last executing test programs:

46.043963939s ago: executing program 2 (id=620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1b90000081810000"], 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) (async, rerun: 32)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1) (rerun: 32)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

45.890728864s ago: executing program 2 (id=623):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0505"], 0x9) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (async)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x14, r12, 0x200, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4015)

45.809385851s ago: executing program 2 (id=626):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'syztnl2\x00', <r0=>0x0, 0x7800, 0x7800, 0x8f, 0x400, {{0x10, 0x4, 0x0, 0x3a, 0x40, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x13, 0x85, [@multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @end, @timestamp={0x44, 0x14, 0x27, 0x0, 0x6, [0x40, 0x2, 0x5, 0x5]}, @noop]}}}}})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0xfffffff3, 0x9, 0x80, 0x1, 0x0, '\x00', r0, r1, 0x1, 0x3, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1a, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81f, 0x0, 0x0, 0x0, 0xbf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x400, 0x66, &(0x7f00000003c0)=""/102, 0x41000, 0x0, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000440)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000500)=[{0x0, 0x2, 0x9, 0x9}, {0x0, 0x3, 0xe, 0x5}, {0x5, 0x3, 0x3, 0xa}, {0x3, 0x4, 0xd, 0x9}, {0x0, 0x4, 0x3, 0x5}], 0x10, 0x3}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f0000000240), &(0x7f0000000640)=r4}, 0x20)
r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='cachefiles_rename\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4)
close(r6)
syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r8=>0x0})
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r7, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcec}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x20000088)
r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000009c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800)
connect$vsock_stream(r9, &(0x7f0000000a00)={0x28, 0x0, 0x0, @local}, 0x10) (async)
connect$vsock_stream(r9, &(0x7f0000000a00)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r5, 0x1)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async)
getsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000a40), &(0x7f0000000a80)=0x4)
r11 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000ac0))
getsockname$packet(r11, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff) (async)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r13, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xef}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c840}, 0x0)
nanosleep(&(0x7f0000000cc0)={0x0, 0x3938700}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000d00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000d00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r10, 0x8934, &(0x7f0000000d40)={'team0\x00'})
getsockname$packet(r11, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14) (async)
getsockname$packet(r11, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000dc0)=0x14)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xd}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xa7b1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWRULE={0x414, 0x6, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x54, 0x7, 0x1, 0x0, "42ab46f1fbb201d9f208476a99fb6d4a8d6d56370319ea85a2ee2aad3f8994195375bd799f65525b312c777d97161ca511fd9e060d52b7420ae54758f1096aea84f64bff9e8c2adf9196ce7079154241"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x394, 0x4, 0x0, 0x1, [{0x378, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x364, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb1011fbca990ea5b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xce, 0x1, "b200f552b2fe0830bec9fbcbe34a4f27f0103ef90b2f40ec31aec53167221c6bf2aed943183bb47e44ed11771d4bf3d094e09b63578b7ae142fdfb4b8ea3cc720edd4074d0c1cb4b9d3f315af79f0aa7b8ea2777ef52e0f3d3f72a1e8908afee82a47b14002ef8d04136496347e3a725e520ecf4da22ef94f49363f479bd5cf1787732947eaaaafae92658f15469250c2b5107883421243fa78fa2ea656d32dbd5818f67cc522370db1b70083ffeb8e4a9ca6a6783132dec77b023fd0f69d601f6a13dadd7df85087203"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "b0d18ca38572a4ecda2bb3"}, @NFTA_DATA_VALUE={0x98, 0x1, "9a007196fc9246f36cafa1ba5a4b78d78cef30e5692157b2ca94be5a853aa294306e90b544c137310afe727649dd5a6c12926a1c08723e89fa42fbefca8b8c5190d616a9a1ed02c7b8911a1898445f694f1019ac9dbaa219249f030ac5077a4f77211babb46fd9b57054ced2b403b5007445180e915dd6e8db6ea26562148fcb2d038a42f4cc05b237976baec93cd2e77ace2eb6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x102, 0x1, "f66293546e8d2f3e9cbc08aba4aa39d27148e11fdb914d935d1ae4f9048d77a7383406a992b3bacdc8d5e4205d98080325bf2b692509cbbdfada7ecb2d198cf86298a45269db5f1b7d0c189887b2a2a4439273bcf4719c565e1ee4e1394f53a64efec9324a8565cc3862a1e7a5f785f8cde83e94f7df4e422cf6fa3f3e00a8818006d246715b867d5ccd8c858b3958ef9edddbec5cc34f442a1b4f056b5e9bc2d3d8ed9bcfee1056a13f886015b7e3b0c5e71e1a003ad71f20f3221f5c27cc12552cc97f1a82ae0760600d9eee9a8046e6f43492b63c6c0845f5580ea386bc4366a9debeb7628e9eacf88feb0991c448ad0045434d169d3ec423346c64de"}]}, @NFTA_IMMEDIATE_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x31, 0x1, "b9e5da48c8507844361d73ad55455f9228acb6955d08d39c78432ba6be2b9edb41bafdde7b132545f345bfc4cc"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0xe0, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xd}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xa7b1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWRULE={0x414, 0x6, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x54, 0x7, 0x1, 0x0, "42ab46f1fbb201d9f208476a99fb6d4a8d6d56370319ea85a2ee2aad3f8994195375bd799f65525b312c777d97161ca511fd9e060d52b7420ae54758f1096aea84f64bff9e8c2adf9196ce7079154241"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x394, 0x4, 0x0, 0x1, [{0x378, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x364, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xb1011fbca990ea5b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xce, 0x1, "b200f552b2fe0830bec9fbcbe34a4f27f0103ef90b2f40ec31aec53167221c6bf2aed943183bb47e44ed11771d4bf3d094e09b63578b7ae142fdfb4b8ea3cc720edd4074d0c1cb4b9d3f315af79f0aa7b8ea2777ef52e0f3d3f72a1e8908afee82a47b14002ef8d04136496347e3a725e520ecf4da22ef94f49363f479bd5cf1787732947eaaaafae92658f15469250c2b5107883421243fa78fa2ea656d32dbd5818f67cc522370db1b70083ffeb8e4a9ca6a6783132dec77b023fd0f69d601f6a13dadd7df85087203"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xf, 0x1, "b0d18ca38572a4ecda2bb3"}, @NFTA_DATA_VALUE={0x98, 0x1, "9a007196fc9246f36cafa1ba5a4b78d78cef30e5692157b2ca94be5a853aa294306e90b544c137310afe727649dd5a6c12926a1c08723e89fa42fbefca8b8c5190d616a9a1ed02c7b8911a1898445f694f1019ac9dbaa219249f030ac5077a4f77211babb46fd9b57054ced2b403b5007445180e915dd6e8db6ea26562148fcb2d038a42f4cc05b237976baec93cd2e77ace2eb6"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}, @NFTA_IMMEDIATE_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x31, 0x1, "b9e5da48c8507844361d73ad55455f9228acb6955d08d39c78432ba6be2b9edb41bafdde7b132545f345bfc4cc"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5fc}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000001500)={0xd6a, 0x10, '\x00', 0x1, &(0x7f00000014c0)=[0x0, 0x0]}) (async)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000001500)={0xd6a, 0x10, '\x00', 0x1, &(0x7f00000014c0)=[0x0, 0x0]})

