last executing test programs:

870.115189ms ago: executing program 2 (id=429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xa800}, 0x2c040801)
r1 = socket(0x1e, 0x800, 0x7fff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x25}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xc, 0x4, "a0cf256053fe0833"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "c6253ab0e8"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d67743a3100dd42be7517a4ab0"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pB    \x00'}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0xa9f, 0x8001, 0x8000, 0x25860, r3, 0xfffffffa, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r7, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80800}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x80)
r9 = socket$unix(0x1, 0x1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r5, &(0x7f0000000840)="01c192df9ff646a462a3c3a64654990670a5745d9c79947a6e50c7c42c4d875887907dd339b2fb765ea4ceb0a214569cadeb0621877f15a205819556052829813f1912e826510a360cc88c2f60bf760a34d7bc152639be447e43eb07d7ba4531dc97a69fce41f2af47669d0b7d8e5ca99db7809789d35a4bb6b89f208ddd58e4588bb334d5459f1dab646fff3a88b8", &(0x7f0000000900)=""/168}, 0x20)
getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000a00)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000a40)=0x28)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4208}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x8001)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000d00)={0x9, [0x0, 0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000d40)=0x28)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000d80)={r12, 0x80000000}, &(0x7f0000000dc0)=0x8)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r10)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x140, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x17}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0x10f, 0x2a, [@ibss={0x6, 0x2, 0x3}, @fast_bss_trans={0x37, 0x5c, {0x1, 0x1, "7faf638646dc51f8771acd3149686e79", "44293d5f57434afb7dabc727b0f95d98fa449570aeeb22ba1541d9a3bb63ed6e", "f87fa34e44eaef9bd51903f1cb0e0447bdb5e30d77a13dec40af7c45eface7f3", [{0x1, 0x8, "c66f30c305a8a473"}]}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x7f, {0x6, 0x62, 0xcc, "4bcfe3ab9c24ea0d281fea849469ed39b1935e5308ad8a71388623e109322cd579eb0e01e4023824d06a7277da4173e9ac42cdbafb3b9bffe2725fc138ff9a3108fbf0ed4d817e04a972c397033b7268bd81c593fe297cc148c5c3745478d38eadfea346310d6a5aa30a3a146c4e840583c701548b0a08bfef20874f"}}, @mic={0x8c, 0x10, {0x4b0, "285bb2c2912e", @short="66f0a375fbab3cd3"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x9, 0x17, 0x1b}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x9, 0x34}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xd}]}, 0x140}, 0x1, 0x0, 0x0, 0x40041}, 0x1)
sendmsg$NL80211_CMD_TDLS_MGMT(r10, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2868448}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, r13, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan3\x00', <r16=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r14, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x48, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x0)

799.015119ms ago: executing program 0 (id=433):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)

796.423553ms ago: executing program 2 (id=434):
unshare(0x6a040000)
unshare(0x18000400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, @rand_addr, @private}}}})
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x144}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1866c60800000008000000ff1000000b000000050000000000000000000000000000009500000051000000cdaa0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvfrom$packet(r5, 0x0, 0x0, 0x40, 0x0, 0x0)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

718.338062ms ago: executing program 1 (id=435):
r0 = socket$isdn(0x22, 0x2, 0x11)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendmsg$unix(r2, &(0x7f0000000e40)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000880)="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", 0xfd}, {&(0x7f0000000980)="f695e73b4e99faea278964e7d1c45e1371ce5a2ba8e57b8415be2695492056d4e3456eba059cc7edff74415b56eb395dd33a2a81b9d7427e431b3fc4d16ca116bf56cf00aea9dbe8d8f95343bf69d4f59ccd8558369fcdbda1d84ef09ecbd5a8ccaefb09485369685868b30ae296c87d7aa547bb5ead1e66556a6865b739222c62549d71575c4d17ba998939256947f75cf54412efa7bb73bb83549e0d2cc6130f4354fcf61ffbff37c9e3b5474ddf9e954c17475f8b7de3d7b9d4a83ad5131179cbf1213c677b78976bd3623c076dc77622ec10dd227feb43e27b517ef1cc859fe1dfb80027933903c6a2eeaba11b1203e348", 0xf3}, {&(0x7f0000000a80)="2d3dc66de97ab9a3ab3b0df9042b7b297ecf453fdf0ca6b2c21d9ae7b9ca36ff07bacc23ebeb23c78a596a169fc257b06c14911d066e9800815e805ee55acc95aa3ee0fc6f9c5545d4633291e608aacfd986c724992feed8f57d6403e4fef0d64a6b03b68917c7106631756bcdcfff12ff3fcb2fc94648ca55ffa09f1a57e208d01306d655d4fed86527b803d049016b7c3804db052d884a5b889c0f712554", 0x9f}, {&(0x7f0000000e80)="4b8bdfb10dfd2707b1753a597772965795139440c656d6fba19871ba9ec974704f04332dedf71e41a38b", 0x2a}, {&(0x7f0000000b40)="28fe17b14b3bfcebcf4f5eaaced21415708266bed2713280dd8420", 0x1b}, {&(0x7f0000000b80)="f424ec3ee5d9d0986ddc91647d7c5acae9ac852ee31753d35b5b71047c43fb2b1e3204584826d03edacf1f90aa375d982341bc6e21dd2544760b5353be8da7f7d76a7d15707a219f85e9b6682b5464150af2aa1e761c14917d1de8dac84fc57350900e2cbafed50713e6f472bcdd21b4badc34793efbc744ccec124b3f3298ebc071f4679d5adc2523d800d09675b57a9714fdf2c413679f9f38450e5920f4aaf6d0874731e1bf37353862e284892144e9c054449f", 0xb5}, {&(0x7f0000000c40)="601bdf6c0f20cf2fa8d3249fcf9f1ae2f3c4d537ce71f9452f3830e404320c9bfea3a99da1b90d0732", 0x29}, {&(0x7f0000000c80)="0f16c4", 0x3}, {&(0x7f0000000cc0)="e6ea4658213d8e538219b1f3360efcb1b2473f2a5e63873d00480b969bc7d5e016536f72ae2529b0a840ddf30696ac7d20e660739c55ca217669e42b653371f0a7884cdcce780ff6ebd90083fce350549a10b1e79fd80bbbad90d15dcc930cec2d40639baf27e39ee8d6ccf7e4871a4cf866ef6bee2525cb9520707cf74e0db94d0d22be2fa38000318f3ceff3b117fef7a773a2814320dff9", 0x99}], 0x9, 0x0, 0x0, 0x4}, 0x2400c084)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8)
sendmmsg$alg(r2, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46a765abf639b72b8a139f359b9ab775ac089217bd34619d163b302fe5b56c83ba36f2ad5754652a659f4ca2976163de39b0b1cb89a196cf345297dcd360a49eb55a17802e01dd8889e790398c694d209ea9ec4b5a7b2137842999f05efaaffad4d5fc4c297426d39e2973afd17797c56f1ee7565a175f08702135bc531a8f2f45a6e2256a06a59cd5c0e8f04a30cf162903e042383dcf85118a5c0512d767cca0b677800dbe39150990370afcbbc0550c13d62bdd242cc9dfab2e194bc4103e3293bcb3d55fb5e7887c07d23157b978ce1378c755f654a5eeed63e488fafc22fa520f8c974e901ac57ad1072d8362d5022583ce4698aa51a1ba478ec2128d2467a4a5c8ba0e0e073115c783458d5cc562d473a42b8693dfa2f5047ad4484c9000fc70303560903325dba08cc0ca84652ac269a33e43981372f5f0cbf016385b579c2e3bae9fe2ae1b537dae375160794c21e1d0346bd9577ce62bfb3634105ebfa216cd9a2d693b4eb420af5b94b2a35c024a2199f72280b96ebbd50d1f934e2ed5e809b7eb513b932f049846c783c755c2997d9213d3be892dcbd11e9618aebd610b230b78c5fd673741063fb3603c3c87989eb6a2ca0d2029d8c055c35e3b918c234abc1287ad6665fc04995434cd078d5997edc4b2f86ee29412688aafbb274b1837783edf0cea84870a97a13b5acd0e409ea7bf9ae009785b5effd2745231f0d95b42649f41d4fe01b9c079960701bbb696036cd39a7775fa4ee55b67687f976a269e42fcbae04fc688ca91a013661f47027c0b669a55ad7a84476293273282e170d28ab4db9e3b8d26b756d0eea813fb28df6a9a2127fef569c27dc1a721b1ccd709eb97636a1c1bc796edaabd6751b9d402fccb80767ee30665c7186dd94eafa176fe21871f0610533771fdccfedfa071ab4dba858e2b0bd7f9ea6638226c43c87e709b5ca61967573b6cb7b758a9ad659f2caf4a260027a000eead341238d4c213dd75683694d9a938ec88ce5a78e27d611c1af8cf9b22501e29847a73eab3c39d936088b856d3de4338a1d8bf078e517448c3f19646899ae2fe6edc10448e4e5ce1d4a37141835819bf278166071bb6806e2e7eec03184d7dd0b7c89bbd6f8cf6b9535b167f472ca59fd3357bf75fbf1cf2e7eba744334f82c6b49a6675abdf500c262b1526b5a708aa38964cb65127097ddc5695e6c95038457b38924ddbb537ed72cc37ee823bf61e42247b9456f85e9dca39596f96f00fe37eabb9d782ef34932ff05b170aa3d0ea2d422f42f2eee50e12937c0fd1016a6fcc55692c1b4f108dfbd6d90bda43295a64b25a033d773358c71842d2159e8c4cca76596f7748920968fdfe46b08235b3910a375c5a6db9355d2fd6f269e7c8cc3ab6a442829a68b358ae27d3346817a2f0d93c0c6745d67051e9b58428f1745be75e3aca2b99c93a452b28d84cc84d433baa63a9e345f027eef5cd4901d81b77fbb90d8a51d8c9071c94e4e907b1a1b29ebe55f4545d51a9b1c23daa92b0b6555afb80942fd7fdfcffd16f2e4fcbf1bd2181a8a714539eebed30a47084b47a7cfc69862611948ba8beb154979f8ac9cf4c7cf449e4de220a88e941323c67965e86c1bbe5baf43a5a57ab8820f76082aff7e4ca01d9fffb9b2e849ed59c520664115fc510b3c5799ae9b0ce0a3689573b5e75686555fabaabaf22d5ce759cc0eb01856426db4763cbbb32355e99ac8c", 0x4d1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081)
close(r2)
bind$isdn(r0, &(0x7f0000000000)={0x22, 0x1, 0xe, 0x0, 0xb}, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
write(r4, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x80)

