last executing test programs:

1.070357676s ago: executing program 1 (id=455):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080b00000000000000000000000000200044000500ac1414a2000000000000000000000000000000003c00000000000000e0000001000000000000000000000000020000000403"], 0xfc}}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x28, 0x0, &(0x7f00000003c0)="e02742e8680d85cc970c2d2f86ddfd356fbefc38078b49f5e6bdbfc95f9a3dff8c1771865e1808c9", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = getuid()
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0xa0, 0x21, 0x0, r4}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x400a0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) (async, rerun: 64)
sendmsg$nl_route(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x408d5}, 0x40080) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xe9, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)

1.010470773s ago: executing program 1 (id=456):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108000000000085000500000000000000000100000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={<r3=>0x0, 0xffffffffffffffc0, &(0x7f0000000380)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x10}, &(0x7f00000001c0)=0x8)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r0, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='%', 0xfffffe9f}], 0x1}}], 0x1, 0x44810)
r4 = socket$xdp(0x2c, 0x3, 0x0)
unshare(0x22020600)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000240)=0x8, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd000008000280"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e)
socket$inet(0x2, 0x5, 0xbd)
socket$netlink(0x10, 0x3, 0x2)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r7, 0x8919, 0x0)
syz_emit_ethernet(0xb6, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000007bcd587a2bfd86dd6ecc920a008011fffe800000000000001902000000000000ff0200000000002000000000000000012c0e00000000000007080000000200010300c910fe8000000000000000000000000000bb040102c91000000000000000000000000000000001071d5a7418375bdcefa5fcb34b395a79b1e86d48a4c4ec188fb07c940ed84f011e9af3e4017dad5e1eec35701b9e04f40edc7197611bec968af17c4c8d76ea4e224e21000890783981f98d4a0baf71be28a82a197e818ddab534811a512bdfb89ce46b6c757b8247c68abb17b4b62c151ba62e68"], 0x0)
socket$kcm(0x10, 0x2, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

921.694703ms ago: executing program 1 (id=457):
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c004000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0)

908.904216ms ago: executing program 0 (id=458):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x4004af61, &(0x7f0000000240))

846.887798ms ago: executing program 0 (id=459):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x4ef, 0x10001, 0x7f, 0x6}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00v\x00', @ANYRES32=r5, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0baf745837da88245c7f7565ec14571e49bf33cc99dbe5f42b", 0x1e, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf2501000000080002007f0200000500060044000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004)
socket$packet(0x11, 0x3, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x4ef, 0x10001, 0x7f, 0x6}, 0x10) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00v\x00', @ANYRES32=r5, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0baf745837da88245c7f7565ec14571e49bf33cc99dbe5f42b", 0x1e, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) (async)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf2501000000080002007f0200000500060044000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) (async)

846.551217ms ago: executing program 1 (id=460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a050033080200140012800900018076fc1168000000000400028008001f0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
unshare(0x400)
connect$bt_l2cap(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$ppp(r3, &(0x7f0000000480)="fbfaf27e595d13cb7f3cd883ff4857d5507627a4f1a35ed5dd7218a638c07d3504ccf88b41a5a5915ba6f71c98edbaa65abfeec52d06c7e4652b6681ee785059f528c052ea94a33e49b47044ff0a9596cb88a66bffa4ec26d0f86592c49606c974d1b498c3da786833f58e86df7c2338960e897b29ffe75bdccefbef72", 0x7d)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaa0000aaaabb88a810008100000086dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242088a8ffffffffffff0800000086dd080088be86dd"], 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000000000db0000003a743627041b1a236ef3fefa017807d4e6619297dddfcb6ac61b4be62b8e2102881aa0a429561d47dc07a523a07230cdbd53cafac691a59975a7afcda80b2fe047fccf6fcbae8bd3a83fb05e38e8c92ba4bf63f401a96fb51bedb2ade121dc259e67e097a3252036f5e899ccea7b170e935d917bdaab4756579fe938d1122d86964b3ca5103ad16643c4cdaf68756027414cf6bed606bf359736881f8898896546870c13f394db91956b0f8ed3820c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0)

846.160396ms ago: executing program 0 (id=461):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket(0x1, 0x80802, 0x0)
epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

809.701443ms ago: executing program 1 (id=462):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x24000800)
r6 = socket(0x10, 0x3, 0x0)
r7 = accept4$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000)
setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000280)=0xbd, 0x4)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000400)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000340)='pim6reg\x00', 0x10)
sendto$inet6(r8, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x34)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d000000000000000600000000", @ANYRES32=0x0], 0x18}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r5, &(0x7f0000000540)="085c235fd568ca9f8be5233b1d6fb77877da99e5189c328eecc776322930c6350c8f7a3132e5919f650b4af74fa8d136801091136e9b6cbd48300052c8c4fc605f9487958d683a9cac87e2c26e1075151f8a9f8cfc55afe480ff0b55dc1106eea93dba6ecd17cab933f0793ac8956ac1f35c43d052d95fd2946282ca148a1a995f2159a5393e46371ec5433e7b35de857f571cc81674d243f8084ea434a06d1a1da0b966297608c813ed53f8a377a33b8d22c4973186385a0ca69d98358e936e7cb3c1864cc97a1647c2", 0xca, 0x4000800, 0x0, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060080f21d66a04b12f215a543f50f0a000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)

766.816416ms ago: executing program 0 (id=463):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2f, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="15efff877ac6867f01e968001b00000000000020", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20)
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async)
bind$tipc(r5, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000005b5e7d0900000000000100000d000000000400000002000000050000000000000805000000005f30635f5f00"], 0x0, 0x3f, 0x0, 0x1, 0x3ff}, 0x28)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x342}}}, 0x88) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40002040}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x28048000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x34, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) (async)
bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7fffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffc}]}}]}, 0x40}}, 0x800)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300)=r3, 0x4) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44)

