread 0...
[   54.106200][ T6215] netlink: 788 bytes leftover after parsing attributes in process `syz.2.92'.
[   54.156407][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   54.188770][ T6220] IPVS: using max 92 ests per chain, 220800 per kthread
[   54.355667][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.96'.
[   54.359583][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.96'.
[   54.419322][ T6250] netlink: 'syz.2.97': attribute type 3 has an invalid length.
[   54.466045][ T6256] veth0: entered promiscuous mode
[   54.476948][ T6255] veth0: left promiscuous mode
[   54.603454][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.609704][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.615013][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.633260][ T6272] infiniband syz@: RDMA CMA: cma_listen_on_dev, error -98
[   54.658760][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.101'.
[   54.678632][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.102'.
[   54.687081][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.696483][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.710337][ T6272] wg1 speed is unknown, defaulting to 1000
[   54.837720][ T5840] Bluetooth: hci2: command tx timeout
[   54.842894][ T5849] Bluetooth: hci0: command tx timeout
[   54.869200][ T6287] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[   54.886406][ T6286] pimreg: entered allmulticast mode
[   54.906854][ T6286] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.917806][ T5840] Bluetooth: hci1: command tx timeout
[   54.959613][ T6286] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.960883][ T6294] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   54.970421][ T6294] netlink: 'syz.1.107': attribute type 4 has an invalid length.
[   54.981254][ T6294] netlink: 'syz.1.107': attribute type 1 has an invalid length.
[   55.010334][ T6286] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.065271][ T6286] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.128962][ T6306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.111'.
[   55.131798][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.134642][ T6307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.111'.
[   55.148940][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.152586][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.169142][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.172679][ T6311] bond0: Master is either lo or non-ether device
[   55.341499][ T6336] netlink: 'syz.1.121': attribute type 1 has an invalid length.
[   55.345909][ T6337] netlink: 'syz.1.121': attribute type 1 has an invalid length.
[   55.385593][ T6345] gretap1: entered promiscuous mode
[   55.389476][ T6345] gretap1: entered allmulticast mode
[   55.410200][ T6349] gretap0: entered promiscuous mode
[   55.419920][ T6349] gretap0: left promiscuous mode
[   55.428423][ T6345] veth0: entered promiscuous mode
[   55.429139][ T6352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   55.430466][ T6345] veth0: left promiscuous mode
[   55.457734][ T6361] net_ratelimit: 36 callbacks suppressed
[   55.457751][ T6361] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   55.606086][ T6388] netlink: 'syz.1.132': attribute type 12 has an invalid length.
[   55.653722][ T6400] netlink: 'syz.0.131': attribute type 6 has an invalid length.
[   55.764005][ T6406] netlink: 'syz.1.134': attribute type 10 has an invalid length.
[   55.771803][ T6406] team0: Port device dummy0 added
[   55.775891][ T6406] netlink: 'syz.1.134': attribute type 10 has an invalid length.
[   55.781984][ T6406] team0: Port device dummy0 removed
[   55.786347][ T6406] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   56.364577][ T6409] erspan0: entered promiscuous mode
[   56.368922][ T6409] erspan0: left promiscuous mode
[   56.483821][ T6414] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   56.554695][ T6419] hsr0: entered promiscuous mode
[   56.556747][ T6419] macvlan2: entered promiscuous mode
[   56.559275][ T6419] macvlan2: entered allmulticast mode
[   56.561822][ T6419] hsr0: entered allmulticast mode
[   56.563506][ T6419] hsr_slave_0: entered allmulticast mode
[   56.565970][ T6419] hsr_slave_1: entered allmulticast mode
[   56.620794][ T6432] smc: net device bond0 applied user defined pnetid SYZ0
[   56.702811][ T6447] batman_adv: batadv0: Interface deactivated: dummy0
[   56.705094][ T6447] batman_adv: batadv0: Removing interface: dummy0
[   56.712416][ T6447] bridge_slave_0: left allmulticast mode
[   56.714217][ T6447] bridge_slave_0: left promiscuous mode
[   56.716101][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.720520][ T6447] bridge_slave_1: left allmulticast mode
[   56.728477][ T6447] bridge_slave_1: left promiscuous mode
[   56.730370][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.734648][ T6447] bond0: (slave bond_slave_0): Releasing backup interface
[   56.741492][ T6447] bond0: (slave bond_slave_1): Releasing backup interface
[   56.748199][ T6447] team0: Port device team_slave_0 removed
[   56.752314][ T6447] team0: Port device team_slave_1 removed
[   56.754906][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.757556][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.760537][ T6447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.762793][ T6447] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.769749][ T6447] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   56.772051][ T6447] batman_adv: batadv0: Removing interface: ip6gretap1
[   56.776371][   T51] wg1 speed is unknown, defaulting to 1000
[   56.779742][ T6449] batman_adv: batadv0: Adding interface: dummy0
[   56.782298][ T6449] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.793017][ T6449] batman_adv: batadv0: Interface activated: dummy0
[   56.954303][ T6473] sctp: [Deprecated]: syz.2.158 (pid 6473) Use of int in max_burst socket option.