717.039444ms ago: executing program 0 (id=436):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x40000008, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x7, 0xb, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xc30c}, @jmp={0x5, 0x1, 0x8, 0x5, 0x4, 0x18, 0xffffffffffffffff}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x3b, &(0x7f00000001c0)=""/59, 0x41000, 0x19, '\x00', 0x0, @cgroup_sock_addr=0xbd52d8d36b5fefd9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x10, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000004c0)=[{0x200, 0x1, 0xd, 0xd}, {0x1, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x4, 0xb}, {0x4, 0x3, 0xc, 0x7}, {0x2, 0x5, 0xc, 0x4}, {0x5, 0x1, 0xf, 0xb}, {0x5, 0x4, 0xa, 0x6}, {0x2, 0x1, 0x4, 0x1}], 0x10, 0x4}, 0x94)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xa}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
close(0x3)

640.426817ms ago: executing program 0 (id=437):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000200)={0x1, 0x0, 0x4, 0x3, @vifc_lcl_ifindex=r2, @local}, 0x10)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a00001752271a1984306cffffffff140008006d61637365633000000000b8c255d400"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r7 = socket$pptp(0x18, 0x1, 0x2)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0xfd}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000240))
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

639.996875ms ago: executing program 1 (id=438):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000140)={'macvlan0\x00', 0x10001})
socket$kcm(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$SIOCSIFMTU(r0, 0x8910, &(0x7f0000000140)={'macvlan0\x00', 0x10001}) (async)
socket$kcm(0xa, 0x1, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
pipe(&(0x7f00000000c0)) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)

639.34582ms ago: executing program 1 (id=439):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000580)=0x6)
write(r2, &(0x7f0000000700)="f574", 0x2)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x6, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000b10000000000000000000000711237000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$xdp(0x2c, 0x3, 0x0)
bind$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e24, @local}, 0x10)
ioctl$sock_proto_private(r4, 0x89e2, &(0x7f00000002c0)="018828e786de02d7cffdd5b182e683c535209221cf835c018c1d06de9ad83a41d386ee3af4650a9b4395f713c71e6e8d0693ff3be048cb5cbdb26bd9ea83cbc16c7dbb9ac0e710fb666829ef29fc56862df1d62d902c581a1feabe19a8c787d53ec5cf8183700ed925863ffc72931407e4310ba1ef8b537c0d0741a606ece50efc33a3c92eb705f6d12fe381ef361d1863284adf")
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x70)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x5994, 0x4)
sendmmsg$inet6(r6, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x4e, 0x40800)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYRES8=r5, @ANYBLOB="755a9bb1e9f2d3a1"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8884)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wg0\x00'})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r9)
sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40408b0}, 0x20000000)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0x9, &(0x7f0000000080)=0x8, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000040)={0xfffffffe, 0x0, 0xd, 0x2}, 0x14)

470.020045ms ago: executing program 1 (id=440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x22}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200000c4}, 0x10)

469.164731ms ago: executing program 0 (id=441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newlink={0x1dc, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_VFINFO_LIST={0x1a0, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8, 0x8, 0xff}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0xffff7fff, 0x30f6}}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffe00, 0x2933}}]}, {0xc4, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xbf1, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x401}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0xd3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xe23, 0xe}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe, 0xdaf, 0x4a90, 0x8100}}, {0x14, 0x1, {0x0, 0x64c, 0x0, 0x88a8}}, {0x14, 0x1, {0x2, 0xb8, 0x200, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x81}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1000, 0x59f, 0xa}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x80, 0x5}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}}, @IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5b, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3ff, 0x3ff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0xeab, 0x1000}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x81, 0x9}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x2000000, 0xfffffff8}}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20045864}, 0x0)

468.89321ms ago: executing program 1 (id=442):
r0 = socket(0x25, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r1, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r2, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008"], 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="100000000114090027fd7000fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8884}, 0xc010)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

400.180814ms ago: executing program 0 (id=443):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0))
write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43b"], 0x340a)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="92ca160a10ad7b78915dbe0e6ee5962921fcfe7d5c033668bc879b5d4fe97aaa2e3546d5f3955bd0b69d49a3b0c5268903f0c0d5164d401e786589660df42874da438dccb170fdd3f96e8f9eda42c231dcb5d9abf4ae0ec0579cd7196ae0dd32084df9cb49f21828ffbee094b60e18c0ea3b096227b6ab163c152d6a048ba1002625b12b14a9e59f"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB="c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\t7=p', @ANYRES16=r8, @ANYBLOB="10002dbd7000fddbdf2501000000000000000941000000140018000000087564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4044810}, 0x8800)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r11=>0x0})
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYRES16=r10, @ANYBLOB="08002abd7000a75aa628d5aea79d08000300", @ANYRES32=r11, @ANYBLOB="0c009900fcffffff1f000000060095004000000006009500ffff000006009500080000000600950004000000"], 0x48}, 0x1, 0x0, 0x0, 0x80c1}, 0x20004801)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000001cc0)={0x14, 0x30, 0x303, 0x70bd25, 0x25dfdbfc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8)
socket$packet(0x11, 0x3, 0x300)
r13 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r13, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000110000000180051808ad0b9608200000000ae0c000000000700000044"], 0x38}, 0x20002054)

245.756962ms ago: executing program 2 (id=444):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000851000000400000066080000000000001800000000100000000000000000080095000000000000009500000000000000a300000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)="6183c2d282", 0x1003, r4}, 0x38) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000180)="7685", 0x0}, 0x20) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001880)={'wg0\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r9, 0xa29, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0xfffffffc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="348f622b128340c803e75c2e5a7641357b85a2a60f17ea62863897d4ac56000000", @ANYRES16=r3, @ANYBLOB="01002cbd70020500000005000000060001000500000008000b000400000008000c00ac0a00000800090002000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)