763.225624ms ago: executing program 1 (id=464):
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000600000000000000bde200009500000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000600a50000001833000001000000000000000000000000b785ffffffffffff180800000300000000000000000000000d393000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x48980000, 0x98, &(0x7f0000000780)=""/152, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x10, 0x48, 0xaa00}, 0x10, 0x28c21, r1, 0x6, &(0x7f00000009c0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000a00)=[{0x3, 0x2, 0x9, 0xc}, {0x1, 0x7, 0x2, 0x9}, {0x2, 0x1, 0xc, 0xc}, {0x2, 0x5, 0xe, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x3, 0x3, 0xb, 0x6}], 0x10, 0xffffffff}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x0, 0x0}, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

683.19325ms ago: executing program 0 (id=465):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200001f, 0x12, r0, 0x0)

681.210127ms ago: executing program 0 (id=466):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0)

380.172191ms ago: executing program 2 (id=470):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000370480000840ffdbdf250000000046401f85acf5f26d7d0e207400ec6a5cebdb752bebaa8d17bc280efbd324040c8dd7a8d2861e61e2d5739b2e1b5876f9f70f", @ANYRES32=0x0, @ANYBLOB="0b1205000000000008001f00d2ba0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)

330.285941ms ago: executing program 2 (id=471):
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/255, 0xff}], 0x1, &(0x7f00000002c0)=""/204, 0xcc}, 0x40002040)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x6, 0x605, 0x40, 0x20b, 0x400}, &(0x7f00000004c0)=0x98)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
getsockname$tipc(r0, &(0x7f0000000540)=@name, &(0x7f0000000580)=0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000005c0)={0x7, 'veth1_to_hsr\x00', {0x48ca}, 0x2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000700))
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@var={0x7, 0x0, 0x0, 0xe, 0x5, 0x2}, @fwd={0x2}, @enum={0x5, 0x2, 0x0, 0x6, 0x4, [{0xa, 0x1}, {0x5, 0xfffffff8}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000ac0)=""/121, 0x64, 0x79, 0x0, 0x7, 0x10000}, 0x28)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x2, 0x10}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0xe, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4ae6, 0x0, 0x0, 0x0, 0xffff}, [@map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000900)='GPL\x00', 0xff, 0xc1, &(0x7f0000000940)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8b33, 0xffffffffffffffff, 0x5, &(0x7f0000000c40)=[r6, r0, r2, r7, r8], &(0x7f0000000c80)=[{0x3, 0x1, 0x6, 0xc}, {0x1, 0x4, 0xd, 0x8}, {0x0, 0x2, 0xa, 0x9}, {0x5, 0x3, 0x9, 0x9}, {0x1, 0x5, 0xc, 0xb}], 0x10, 0x9}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f00)={'veth1_to_bridge\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0xd, &(0x7f0000000dc0)=@raw=[@call={0x85, 0x0, 0x0, 0x27}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70d}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0x6, 0x1, 0x2, 0x80, 0x1}, @jmp={0x5, 0x0, 0x1, 0x1, 0x2, 0x50, 0x10}], &(0x7f0000000e40)='syzkaller\x00', 0x80000000, 0x73, &(0x7f0000000e80)=""/115, 0x40e00, 0x48, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000000f40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x0, 0x5, 0xd, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000fc0)=[r7], &(0x7f0000001000)=[{0x4, 0x2, 0x3, 0x4}], 0x10, 0x1}, 0x94)
r11 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r13 = socket$key(0xf, 0x3, 0x2)
ppoll(&(0x7f0000001100)=[{r11, 0x2b02}, {r12, 0xe3ac2bb905ac74fd}, {r10, 0x4542}, {r13, 0x200}], 0x4, &(0x7f0000001140)={0x77359400}, &(0x7f0000001180)={[0x9]}, 0x8)
syz_emit_ethernet(0x56, &(0x7f00000011c0)={@empty, @random="fb570e9f7157", @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x1c, 0x48, 0x68, 0x0, 0xc2, 0x6, 0x0, @multicast2, @loopback}, @payload_mcast={{{{{{0x34, 0x0, 0x0, 0x1, 0x1, 0xb, 0x3, 0x2, 0x5e87, 0x0, 0x8cc860a85c2f89, 0x7, 0x4, 0x1, 0x2, 0x4, 0x4, 0x4e23, 0x4e23}, 0x3, 0x2}, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f0000001240)={0x1, 0x2, [0xda6, 0x1e, 0x822, 0x594]})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00', 0x0, 0x8}, 0x18)
getsockopt$ax25_int(r11, 0x101, 0x6, &(0x7f0000001300), &(0x7f0000001340)=0x4)
r14 = accept4$rose(0xffffffffffffffff, &(0x7f0000001380)=@full={0xb, @dev, @default, 0x0, [@netrom, @bcast, @null, @default, @default, @rose]}, &(0x7f00000013c0)=0x40, 0x0)
recvfrom$rose(r14, &(0x7f0000001400)=""/70, 0x46, 0x40010000, &(0x7f0000001480)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

280.596618ms ago: executing program 2 (id=472):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
getsockname$inet(r1, 0x0, &(0x7f0000000140))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x67, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4800)

200.579041ms ago: executing program 2 (id=473):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000000308010100000000000000000000000006000240000000001c0004800800094000000000080008400600000000000000000000e7ff00000000000000"], 0x40}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000540)=0x1fb3, 0x4)
sendto$inet6(r7, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c)
recvmsg(r7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2141)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9201}, @TCA_FLOW_MASK={0x8, 0x6, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404809c}, 0xc000)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="21093f1b", @ANYRES16=r12, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x20000000)
socket(0x1d, 0x4, 0x7)

130.083673ms ago: executing program 2 (id=474):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