45.691758189s ago: executing program 1 (id=627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000028c0)={0x268, 0x0, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x3}, 0x7, 0x1, 0x7, 0x5, 0x12, 'syz0\x00', "6279bb41f3cfd2c10927ccb55dc9c03af9398bf21c6f71b0dc7cb46ecf2593e5", "13a5a6ce296ca502414adc45c8691de613446e9347e8ea3f7fbc6d9d428467bf", [{0xfffd, 0x0, {0x1, 0x3}}, {0x8, 0x6, {0x2, 0x6}}, {0x8, 0x7, {0x3, 0x4}}, {0x401, 0xcb82, {0x0, 0x101}}, {0x81, 0x2, {0x1, 0xa4}}, {0x1000, 0x73ff, {0x3, 0x6}}, {0x0, 0x3, {0x0, 0x6}}, {0x1, 0x8, {0x0, 0x8f}}, {0x8000, 0x9, {0x2, 0x7}}, {0x4, 0x0, {0x1, 0x7fff}}, {0xfffa, 0xc3, {0x1, 0xffffffff}}, {0x1e, 0x5, {0x2, 0x6}}, {0x3068, 0x84cb, {0x3, 0x7}}, {0x1, 0x1, {0x0, 0x10000}}, {0x8, 0x9, {0x0, 0x1}}, {0x80, 0xfffe, {0x0, 0x3}}, {0xe462, 0x1d, {0x2, 0x8}}, {0x0, 0x0, {0x2, 0x7}}, {0x9, 0x0, {0x3, 0x9}}, {0x584, 0x6, {0x0, 0xe1}}, {0x1, 0x800, {0x0, 0x8000000}}, {0x8, 0x3, {0x1, 0x7}}, {0x8, 0x9e, {0x0, 0xc}}, {0x3, 0x3ff, {0x3, 0xffffffff}}, {0x4, 0x380, {0x1, 0xfffffffd}}, {0x81, 0x10, {0x0, 0xfffffffc}}, {0x2, 0x34, {0x1, 0x9}}, {0x81, 0x5, {0x3, 0x20000000}}, {0x2, 0x5, {0x3, 0x2}}, {0x5, 0x3, {0x1, 0x1ff}}, {0xfffe, 0x105, {0x1, 0x8000}}, {0x8001, 0x22fe, {0x0, 0x3}}, {0x5c4, 0x3, {0x1, 0x3}}, {0x7f21, 0x0, {0x1, 0x2}}, {0x8000, 0x6, {0x1, 0x7}}, {0x0, 0x2f4, {0x2}}, {0x3, 0xfc40, {0x0, 0xd61}}, {0x3, 0x8000, {0x0, 0xe}}, {0x2, 0x3, {0x3, 0x9}}, {0xc, 0x1, {0x2, 0xeb5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400"], 0xfc}}, 0x0)