[   56.954303][ T6473] Use struct sctp_assoc_value instead
[   56.965412][ T6473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.971424][ T6473] syzkaller0: entered promiscuous mode
[   56.973659][ T6473] syzkaller0: entered allmulticast mode
[   56.982423][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[   56.984436][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   56.987406][ T6473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   56.991477][ T6472] tipc: Resetting bearer <eth:syzkaller0>
[   56.994805][ T6472] tipc: Disabling bearer <eth:syzkaller0>
[   57.096959][ T6481] syz_tun: entered allmulticast mode
[   57.112028][ T6479] syz_tun: left allmulticast mode
[   57.427021][ T6492] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002
[   57.568718][ T6508] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   57.896827][ T6535] Bluetooth: MGMT ver 1.23
[   58.434180][ T6568] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   58.441870][ T6564] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20000
[   58.548144][ T6576] pim6reg: entered allmulticast mode
[   58.558649][ T6573] pim6reg: left allmulticast mode
[   58.777056][   T24] wg1 speed is unknown, defaulting to 1000
[   58.777238][ T6593] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.780424][   T24] syz0: Port: 1 Link DOWN
[   58.788468][ T5853] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.795284][ T5853] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.803202][ T5853] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.810047][ T5853] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.048796][ T6604] __nla_validate_parse: 32 callbacks suppressed
[   59.048798][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   59.048816][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   59.048828][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   59.051360][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.194'.
[   59.245319][ T6604] hsr0: left allmulticast mode
[   59.246946][ T6604] hsr_slave_0: left allmulticast mode
[   59.249211][ T6604] hsr_slave_1: left allmulticast mode
[   59.252296][    T9] wg1 speed is unknown, defaulting to 1000
[   59.254341][    T9] syz@: Port: 1 Link DOWN
[   59.254494][ T5853] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.261002][ T5853] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.264114][ T5853] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.267006][ T5853] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.349354][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'.
[   59.484108][ T6640] validate_nla: 4 callbacks suppressed
[   59.484146][ T6640] netlink: 'syz.0.200': attribute type 1 has an invalid length.
[   59.494549][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'.
[   59.526696][ T6642] tc_dump_action: action bad kind
[   59.530618][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'.
[   59.623974][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[   59.630289][ T6663] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[   59.633423][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.639394][ T6667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.640507][ T6662] netlink: 'syz.2.207': attribute type 21 has an invalid length.
[   59.645571][ T6662] netlink: 128 bytes leftover after parsing attributes in process `syz.2.207'.
[   59.649654][ T6662] netlink: 'syz.2.207': attribute type 5 has an invalid length.
[   59.652667][ T6662] netlink: 'syz.2.207': attribute type 6 has an invalid length.
[   59.655807][ T6662] netlink: 3 bytes leftover after parsing attributes in process `syz.2.207'.
[   59.667926][ T6667] syzkaller0: entered promiscuous mode
[   59.669768][ T6667] syzkaller0: entered allmulticast mode
[   59.681207][ T6667] tipc: Resetting bearer <eth:syzkaller0>
[   59.694199][ T6666] tipc: Resetting bearer <eth:syzkaller0>
[   59.702147][ T6672] netlink: 'syz.1.209': attribute type 2 has an invalid length.
[   59.702617][ T6666] tipc: Disabling bearer <eth:syzkaller0>
[   59.715720][ T6672] : entered promiscuous mode
[   59.954573][ T6687] netlink: 'syz.1.214': attribute type 10 has an invalid length.
[   59.954582][ T6686] netlink: 'syz.1.214': attribute type 10 has an invalid length.