0s ago: executing program 2 (id=475):
socket$packet(0x11, 0x2, 0x300)
sendmsg(0xffffffffffffffff, 0x0, 0x844)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80000, 0x40d)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaab7aaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000189078040000000b0000000000010000000000"], 0x52)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52385' (ED25519) to the list of known hosts.
syzkaller login: [   47.478184][ T5836] cgroup: Unknown subsys name 'net'
[   47.639568][ T5836] cgroup: Unknown subsys name 'cpuset'
[   47.644075][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.539088][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.528922][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.532894][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.535802][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.539145][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.542259][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.560262][ T5242] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.563338][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.566401][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.570592][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.573960][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.616606][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.623846][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.626321][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.629459][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.632492][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.709641][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   53.756917][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   53.764693][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.767459][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.770186][ T5849] bridge_slave_0: entered allmulticast mode
[   53.773378][ T5849] bridge_slave_0: entered promiscuous mode
[   53.776413][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.779963][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.782356][ T5849] bridge_slave_1: entered allmulticast mode
[   53.784804][ T5849] bridge_slave_1: entered promiscuous mode
[   53.843940][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.856885][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.885327][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   53.890370][ T5849] team0: Port device team_slave_0 added
[   53.895638][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.898662][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.900881][ T5845] bridge_slave_0: entered allmulticast mode
[   53.903122][ T5845] bridge_slave_0: entered promiscuous mode
[   53.906234][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.910344][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.913211][ T5845] bridge_slave_1: entered allmulticast mode
[   53.916262][ T5845] bridge_slave_1: entered promiscuous mode
[   53.920384][ T5849] team0: Port device team_slave_1 added
[   53.950055][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.952516][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.962268][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.975165][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.979703][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.982356][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.991915][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.001624][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.034898][ T5845] team0: Port device team_slave_0 added
[   54.042086][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.044593][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.047476][ T5853] bridge_slave_0: entered allmulticast mode
[   54.050116][ T5853] bridge_slave_0: entered promiscuous mode
[   54.053273][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.055899][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.059024][ T5853] bridge_slave_1: entered allmulticast mode
[   54.061726][ T5853] bridge_slave_1: entered promiscuous mode
[   54.065187][ T5845] team0: Port device team_slave_1 added
[   54.094239][ T5849] hsr_slave_0: entered promiscuous mode
[   54.097678][ T5849] hsr_slave_1: entered promiscuous mode
[   54.106174][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.108927][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.118793][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.124604][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.129106][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.131824][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.142621][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.156192][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.184888][ T5853] team0: Port device team_slave_0 added
[   54.199418][ T5853] team0: Port device team_slave_1 added
[   54.218517][ T5845] hsr_slave_0: entered promiscuous mode
[   54.221255][ T5845] hsr_slave_1: entered promiscuous mode
[   54.223849][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   54.226180][ T5845] Cannot create hsr debugfs directory
[   54.236006][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.238387][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.247504][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.264141][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.266998][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.275146][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.323683][ T5853] hsr_slave_0: entered promiscuous mode
[   54.325983][ T5853] hsr_slave_1: entered promiscuous mode
[   54.328639][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   54.330643][ T5853] Cannot create hsr debugfs directory
[   54.427818][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.434309][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.438564][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.447879][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.474184][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.480699][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.490338][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.507684][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.512957][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.515627][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.518517][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.521149][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.525620][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.530119][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.538932][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.544296][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.584717][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.587104][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.589829][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.592191][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.608717][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.610952][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.613337][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.615519][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.629192][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.642724][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   