45.682699065s ago: executing program 2 (id=628):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
unshare(0x24020400)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90)
r3 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10})
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r4 = accept(r1, 0x0, &(0x7f0000000180))
bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @mcast1, 0x7f4}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0]}, &(0x7f0000000280)=0x20)
getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r5, 0x94a}, &(0x7f0000000300)=0x8)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r7, 0x11a, 0x3, &(0x7f0000000700), 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r7, 0xe7219000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6}, 0x94)

45.580002403s ago: executing program 0 (id=629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
listen(r1, 0xfffffffc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x90)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200ebee91655bdb084a660be180000008001b0000000000cca1efbc6e8a17e0179513cd9ee8f80d6358d22f2ecad90e52a7a917a4c3338feb210d3c2912f9e60e9ff5f55614e2961561cf05215f448d223a6a87ae32d04694d30370d76a1bffd15f96f4cc9635cff4af281b42a74530392732b3238400eb6cc5e85f3483c4c76caecef24d52423ff6e1b89d637be2fc92aad4a7dad0e32834356485aab41c61adcf00e3788dc2cb089157196ed1e958d7d578361513fa24e0369c4161db91bf26870e9b6332877879d0925ac40a5e07d1658c6e535f9b093b2be22053ae4b2ef78d1de32b3c0e83682ac52dc93a898b591d9f43eb6a8f6a92ae623fd9f5484c42d0c5f9962c68cb2825f09532fd2660845a"], 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x10) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x10)
socket(0x200000000000011, 0x2, 0x0) (async)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r8 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async)
bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) (async)
connect$l2tp6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20)
getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000140))
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/68, 0xffffffde}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x8, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000440)}, {&(0x7f0000000ac0)=""/166, 0xa6}, {&(0x7f0000000000)=""/173, 0xad}, {0x0}, {&(0x7f0000000d40)=""/236, 0xec}], 0x5}, 0x1}], 0x2, 0x40012020, 0x0)
r11 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r11, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)

45.553087878s ago: executing program 1 (id=630):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x28, 0x0, 0x1}, 0x28)

45.357622063s ago: executing program 1 (id=631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000002c0))
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6611713cc5"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00052dbd7000ffdbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0400a89e04000501f119e3f8b87d9404004e0008007e000100000500a300"/47], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