184.359353ms ago: executing program 0 (id=445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e80)=ANY=[@ANYBLOB="44000000020103001e000000000000000a000009300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20040800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0) (async)
close(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="183100000500"/20], &(0x7f0000000240)='syzkaller\x00', 0x81, 0x4a, &(0x7f0000000340)=""/74, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x10, 0x6, 0x2000}, 0x10, 0x2c5a2, 0xffffffffffffffff, 0x6, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x3, 0x1, 0x5, 0xc}, {0x0, 0x1, 0xb, 0x7}, {0x2, 0x1, 0x8, 0x6}, {0x1, 0x1, 0xd, 0x5}, {0x1, 0x3, 0xb, 0xb}, {0x5, 0x5, 0xb, 0x1}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup, 0x1f, 0x0, 0x85f, &(0x7f00000006c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100000000000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="d665d6a537a2f7073601d77d470976d9216bb3d12d0fd7c3ee9393a1694833841c1b5b003ff921fc2149fac73a94249b2c60c89185ceb6d82f217c17159ff1f62d63f5de", @ANYRES64=r6], 0x20)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x10) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x3a3200, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendto$rose(0xffffffffffffffff, &(0x7f0000000900)="428dbf76fb3cd6181ef37e2c73d65d15a5ba4050a1da9da0099cc14cc5494f8a6e199333ea0666e2cb0543a94dc83ef7a702bd3b6d2b4dd04751ab85db9cae420cf77cdda71ee1ef001f1faa8aa01c497e94564cff2ff3f77075ef9b1737ff1de2e7288d8b38596c", 0x68, 0x4080, &(0x7f0000000740)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40) (async)
sendto$rose(0xffffffffffffffff, &(0x7f0000000900)="428dbf76fb3cd6181ef37e2c73d65d15a5ba4050a1da9da0099cc14cc5494f8a6e199333ea0666e2cb0543a94dc83ef7a702bd3b6d2b4dd04751ab85db9cae420cf77cdda71ee1ef001f1faa8aa01c497e94564cff2ff3f77075ef9b1737ff1de2e7288d8b38596c", 0x68, 0x4080, &(0x7f0000000740)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5230}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5230}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x48}}, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x1, 0xffff, 0x7, 0x6, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x2ffffffe, 0x2, 0x8, 0x7, 0x5, 0x2, 0x4, 0x1000, 0x401, 0x323d55e0, 0x8e, 0x3, 0x0, 0xfffffff9, 0x3ff, 0x66d, 0x5, 0x81, 0x0, 0x8, 0x6, 0x0, 0x8, 0xffffffff, 0x401, 0x1, 0x10, 0x2, 0x80, 0x2, 0x6, 0x8, 0x3, 0x5, 0x9, 0x20a5, 0x2, 0x80, 0x0, 0xfffffdce, 0x4, 0x80000000, 0x51f9fc53, 0x6, 0x7, 0x3, 0x2, 0xfff, 0x5, 0x7fffffff, 0x6, 0x2, 0x6, 0x2, 0x80000001, 0x1, 0x1, 0x6, 0x8, 0x4, 0x9, 0x1, 0x2, 0x4, 0x1000, 0x2, 0x4, 0x4, 0x2, 0x4, 0x7, 0x1, 0x0, 0x0, 0x2201b923, 0x8000, 0x40, 0xfffffc00, 0x40, 0x800, 0x9, 0x1, 0x80000000, 0xf46, 0xf4, 0x0, 0xffff, 0x100, 0x4, 0x1, 0xffffffff, 0x1a, 0x400, 0x9, 0x8, 0x2, 0x6, 0x8, 0x3, 0x7fffffff, 0xe, 0x7, 0x2, 0x6, 0x10, 0x4, 0x5, 0x5, 0x0, 0xe628, 0x3, 0x7, 0x4, 0x47c3, 0xfffffffa, 0x1d, 0xffff62d1, 0x8, 0x9a, 0x2, 0x797, 0x7, 0x2, 0x1, 0x0, 0x81, 0xe2cf, 0x401, 0x783f, 0x95, 0x3, 0x4, 0x8, 0x25, 0x3, 0x1, 0x1ff, 0x0, 0x4, 0x1, 0x3, 0x4, 0x6, 0x7, 0xfffffff7, 0xe6e, 0x9, 0xf, 0x0, 0x54, 0xffff, 0x3, 0x3f, 0x4, 0x800, 0x2, 0x2, 0x4, 0x0, 0x3fe8, 0x1000, 0xc, 0x3, 0x754386af, 0x6, 0x9, 0x5, 0xa, 0x3, 0x0, 0x0, 0xffff8001, 0x9, 0xe37, 0x7, 0x10000, 0x40, 0x800, 0xc1, 0x2, 0x5, 0x800, 0x184, 0x4, 0x8, 0x5, 0x78, 0xb, 0xe4d, 0xffffffff, 0xfffffeff, 0x1, 0x6, 0x400, 0x6, 0x3, 0x4, 0x7, 0x3, 0x5, 0x8, 0x40, 0x6, 0xfffffffb, 0x81, 0x1ee746b0, 0x1, 0x3, 0x7fffffff, 0xe1d, 0x94, 0x0, 0x4, 0x8001, 0x1, 0x8, 0x3, 0x2, 0x77c, 0x5, 0x0, 0xffffffff, 0x3, 0x80000000, 0x8, 0x8, 0xb41, 0xd79, 0x0, 0x80000000, 0x101, 0x7, 0x3ff, 0x7, 0x4, 0x1, 0x2be, 0x0, 0x10000, 0x8, 0x6eb1, 0xffffffff, 0x2, 0x9, 0x80, 0x4591, 0x3, 0x7, 0x69a3, 0x0, 0xfffffe00, 0x0, 0x80000001, 0x574, 0x1]}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x1, 0xffff, 0x7, 0x6, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x2ffffffe, 0x2, 0x8, 0x7, 0x5, 0x2, 0x4, 0x1000, 0x401, 0x323d55e0, 0x8e, 0x3, 0x0, 0xfffffff9, 0x3ff, 0x66d, 0x5, 0x81, 0x0, 0x8, 0x6, 0x0, 0x8, 0xffffffff, 0x401, 0x1, 0x10, 0x2, 0x80, 0x2, 0x6, 0x8, 0x3, 0x5, 0x9, 0x20a5, 0x2, 0x80, 0x0, 0xfffffdce, 0x4, 0x80000000, 0x51f9fc53, 0x6, 0x7, 0x3, 0x2, 0xfff, 0x5, 0x7fffffff, 0x6, 0x2, 0x6, 0x2, 0x80000001, 0x1, 0x1, 0x6, 0x8, 0x4, 0x9, 0x1, 0x2, 0x4, 0x1000, 0x2, 0x4, 0x4, 0x2, 0x4, 0x7, 0x1, 0x0, 0x0, 0x2201b923, 0x8000, 0x40, 0xfffffc00, 0x40, 0x800, 0x9, 0x1, 0x80000000, 0xf46, 0xf4, 0x0, 0xffff, 0x100, 0x4, 0x1, 0xffffffff, 0x1a, 0x400, 0x9, 0x8, 0x2, 0x6, 0x8, 0x3, 0x7fffffff, 0xe, 0x7, 0x2, 0x6, 0x10, 0x4, 0x5, 0x5, 0x0, 0xe628, 0x3, 0x7, 0x4, 0x47c3, 0xfffffffa, 0x1d, 0xffff62d1, 0x8, 0x9a, 0x2, 0x797, 0x7, 0x2, 0x1, 0x0, 0x81, 0xe2cf, 0x401, 0x783f, 0x95, 0x3, 0x4, 0x8, 0x25, 0x3, 0x1, 0x1ff, 0x0, 0x4, 0x1, 0x3, 0x4, 0x6, 0x7, 0xfffffff7, 0xe6e, 0x9, 0xf, 0x0, 0x54, 0xffff, 0x3, 0x3f, 0x4, 0x800, 0x2, 0x2, 0x4, 0x0, 0x3fe8, 0x1000, 0xc, 0x3, 0x754386af, 0x6, 0x9, 0x5, 0xa, 0x3, 0x0, 0x0, 0xffff8001, 0x9, 0xe37, 0x7, 0x10000, 0x40, 0x800, 0xc1, 0x2, 0x5, 0x800, 0x184, 0x4, 0x8, 0x5, 0x78, 0xb, 0xe4d, 0xffffffff, 0xfffffeff, 0x1, 0x6, 0x400, 0x6, 0x3, 0x4, 0x7, 0x3, 0x5, 0x8, 0x40, 0x6, 0xfffffffb, 0x81, 0x1ee746b0, 0x1, 0x3, 0x7fffffff, 0xe1d, 0x94, 0x0, 0x4, 0x8001, 0x1, 0x8, 0x3, 0x2, 0x77c, 0x5, 0x0, 0xffffffff, 0x3, 0x80000000, 0x8, 0x8, 0xb41, 0xd79, 0x0, 0x80000000, 0x101, 0x7, 0x3ff, 0x7, 0x4, 0x1, 0x2be, 0x0, 0x10000, 0x8, 0x6eb1, 0xffffffff, 0x2, 0x9, 0x80, 0x4591, 0x3, 0x7, 0x69a3, 0x0, 0xfffffe00, 0x0, 0x80000001, 0x574, 0x1]}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x470b923, 0x82000, {0x0, 0x0, 0x0, r15, {}, {0x5, 0xb}, {0xd, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x40000003, 0x3, 0x5, 0xffffffff, 0xfffffff5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

67.639706ms ago: executing program 2 (id=446):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x2, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0)
r1 = socket(0x2b, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

66.943531ms ago: executing program 2 (id=447):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf257900030008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

218.119µs ago: executing program 2 (id=448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180))
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)
getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000001c0), &(0x7f00000000c0)=0xc)