54.646361][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.650360][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.654564][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.658875][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.663243][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.666207][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.689283][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.691927][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.694621][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.697180][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.715670][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.747047][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   54.775221][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.777668][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.781918][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.784213][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.791279][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.819956][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   54.828764][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.831640][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.852612][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.855363][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.890582][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.895575][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.922699][ T5849] veth0_vlan: entered promiscuous mode
[   54.929897][ T5849] veth1_vlan: entered promiscuous mode
[   54.961319][ T5849] veth0_macvtap: entered promiscuous mode
[   54.971367][ T5849] veth1_macvtap: entered promiscuous mode
[   54.987653][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.000114][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.004099][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.012126][ T5742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.015923][ T5742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.028234][ T5742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.034694][ T5742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.048359][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.087056][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.089818][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.093692][ T5853] veth0_vlan: entered promiscuous mode
[   55.112302][ T5853] veth1_vlan: entered promiscuous mode
[   55.115354][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.118447][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.126007][ T5845] veth0_vlan: entered promiscuous mode
[   55.135572][ T5853] veth0_macvtap: entered promiscuous mode
[   55.148068][ T5845] veth1_vlan: entered promiscuous mode
[   55.148437][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.161296][ T5853] veth1_macvtap: entered promiscuous mode
[   55.177734][ T5845] veth0_macvtap: entered promiscuous mode
[   55.181989][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.185898][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.193378][ T5845] veth1_macvtap: entered promiscuous mode
[   55.203206][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.208804][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.211555][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.218784][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.232244][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.239083][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.251919][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.268016][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.284965][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.296961][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.322636][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.327950][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.363643][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.366657][ T4754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.369319][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.369763][ T4754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.406186][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.411959][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.466498][ T5922] netlink: 'syz.1.7': attribute type 1 has an invalid length.
[   55.479022][ T5922] bond1 (unregistering): Released all slaves
[   55.568152][   T55] Bluetooth: hci0: command tx timeout
[   55.637987][   T55] Bluetooth: hci1: command tx timeout
[   55.718141][   T55] Bluetooth: hci2: command tx timeout
[   55.955110][ T5959] erspan0: entered promiscuous mode
[   55.966885][ T5959] erspan0: left promiscuous mode
[   56.065086][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'.
[   56.318776][ T5986] netlink: del zone limit has 8 unknown bytes
[   56.380994][  T792] cfg80211: failed to load regulatory.db
[   57.360467][ T6096] netlink: 'syz.1.59': attribute type 3 has an invalid length.
[   57.370595][ T6096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.429096][ T6103] netlink: 'syz.1.60': attribute type 15 has an invalid length.
[   57.499412][ T6112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.644197][ T6132] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET)
[   57.646960][   T55] Bluetooth: hci0: command tx timeout
[   57.719011][   T55] Bluetooth: hci1: command tx timeout
[   57.797259][   T55] Bluetooth: hci2: command tx timeout
[   57.804999][ T6147] syzkaller0: entered promiscuous mode
[   57.811402][ T6147] syzkaller0: entered allmulticast mode
[   57.963437][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.097884][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.123162][ T6189] sctp: [Deprecated]: syz.2.80 (pid 6189) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.123162][ T6189] Use struct sctp_sack_info instead
[   58.129808][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   58.246396][ T6198] netlink: 'syz.1.84': attribute type 5 has an invalid length.
[   58.295994][ T6200] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.85'.
[   58.702510][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'.
[   58.746603][ T6223] tipc: Started in network mode
[   58.749460][ T6223] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   58.752384][ T6223] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   58.755965][ T6223] tipc: Enabled bearer <udp:syz1>, priority 10
[   59.055223][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   59.183744][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[   59.557415][ T6262] warning: `syz.2.113' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.568827][ T6264] syz_tun: entered allmulticast mode
[   59.574215][ T6263] syz_tun: left allmulticast mode
[   59.702255][ T6282] tipc: Started in network mode
[   59.704886][ T6282] tipc: Node identity e67a5a88b67, cluster identity 4711
[   59.710180][ T6282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.713582][ T6282] syzkaller0: entered promiscuous mode
[   59.715850][ T6282] syzkaller0: entered allmulticast mode