[   59.957828][ T6687] veth0_vlan: left promiscuous mode
[   59.960924][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   59.963060][ T6687] veth0_vlan: entered promiscuous mode
[   59.963073][ T6687] veth0_vlan: entered allmulticast mode
[   59.965285][ T5849] Bluetooth: hci2: command 0x0401 tx timeout
[   59.971431][ T6687] bridge0: port 1(veth0_vlan) entered blocking state
[   59.975426][ T6687] bridge0: port 1(veth0_vlan) entered disabled state
[   59.979639][ T6687] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   59.986311][ T6686] bridge0: port 1(veth0_vlan) entered blocking state
[   59.989700][ T6686] bridge0: port 1(veth0_vlan) entered disabled state
[   59.993763][ T6686] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   60.052497][ T6692] syzkaller0: entered promiscuous mode
[   60.054599][ T6692] syzkaller0: entered allmulticast mode
[   60.518585][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad61400: rx timeout, send abort
[   60.522100][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ad63800: rx timeout, send abort
[   60.525539][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ad61400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.531344][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803ad63800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.662707][ T6696] wg1 speed is unknown, defaulting to 1000
[   60.665659][ T6696] wg1 speed is unknown, defaulting to 1000
[   60.874598][ T6706] wg1 speed is unknown, defaulting to 1000
[   60.876875][ T6706] wg1 speed is unknown, defaulting to 1000
[   61.232701][ T6730] smc: net device bond0 erased user defined pnetid SYZ0
[   61.271656][ T6736] vlan2: entered allmulticast mode
[   61.273456][ T6736] veth1: entered allmulticast mode
[   61.275473][ T6736] batman_adv: batadv0: Adding interface: vlan2
[   61.278426][ T6736] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.288620][ T6736] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   61.313074][ T6738] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   61.323462][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.332201][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.334657][ T6738] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   61.340109][ T6738] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   61.388186][ T6738] veth3: entered promiscuous mode
[   61.392286][ T6738] bond1: (slave veth3): Enslaving as an active interface with a down link
[   61.402615][ T6738] erspan0: entered allmulticast mode
[   61.405018][ T1402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.410161][ T1402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.602773][ T6758] netlink: 'syz.2.236': attribute type 3 has an invalid length.
[   61.659727][ T6759] IPv6: NLM_F_REPLACE set, but no existing node found!
[   62.295257][ T6762] ieee802154 phy0 wpan0: encryption failed: -22
[   62.595181][   T33] audit: type=1800 audit(1756322687.189:2): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="blkio.bfq.time_recursive" dev="tmpfs" ino=394 res=0 errno=0
[   62.722941][ T6815] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   62.796238][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.799501][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.806955][ T6820] batman_adv: batadv0: Interface deactivated: dummy0
[   62.841575][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.846231][ T6820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.894547][ T5870] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.898937][ T5870] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.905207][ T6829] pim6reg: entered allmulticast mode
[   62.908047][ T5870] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.911260][ T5870] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.258747][ T6863] syzkaller0: entered promiscuous mode
[   63.263086][ T6863] syzkaller0: entered allmulticast mode
[   63.449573][ T6866] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   63.749015][ T6880] netlink: 'syz.0.274': attribute type 21 has an invalid length.
[   63.908084][ T5755] IPVS: starting estimator thread 0...
[   63.981536][ T6905] tun0: tun_chr_ioctl cmd 2148045848
[   63.984553][ T6905] tun0: tun_chr_ioctl cmd 21731
[   63.989998][ T6909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   64.001112][ T6901] IPVS: using max 92 ests per chain, 220800 per kthread
[   64.304400][ T6949] __nla_validate_parse: 26 callbacks suppressed
[   64.304415][ T6949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.296'.
[   64.352287][ T6951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'.
[   64.384024][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.391439][ T6957] syzkaller0: entered promiscuous mode
[   64.393741][ T6957] syzkaller0: entered allmulticast mode
[   64.399091][ T6959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'.
[   64.406575][ T6957] tipc: Resetting bearer <eth:syzkaller0>
[   64.410997][ T6956] tipc: Resetting bearer <eth:syzkaller0>
[   64.421235][ T6956] tipc: Disabling bearer <eth:syzkaller0>
[   64.470756][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'.
[   64.471417][ T6967] batadv1: entered promiscuous mode
[   64.526158][ T6977] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.307'.