0s ago: executing program 1 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r0, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
accept4(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f00000000c0)=0x80, 0x80000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20625' (ED25519) to the list of known hosts.
syzkaller login: [   48.521151][ T5779] cgroup: Unknown subsys name 'net'
[   48.660380][ T5779] cgroup: Unknown subsys name 'cpuset'
[   48.665856][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.573943][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.174564][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.178037][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.187308][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.211886][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.215585][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.219876][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.221348][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.223760][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.226719][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.232097][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.256805][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.267554][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.271575][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.284511][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.295654][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.562143][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.593381][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.653022][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.772992][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.776002][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.780378][ T5841] bridge_slave_0: entered allmulticast mode
[   55.783924][ T5841] bridge_slave_0: entered promiscuous mode
[   55.789129][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.792053][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.794954][ T5849] bridge_slave_0: entered allmulticast mode
[   55.798897][ T5849] bridge_slave_0: entered promiscuous mode
[   55.820010][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.822902][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.825413][ T5841] bridge_slave_1: entered allmulticast mode
[   55.831333][ T5841] bridge_slave_1: entered promiscuous mode
[   55.834748][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.837898][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.840331][ T5849] bridge_slave_1: entered allmulticast mode
[   55.843503][ T5849] bridge_slave_1: entered promiscuous mode
[   55.888460][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.891538][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.894325][ T5845] bridge_slave_0: entered allmulticast mode
[   55.898503][ T5845] bridge_slave_0: entered promiscuous mode
[   55.910988][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.917273][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.920432][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.922988][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.925733][ T5845] bridge_slave_1: entered allmulticast mode
[   55.929591][ T5845] bridge_slave_1: entered promiscuous mode
[   55.942160][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.955436][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.974994][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.982440][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.995042][ T5841] team0: Port device team_slave_0 added
[   56.012793][ T5849] team0: Port device team_slave_0 added
[   56.038192][ T5841] team0: Port device team_slave_1 added
[   56.041801][ T5849] team0: Port device team_slave_1 added
[   56.066195][ T5845] team0: Port device team_slave_0 added
[   56.091674][ T5845] team0: Port device team_slave_1 added
[   56.094756][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.098453][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.109824][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.115804][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.119442][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.130361][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.138775][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.141826][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.152711][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.171007][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.173965][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.186939][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.211684][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.214601][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.223985][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.228924][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.231350][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.241120][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.287626][ T5841] hsr_slave_0: entered promiscuous mode
[   56.290934][ T5841] hsr_slave_1: entered promiscuous mode
[   56.310330][ T5849] hsr_slave_0: entered promiscuous mode
[   56.313601][ T5849] hsr_slave_1: entered promiscuous mode
[   56.316900][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.319480][ T5849] Cannot create hsr debugfs directory
[   56.373588][ T5845] hsr_slave_0: entered promiscuous mode
[   56.377523][ T5845] hsr_slave_1: entered promiscuous mode
[   56.380346][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   56.382792][ T5845] Cannot create hsr debugfs directory
[   56.665596][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.673475][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.678470][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.688521][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.731455][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.738042][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.743252][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.749112][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.794203][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.810489][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.818290][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.829352][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.863750][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.891771][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.904080][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.906676][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.915168][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.917735][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.976177][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.019043][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.024377][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.031865][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.034281][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.062722][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.065281][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.074936][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.103288][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.108598][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.115417][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.118022][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.142384][   T89] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.144972][   T89] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.194055][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.236040][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.252435][ T5841] veth0_vlan: entered promiscuous mode
[   57.258139][ T5847] Bluetooth: hci0: command tx timeout
[   57.267309][ T5841] veth1_vlan: entered promiscuous mode
[   57.290998][ T5841] veth0_macvtap: entered promiscuous mode
[   57.304927][ T5849] veth0_vlan: entered promiscuous mode
[   57.318244][ T5841] veth1_macvtap: entered promiscuous mode
[   57.333354][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.339099][ T5849] veth1_vlan: entered promiscuous mode
[   57.342011][ T5847] Bluetooth: hci2: command tx timeout
[   57.346436][ T5847] Bluetooth: hci1: command tx timeout
[   57.351306][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.364825][ T5890] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.371726][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.382578][ T5890] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.397975][ T5890] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.403462][ T5890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.425872][ T5849] veth0_macvtap: entered promiscuous mode
[   57.441029][ T5849] veth1_macvtap: entered promiscuous mode
[   57.466970][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.469703][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.494341][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.507360][ T5052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.510040][ T5845] veth0_vlan: entered promiscuous mode
[   57.512702][ T5052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.513361][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.533322][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.538352][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.541596][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.550624][ T5845] veth1_vlan: entered promiscuous mode
[   57.554208][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.617543][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.620656][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.635481][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.652293][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.655544][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.658141][ T5845] veth0_macvtap: entered promiscuous mode
[   57.692735][ T5913] netlink: 'syz.1.2': attribute type 8 has an invalid length.
[   57.693412][ T5845] veth1_macvtap: entered promiscuous mode
[   57.697685][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.709474][ T5913] bond0: entered promiscuous mode
[   57.711785][ T5913] bond_slave_0: entered promiscuous mode
[   57.714398][ T5913] bond_slave_1: entered promiscuous mode
[   57.719055][ T5913] bond0: left promiscuous mode
[   57.721168][ T5913] bond_slave_0: left promiscuous mode
[   57.723635][ T5913] bond_slave_1: left promiscuous mode
[   57.757690][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.771668][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.788372][ T5916] netlink: 'syz.2.3': attribute type 7 has an invalid length.
[   57.792065][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.800450][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.811145][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.814984][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.824370][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892252][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.894866][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.916408][ T5921] netlink: 'syz.1.4': attribute type 13 has an invalid length.
[   57.937702][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.943843][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.980971][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.985098][ T5924] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5'.
[   57.999720][ T5926] netlink: 'syz.1.6': attribute type 12 has an invalid length.
[   58.003062][ T5926] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.008879][ T5924] netlink: 'syz.2.5': attribute type 5 has an invalid length.
[   58.018362][ T5924] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5'.
[   58.144796][ T5939] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9'.
[   58.309487][ T5947] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   58.334347][ T5947] gretap1: entered promiscuous mode
[   58.405285][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.661125][ T5983] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET)
[   58.813873][ T5987] tipc: Started in network mode
[   58.822444][ T5987] tipc: Node identity 022c82cf127c, cluster identity 4711
[   58.827497][ T5987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.831287][ T5987] syzkaller0: entered promiscuous mode
[   58.833830][ T5987] syzkaller0: entered allmulticast mode
[   58.916133][ T5987] tipc: Resetting bearer <eth:syzkaller0>
[   58.922656][ T5986] tipc: Resetting bearer <eth:syzkaller0>
[   58.933348][ T5986] tipc: Disabling bearer <eth:syzkaller0>
[   58.973800][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.976935][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.023655][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.030019][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.094286][ T5890] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.094374][ T5988] syz.0.17 (5988) used greatest stack depth: 19864 bytes left
[   59.098606][ T5890] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.109030][ T5890] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.124122][ T5890] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.189623][ T5995] tipc: Started in network mode
[   59.191680][ T5995] tipc: Node identity 5202d5737006, cluster identity 4711
[   59.194967][ T5995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.201105][ T5995] syzkaller0: entered promiscuous mode
[   59.203537][ T5995] syzkaller0: entered allmulticast mode
[   59.210313][ T5995] syzkaller0: mtu less than device minimum
[   59.215308][ T5994] tipc: Resetting bearer <eth:syzkaller0>
[   59.229013][ T5994] tipc: Disabling bearer <eth:syzkaller0>
[   59.337248][ T5847] Bluetooth: hci0: command tx timeout
[   59.416553][ T5844] Bluetooth: hci2: command tx timeout