45.355331713s ago: executing program 0 (id=632):
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, @null, @netrom={'nr', 0x0}, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket(0x22, 0x2, 0x4) (async)
r1 = socket(0x22, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r2 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r2, &(0x7f0000003100)=@id, 0x10) (async)
connect$tipc(r2, &(0x7f0000003100)=@id, 0x10)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xb2, "0109e01ae92debdb76666ed4356b350fb4b054cb9fe1779ea318e0283dc2fefe3829239427ddabdd5f020561bac3504a72bc2c1e6c280be2ebac0c407bbca03c52e7ed32ffd87ca68021bbce0b2b6c8e533ccf9342ceb864d44b47904af525dfb471c3db5031a53a694abd2199df8652a344788872ed72476b0d4b07a1228aa5c9db5fe188e05888f37ab6c406c75690144fb3527cdbbda7c0f5c4ba78d51803f4387e60e9998811eeb7bb6f32ec74cdba33"}, &(0x7f0000000200)=0xba) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={<r3=>0x0, 0xb2, "0109e01ae92debdb76666ed4356b350fb4b054cb9fe1779ea318e0283dc2fefe3829239427ddabdd5f020561bac3504a72bc2c1e6c280be2ebac0c407bbca03c52e7ed32ffd87ca68021bbce0b2b6c8e533ccf9342ceb864d44b47904af525dfb471c3db5031a53a694abd2199df8652a344788872ed72476b0d4b07a1228aa5c9db5fe188e05888f37ab6c406c75690144fb3527cdbbda7c0f5c4ba78d51803f4387e60e9998811eeb7bb6f32ec74cdba33"}, &(0x7f0000000200)=0xba)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x5e, "9a3f02ec1f4e551103891b2b54bea9f80cc2811d6ab557d41ec600dcd9f31f2f6649ba511e68a1d5e38eb619ab14d68a966bac190699b5c5b34908080f7f84f7828f6b889a8dbbb76393261d24a464287601ffb05e8188e1dc358e443e52"}, &(0x7f00000010c0)=0x66)
syz_emit_ethernet(0x72, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x3c, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000005e00010004000000fcdbdf250c00000001000000000000800800018004000280"], 0x24}], 0x1}, 0x0)
bind$bt_hci(r1, &(0x7f0000001200)={0x1f, 0x3}, 0x6)
bind$qrtr(r1, &(0x7f0000001100)={0x2a, 0x3, 0xfffffffe}, 0xc)
accept4(r2, &(0x7f0000001140)=@pptp, &(0x7f00000011c0)=0x80, 0x80800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006100000054000100000000009500000000000000"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="60000000100039042bbd70000040000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b00010067726574417000003000028008000400c05d3ce00500090000000000060003000800000008000500060000000400120005000a0000000000"], 0x60}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
socket$xdp(0x2c, 0x3, 0x0) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000280)=0x24010, 0x4) (async)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000280)=0x24010, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYRES8=r6], 0x50}}, 0x48821)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)

45.149735986s ago: executing program 1 (id=633):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000940)={'ip_vti0\x00', <r0=>0x0, 0x700, 0x7f00, 0xd65, 0x5, {{0x33, 0x4, 0x3, 0x26, 0xcc, 0xe7, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x44, 0x52, 0x1, 0x7, [{@remote, 0x3}, {@empty, 0x4}, {@remote, 0x3}, {@remote, 0x200}, {@local, 0x61}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x6}, {@broadcast, 0xd59}]}, @timestamp_prespec={0x44, 0x4c, 0x90, 0x3, 0xa, [{@multicast2, 0x10001}, {@broadcast, 0x1000}, {@rand_addr=0x64010100, 0x80000001}, {@remote, 0x80000000}, {@multicast2, 0x14c}, {@local, 0x9}, {@rand_addr=0x64010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@loopback}]}, @noop, @lsrr={0x83, 0x1b, 0xc6, [@broadcast, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010100]}, @generic={0x86, 0xb, "ab4651217b8f9ac310"}]}}}}})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x4}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r2=>0x0, 0x4, 0x8, 0x2, 0x5f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x700, 0x1, 0xeb12}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24008041)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8, 0x9, 0x1, 0x24002, r1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='21\x00\x00\x00\x00\x00\x00@\x00'], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0xcf, &(0x7f00000001c0)=""/207, 0x40f00, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000440)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r1, r1, r1, r1, r1, r1, r1, r7, r1], &(0x7f0000000580)=[{0x5, 0x5, 0x7, 0x3}, {0x5, 0x3, 0x9, 0xb}, {0x0, 0x5, 0x8, 0x9}, {0x2, 0x4, 0x5, 0x7}], 0x10, 0x10}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, 0x0)
close(r9)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000001f00)=0x2)
r13 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r13, 0x6, 0xd, &(0x7f0000000040), 0x3)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x30, 0x0, 0x1, 0xa00, 0x2000, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
close(r14)
sendmsg$inet(r13, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)

45.041885559s ago: executing program 0 (id=634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x1d, 0x3, 0x1)
socket(0x31, 0x800, 0x800)
setsockopt$inet_mreqsrc(r4, 0x0, 0x6e4ec31f63395e91, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x1, &(0x7f0000000180)=0x9, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x20004001)