[   64.565043][ T6979] syzkaller0: entered promiscuous mode
[   64.568074][ T6979] syzkaller0: entered allmulticast mode
[   64.713433][ T6981] IPVS: Error connecting to the multicast addr
[   64.716522][ T6981] IPVS: Error connecting to the multicast addr
[   64.723097][ T6981] IPVS: Error connecting to the multicast addr
[   64.726077][ T6981] IPVS: Error connecting to the multicast addr
[   64.729253][ T6981] IPVS: Error connecting to the multicast addr
[   64.732193][ T6981] IPVS: Error connecting to the multicast addr
[   64.735136][ T6981] IPVS: Error connecting to the multicast addr
[   64.742190][ T6981] IPVS: Error connecting to the multicast addr
[   64.746534][ T6981] IPVS: Error connecting to the multicast addr
[   64.750557][ T6981] IPVS: Error connecting to the multicast addr
[   64.753412][ T6981] IPVS: Error connecting to the multicast addr
[   64.756380][ T6981] IPVS: Error connecting to the multicast addr
[   64.759578][ T6981] IPVS: Error connecting to the multicast addr
[   64.763271][ T6981] IPVS: Error connecting to the multicast addr
[   64.766249][ T6981] IPVS: Error connecting to the multicast addr
[   64.770044][ T6981] IPVS: Error connecting to the multicast addr
[   64.773281][ T6981] IPVS: Error connecting to the multicast addr
[   64.776086][ T6981] IPVS: Error connecting to the multicast addr
[   64.779973][ T6981] IPVS: Error connecting to the multicast addr
[   64.782218][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[   64.782436][ T6981] IPVS: Error connecting to the multicast addr
[   64.788998][ T6981] IPVS: Error connecting to the multicast addr
[   64.791721][ T6981] IPVS: Error connecting to the multicast addr
[   64.794381][ T6981] IPVS: Error connecting to the multicast addr
[   64.797001][ T6981] IPVS: Error connecting to the multicast addr
[   64.807525][ T6981] IPVS: Error connecting to the multicast addr
[   64.810519][ T6981] IPVS: Error connecting to the multicast addr
[   64.813715][ T6981] IPVS: Error connecting to the multicast addr
[   64.815992][ T6981] IPVS: Error connecting to the multicast addr
[   64.818394][ T6981] IPVS: Error connecting to the multicast addr
[   64.820658][ T6981] IPVS: Error connecting to the multicast addr
[   64.823031][ T6981] IPVS: Error connecting to the multicast addr
[   64.825211][ T6981] IPVS: Error connecting to the multicast addr
[   64.837547][ T6981] IPVS: Error connecting to the multicast addr
[   64.883390][ T6992] validate_nla: 2 callbacks suppressed
[   64.883405][ T6992] netlink: 'syz.0.312': attribute type 3 has an invalid length.
[   64.893381][ T6992] syz_tun: entered allmulticast mode
[   64.896078][ T6992] netlink: 120 bytes leftover after parsing attributes in process `syz.0.312'.
[   64.905681][ T6992] erspan0: left allmulticast mode
[   64.914474][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.920464][ T6992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.926773][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[   64.930715][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[   64.934183][ T6991] syz_tun: left allmulticast mode
[   65.034609][ T7006] pimreg: entered allmulticast mode
[   65.040594][ T7006] pimreg: left allmulticast mode
[   65.099968][ T7009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[   65.126023][ T7011] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   65.174773][ T7014] tipc: Started in network mode
[   65.176810][ T7014] tipc: Node identity f687b5fde5c, cluster identity 4711
[   65.180014][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.185095][ T7014] syzkaller0: entered promiscuous mode
[   65.188452][ T7014] syzkaller0: entered allmulticast mode
[   65.196556][ T7014] tipc: Resetting bearer <eth:syzkaller0>
[   65.213850][ T7013] tipc: Resetting bearer <eth:syzkaller0>
[   65.217700][ T7013] tipc: Disabling bearer <eth:syzkaller0>
[   65.389519][ T7048] netlink: 'syz.1.333': attribute type 3 has an invalid length.
[   65.399458][ T7050] syz_tun: entered allmulticast mode
[   65.402536][ T7050] syz_tun: left allmulticast mode
[   65.411333][ T7048] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.430481][ T7050] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.433453][ T7050] 8021q: adding VLAN 0 to HW filter on device team0
[   65.438357][ T7050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.493123][ T7065] wg1 speed is unknown, defaulting to 1000
[   65.495708][ T7065] wg1 speed is unknown, defaulting to 1000
[   65.548436][ T7068] IPVS: length: 209 != 24
[   65.680284][ T7079] geneve2: entered promiscuous mode
[   65.688471][ T5905] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   65.692928][ T5905] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   65.697086][ T5905] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   65.701803][ T5905] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   66.003360][ T5870] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[   66.160472][ T7110] team0: entered promiscuous mode
[   66.166735][ T7109] team0: left promiscuous mode
[   66.222187][ T7114] ip6gre1: entered allmulticast mode
[   66.310288][ T7118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.313628][ T7118] syzkaller0: entered promiscuous mode
[   66.315876][ T7118] syzkaller0: entered allmulticast mode
[   66.325813][ T7120] tipc: Resetting bearer <eth:syzkaller0>
[   66.341383][ T7121] tipc: Resetting bearer <eth:syzkaller0>
[   66.345012][ T7121] tipc: Disabling bearer <eth:syzkaller0>
[   66.424598][ T7125] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   66.514403][ T7137] netlink: 'syz.1.359': attribute type 21 has an invalid length.
[   66.528406][ T7137] netlink: 'syz.1.359': attribute type 4 has an invalid length.
[   66.531291][ T7137] netlink: 'syz.1.359': attribute type 3 has an invalid length.