[   59.419178][ T5847] Bluetooth: hci1: command tx timeout
[   59.637577][ T5997] tipc: Started in network mode
[   59.639790][ T5997] tipc: Node identity 0e7e934642cf, cluster identity 4711
[   59.644049][ T5997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.650128][ T5997] syzkaller0: entered promiscuous mode
[   59.652501][ T5997] syzkaller0: entered allmulticast mode
[   59.659740][ T5997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   59.668863][ T5997] tipc: Resetting bearer <eth:syzkaller0>
[   59.671592][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   59.677793][ T5996] tipc: Disabling bearer <eth:syzkaller0>
[   60.205184][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.294618][ T6013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25'.
[   60.298746][ T6013] batadv_slave_0: entered promiscuous mode
[   60.339926][ T6015] netlink: 'syz.2.26': attribute type 1 has an invalid length.
[   60.343210][ T6015] netlink: 3 bytes leftover after parsing attributes in process `syz.2.26'.
[   60.350769][ T6015] batadv1: entered promiscuous mode
[   60.352747][ T6015] batadv1: entered allmulticast mode
[   60.525513][ T6021] netlink: 'syz.2.27': attribute type 4 has an invalid length.
[   60.584689][ T6028] netlink: 'syz.2.29': attribute type 1 has an invalid length.
[   60.595243][ T6028] veth3: entered promiscuous mode
[   60.677098][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.722564][ T6034] wg0: entered promiscuous mode
[   60.724471][ T6034] wg0: entered allmulticast mode
[   60.832924][ T6051] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   60.848640][ T6050] bond1 (unregistering): Released all slaves
[   61.184401][ T6068] vlan0: entered promiscuous mode
[   61.187933][ T6068] gretap0: entered promiscuous mode
[   61.266784][ T6082] Zero length message leads to an empty skb
[   61.344968][ T6085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.426927][ T5847] Bluetooth: hci0: command tx timeout
[   61.460453][ T6085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.506404][ T5847] Bluetooth: hci1: command tx timeout
[   61.506528][ T5844] Bluetooth: hci2: command tx timeout
[   61.539315][ T6085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.628226][ T6085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.689611][ T5890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.699084][ T5715] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.712778][ T5715] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.716612][ T5715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.792544][ T6095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.801151][ T6095] syzkaller0: entered promiscuous mode
[   61.803519][ T6095] syzkaller0: entered allmulticast mode
[   61.823391][ T6094] tipc: Resetting bearer <eth:syzkaller0>
[   61.832440][ T6094] tipc: Disabling bearer <eth:syzkaller0>
[   61.962805][ T6099] x9: renamed from bridge_slave_0 (while UP)
[   62.114207][ T6111] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   62.209122][ T6124] veth0: entered promiscuous mode
[   62.224336][ T6124] veth0 (unregistering): left promiscuous mode
[   62.503822][ T6141] : renamed from batadv_slave_1 (while UP)
[   62.573016][ T6147] ip6gre1: entered promiscuous mode
[   62.575630][ T6147] ip6gre1: entered allmulticast mode
[   62.578629][ T6148] syzkaller0: entered promiscuous mode
[   62.580800][ T6148] syzkaller0: entered allmulticast mode
[   62.586369][ T5890] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.712531][ T6162] __nla_validate_parse: 18 callbacks suppressed
[   62.712856][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   62.716410][   T55] block nbd0: Receive control failed (result -104)
[   62.722434][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'.
[   62.796059][ T6168] vlan2: entered promiscuous mode
[   62.798275][ T6168] macvtap0: entered promiscuous mode
[   62.847357][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   62.850609][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'.
[   62.880375][ T6177] vlan3: entered promiscuous mode
[   62.882135][ T6177] team0: entered promiscuous mode
[   62.883863][ T6177] team_slave_0: entered promiscuous mode
[   62.885895][ T6177] team_slave_1: entered promiscuous mode
[   63.035908][ T6188] netlink: 504 bytes leftover after parsing attributes in process `syz.2.79'.
[   63.042720][ T6189] validate_nla: 4 callbacks suppressed
[   63.042730][ T6189] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   63.078860][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'.
[   63.081828][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'.
[   63.094993][ T6189] netlink: 'syz.0.80': attribute type 1 has an invalid length.
[   63.097887][ T6189] netlink: 208 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.121300][ T6192] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   63.228214][ T6198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.82'.
[   63.282309][ T6198] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   63.321505][ T6191] Bluetooth: MGMT ver 1.23
[   63.385722][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'.
[   63.462356][ T6209] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   63.496770][ T5844] Bluetooth: hci0: command tx timeout
[   63.506375][ T6219] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   63.576568][ T5844] Bluetooth: hci2: command tx timeout
[   63.586660][ T5844] Bluetooth: hci1: command tx timeout
[   63.700123][ T6237] pim6reg: entered allmulticast mode
[   63.702839][ T6237] pim6reg: left allmulticast mode
[   63.760723][ T6239] geneve3: entered promiscuous mode
[   63.762855][ T6239] geneve3: entered allmulticast mode
[   63.941915][ T6245] ip6gre2: entered allmulticast mode
[   64.307618][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.320741][ T6260] bridge_slave_1 (unregistering): left allmulticast mode
[   64.323555][ T6260] bridge_slave_1 (unregistering): left promiscuous mode
[   64.327191][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.870059][ T6273] netlink: 'syz.0.101': attribute type 3 has an invalid length.
[   64.873207][ T6273] netlink: 'syz.0.101': attribute type 1 has an invalid length.
[   64.942698][ T6282] bridge_slave_0: left allmulticast mode
[   64.945212][ T6282] bridge_slave_0: left promiscuous mode
[   64.950565][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.956767][ T6282] bridge_slave_1: left allmulticast mode
[   64.959930][ T6282] bridge_slave_1: left promiscuous mode
[   64.963541][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.971915][ T6282] bond0: (slave bond_slave_0): Releasing backup interface
[   64.978592][ T6282] bond0: (slave bond_slave_1): Releasing backup interface
[   64.984491][ T6282] team0: Port device team_slave_0 removed
[   64.989817][ T6282] team0: Port device team_slave_1 removed
[   64.992749][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.999718][ T6282] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.043905][ T6287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.131398][ T6287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.200015][ T6287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.265800][ T6287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.351348][ T5890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.364974][ T5890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.383780][ T5715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.397891][ T5890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.892917][ T6293] netlink: 'syz.0.107': attribute type 1 has an invalid length.
[   65.910389][ T6293] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.921330][ T6293] bond1: (slave geneve2): making interface the new active one
[   65.924962][ T6293] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   65.929657][ T5890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.933515][ T5890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.938579][ T5890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.943394][ T5890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.103628][ T6304] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[   66.184966][ T6312] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.201841][ T6312] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   66.229242][ T6314] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   66.242550][ T6304] macvlan2: entered promiscuous mode
[   66.249238][ T6304] macvlan2: entered allmulticast mode
[   66.258876][ T6304] bond1: entered promiscuous mode
[   66.270610][ T6304] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.285086][ T6304] bond1: left promiscuous mode
[   66.456396][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   67.313825][ T6355] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.322264][ T6355] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   67.330090][ T6355] bond2: (slave wlan0): Enslaving as an active interface with a down link
[   67.571532][ T6370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.575487][ T6370] syzkaller0: entered promiscuous mode
[   67.578468][ T6370] syzkaller0: entered allmulticast mode
[   67.585417][ T6370] tipc: Resetting bearer <eth:syzkaller0>
[   67.590580][ T6369] tipc: Resetting bearer <eth:syzkaller0>
[   67.598936][ T6369] tipc: Disabling bearer <eth:syzkaller0>
[   67.805061][ T6388] __nla_validate_parse: 22 callbacks suppressed
[   67.805077][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'.
[   67.839976][ T6389] netlink: 2 bytes leftover after parsing attributes in process `syz.1.130'.
[   67.953446][ T6397] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'.
[   68.189082][ T6422] validate_nla: 2 callbacks suppressed
[   68.189097][ T6422] netlink: 'syz.1.139': attribute type 13 has an invalid length.
[   68.198714][ T6422] netlink: 'syz.1.139': attribute type 17 has an invalid length.
[   68.239315][ T5312] IPVS: starting estimator thread 0...
[   68.265890][ T6422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.276961][ T6424] kthread_run failed with err -4
[   68.280680][ T6428] syzkaller1: entered promiscuous mode
[   68.282500][ T6428] syzkaller1: entered allmulticast mode
[   68.347083][ T6431] IPVS: using max 52 ests per chain, 124800 per kthread
[   68.408833][ T6443] macsec1: entered promiscuous mode
[   68.410729][ T6443] macsec1: entered allmulticast mode
[   68.435853][ T6445] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.447546][ T6448] netlink: 'syz.0.145': attribute type 13 has an invalid length.
[   68.451364][ T6448] netlink: 'syz.0.145': attribute type 17 has an invalid length.
[   68.492701][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.496513][ T6448] 8021q: adding VLAN 0 to HW filter on device team0
[   68.505308][ T6448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.515447][ T6445] bond_slave_0: entered promiscuous mode
[   68.517520][ T6445] bond_slave_1: entered promiscuous mode
[   68.521039][ T6445] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.526004][ T6445] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   68.613504][ T6451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.621531][ T6451] syzkaller0: entered promiscuous mode
[   68.624320][ T6451] syzkaller0: entered allmulticast mode
[   68.659435][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'.
[   68.730758][ T6455] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.769783][ T6456] trusted_key: syz.0.147 sent an empty control message without MSG_MORE.
[   68.802586][ T6455] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.810581][ T6450] tipc: Resetting bearer <eth:syzkaller0>
[   68.819011][ T6450] tipc: Disabling bearer <eth:syzkaller0>
[   68.903094][ T6455] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.984368][ T6460] veth0: entered promiscuous mode
[   68.992432][ T6455] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.003749][ T6460] veth0: left promiscuous mode
[   69.053398][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.067684][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.077651][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.086783][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.095336][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   69.721196][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'.
[   70.332711][ T6492] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.343265][ T6493] dvmrp0: entered allmulticast mode
[   70.385311][ T6496] bridge2: entered promiscuous mode
[   70.438806][ T6499] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.536578][   T51] IPVS: starting estimator thread 0...
[   70.541919][ T6506] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   70.562247][ T6506] bridge_slave_0: left allmulticast mode
[   70.564766][ T6506] bridge_slave_0: left promiscuous mode
[   70.569069][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.573747][ T6507] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   70.580763][ T6506] bridge_slave_1: left allmulticast mode
[   70.581783][    C1] Illegal XDP return value 16128 on prog  (id 34) dev lo, expect packet loss!
[   70.582802][ T6506] bridge_slave_1: left promiscuous mode
[   70.592153][ T6507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.161'.
[   70.592184][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.605573][ T6506] bond0: (slave bond_slave_0): Releasing backup interface
[   70.615524][ T6506] bond0: (slave bond_slave_1): Releasing backup interface
[   70.626445][ T6508] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.631553][ T6506] team_slave_0: left promiscuous mode
[   70.640748][ T6506] team0: Port device team_slave_0 removed
[   70.643647][ T6506] team_slave_1: left promiscuous mode
[   70.649337][ T6506] team0: Port device team_slave_1 removed
[   70.649857][ T6513] netlink: 48 bytes leftover after parsing attributes in process `syz.1.163'.