[   59.722958][ T6282] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[   59.726991][   T55] Bluetooth: hci0: command tx timeout
[   59.737324][ T6282] tipc: Resetting bearer <eth:syzkaller0>
[   59.753477][ T6281] tipc: Resetting bearer <eth:syzkaller0>
[   59.762536][ T6281] tipc: Disabling bearer <eth:syzkaller0>
[   59.807068][   T55] Bluetooth: hci1: command tx timeout
[   59.866944][   T52] tipc: Node number set to 1
[   59.878839][ T5242] Bluetooth: hci2: command tx timeout
[   59.882271][ T6291] netlink: 'syz.2.126': attribute type 1 has an invalid length.
[   59.885382][ T6291] netlink: 232 bytes leftover after parsing attributes in process `syz.2.126'.
[   59.888792][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'.
[   59.951253][ T6306] syzkaller1: entered promiscuous mode
[   59.953030][ T6306] syzkaller1: entered allmulticast mode
[   60.024939][ T6315] netlink: 'syz.0.127': attribute type 3 has an invalid length.
[   60.306236][ T6322] sctp: [Deprecated]: syz.2.132 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.306236][ T6322] Use struct sctp_sack_info instead
[   60.316444][ T6322] sctp: [Deprecated]: syz.2.132 (pid 6322) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.316444][ T6322] Use struct sctp_sack_info instead
[   60.779173][ T6340] netlink: 'syz.2.141': attribute type 14 has an invalid length.
[   61.047889][ T6381] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[   61.054117][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'.
[   61.268959][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.169'.
[   61.337879][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[   61.350598][ T6424] netlink: 56 bytes leftover after parsing attributes in process `syz.1.172'.
[   61.353835][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   61.358412][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.172'.
[   61.464286][ T6441] netlink: 'syz.1.179': attribute type 10 has an invalid length.
[   61.480662][ T6441] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   61.607667][ T6459] netlink: 'syz.0.183': attribute type 2 has an invalid length.
[   61.610925][ T6459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   61.801691][   T55] Bluetooth: hci0: command tx timeout
[   61.888063][   T55] Bluetooth: hci1: command tx timeout
[   61.898627][ T6489] IPv6: Can't replace route, no match found
[   61.936134][ T6493] macvtap0: refused to change device tx_queue_len
[   61.956807][   T55] Bluetooth: hci2: command tx timeout
[   62.031820][ T6513] netlink: 312 bytes leftover after parsing attributes in process `syz.2.209'.
[   62.066847][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.210'.
[   62.135571][ T6526] geneve2: entered promiscuous mode
[   62.138684][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   62.142709][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   62.152795][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   62.163344][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   64.038330][ T6562] Bluetooth: MGMT ver 1.23
[   64.050373][ T6567] netlink: 'syz.1.225': attribute type 13 has an invalid length.
[   64.053691][ T6567] netlink: 'syz.1.225': attribute type 17 has an invalid length.
[   64.087194][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.111423][ T6567] Zero length message leads to an empty skb
[   64.147722][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.149859][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.152503][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.157398][ T6564] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   64.163311][ T6564] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   64.181372][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.184112][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.188110][ T6564] wg1 speed is unknown, defaulting to 1000
[   64.260259][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'.
[   64.260259][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.229'.
[   64.286951][ T5242] Bluetooth: hci2: command 0x0405 tx timeout
[   64.313737][ T6578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.230'.
[   64.391961][  T792] IPVS: starting estimator thread 0...
[   64.458648][ T6585] wg1 speed is unknown, defaulting to 1000
[   64.476978][ T6583] IPVS: using max 92 ests per chain, 220800 per kthread
[   64.811403][ T6588] netlink: zone id is out of range
[   64.813451][ T6588] netlink: zone id is out of range
[   64.815266][ T6588] netlink: zone id is out of range
[   64.817225][ T6588] netlink: zone id is out of range
[   64.819182][ T6588] netlink: zone id is out of range
[   64.821311][ T6588] netlink: zone id is out of range
[   64.823498][ T6588] netlink: zone id is out of range
[   64.825700][ T6588] netlink: zone id is out of range
[   65.231100][ T6601] netlink: 'syz.0.235': attribute type 8 has an invalid length.
[   65.700565][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.702999][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.733917][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.742388][ T6607] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.807032][ T6617] syzkaller1: entered promiscuous mode
[   65.809200][ T6617] syzkaller1: entered allmulticast mode
[   65.812483][ T5742] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.815783][ T5742] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.822318][ T6610] tipc: Started in network mode
[   65.823914][ T6610] tipc: Node identity , cluster identity 4711
[   65.825824][ T6610] tipc: Failed to obtain node identity
[   65.828144][ T6610] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.841839][ T5742] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.846853][ T5742] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.862015][ T6623] netlink: 'syz.1.240': attribute type 16 has an invalid length.
[   65.864594][ T6623] netlink: 'syz.1.240': attribute type 17 has an invalid length.
[   65.882935][ T6610] syzkaller0: entered promiscuous mode
[   65.885453][ T6610] syzkaller0: entered allmulticast mode
[   66.120285][ T6635] pim6reg1: entered promiscuous mode
[   66.122514][ T6635] pim6reg1: entered allmulticast mode
[   66.258764][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.261947][ T6635] team0: Port device bond1 added
[   66.440797][    T9] IPVS: starting estimator thread 0...
[   66.536818][ T6662] IPVS: using max 56 ests per chain, 134400 per kthread
[   66.541872][ T6669] __nla_validate_parse: 5 callbacks suppressed
[   66.541885][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   66.548105][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   66.565346][ T6674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   66.577500][ T6674] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'.
[   66.721951][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'.
[   66.963311][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[   66.985402][ T6721] netlink: 228 bytes leftover after parsing attributes in process `syz.0.268'.
[   67.034632][ T6727] bridge_slave_0: left allmulticast mode
[   67.037593][ T6727] bridge_slave_0: left promiscuous mode
[   67.039950][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.044921][ T6727] bridge_slave_1: left allmulticast mode