[   66.539103][ T7140] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   66.543897][ T7140] batman_adv: batadv0: Removing interface: dummy0
[   66.543954][ T7137] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[   66.549418][ T7140] bridge_slave_0: left allmulticast mode
[   66.551296][ T7140] bridge_slave_0: left promiscuous mode
[   66.553225][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.556272][ T7140] bridge_slave_1: left allmulticast mode
[   66.561151][ T7140] bridge_slave_1: left promiscuous mode
[   66.563405][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.567901][ T7140] bond0: (slave bond_slave_0): Releasing backup interface
[   66.571394][ T7140] bond0: (slave bond_slave_1): Releasing backup interface
[   66.574390][ T7140] team0: Port device team_slave_0 removed
[   66.576848][ T7140] team0: Port device team_slave_1 removed
[   66.579179][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.581743][ T7140] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.584570][ T7140] bond0: (slave wlan1): Releasing backup interface
[   66.588943][ T7141] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   66.590783][ T7135] wg1 speed is unknown, defaulting to 1000
[   66.609117][ T7137] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.613867][ T7143] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.616156][ T7143] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   66.620214][ T7143] bond1: (slave vcan1): Error -95 calling set_mac_address
[   66.626304][ T7135] wg1 speed is unknown, defaulting to 1000
[   66.638451][ T7141] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.642276][ T7140] netlink: 'syz.2.360': attribute type 10 has an invalid length.
[   66.651855][ T7140] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   66.655944][ T7140] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.661926][ T7140] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.665433][ T7140] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   66.665832][ T7137] gretap1: entered promiscuous mode
[   66.672652][ T7137] bond1: (slave gretap1): making interface the new active one
[   66.675158][ T7137] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   66.733958][ T7150] netlink: 'syz.0.362': attribute type 10 has an invalid length.
[   66.742201][ T7150] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.935646][ T7177] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   66.941081][ T7177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.944031][ T7177] syzkaller0: entered promiscuous mode
[   66.945845][ T7177] syzkaller0: entered allmulticast mode
[   66.955230][ T7176] tipc: Resetting bearer <eth:syzkaller0>
[   66.961612][ T7176] tipc: Disabling bearer <eth:syzkaller0>
[   66.982916][ T7178] wg1 speed is unknown, defaulting to 1000
[   66.985180][ T7178] wg1 speed is unknown, defaulting to 1000
[   67.159354][ T7187] bond2: entered promiscuous mode
[   67.161010][ T7187] bond2: entered allmulticast mode
[   67.163189][ T7187] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.294018][ T7200] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   67.296765][ T7200] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   67.325760][ T7206] syzkaller0: entered promiscuous mode
[   67.329316][ T7206] syzkaller0: entered allmulticast mode
[   67.397296][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   67.399925][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.695605][ T7238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.706600][ T7238] siw: device registration error -23
[   68.445195][ T7263] netlink: 'syz.1.396': attribute type 29 has an invalid length.
[   68.449431][ T7263] netlink: 'syz.1.396': attribute type 29 has an invalid length.
[   68.724920][ T7281] k*]: entered promiscuous mode
[   68.734841][ T7281] veth0_to_team: entered promiscuous mode
[   68.736687][ T7281] veth0_to_team: entered allmulticast mode
[   68.884622][ T7289] sctp: [Deprecated]: syz.0.406 (pid 7289) Use of int in maxseg socket option.
[   68.884622][ T7289] Use struct sctp_assoc_value instead
[   69.301114][ T7315] af_packet: tpacket_rcv: packet too big, clamped from 290 to 4294967272. macoff=96
[   69.393401][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   69.395922][ T7318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.440550][ T7328] __nla_validate_parse: 27 callbacks suppressed
[   69.440571][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[   69.546992][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[   69.552439][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'.