[   70.652063][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.660599][ T6506] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.665908][ T6506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.671500][ T6506] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.730883][ T6506] netlink: 'syz.2.162': attribute type 10 has an invalid length.
[   70.734204][ T6506] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   70.746994][ T6506] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.779401][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'.
[   70.829795][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'.
[   70.836075][ T6522] bond0: entered promiscuous mode
[   70.838837][ T6522] bond0: left promiscuous mode
[   70.923909][ T6529] gretap0: entered promiscuous mode
[   71.097736][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[   71.264157][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.357181][   T10] cfg80211: failed to load regulatory.db
[   71.802973][ T6542] x9: left allmulticast mode
[   71.805531][ T6542] x9: left promiscuous mode
[   71.807673][ T6542] bridge0: port 1(1x9) entered disabled state
[   71.812785][ T6542] bond0: (slave bond_slave_0): Releasing backup interface
[   71.815671][ T6542] bond_slave_0: left promiscuous mode
[   71.820413][ T6542] bond0: (slave bond_slave_1): Releasing backup interface
[   71.823924][ T6542] bond_slave_1: left promiscuous mode
[   71.830086][ T6542] team0: Port device team_slave_0 removed
[   71.834376][ T6542] team0: Port device team_slave_1 removed
[   71.839572][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.842544][ T6542] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.848645][ T6542] batman_adv: batadv0: Interface deactivated: 26
[   71.850981][ T6542] batman_adv: batadv0: Removing interface: 26
[   71.859374][ T6542] bond2: (slave macvlan2): Removing an active aggregator
[   71.862829][ T6542] bond2: (slave macvlan2): Releasing backup interface
[   71.968518][ T6552] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   72.009909][ T6552] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   72.015072][ T6552] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   72.067912][ T6561] gretap1: entered promiscuous mode
[   72.077141][ T6561] bond1: (slave gretap1): making interface the new active one
[   72.080803][ T6561] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   72.191367][ T6568] netlink: 'syz.1.177': attribute type 10 has an invalid length.
[   72.194375][ T6568] dummy0: entered promiscuous mode
[   72.197753][ T6568] bridge0: port 1(dummy0) entered blocking state
[   72.199837][ T6568] bridge0: port 1(dummy0) entered disabled state
[   72.201975][ T6568] dummy0: entered allmulticast mode
[   72.206011][ T6568] bridge0: port 1(dummy0) entered blocking state
[   72.208818][ T6568] bridge0: port 1(dummy0) entered forwarding state
[   72.281423][ T6560] infiniband syz2: set down
[   72.283945][ T6560] infiniband syz2: added ipvlan0
[   72.339052][ T6560] RDS/IB: syz2: added
[   72.341424][ T6560] smc: adding ib device syz2 with port count 1
[   72.345715][ T6560] smc:    ib device syz2 port 1 has pnetid 
[   72.520174][ T6594] netlink: 'syz.1.185': attribute type 1 has an invalid length.
[   72.639830][ T6597] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   73.238684][ T6623] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   73.248561][ T6623] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   73.422326][ T6633] tipc: Enabled bearer <udp:s>, priority 10
[   73.502217][ T6630] netlink: 'syz.2.194': attribute type 10 has an invalid length.
[   73.509009][ T6630] 8021q: adding VLAN 0 to HW filter on device team0
[   73.514404][ T6630] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.641824][ T6635] __nla_validate_parse: 35 callbacks suppressed
[   73.641835][ T6635] netlink: 68 bytes leftover after parsing attributes in process `syz.2.195'.
[   73.698733][ T6635] netlink: 'syz.2.195': attribute type 1 has an invalid length.
[   73.722687][ T6635] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.727962][ T6635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.195'.
[   73.789979][ T6645] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.876758][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[   73.928370][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'.
[   74.000186][ T6654] bond0: Error: Cannot enslave bond to itself.
[   74.010188][ T6656] netlink: 'syz.0.201': attribute type 1 has an invalid length.
[   74.015899][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   74.088383][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   74.162999][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'.
[   74.174757][ T6671] Bluetooth: MGMT ver 1.23
[   74.180354][ T6669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'.
[   74.201255][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'.
[   74.223025][ T6673] netlink: 'syz.1.207': attribute type 1 has an invalid length.
[   74.290371][ T6673] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link
[   74.295432][ T6676] pim6reg1: entered promiscuous mode
[   74.298405][ T6676] pim6reg1: entered allmulticast mode
[   74.341747][ T6673] bond4 (unregistering): (slave ip6gretap0): Releasing backup interface
[   74.349295][ T6673] bond4 (unregistering): Released all slaves
[   74.447833][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   74.466474][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.537957][ T5877] tipc: Node number set to 273711823
[   74.551522][ T6692] ipvlan2: entered promiscuous mode
[   74.607488][ T6687] syzkaller0: mtu greater than device maximum
[   74.692397][ T6697] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   75.544464][ T6715] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   75.586187][ T6715] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.594672][ T6717] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   75.630384][ T6715] bond5: (slave ip6erspan0): making interface the new active one
[   75.633780][ T6715] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[   75.652429][ T6728] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   75.817207][ T6741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.834876][ T6741] tipc: Resetting bearer <eth:syzkaller0>
[   75.858551][ T6739] tipc: Disabling bearer <eth:syzkaller0>
[   75.888786][ T5890] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.892894][ T5890] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.905889][ T5890] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.910920][ T5890] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.215648][ T6763] syzkaller0: entered promiscuous mode
[   76.218658][ T6763] syzkaller0: entered allmulticast mode
[   76.499959][ T6775] netlink: 'syz.2.235': attribute type 5 has an invalid length.
[   76.505526][ T6777] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   76.533678][ T6776] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   76.822781][ T6789] ieee802154 phy0 wpan0: encryption failed: -22
[   76.898527][ T6782] batadv_slave_0: left promiscuous mode
[   76.950741][ T6782] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   76.953384][ T6782] vlan2: left promiscuous mode
[   76.955043][ T6782] macvtap0: left promiscuous mode
[   76.964794][ T6782] gretap1: left promiscuous mode
[   77.002727][ T6789] team0: Mode changed to "loadbalance"
[   77.004924][ T5876] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.011597][ T5876] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.017642][ T5876] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.023477][ T5876] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.129454][ T6795] syzkaller0: entered promiscuous mode
[   77.131560][ T6795] syzkaller0: entered allmulticast mode
[   77.705894][ T6723] Set syz1 is full, maxelem 65536 reached
[   78.327341][ T6804] _Z`Ԁ@: entered promiscuous mode
[   78.329863][ T5715] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.332960][ T5715] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.339286][ T5715] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.344191][ T5715] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.377394][ T6807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.380934][ T6807] syzkaller0: entered promiscuous mode
[   78.383317][ T6807] syzkaller0: entered allmulticast mode
[   78.400982][ T6807] tipc: Resetting bearer <eth:syzkaller0>
[   78.410235][ T6809] sctp: [Deprecated]: syz.1.245 (pid 6809) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.410235][ T6809] Use struct sctp_sack_info instead
[   78.485826][ T6814] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   78.531371][ T6816] bond2: option mode: unable to set because the bond device is up
[   78.550309][ T6816] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   78.594037][ T6818] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   78.604490][ T6818] dummy0: left allmulticast mode
[   78.607946][ T6818] bridge0: port 1(dummy0) entered disabled state
[   78.620612][ T6818] bond5: (slave ip6erspan0): Releasing active interface
[   78.626186][ T6818] bond2: (slave ip6gretap2): Releasing backup interface
[   78.638631][ T6818] validate_nla: 2 callbacks suppressed
[   78.638643][ T6818] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[   78.643632][ T6818] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   78.701648][ T6820] veth7: entered promiscuous mode
[   78.939605][   T55] block nbd1: Receive control failed (result -32)
[   79.004181][ T6832] __nla_validate_parse: 14 callbacks suppressed
[   79.004193][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.254'.
[   79.009936][ T6832] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   79.012603][ T6832] netlink: 'syz.1.254': attribute type 2 has an invalid length.
[   79.021402][ T6807] tipc: Resetting bearer <eth:syzkaller0>
[   79.044955][ T6807] tipc: Disabling bearer <eth:syzkaller0>
[   79.109393][ T6840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.112110][ T6840] syzkaller0: entered promiscuous mode
[   79.113899][ T6840] syzkaller0: entered allmulticast mode
[   79.130989][ T6840] tipc: Resetting bearer <eth:syzkaller0>
[   79.152176][ T6840] tipc: Resetting bearer <eth:syzkaller0>
[   79.161122][ T6840] tipc: Disabling bearer <eth:syzkaller0>
[   79.320450][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'.
[   79.390087][ T6848] vlan2: entered promiscuous mode
[   79.394970][ T6848] macvtap0: entered promiscuous mode
[   79.554521][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'.
[   79.564109][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   79.665014][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.262'.
[   79.759653][ T6870] netlink: 72 bytes leftover after parsing attributes in process `syz.1.263'.
[   80.172427][   T56] block nbd2: Receive control failed (result -107)
[   80.236284][ T6872] nbd2: detected capacity change from 0 to 32
[   80.241309][ T5853] block nbd2: Dead connection, failed to find a fallback
[   80.244393][ T5853] block nbd2: shutting down sockets
[   80.247170][ T6872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.247496][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.250135][ T6872] syzkaller0: entered promiscuous mode
[   80.253135][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.255102][ T6872] syzkaller0: entered allmulticast mode
[   80.258726][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.263852][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.267411][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.270642][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.273607][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.277481][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.279675][ T6872] tipc: Resetting bearer <eth:syzkaller0>
[   80.280859][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.286803][ T6871] tipc: Resetting bearer <eth:syzkaller0>
[   80.287754][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.291922][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.295262][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.299103][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.302767][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.305900][ T6871] tipc: Disabling bearer <eth:syzkaller0>
[   80.306182][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.312023][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.314994][ T5853] ldm_validate_partition_table(): Disk read failed.
[   80.318322][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.321459][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.324148][ T5853] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   80.327798][ T5853] Buffer I/O error on dev nbd2, logical block 0, async page read
[   80.331484][ T5853] Dev nbd2: unable to read RDB block 0
[   80.333849][ T5853]  nbd2: unable to read partition table
[   80.340227][ T5853] ldm_validate_partition_table(): Disk read failed.
[   80.342931][ T5853] Dev nbd2: unable to read RDB block 0
[   80.345178][ T5853]  nbd2: unable to read partition table
[   80.380791][ T6876] netlink: 68 bytes leftover after parsing attributes in process `syz.0.265'.
[   80.419737][ T6876] netlink: 'syz.0.265': attribute type 1 has an invalid length.
[   80.439719][ T6876] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.520236][ T6890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.523952][ T6890] warning: `syz.0.269' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.531877][ T6890] gretap0: left promiscuous mode
[   80.549110][ T6890] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.552423][ T6890] 8021q: adding VLAN 0 to HW filter on device team0
[   80.557594][ T6890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.568333][ T6890] syz.0.269 (6890) used greatest stack depth: 19192 bytes left
[   80.571367][ T6893] veth0: entered promiscuous mode