44.959243412s ago: executing program 0 (id=635):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r7, 0x84, 0x82, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
clock_gettime(0x0, &(0x7f0000000040)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000000)=[{r3, 0x3078}, {r3}, {r0, 0x8000}, {r3, 0x88}, {r0, 0x4352}, {r3}, {r3, 0x2408}], 0x7, &(0x7f0000000100)={r8, r9+10000000}, &(0x7f0000000180)={[0x1000]}, 0x8)

44.93222986s ago: executing program 2 (id=636):
r0 = socket(0x1, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r4, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, 0x0, 0x0)
close(0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r8, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8042}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={0x0}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0)

43.756730718s ago: executing program 0 (id=637):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="1a6210195617d2e0153e738dab34038292cbda414fcb90f8a82764ce40fcb4ac4f847ab59cdd045600e8c5a00335ec2ffa4b7066b35beeb48c7d5f9ecda1d394741c2a0b20f49b62602a21919f1cf21bcf8bfdcb566749f85a19bb9cd6e7c0b6a473f334f0a6cf5a76cf99160de91fc2051633bb172887bb7739", @ANYRES16=r0, @ANYRES8=r1, @ANYRESHEX], 0x32600) (async)
write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB="1a6210195617d2e0153e738dab34038292cbda414fcb90f8a82764ce40fcb4ac4f847ab59cdd045600e8c5a00335ec2ffa4b7066b35beeb48c7d5f9ecda1d394741c2a0b20f49b62602a21919f1cf21bcf8bfdcb566749f85a19bb9cd6e7c0b6a473f334f0a6cf5a76cf99160de91fc2051633bb172887bb7739", @ANYRES16=r0, @ANYRES8=r1, @ANYRESHEX], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendto$inet(r0, &(0x7f00000002c0)='v', 0x1, 0x400c014, 0x0, 0x0) (async)
sendto$inet(r0, &(0x7f00000002c0)='v', 0x1, 0x400c014, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000320000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r5, 0x9, 0x1, 0x7fff}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={<r6=>r5, 0x9, 0x1, 0x7fff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x82)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, 0x0, 0x880)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000ceda61bc1b", @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf251400000008001c00", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="0800010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001e008d2a2abd", @ANYRES32=0x0, @ANYBLOB="0000000014"], 0x30}}, 0x40000c0)

43.388288748s ago: executing program 1 (id=638):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x2, 0x4, 0x5}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

39.65675902s ago: executing program 1 (id=639):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000640), &(0x7f0000000200)=0x68)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffe, @private1, 0xb}, 0x1c)
r9 = socket$igmp(0x2, 0x3, 0x2)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffd0c, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0xc, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000e0601030000000000000000000000000900020073797a310000000005000100070038001c0007800c00018008000140ffffffff0c000280080001407f040001e06eeb1f27fca3f5e9a3e4ae216ada5e31d21f2661377094e57256dd9f1d6bd0c9582f60fff9592e2bfdde0b64e42a7d976a95b2142d38052630fe4a02997d741f155896fdf69a2a75595d0b040357364b8467209a54504e470d34f4939f24bf20e0782486ba7f08137ce1418ef59cd568bcc5eca727a4e1083e85c9ddc664000000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="89000000120081ae08060cdc030000e27e1be3f74002000000e2ffca1b1f000a000004c00e72f7e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007682800029bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff3a01f8", 0x79}], 0x1}, 0x24000082)

35.556601804s ago: executing program 0 (id=640):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
getgid()
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x3, [{0x3, 0x6}, {0xf, 0xffff, 0x9}]}, @union={0x4, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xa, 0x2, 0x6}]}, @var={0x7, 0x0, 0x0, 0xe, 0x6, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000500)=""/218, 0x75, 0xda, 0x0, 0x3}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000180)="65f1f25712ca", 0x0}, 0x20)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r9, 0x7ca8e000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@tail_call, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1}, @alu={0x4, 0x1, 0xb, 0x5, 0x6, 0xfffffffffffffff8, 0x4}, @generic={0x57, 0x3, 0xa, 0x784}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x83}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0xfffffffffffffffe, 0x3, 0xda, &(0x7f0000000400)=""/218, 0x41000, 0x10, '\x00', r2, @fallback=0x12, r3, 0x8, &(0x7f0000000640)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xe, 0x10000, 0x100}, 0x10, 0xffffffffffffffff, r5, 0x7, &(0x7f00000007c0)=[r6, r7, r8, r9, r10], &(0x7f0000000800)=[{0x4, 0x4, 0x3, 0x9}, {0x4, 0x3, 0x7, 0xc}, {0x1, 0x1, 0x4, 0xa}, {0x0, 0x5, 0xa, 0x3}, {0x1, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x3, 0x9}, {0x5, 0x2, 0x2, 0xa}]}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r12, &(0x7f0000000080)="da484c", 0x3, 0x200000d4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