[   69.633947][ T7337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   69.659243][ T7283] ==================================================================
[   69.661999][ T7283] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   69.665014][ T7283] Read of size 1 at addr ffff8881074af432 by task syz.1.403/7283
[   69.668046][ T7283] 
[   69.669168][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) 
[   69.669182][ T7283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.669190][ T7283] Call Trace:
[   69.669214][ T7283]  <TASK>
[   69.669221][ T7283]  dump_stack_lvl+0x189/0x250
[   69.669238][ T7283]  ? __virt_addr_valid+0x1c8/0x5c0
[   69.669252][ T7283]  ? rcu_is_watching+0x15/0xb0
[   69.669262][ T7283]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.669272][ T7283]  ? rcu_is_watching+0x15/0xb0
[   69.669308][ T7283]  ? lock_release+0x4b/0x3e0
[   69.669331][ T7283]  ? __virt_addr_valid+0x1c8/0x5c0
[   69.669343][ T7283]  ? __virt_addr_valid+0x4a5/0x5c0
[   69.669357][ T7283]  print_report+0xca/0x240
[   69.669370][ T7283]  ? rose_transmit_link+0x5c3/0x740
[   69.669380][ T7283]  kasan_report+0x118/0x150
[   69.669393][ T7283]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   69.669405][ T7283]  ? rose_transmit_link+0x5c3/0x740
[   69.669415][ T7283]  rose_transmit_link+0x5c3/0x740
[   69.669424][ T7283]  ? skb_put+0x11b/0x210
[   69.669433][ T7283]  rose_write_internal+0x11dc/0x1ac0
[   69.669445][ T7283]  ? __pfx_rose_write_internal+0x10/0x10
[   69.669455][ T7283]  ? __timer_delete+0x5d/0x390
[   69.669467][ T7283]  rose_release+0x24e/0x520
[   69.669476][ T7283]  sock_close+0xc3/0x240
[   69.669489][ T7283]  ? __pfx_sock_close+0x10/0x10
[   69.669498][ T7283]  __fput+0x44c/0xa70
[   69.669509][ T7283]  task_work_run+0x1d4/0x260
[   69.669521][ T7283]  ? __pfx_task_work_run+0x10/0x10
[   69.669531][ T7283]  ? task_work_add+0x377/0x420
[   69.669540][ T7283]  ? __pfx_task_work_add+0x10/0x10
[   69.669550][ T7283]  get_signal+0x11ed/0x1340
[   69.669559][ T7283]  ? __might_fault+0xb0/0x130
[   69.669572][ T7283]  arch_do_signal_or_restart+0x9a/0x750
[   69.669587][ T7283]  ? __pfx___sys_connect+0x10/0x10
[   69.669599][ T7283]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   69.669613][ T7283]  ? rcu_is_watching+0x15/0xb0
[   69.669620][ T7283]  exit_to_user_mode_loop+0x75/0x110
[   69.669632][ T7283]  do_syscall_64+0x2bd/0x3b0
[   69.669641][ T7283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.669649][ T7283]  ? exc_page_fault+0x9f/0xf0
[   69.669659][ T7283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.669667][ T7283] RIP: 0033:0x7f63e278ebe9
[   69.669680][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.669688][ T7283] RSP: 002b:00007f63e362b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   69.669698][ T7283] RAX: fffffffffffffe00 RBX: 00007f63e29b5fa0 RCX: 00007f63e278ebe9
[   69.669704][ T7283] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000012
[   69.669710][ T7283] RBP: 00007f63e2811e19 R08: 0000000000000000 R09: 0000000000000000
[   69.669715][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.669720][ T7283] R13: 00007f63e29b6038 R14: 00007f63e29b5fa0 R15: 00007ffc84b10708
[   69.669729][ T7283]  </TASK>
[   69.669733][ T7283] 
[   69.763647][ T7283] Allocated by task 7283:
[   69.765379][ T7283]  kasan_save_track+0x3e/0x80
[   69.767219][ T7283]  __kasan_kmalloc+0x93/0xb0
[   69.769071][ T7283]  __kmalloc_cache_noprof+0x230/0x3d0
[   69.771157][ T7283]  rose_add_node+0x23a/0xde0
[   69.773007][ T7283]  rose_rt_ioctl+0xa48/0xfb0
[   69.774849][ T7283]  rose_ioctl+0x3ce/0x8b0
[   69.776553][ T7283]  sock_do_ioctl+0xdc/0x300
[   69.778368][ T7283]  sock_ioctl+0x576/0x790
[   69.780065][ T7283]  __se_sys_ioctl+0xfc/0x170
[   69.781866][ T7283]  do_syscall_64+0xfa/0x3b0
[   69.783669][ T7283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.785970][ T7283] 
[   69.786932][ T7283] Freed by task 7325:
[   69.788535][ T7283]  kasan_save_track+0x3e/0x80
[   69.790113][ T7283]  kasan_save_free_info+0x46/0x50
[   69.791710][ T7283]  __kasan_slab_free+0x5b/0x80
[   69.793464][ T7283]  kfree+0x18e/0x440
[   69.794695][ T7283]  rose_rt_device_down+0x473/0x4c0
[   69.796259][ T7283]  rose_device_event+0x603/0x6a0
[   69.797743][ T7283]  notifier_call_chain+0x1b6/0x3e0
[   69.799409][ T7283]  __dev_notify_flags+0x18d/0x2e0
[   69.800981][ T7283]  netif_change_flags+0xe8/0x1a0
[   69.802607][ T7283]  dev_change_flags+0x130/0x260