[   80.578077][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'.
[   80.598155][ T6893] veth0 (unregistering): left promiscuous mode
[   80.818241][ T6914] bridge4: entered allmulticast mode
[   81.508591][ T6918] netlink: 68 bytes leftover after parsing attributes in process `syz.1.275'.
[   81.558635][ T6923] : renamed from bond_slave_0
[   81.591454][ T6926] netlink: 'syz.1.275': attribute type 1 has an invalid length.
[   81.657685][ T6926] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.674615][ T6930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.677528][ T6930] syzkaller0: entered promiscuous mode
[   81.679396][ T6930] syzkaller0: entered allmulticast mode
[   81.700927][ T6930] tipc: Resetting bearer <eth:syzkaller0>
[   81.709625][ T6934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   81.713424][ T6932] netlink: 'syz.1.278': attribute type 58 has an invalid length.
[   81.717398][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'.
[   81.734905][ T6930] tipc: Resetting bearer <eth:syzkaller0>
[   81.744120][ T6930] tipc: Disabling bearer <eth:syzkaller0>
[   82.180636][ T6972] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[   82.210352][ T6972] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.231407][ T6973] netlink: 'syz.2.286': attribute type 11 has an invalid length.
[   82.277124][ T6979] netlink: 'syz.0.288': attribute type 1 has an invalid length.
[   82.334195][ T6982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.341729][ T6982] syzkaller0: entered promiscuous mode
[   82.348765][ T6982] syzkaller0: entered allmulticast mode
[   82.428660][ T6987] geneve3: entered promiscuous mode
[   82.430814][ T6987] geneve3: entered allmulticast mode
[   82.477972][ T6997] tipc: Resetting bearer <eth:syzkaller0>
[   82.504908][ T6980] tipc: Resetting bearer <eth:syzkaller0>
[   82.538287][ T6980] tipc: Disabling bearer <eth:syzkaller0>
[   82.571658][ T5715] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.582448][ T5715] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.653155][ T5715] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.657223][ T5715] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.690660][ T7009] IPv6: sit1: Disabled Multicast RS
[   82.693453][ T7009] sit1: entered allmulticast mode
[   82.859686][ T7018] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   82.878810][ T7018] bond2: (slave macvlan3): Enslaving as a backup interface with an up link
[   83.079543][ T7032] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   83.292189][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.298484][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.316125][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.321713][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.590585][ T7075] netlink: 'syz.2.310': attribute type 10 has an invalid length.
[   83.645629][ T7075] dummy0: entered promiscuous mode
[   83.657661][ T7075] bridge0: port 1(dummy0) entered blocking state
[   83.660643][ T7075] bridge0: port 1(dummy0) entered disabled state
[   83.663527][ T7075] dummy0: entered allmulticast mode
[   84.269376][ T7110] __nla_validate_parse: 13 callbacks suppressed
[   84.269396][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'.
[   84.275674][ T7110] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[   84.344318][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[   84.352357][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.318'.
[   84.371773][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'.
[   84.375844][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'.
[   84.425053][ T7128] netlink: 68 bytes leftover after parsing attributes in process `syz.0.320'.
[   84.492765][ T7135] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   84.523763][ T7135] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.660150][ T7152] netlink: 'syz.0.323': attribute type 1 has an invalid length.
[   84.749685][ T7152] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   84.753591][ T5876] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.760979][ T5876] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.779165][ T7151] veth3: entered promiscuous mode
[   84.788793][ T5876] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.792154][ T5876] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.795405][ T5876] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.799171][ T5876] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.806459][ T5876] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.811184][ T5876] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.899516][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'.
[   84.920629][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.324'.
[   84.926427][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[   85.255865][ T7175] macsec0: entered promiscuous mode
[   85.258739][ T7175] macsec0: entered allmulticast mode
[   85.266288][ T7175] veth1_macvtap: entered allmulticast mode
[   85.268386][ T7175] macsec0: left promiscuous mode
[   85.270100][ T7175] macsec0: left allmulticast mode
[   85.286366][ T7175] veth1_macvtap: left allmulticast mode
[   85.309026][ T7180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.313952][ T7183] syzkaller0: entered promiscuous mode
[   85.316120][ T7183] syzkaller0: entered allmulticast mode
[   85.383643][ T7180] tipc: Resetting bearer <eth:syzkaller0>
[   85.388228][ T7179] tipc: Resetting bearer <eth:syzkaller0>
[   85.396037][ T7179] tipc: Disabling bearer <eth:syzkaller0>
[   85.434189][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.444848][ T7186] geneve3: entered promiscuous mode
[   85.453981][ T7186] geneve3: entered allmulticast mode
[   85.457631][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.460673][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   85.463783][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.473873][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   85.494843][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.498747][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   85.514482][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   85.630439][ T7197] syzkaller1: entered promiscuous mode
[   85.632649][ T7197] syzkaller1: entered allmulticast mode
[   85.637450][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'.
[   85.929632][ T7204] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   86.001133][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv1
[   86.003827][ T7206] batadv1: entered promiscuous mode
[   86.005958][ T7206] team0: Failed to send options change via netlink (err -105)
[   86.009356][ T7206] team0: Port device batadv1 added
[   86.096188][ T7217] netlink: 'syz.2.340': attribute type 10 has an invalid length.
[   86.231803][ T7228] vlan1: entered allmulticast mode
[   86.487282][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.490144][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.495831][ T7244] geneve3: entered promiscuous mode
[   86.498106][ T7244] geneve3: entered allmulticast mode
[   86.500784][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.504495][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.510466][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.514218][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.517896][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.521306][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.684090][ T7251] netlink: 'syz.2.351': attribute type 5 has an invalid length.
[   86.951549][ T7261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.955685][ T7261] syzkaller0: entered promiscuous mode
[   86.958952][ T7261] syzkaller0: entered allmulticast mode
[   87.029842][ T7260] tipc: Resetting bearer <eth:syzkaller0>
[   87.038795][ T7260] tipc: Disabling bearer <eth:syzkaller0>
[   87.179084][ T7274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   87.229394][ T7274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   87.323214][ T7274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   87.347598][ T7279] bridge0: port 1(dummy0) entered disabled state
[   87.353633][ T7279] batman_adv: batadv0: Adding interface: dummy0
[   87.356000][ T7279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.367495][ T7279] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   87.381323][ T7279] batman_adv: batadv0: Adding interface: ip6gretap1
[   87.384128][ T7279] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.394503][ T7279] batman_adv: batadv0: Interface activated: ip6gretap1
[   87.420318][ T7274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   87.488949][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[   87.496651][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[   87.505117][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[   87.515434][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[   87.592283][ T7296] netlink: 'syz.0.362': attribute type 1 has an invalid length.
[   87.597332][ T7296] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   87.800042][ T7283] nbd: nbd2 already in use
[   87.806794][ T7283] block nbd2: NBD_DISCONNECT
[   87.808840][ T7283] block nbd2: Send disconnect failed -107
[   87.845575][ T7283] bond5: entered promiscuous mode
[   87.847644][ T7283] bond5: entered allmulticast mode
[   87.850038][ T7283] 8021q: adding VLAN 0 to HW filter on device bond5
[   88.499012][ T7319] netlink: 'syz.2.368': attribute type 1 has an invalid length.
[   88.537006][ T7319] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.694610][ T7330] syzkaller0: entered promiscuous mode
[   88.696792][ T7330] syzkaller0: entered allmulticast mode
[   88.699365][ T5715] syzkaller0: tun_net_xmit 70
[   88.701320][ T7330] syzkaller0: tun_chr_ioctl cmd 1074025677
[   88.703375][ T7330] syzkaller0: Linktype set failed because interface is up
[   88.724287][ T7330] bond7: entered promiscuous mode
[   88.726819][ T7330] 8021q: adding VLAN 0 to HW filter on device bond7
[   88.806896][ T7330] bond7 (unregistering): Released all slaves
[   88.833366][ T7336] syzkaller0: entered allmulticast mode
[   88.908916][ T7341] bond2: (slave wlan0): Releasing active interface
[   88.912388][ T7341] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   88.966403][ T7345] 8021q: adding VLAN 0 to HW filter on device bond6
[   88.971848][ T7345] macvlan3: entered promiscuous mode
[   88.973650][ T7345] macvlan3: entered allmulticast mode
[   88.975939][ T7345] bond6: entered promiscuous mode
[   88.979137][ T7345] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   88.983035][ T7345] bond6: left promiscuous mode
[   89.055589][ T7357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.058577][ T7354] syzkaller0: entered promiscuous mode
[   89.060595][ T7354] syzkaller0: entered allmulticast mode
[   89.067329][ T7357] tipc: Resetting bearer <eth:syzkaller0>
[   89.074620][ T7353] tipc: Resetting bearer <eth:syzkaller0>
[   89.097480][ T7353] tipc: Disabling bearer <eth:syzkaller0>
[   89.328410][ T7375] __nla_validate_parse: 22 callbacks suppressed
[   89.328419][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   89.333774][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.386'.
[   89.343367][ T7375] geneve2: entered promiscuous mode
[   89.345119][ T7375] geneve2: entered allmulticast mode
[   89.349070][ T5876] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.352495][ T5876] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.356156][ T5876] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.362283][ T5876] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.368930][ T7377] netlink: 'syz.0.387': attribute type 1 has an invalid length.
[   89.401464][ T7377] bond7: (slave gretap1): making interface the new active one
[   89.404729][ T7377] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   89.414837][ T7377] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   89.437995][ T7377] syz.0.387 (7377) used greatest stack depth: 18616 bytes left
[   89.456859][ T7375] syzkaller0: entered promiscuous mode
[   89.459046][ T7375] syzkaller0: entered allmulticast mode
[   89.971121][ T7391] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[   89.999416][ T7391] 8021q: adding VLAN 0 to HW filter on device bond8
[   90.015644][ T7391] bond8: (slave veth3): Enslaving as an active interface with a down link
[   90.026591][ T7391] gretap3: entered promiscuous mode
[   90.031590][ T7391] bond8: (slave gretap3): making interface the new active one
[   90.035409][ T7391] bond8: (slave gretap3): Enslaving as an active interface with an up link
[   90.189940][ T7398] bond1: (slave geneve2): Releasing active interface
[   90.194032][ T7398] bond7: (slave gretap1): Releasing active interface
[   90.197874][ T7398] bond7: (slave gretap1): the permanent HWaddr of slave - be:24:aa:6d:93:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   90.203719][ T7398] bond7: (slave gretap2): making interface the new active one
[   90.212088][ T7398] bond7: (slave gretap2): Releasing active interface
[   90.219942][ T7398] bond8: (slave veth3): Releasing active interface
[   90.223002][ T7398] bond8: (slave veth3): the permanent HWaddr of slave - 02:7f:b1:c7:a4:14 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   90.234917][ T7398] bond8: (slave gretap3): Releasing active interface
[   90.283669][ T7403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.313520][ T7404] syzkaller0: entered promiscuous mode
[   90.316098][ T7404] syzkaller0: entered allmulticast mode
[   90.334133][ T7403] tipc: Resetting bearer <eth:syzkaller0>
[   90.350577][ T7402] tipc: Resetting bearer <eth:syzkaller0>
[   90.361422][ T7402] tipc: Disabling bearer <eth:syzkaller0>
[   90.443333][ T7408] netlink: 'syz.0.395': attribute type 8 has an invalid length.
[   90.447112][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'.
[   90.458877][ T7408] bond0: entered promiscuous mode