[   67.047285][ T6727] bridge_slave_1: left promiscuous mode
[   67.049602][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.055326][ T6727] bond0: (slave bond_slave_0): Releasing backup interface
[   67.073873][ T6727] bond0: (slave bond_slave_1): Releasing backup interface
[   67.086059][ T6727] team0: Port device team_slave_0 removed
[   67.092679][ T6727] team0: Port device team_slave_1 removed
[   67.095429][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.097843][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.100666][ T6727] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.102930][ T6727] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.208600][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'.
[   67.211205][ T6746] netlink: 'syz.2.276': attribute type 6 has an invalid length.
[   67.221844][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'.
[   67.259607][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'.
[   67.284446][ T6754] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   67.301875][ T6757] unsupported nlmsg_type 40
[   67.322169][ T6758] netlink: 'syz.2.282': attribute type 10 has an invalid length.
[   67.328797][ T6758] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.362169][ T6754] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   67.595101][ T6785] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[   67.603808][ T6785] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[   67.641646][ T6785] wg1 speed is unknown, defaulting to 1000
[   67.680895][ T6789] netlink: 'syz.1.290': attribute type 10 has an invalid length.
[   67.688453][ T6789] team0: Port device dummy0 added
[   68.059835][ T6819] lo speed is unknown, defaulting to 1000
[   68.064924][ T6819] lo speed is unknown, defaulting to 1000
[   68.069011][ T6821] netlink: 'syz.2.300': attribute type 16 has an invalid length.
[   68.069667][ T6819] lo speed is unknown, defaulting to 1000
[   68.071439][ T6821] netlink: 'syz.2.300': attribute type 3 has an invalid length.
[   68.085365][ T6819] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   68.107693][ T6819] lo speed is unknown, defaulting to 1000
[   68.111716][ T6819] lo speed is unknown, defaulting to 1000
[   68.114581][ T6819] lo speed is unknown, defaulting to 1000
[   68.173082][ T6828] netlink: 'syz.2.303': attribute type 5 has an invalid length.
[   68.214933][ T6836] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20000
[   68.235113][ T6836] IPVS: set_ctl: invalid protocol: 148 255.255.255.255:20001
[   68.249977][ T6841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.279387][ T6842] tipc: Disabling bearer <eth:syzkaller0>
[   68.299202][ T6840] syz_tun: entered allmulticast mode
[   68.302060][ T6838] syz_tun: left allmulticast mode
[   68.321061][ T6848] tipc: Started in network mode
[   68.323222][ T6848] tipc: Node identity aa5b67cb06ff, cluster identity 4711
[   68.326418][ T6848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.349617][ T6849] syzkaller0: entered promiscuous mode
[   68.351362][ T6849] syzkaller0: entered allmulticast mode
[   68.364081][ T6848] tipc: Resetting bearer <eth:syzkaller0>
[   68.367359][ T6847] tipc: Resetting bearer <eth:syzkaller0>
[   68.370541][ T6847] tipc: Disabling bearer <eth:syzkaller0>
[   68.480480][ T6867] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.506933][ T6867] bond1: (slave gretap1): making interface the new active one
[   68.514775][ T6867] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   68.562648][ T6867] syz.0.315 (6867) used greatest stack depth: 17616 bytes left
[   69.648712][ T6985] tipc: Enabled bearer <eth:vlan0>, priority 10
[   69.696104][ T6992] net_ratelimit: 1 callbacks suppressed
[   69.696116][ T6992] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   69.717803][ T6994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.720428][ T6994] syzkaller0: entered promiscuous mode
[   69.722157][ T6994] syzkaller0: entered allmulticast mode
[   69.736340][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[   69.740146][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   69.743221][ T6993] tipc: Disabling bearer <eth:syzkaller0>
[   71.158408][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160466][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   88.173139][ T7033] __nla_validate_parse: 18 callbacks suppressed
[   88.173151][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'.
[   88.241451][ T7039] validate_nla: 5 callbacks suppressed
[   88.241477][ T7039] netlink: 'syz.2.364': attribute type 3 has an invalid length.
[   88.246271][ T7039] netlink: 'syz.2.364': attribute type 3 has an invalid length.
[   88.260598][ T7043] netlink: 56 bytes leftover after parsing attributes in process `syz.1.363'.
[   88.268588][ T7046] netlink: 104 bytes leftover after parsing attributes in process `syz.0.365'.
[   88.351872][ T7056] syz.0.368 uses old SIOCAX25GETINFO
[   88.580120][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'.
[   89.133126][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'.
[   89.150824][ T7080] netlink: 32 bytes leftover after parsing attributes in process `syz.2.374'.
[   89.264418][ T7098] geneve3: entered promiscuous mode
[   89.319196][ T7105] netlink: 'syz.0.381': attribute type 12 has an invalid length.
[   89.347001][ T7107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.382'.
[   89.405727][ T7111] netlink: 'syz.1.383': attribute type 21 has an invalid length.
[   89.410987][ T7111] ipvlan2: entered promiscuous mode
[   89.413061][ T7111] bridge0: port 3(ipvlan2) entered blocking state
[   89.417091][ T7111] bridge0: port 3(ipvlan2) entered disabled state
[   89.419122][ T7111] ipvlan2: entered allmulticast mode
[   89.420785][ T7111] gretap0: entered allmulticast mode
[   89.423061][ T7111] ipvlan2: left allmulticast mode
[   89.425672][ T7111] gretap0: left allmulticast mode
[   89.552746][ T7132] netlink: 'syz.2.389': attribute type 21 has an invalid length.
[   89.691763][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'.
[   90.338441][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'.
[   90.341344][ T7158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.398'.
[   90.481309][ T7175] smc: net device bond0 applied user defined pnetid SYZ2
[   90.492222][ T7175] smc: removing net device bond0 with user defined pnetid SYZ2
[   90.495445][ T7175] bond0 (unregistering): Released all slaves
[   90.741512][ T7206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.835888][ T7221] netlink: 'syz.1.424': attribute type 1 has an invalid length.
[   90.850279][ T7221] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.862730][ T7221] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.865834][ T7221] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[   90.871363][ T7221] bond1: (slave vxcan1): Error -95 calling set_mac_address
[   90.911412][ T7224] sit1: entered promiscuous mode
[   90.913247][ T7224] bond1: (slave sit1): The slave device specified does not support setting the MAC address
[   90.916550][ T7224] bond1: (slave sit1): Error -95 calling set_mac_address
[   90.963825][ T6688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.968003][ T6688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.589409][ T7233] netlink: 'syz.2.427': attribute type 1 has an invalid length.