[   69.804164][ T7283]  dev_ioctl+0x7b4/0x1150
[   69.805541][ T7283]  sock_do_ioctl+0x22c/0x300
[   69.806958][ T7283]  sock_ioctl+0x576/0x790
[   69.808347][ T7283]  __se_sys_ioctl+0xfc/0x170
[   69.810052][ T7283]  do_syscall_64+0xfa/0x3b0
[   69.811837][ T7283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.814199][ T7283] 
[   69.815204][ T7283] The buggy address belongs to the object at ffff8881074af400
[   69.815204][ T7283]  which belongs to the cache kmalloc-512 of size 512
[   69.820529][ T7283] The buggy address is located 50 bytes inside of
[   69.820529][ T7283]  freed 512-byte region [ffff8881074af400, ffff8881074af600)
[   69.825645][ T7283] 
[   69.826634][ T7283] The buggy address belongs to the physical page:
[   69.829127][ T7283] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1074ac
[   69.832458][ T7283] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   69.835599][ T7283] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   69.838681][ T7283] page_type: f5(slab)
[   69.840315][ T7283] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   69.843681][ T7283] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   69.847035][ T7283] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   69.850001][ T7283] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   69.852973][ T7283] head: 057ff00000000002 ffffea00041d2b01 00000000ffffffff 00000000ffffffff
[   69.856425][ T7283] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   69.860695][ T7283] page dumped because: kasan: bad access detected
[   69.863355][ T7283] page_owner tracks the page as allocated
[   69.865655][ T7283] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 47870197528, free_ts 47748112331
[   69.873733][ T7283]  post_alloc_hook+0x240/0x2a0
[   69.875665][ T7283]  get_page_from_freelist+0x21e4/0x22c0
[   69.877851][ T7283]  __alloc_frozen_pages_noprof+0x181/0x370
[   69.880024][ T7283]  alloc_pages_mpol+0x232/0x4a0
[   69.881834][ T7283]  allocate_slab+0x8a/0x370
[   69.883675][ T7283]  ___slab_alloc+0xbeb/0x1410
[   69.885575][ T7283]  __kmalloc_noprof+0x305/0x4f0
[   69.887489][ T7283]  fib6_info_alloc+0x30/0xf0
[   69.889322][ T7283]  ip6_route_info_create+0x142/0x860
[   69.891427][ T7283]  addrconf_f6i_alloc+0x1d2/0x450
[   69.893488][ T7283]  ipv6_add_addr+0x56e/0x1090
[   69.895342][ T7283]  inet6_addr_add+0x387/0xc00
[   69.897198][ T7283]  inet6_rtm_newaddr+0x93d/0xd20
[   69.899182][ T7283]  rtnetlink_rcv_msg+0x7cf/0xb70
[   69.901194][ T7283]  netlink_rcv_skb+0x208/0x470
[   69.903065][ T7283]  netlink_unicast+0x82f/0x9e0
[   69.905032][ T7283] page last free pid 791 tgid 791 stack trace:
[   69.907468][ T7283]  __free_frozen_pages+0xbc4/0xd30
[   69.909490][ T7283]  __slab_free+0x303/0x3c0
[   69.911251][ T7283]  qlist_free_all+0x97/0x140
[   69.913120][ T7283]  kasan_quarantine_reduce+0x148/0x160
[   69.915297][ T7283]  __kasan_slab_alloc+0x22/0x80
[   69.917232][ T7283]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   69.919589][ T7283]  __alloc_skb+0x112/0x2d0
[   69.921393][ T7283]  mld_newpack+0x13c/0xc40
[   69.923138][ T7283]  add_grhead+0x5a/0x2a0
[   69.924844][ T7283]  add_grec+0x1452/0x1740
[   69.926568][ T7283]  mld_ifc_work+0x6ed/0xd60
[   69.928376][ T7283]  process_scheduled_works+0xae1/0x17b0
[   69.930502][ T7283]  worker_thread+0x8a0/0xda0
[   69.932169][ T7283]  kthread+0x711/0x8a0
[   69.933735][ T7283]  ret_from_fork+0x3fc/0x770
[   69.935534][ T7283]  ret_from_fork_asm+0x1a/0x30
[   69.937413][ T7283] 
[   69.938357][ T7283] Memory state around the buggy address:
[   69.940483][ T7283]  ffff8881074af300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   69.943494][ T7283]  ffff8881074af380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   69.946490][ T7283] >ffff8881074af400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   69.948855][ T7283]                                      ^
[   69.950521][ T7283]  ffff8881074af480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   69.952902][ T7283]  ffff8881074af500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   69.955335][ T7283] ==================================================================
[   69.963704][ T7283] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   69.965970][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.1.403 Not tainted syzkaller #0 PREEMPT(full) 
[   69.968699][ T7283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.971758][ T7283] Call Trace:
[   69.972783][ T7283]  <TASK>