[   90.463257][ T7408] bond0: left promiscuous mode
[   90.492531][ T7411] netlink: 68 bytes leftover after parsing attributes in process `syz.1.396'.
[   90.530446][ T7417] netlink: 'syz.0.398': attribute type 1 has an invalid length.
[   90.533748][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'.
[   90.582392][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'.
[   90.586420][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'.
[   90.639036][ T7423] netlink: 68 bytes leftover after parsing attributes in process `syz.0.400'.
[   90.743950][ T7423] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[   90.771975][ T7423] 8021q: adding VLAN 0 to HW filter on device bond9
[   91.350841][ T7454] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   91.366983][ T5715] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.370436][ T5715] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.385385][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'.
[   92.181072][ T5715] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.186628][ T5890] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.347478][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'.
[   92.982279][ T7464] netlink: 'syz.2.409': attribute type 4 has an invalid length.
[   93.247711][ T7483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.250792][ T7483] syzkaller0: entered promiscuous mode
[   93.256980][ T7483] syzkaller0: entered allmulticast mode
[   93.276899][ T7482] tipc: Resetting bearer <eth:syzkaller0>
[   93.291740][ T7485] netlink: 'syz.0.417': attribute type 1 has an invalid length.
[   93.297854][ T7482] tipc: Disabling bearer <eth:syzkaller0>
[   93.403882][ T7494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.414350][ T7489] tipc: Disabling bearer <eth:syzkaller0>
[   93.502564][ T7506] netlink: 'syz.2.422': attribute type 1 has an invalid length.
[   93.554189][ T7506] 8021q: adding VLAN 0 to HW filter on device bond7
[   93.575344][ T7506] bond7: (slave gretap2): making interface the new active one
[   93.582025][ T7506] bond7: (slave gretap2): Enslaving as an active interface with an up link
[   93.612532][ T7508] batman_adv: batadv0: Adding interface: ipvlan2
[   93.621094][ T7508] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.640638][ T7513] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[   93.644061][ T7508] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   93.777349][ T7513] veth7: entered promiscuous mode
[   93.783019][ T7513] bond7: (slave veth7): Enslaving as a backup interface with a down link
[   93.798576][ T7513] 8021q: adding VLAN 0 to HW filter on device bond7
[   93.873483][ T7528] netlink: 'syz.1.432': attribute type 1 has an invalid length.
[   93.950678][ T7534] delete_channel: no stack
[   94.004458][ T7541] netlink: 'syz.0.437': attribute type 1 has an invalid length.
[   94.051263][ T7541] bond10: entered promiscuous mode
[   94.053904][ T7541] 8021q: adding VLAN 0 to HW filter on device bond10
[   94.098191][ T7550] 8021q: adding VLAN 0 to HW filter on device bond10
[   94.104219][ T7550] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[   94.109279][ T7550] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   94.116718][ T7550] bond10: (slave wireguard0): making interface the new active one
[   94.120104][ T7550] wireguard0: entered promiscuous mode
[   94.123571][ T7550] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[   94.127070][ T7548] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   94.185557][ T7555] bridge0: port 1(batadv1) entered blocking state
[   94.191020][ T7555] bridge0: port 1(batadv1) entered disabled state
[   94.196540][ T7555] batadv1: entered allmulticast mode
[   94.200836][ T7555] batadv1: entered promiscuous mode
[   94.525279][ T7581] __nla_validate_parse: 14 callbacks suppressed
[   94.525289][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'.
[   94.572326][ T7581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.580757][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'.
[   94.587511][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'.
[   94.595868][ T7582] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[   94.620187][ T7581] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[   94.631650][ T7582] tipc: Resetting bearer <eth:syzkaller0>
[   94.651385][ T7590] geneve4: entered promiscuous mode
[   94.653401][ T7590] geneve4: entered allmulticast mode
[   94.686351][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   94.689404][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   94.733021][ T7596] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.449'.
[   94.746291][ T7580] tipc: Disabling bearer <eth:syzkaller0>
Connection to localhost closed by remote host.
[   95.021338][ T5890] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   95.100842][ T5890] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   95.149687][ T5890] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   95.201513][ T5890] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[   95.282088][ T5890] batadv1: left allmulticast mode
[   95.283950][ T5890] batadv1: left promiscuous mode
[   95.286135][ T5890] bridge0: port 1(batadv1) entered disabled state
[   95.794950][ T5890] bond0 (unregistering): Released all slaves
[   95.851025][ T5890] bond1 (unregistering): Released all slaves
[   95.914688][ T5890] bond2 (unregistering): Released all slaves
[   95.972788][ T5890] bond3 (unregistering): Released all slaves
[   96.031664][ T5890] bond4 (unregistering): Released all slaves
[   96.088045][ T5890] bond5 (unregistering): Released all slaves
[   96.133852][ T5890] bond6 (unregistering): Released all slaves
[   96.140410][ T5890] bond7 (unregistering): Released all slaves
[   96.190958][ T5890] bond8 (unregistering): Released all slaves
[   96.240766][ T5890] bond9 (unregistering): Released all slaves
[   96.291514][ T5890] bond10 (unregistering): (slave wireguard0): Releasing backup interface
[   96.294239][ T5890] wireguard0: left promiscuous mode
[   96.297301][ T5890] bond10 (unregistering): Released all slaves
[   96.393362][ T5890] tipc: Left network mode
[   96.690423][ T5890] hsr_slave_0: left promiscuous mode
[   96.693373][ T5890] hsr_slave_1: left promiscuous mode
[   96.697882][ T5890] batman_adv: batadv0: Removing interface: ipvlan2
[   96.815579][   T68] smc: removing ib device syz2
[   97.450611][ T5890] ------------[ cut here ]------------
[   97.452584][ T5890] WARNING: CPU: 1 PID: 5890 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[   97.456050][ T5890] Modules linked in:
[   97.457591][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   97.462412][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.467144][ T5890] Workqueue: netns cleanup_net
[   97.469375][ T5890] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   97.472025][ T5890] Code: 18 2f df f7 4b 83 3c 2c 00 75 19 e8 ec c0 7b f7 49 81 fd f8 07 00 00 74 1d e8 de c0 7b f7 49 83 c5 08 eb c9 e8 d3 c0 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   97.480783][ T5890] RSP: 0018:ffffc900046bf8b0 EFLAGS: 00010293
[   97.483570][ T5890] RAX: ffffffff8a43eabd RBX: ffff888107440000 RCX: ffff88801f8ad640
[   97.487231][ T5890] RDX: 0000000000000000 RSI: ffffffff8dba74da RDI: ffff888107440000
[   97.490824][ T5890] RBP: ffffc900046bf9b0 R08: ffffffff8fa38e37 R09: 1ffffffff1f471c6
[   97.494181][ T5890] R10: dffffc0000000000 R11: fffffbfff1f471c7 R12: ffff888107440000
[   97.497789][ T5890] R13: 0000000000000000 R14: ffff888108c3a440 R15: dffffc0000000000
[   97.501158][ T5890] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[   97.504476][ T5890] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.507516][ T5890] CR2: 00007f5d6de104a0 CR3: 000000000df36000 CR4: 00000000000006f0
[   97.511108][ T5890] Call Trace:
[   97.512643][ T5890]  <TASK>
[   97.513705][ T5890]  ops_undo_list+0x49a/0x990
[   97.515780][ T5890]  ? __pfx_ops_undo_list+0x10/0x10
[   97.518198][ T5890]  ? do_raw_spin_unlock+0x4d/0x240
[   97.520484][ T5890]  cleanup_net+0x4c5/0x800
[   97.522232][ T5890]  ? __pfx_cleanup_net+0x10/0x10
[   97.523933][ T5890]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.525707][ T5890]  ? process_scheduled_works+0x9ef/0x17b0
[   97.527756][ T5890]  ? process_scheduled_works+0x9ef/0x17b0
[   97.529687][ T5890]  process_scheduled_works+0xae1/0x17b0
[   97.531556][ T5890]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.533593][ T5890]  worker_thread+0x8a0/0xda0
[   97.535183][ T5890]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.537412][ T5890]  ? __kthread_parkme+0x7b/0x200
[   97.539113][ T5890]  kthread+0x711/0x8a0
[   97.540517][ T5890]  ? __pfx_worker_thread+0x10/0x10
[   97.542245][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.543801][ T5890]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.545559][ T5890]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.547439][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.549069][ T5890]  ret_from_fork+0x3fc/0x770
[   97.550656][ T5890]  ? __pfx_ret_from_fork+0x10/0x10
[   97.552427][ T5890]  ? __switch_to_asm+0x39/0x70
[   97.554099][ T5890]  ? __switch_to_asm+0x33/0x70
[   97.555745][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.557487][ T5890]  ret_from_fork_asm+0x1a/0x30
[   97.559187][ T5890]  </TASK>
[   97.560286][ T5890] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   97.562801][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[   97.566056][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.569532][ T5890] Workqueue: netns cleanup_net
[   97.571197][ T5890] Call Trace:
[   97.572358][ T5890]  <TASK>
[   97.573396][ T5890]  dump_stack_lvl+0x99/0x250
[   97.575022][ T5890]  ? __asan_memcpy+0x40/0x70
[   97.576638][ T5890]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.578445][ T5890]  ? __pfx__printk+0x10/0x10
[   97.580054][ T5890]  vpanic+0x281/0x750
[   97.581470][ T5890]  ? __pfx__printk+0x10/0x10
[   97.583048][ T5890]  ? __pfx_vpanic+0x10/0x10
[   97.584581][ T5890]  ? is_bpf_text_address+0x292/0x2b0
[   97.586390][ T5890]  panic+0xb9/0xc0
[   97.587667][ T5890]  ? __pfx_panic+0x10/0x10
[   97.589219][ T5890]  __warn+0x31b/0x4b0
[   97.590564][ T5890]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   97.592381][ T5890]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   97.594200][ T5890]  report_bug+0x2be/0x4f0
[   97.595626][ T5890]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   97.597434][ T5890]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[   97.599257][ T5890]  ? xfrm6_tunnel_net_exit+0x80/0x100
[   97.601082][ T5890]  handle_bug+0x84/0x160
[   97.602531][ T5890]  exc_invalid_op+0x1a/0x50
[   97.604078][ T5890]  asm_exc_invalid_op+0x1a/0x20
[   97.605720][ T5890] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[   97.607767][ T5890] Code: 18 2f df f7 4b 83 3c 2c 00 75 19 e8 ec c0 7b f7 49 81 fd f8 07 00 00 74 1d e8 de c0 7b f7 49 83 c5 08 eb c9 e8 d3 c0 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[   97.614664][ T5890] RSP: 0018:ffffc900046bf8b0 EFLAGS: 00010293
[   97.617344][ T5890] RAX: ffffffff8a43eabd RBX: ffff888107440000 RCX: ffff88801f8ad640
[   97.620805][ T5890] RDX: 0000000000000000 RSI: ffffffff8dba74da RDI: ffff888107440000
[   97.624298][ T5890] RBP: ffffc900046bf9b0 R08: ffffffff8fa38e37 R09: 1ffffffff1f471c6
[   97.627711][ T5890] R10: dffffc0000000000 R11: fffffbfff1f471c7 R12: ffff888107440000
[   97.631229][ T5890] R13: 0000000000000000 R14: ffff888108c3a440 R15: dffffc0000000000
[   97.634532][ T5890]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[   97.636880][ T5890]  ops_undo_list+0x49a/0x990
[   97.638928][ T5890]  ? __pfx_ops_undo_list+0x10/0x10
[   97.641154][ T5890]  ? do_raw_spin_unlock+0x4d/0x240
[   97.642927][ T5890]  cleanup_net+0x4c5/0x800
[   97.644403][ T5890]  ? __pfx_cleanup_net+0x10/0x10
[   97.646022][ T5890]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.647702][ T5890]  ? process_scheduled_works+0x9ef/0x17b0
[   97.649639][ T5890]  ? process_scheduled_works+0x9ef/0x17b0
[   97.651627][ T5890]  process_scheduled_works+0xae1/0x17b0
[   97.653500][ T5890]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.655512][ T5890]  worker_thread+0x8a0/0xda0
[   97.657079][ T5890]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.659202][ T5890]  ? __kthread_parkme+0x7b/0x200
[   97.660862][ T5890]  kthread+0x711/0x8a0
[   97.662256][ T5890]  ? __pfx_worker_thread+0x10/0x10
[   97.663998][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.665564][ T5890]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.667331][ T5890]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.669358][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.671310][ T5890]  ret_from_fork+0x3fc/0x770
[   97.672955][ T5890]  ? __pfx_ret_from_fork+0x10/0x10
[   97.674678][ T5890]  ? __switch_to_asm+0x39/0x70
[   97.676311][ T5890]  ? __switch_to_asm+0x33/0x70
[   97.678314][ T5890]  ? __pfx_kthread+0x10/0x10
[   97.680246][ T5890]  ret_from_fork_asm+0x1a/0x30
[   97.682282][ T5890]  </TASK>
[   97.684250][ T5890] Kernel Offset: disabled
[   97.685762][ T5890] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:19:12  Registers:
info registers vcpu 0

CPU#0
RAX=e81f699fcb79dc00 RBX=ffffffff819683c8 RCX=e81f699fcb79dc00 RDX=0000000000000001
RSI=ffffffff8d9b7ff7 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fccf7404440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=73616c632f737973 2f002f74656e2f73 XMM03=0000000000000000 0000000000000073
XMM04=7373616c632f7379 732f002f74656e2f XMM05=0000000000000051 000000302f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f33316d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900046bf050
R8 =ffff8880208d0237 R9 =1ffff1100411a046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8f3 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d6de104a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