[   91.620522][ T7235] IPv6: sit1: Disabled Multicast RS
[   91.623118][ T7235] sit1: entered allmulticast mode
[   92.063952][ T7258] wg1 speed is unknown, defaulting to 1000
[   92.074490][ T7258] lo speed is unknown, defaulting to 1000
[   92.759513][ T7278] wg1 speed is unknown, defaulting to 1000
[   92.762746][ T7278] lo speed is unknown, defaulting to 1000
[   93.056985][ T7303] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20000
[   93.659886][ T7333] __nla_validate_parse: 17 callbacks suppressed
[   93.659905][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'.
[   93.670341][ T7333] openvswitch: netlink: Missing key (keys=40, expected=100)
[   93.820767][ T7347] vlan0: entered promiscuous mode
[   93.834514][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'.
[   93.844691][ T7350] vlan2: entered promiscuous mode
[   93.849947][ T7350] dummy0: entered promiscuous mode
[   93.885024][ T7352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.462'.
[   93.890121][ T7352] openvswitch: netlink: Flow actions attr not present in new flow.
[   94.032052][ T7363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.089589][ T7371] netlink: 'syz.2.468': attribute type 7 has an invalid length.
[   94.092023][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[   94.276483][ T7375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   94.380550][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'.
[   94.455153][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'.
[   94.534653][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'.
[   94.562151][ T7383] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.585873][ T7383] bond0: (slave rose0): Enslaving as an active interface with an up link
[   94.798278][ T7358] ==================================================================
[   94.800741][ T7358] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   94.803707][ T7358] Read of size 1 at addr ffff888123f97832 by task syz.1.464/7358
[   94.807700][ T7358] 
[   94.808636][ T7358] CPU: 0 UID: 0 PID: 7358 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) 
[   94.808651][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.808661][ T7358] Call Trace:
[   94.808678][ T7358]  <TASK>
[   94.808687][ T7358]  dump_stack_lvl+0x189/0x250
[   94.808701][ T7358]  ? __virt_addr_valid+0x1c8/0x5c0
[   94.808713][ T7358]  ? rcu_is_watching+0x15/0xb0
[   94.808722][ T7358]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.808731][ T7358]  ? rcu_is_watching+0x15/0xb0
[   94.808739][ T7358]  ? lock_release+0x4b/0x3e0
[   94.808752][ T7358]  ? __virt_addr_valid+0x1c8/0x5c0
[   94.808762][ T7358]  ? __virt_addr_valid+0x4a5/0x5c0
[   94.808772][ T7358]  print_report+0xca/0x240
[   94.808779][ T7358]  ? rose_transmit_link+0x5c3/0x740
[   94.808788][ T7358]  kasan_report+0x118/0x150
[   94.808799][ T7358]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   94.808811][ T7358]  ? rose_transmit_link+0x5c3/0x740
[   94.808820][ T7358]  rose_transmit_link+0x5c3/0x740
[   94.808829][ T7358]  ? skb_put+0x11b/0x210
[   94.808838][ T7358]  rose_write_internal+0x11dc/0x1ac0
[   94.808851][ T7358]  ? __pfx_rose_write_internal+0x10/0x10
[   94.808861][ T7358]  ? __timer_delete+0x5d/0x390
[   94.808871][ T7358]  rose_release+0x24e/0x520
[   94.808880][ T7358]  sock_close+0xc3/0x240
[   94.808891][ T7358]  ? __pfx_sock_close+0x10/0x10
[   94.808900][ T7358]  __fput+0x44c/0xa70
[   94.808916][ T7358]  task_work_run+0x1d4/0x260
[   94.808929][ T7358]  ? __pfx_task_work_run+0x10/0x10
[   94.808940][ T7358]  ? task_work_add+0x377/0x420
[   94.808950][ T7358]  ? __pfx_task_work_add+0x10/0x10
[   94.808961][ T7358]  get_signal+0x11ed/0x1340
[   94.808970][ T7358]  ? __might_fault+0xb0/0x130
[   94.808982][ T7358]  arch_do_signal_or_restart+0x9a/0x750
[   94.808995][ T7358]  ? __pfx___sys_connect+0x10/0x10
[   94.809006][ T7358]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   94.809019][ T7358]  ? rcu_is_watching+0x15/0xb0
[   94.809026][ T7358]  ? rcu_is_watching+0x15/0xb0
[   94.809033][ T7358]  exit_to_user_mode_loop+0x75/0x110
[   94.809044][ T7358]  do_syscall_64+0x2bd/0x3b0
[   94.809052][ T7358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.809060][ T7358]  ? exc_page_fault+0x9f/0xf0
[   94.809070][ T7358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.809078][ T7358] RIP: 0033:0x7f45d9d8ebe9
[   94.809088][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.809095][ T7358] RSP: 002b:00007f45dabb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   94.809104][ T7358] RAX: fffffffffffffe00 RBX: 00007f45d9fb5fa0 RCX: 00007f45d9d8ebe9
[   94.809110][ T7358] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000013
[   94.809116][ T7358] RBP: 00007f45d9e11e19 R08: 0000000000000000 R09: 0000000000000000
[   94.809121][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.809126][ T7358] R13: 00007f45d9fb6038 R14: 00007f45d9fb5fa0 R15: 00007ffe68309348
[   94.809134][ T7358]  </TASK>
[   94.809137][ T7358] 
[   94.915603][ T7358] Allocated by task 7358:
[   94.917096][ T7358]  kasan_save_track+0x3e/0x80
[   94.918692][ T7358]  __kasan_kmalloc+0x93/0xb0
[   94.920212][ T7358]  __kmalloc_cache_noprof+0x230/0x3d0
[   94.921929][ T7358]  rose_add_node+0x23a/0xde0
[   94.923387][ T7358]  rose_rt_ioctl+0xa48/0xfb0
[   94.924902][ T7358]  rose_ioctl+0x3ce/0x8b0
[   94.926388][ T7358]  sock_do_ioctl+0xdc/0x300
[   94.927809][ T7358]  sock_ioctl+0x576/0x790
[   94.929365][ T7358]  __se_sys_ioctl+0xfc/0x170
[   94.931099][ T7358]  do_syscall_64+0xfa/0x3b0
[   94.932735][ T7358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.934996][ T7358] 
[   94.935975][ T7358] Freed by task 7383:
[   94.937500][ T7358]  kasan_save_track+0x3e/0x80
[   94.939123][ T7358]  kasan_save_free_info+0x46/0x50
[   94.940726][ T7358]  __kasan_slab_free+0x5b/0x80
[   94.942485][ T7358]  kfree+0x18e/0x440
[   94.944076][ T7358]  rose_rt_device_down+0x473/0x4c0
[   94.946059][ T7358]  rose_device_event+0x603/0x6a0
[   94.948066][ T7358]  notifier_call_chain+0x1b6/0x3e0
[   94.950061][ T7358]  netif_close_many+0x29c/0x410
[   94.951934][ T7358]  netif_close+0x158/0x210
[   94.953662][ T7358]  dev_close+0x10a/0x220
[   94.955320][ T7358]  bpq_device_event+0x377/0x6a0
[   94.957007][ T7358]  notifier_call_chain+0x1b6/0x3e0
[   94.958552][ T7358]  netif_close_many+0x29c/0x410
[   94.960197][ T7358]  netif_close+0x158/0x210
[   94.961928][ T7358]  dev_close+0x10a/0x220
[   94.963546][ T7358]  bond_setup_by_slave+0x5f/0x3f0
[   94.965484][ T7358]  bond_enslave+0x7a0/0x3a20
[   94.967300][ T7358]  bond_do_ioctl+0x635/0x9b0
[   94.969080][ T7358]  bond_siocdevprivate+0x17e/0x350
[   94.971038][ T7358]  dev_ifsioc+0xb57/0xf00
[   94.972750][ T7358]  dev_ioctl+0x84c/0x1150
[   94.974263][ T7358]  sock_ioctl+0x719/0x790
[   94.975951][ T7358]  __se_sys_ioctl+0xfc/0x170
[   94.977701][ T7358]  do_syscall_64+0xfa/0x3b0
[   94.979401][ T7358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.981625][ T7358] 
[   94.982587][ T7358] The buggy address belongs to the object at ffff888123f97800
[   94.982587][ T7358]  which belongs to the cache kmalloc-512 of size 512
[   94.987792][ T7358] The buggy address is located 50 bytes inside of