[   69.973690][ T7283]  dump_stack_lvl+0x99/0x250
[   69.975094][ T7283]  ? __asan_memcpy+0x40/0x70
[   69.976533][ T7283]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.978141][ T7283]  ? __pfx__printk+0x10/0x10
[   69.979550][ T7283]  vpanic+0x281/0x750
[   69.980754][ T7283]  ? __pfx_print_hex_dump+0x10/0x10
[   69.982578][ T7283]  ? __pfx_vpanic+0x10/0x10
[   69.984018][ T7283]  ? preempt_schedule_common+0x83/0xd0
[   69.985703][ T7283]  ? preempt_schedule+0xae/0xc0
[   69.987228][ T7283]  panic+0xb9/0xc0
[   69.988421][ T7283]  ? __pfx_panic+0x10/0x10
[   69.989798][ T7283]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   69.991793][ T7283]  ? rose_transmit_link+0x5c3/0x740
[   69.993358][ T7283]  check_panic_on_warn+0x89/0xb0
[   69.994861][ T7283]  ? rose_transmit_link+0x5c3/0x740
[   69.996530][ T7283]  end_report+0x78/0x160
[   69.997849][ T7283]  kasan_report+0x129/0x150
[   69.999488][ T7283]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   70.001622][ T7283]  ? rose_transmit_link+0x5c3/0x740
[   70.003460][ T7283]  rose_transmit_link+0x5c3/0x740
[   70.005209][ T7283]  ? skb_put+0x11b/0x210
[   70.006730][ T7283]  rose_write_internal+0x11dc/0x1ac0
[   70.008600][ T7283]  ? __pfx_rose_write_internal+0x10/0x10
[   70.010538][ T7283]  ? __timer_delete+0x5d/0x390
[   70.012200][ T7283]  rose_release+0x24e/0x520
[   70.013800][ T7283]  sock_close+0xc3/0x240
[   70.015278][ T7283]  ? __pfx_sock_close+0x10/0x10
[   70.016969][ T7283]  __fput+0x44c/0xa70
[   70.018407][ T7283]  task_work_run+0x1d4/0x260
[   70.020002][ T7283]  ? __pfx_task_work_run+0x10/0x10
[   70.021738][ T7283]  ? task_work_add+0x377/0x420
[   70.023419][ T7283]  ? __pfx_task_work_add+0x10/0x10
[   70.025216][ T7283]  get_signal+0x11ed/0x1340
[   70.026798][ T7283]  ? __might_fault+0xb0/0x130
[   70.028474][ T7283]  arch_do_signal_or_restart+0x9a/0x750
[   70.030394][ T7283]  ? __pfx___sys_connect+0x10/0x10
[   70.032177][ T7283]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   70.034348][ T7283]  ? rcu_is_watching+0x15/0xb0
[   70.036019][ T7283]  exit_to_user_mode_loop+0x75/0x110
[   70.037879][ T7283]  do_syscall_64+0x2bd/0x3b0
[   70.039535][ T7283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.041671][ T7283]  ? exc_page_fault+0x9f/0xf0
[   70.043325][ T7283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.045370][ T7283] RIP: 0033:0x7f63e278ebe9
[   70.046920][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.053508][ T7283] RSP: 002b:00007f63e362b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   70.056379][ T7283] RAX: fffffffffffffe00 RBX: 00007f63e29b5fa0 RCX: 00007f63e278ebe9
[   70.059120][ T7283] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000012
[   70.061884][ T7283] RBP: 00007f63e2811e19 R08: 0000000000000000 R09: 0000000000000000
[   70.064618][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.067385][ T7283] R13: 00007f63e29b6038 R14: 00007f63e29b5fa0 R15: 00007ffc84b10708
[   70.070273][ T7283]  </TASK>
[   70.072041][ T7283] Kernel Offset: disabled
[   70.073563][ T7283] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:24:54  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81acf126 RBX=1ffffffff33c7928 RCX=0000000000000100 RDX=ffff888022b63980
RSI=0000000008c00000 RDI=0000000008c00000 RBP=0000000008c00000 RSP=ffffc900000079e8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f18
R12=ffff88804b025900 R13=0000000008c00000 R14=ffffffff99e3c940 R15=0000000000000806
RIP=ffffffff81acf19d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f63e2812e53
XMM06=0000000000000000 00007f63e2812e4d XMM07=0000000000000000 00007f63e2812e61
XMM08=0000000000000000 00007f63e2812ee7 XMM09=0000000000000000 00007f63e2812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001528 RDI=0000000000001529 RBP=00000000000003f8 RSP=ffffc9000667f210
R8 =ffff888107588237 R9 =1ffff11020eb1046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8d4 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f63e362b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9e594e56c0 CR3=0000000113ba2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000030717062
XMM02=00000000fff81a7b 2020200000000000 XMM03=fffffff800000107 000000000000a1bf
XMM04=9500000006000000 8500000000000003 XMM05=b700000008000002 b7fffffff8000001
XMM06=07000000000000a1 bf00000000fff81a XMM07=7b20202000000000 0025642020000001
XMM08=0000000000000000 00007f63e2812ee7 XMM09=0000000000000000 00007f63e2812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