[   94.987792][ T7358]  freed 512-byte region [ffff888123f97800, ffff888123f97a00)
[   94.992934][ T7358] 
[   94.993877][ T7358] The buggy address belongs to the physical page:
[   94.996377][ T7358] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123f94
[   94.999672][ T7358] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   95.002380][ T7358] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   95.005014][ T7358] page_type: f5(slab)
[   95.006511][ T7358] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   95.009257][ T7358] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   95.012468][ T7358] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   95.015698][ T7358] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   95.019100][ T7358] head: 057ff00000000002 ffffea00048fe501 00000000ffffffff 00000000ffffffff
[   95.022416][ T7358] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   95.025713][ T7358] page dumped because: kasan: bad access detected
[   95.028163][ T7358] page_owner tracks the page as allocated
[   95.030355][ T7358] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5849, tgid 5849 (syz-executor), ts 53630950181, free_ts 0
[   95.037320][ T7358]  post_alloc_hook+0x240/0x2a0
[   95.039152][ T7358]  get_page_from_freelist+0x21e4/0x22c0
[   95.041205][ T7358]  __alloc_frozen_pages_noprof+0x181/0x370
[   95.043406][ T7358]  alloc_pages_mpol+0x232/0x4a0
[   95.045324][ T7358]  allocate_slab+0x8a/0x370
[   95.047063][ T7358]  ___slab_alloc+0xbeb/0x1410
[   95.048840][ T7358]  __kmalloc_cache_noprof+0x296/0x3d0
[   95.050977][ T7358]  tipc_crypto_start+0x99/0x640
[   95.052687][ T7358]  tipc_init_net+0x213/0x330
[   95.054105][ T7358]  ops_init+0x35c/0x5c0
[   95.055635][ T7358]  setup_net+0x10c/0x320
[   95.057049][ T7358]  copy_net_ns+0x31b/0x4d0
[   95.058331][ T7358]  create_new_namespaces+0x3f3/0x720
[   95.059861][ T7358]  unshare_nsproxy_namespaces+0x11c/0x170
[   95.061507][ T7358]  ksys_unshare+0x4c8/0x8c0
[   95.063020][ T7358]  __x64_sys_unshare+0x38/0x50
[   95.064683][ T7358] page_owner free stack trace missing
[   95.066721][ T7358] 
[   95.067604][ T7358] Memory state around the buggy address:
[   95.069339][ T7358]  ffff888123f97700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.071772][ T7358]  ffff888123f97780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   95.074151][ T7358] >ffff888123f97800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.076621][ T7358]                                      ^
[   95.078770][ T7358]  ffff888123f97880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.081226][ T7358]  ffff888123f97900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.083811][ T7358] ==================================================================
[   95.090097][ T7358] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   95.092728][ T7358] CPU: 1 UID: 0 PID: 7358 Comm: syz.1.464 Not tainted syzkaller #0 PREEMPT(full) 
[   95.095999][ T7358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.099607][ T7358] Call Trace:
[   95.100823][ T7358]  <TASK>
[   95.101944][ T7358]  dump_stack_lvl+0x99/0x250
[   95.103569][ T7358]  ? __asan_memcpy+0x40/0x70
[   95.105285][ T7358]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.107237][ T7358]  ? __pfx__printk+0x10/0x10
[   95.109038][ T7358]  vpanic+0x281/0x750
[   95.110438][ T7358]  ? __pfx_print_hex_dump+0x10/0x10
[   95.112219][ T7358]  ? __pfx_vpanic+0x10/0x10
[   95.113723][ T7358]  ? preempt_schedule_common+0x83/0xd0
[   95.115854][ T7358]  ? preempt_schedule+0xae/0xc0
[   95.117685][ T7358]  panic+0xb9/0xc0
[   95.119121][ T7358]  ? __pfx_panic+0x10/0x10
[   95.120656][ T7358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.122687][ T7358]  ? rose_transmit_link+0x5c3/0x740
[   95.124474][ T7358]  check_panic_on_warn+0x89/0xb0
[   95.126328][ T7358]  ? rose_transmit_link+0x5c3/0x740
[   95.128274][ T7358]  end_report+0x78/0x160
[   95.129677][ T7358]  kasan_report+0x129/0x150
[   95.131320][ T7358]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   95.133252][ T7358]  ? rose_transmit_link+0x5c3/0x740
[   95.135061][ T7358]  rose_transmit_link+0x5c3/0x740
[   95.136963][ T7358]  ? skb_put+0x11b/0x210
[   95.138461][ T7358]  rose_write_internal+0x11dc/0x1ac0
[   95.140424][ T7358]  ? __pfx_rose_write_internal+0x10/0x10
[   95.142484][ T7358]  ? __timer_delete+0x5d/0x390
[   95.144094][ T7358]  rose_release+0x24e/0x520
[   95.145480][ T7358]  sock_close+0xc3/0x240
[   95.146890][ T7358]  ? __pfx_sock_close+0x10/0x10
[   95.148541][ T7358]  __fput+0x44c/0xa70
[   95.150038][ T7358]  task_work_run+0x1d4/0x260
[   95.151563][ T7358]  ? __pfx_task_work_run+0x10/0x10
[   95.153168][ T7358]  ? task_work_add+0x377/0x420
[   95.154680][ T7358]  ? __pfx_task_work_add+0x10/0x10
[   95.156497][ T7358]  get_signal+0x11ed/0x1340
[   95.158160][ T7358]  ? __might_fault+0xb0/0x130
[   95.159717][ T7358]  arch_do_signal_or_restart+0x9a/0x750
[   95.161457][ T7358]  ? __pfx___sys_connect+0x10/0x10
[   95.163076][ T7358]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   95.165161][ T7358]  ? rcu_is_watching+0x15/0xb0
[   95.166681][ T7358]  ? rcu_is_watching+0x15/0xb0
[   95.168365][ T7358]  exit_to_user_mode_loop+0x75/0x110
[   95.169976][ T7358]  do_syscall_64+0x2bd/0x3b0
[   95.171445][ T7358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.173659][ T7358]  ? exc_page_fault+0x9f/0xf0
[   95.175362][ T7358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.177252][ T7358] RIP: 0033:0x7f45d9d8ebe9
[   95.178645][ T7358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   95.184913][ T7358] RSP: 002b:00007f45dabb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   95.187445][ T7358] RAX: fffffffffffffe00 RBX: 00007f45d9fb5fa0 RCX: 00007f45d9d8ebe9
[   95.189808][ T7358] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000013
[   95.192458][ T7358] RBP: 00007f45d9e11e19 R08: 0000000000000000 R09: 0000000000000000
[   95.195285][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.198064][ T7358] R13: 00007f45d9fb6038 R14: 00007f45d9fb5fa0 R15: 00007ffe68309348
[   95.200604][ T7358]  </TASK>
[   95.202280][ T7358] Kernel Offset: disabled
[   95.204013][ T7358] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:14:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001239 RDI=000000000000123a RBP=00000000000003f8 RSP=ffffc90007b07210
R8 =ffff888107aa0237 R9 =1ffff11020f54046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd8f4 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f45dabb36c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd916f8ea8 CR3=000000002f8a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffff000000000000 ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff84fe9f01 RBX=dffffc0000000001 RCX=ffffffff84fe9f4c RDX=0000000000000001
RSI=0000000000000fe0 RDI=ffff88812458a220 RBP=0000000000000004 RSP=ffffc90007ae7cf8
R8 =ffff88812458b1ff R9 =1ffff110248b163f R10=dffffc0000000000 R11=ffffed10248b1448
R12=00000000000001f8 R13=0000000000000014 R14=0000000000000158 R15=0000000000000000
RIP=ffffffff8222fd7f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f64703ad108 CR3=000000010dbac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000000000ff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