34.948130179s ago: executing program 2 (id=641):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="28f7ff001200010254437000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080400000000020008002e0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async)
syz_emit_ethernet(0x15f2, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=<r2=>r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESOCT=r0], 0x32600)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="040000002000"/22], 0x1c}}, 0x41)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x13, 0x9, &(0x7f0000001b40)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="000000000000001066080000feffffff18000000000000004000000000000000960a0200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe58}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50000000de49ce6a7efce05cdf387fc824fe06ff452b7bc17970aee67c11763808de40aad98b0d708d0b1430d3a7317f8a6541916d1a5f33fd6b823aeebf260330cb14d99a6f4668fc6c8ca513aa2705f412a322bd1d2586a219bb946fba3a22a373", @ANYBLOB="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", @ANYBLOB="000126bd7030aafa3ae56c82840008001800e000000105000d0001000000050014006e0000000c001600000000000000000008000c000100000008000a00010000000600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
socket(0xa, 0x801, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
socket(0x2a, 0x2, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r9=>0x0}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0600000000000000003000000008000200", @ANYRES32=r9, @ANYBLOB="05003f1b071ec95837aea630c75813c43500079fa55aeb97a21ca61beb80d2"], 0x2c}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffff01}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
write$bt_hci(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="5100110002b5eb3e37e0d14c6edceb838a3dd85c0e4f"], 0x8)

23.766560084s ago: executing program 32 (id=639):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014004000000001006261746164760000040002800c001a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000640), &(0x7f0000000200)=0x68)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffe, @private1, 0xb}, 0x1c)
r9 = socket$igmp(0x2, 0x3, 0x2)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffd0c, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0xc, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000e0601030000000000000000000000000900020073797a310000000005000100070038001c0007800c00018008000140ffffffff0c000280080001407f040001e06eeb1f27fca3f5e9a3e4ae216ada5e31d21f2661377094e57256dd9f1d6bd0c9582f60fff9592e2bfdde0b64e42a7d976a95b2142d38052630fe4a02997d741f155896fdf69a2a75595d0b040357364b8467209a54504e470d34f4939f24bf20e0782486ba7f08137ce1418ef59cd568bcc5eca727a4e1083e85c9ddc664000000"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000940)="89000000120081ae08060cdc030000e27e1be3f74002000000e2ffca1b1f000a000004c00e72f7e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007682800029bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff3a01f8", 0x79}], 0x1}, 0x24000082)

8.683870326s ago: executing program 33 (id=640):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
getgid()
gettid()
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x3, [{0x3, 0x6}, {0xf, 0xffff, 0x9}]}, @union={0x4, 0x1, 0x0, 0x5, 0x1, 0x5, [{0xa, 0x2, 0x6}]}, @var={0x7, 0x0, 0x0, 0xe, 0x6, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000500)=""/218, 0x75, 0xda, 0x0, 0x3}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r6, &(0x7f0000000180)="65f1f25712ca", 0x0}, 0x20)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, <r8=>0xffffffffffffffff}, 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r9, 0x7ca8e000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x1d, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@tail_call, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x1}, @alu={0x4, 0x1, 0xb, 0x5, 0x6, 0xfffffffffffffff8, 0x4}, @generic={0x57, 0x3, 0xa, 0x784}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x83}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0xfffffffffffffffe, 0x3, 0xda, &(0x7f0000000400)=""/218, 0x41000, 0x10, '\x00', r2, @fallback=0x12, r3, 0x8, &(0x7f0000000640)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xe, 0x10000, 0x100}, 0x10, 0xffffffffffffffff, r5, 0x7, &(0x7f00000007c0)=[r6, r7, r8, r9, r10], &(0x7f0000000800)=[{0x4, 0x4, 0x3, 0x9}, {0x4, 0x3, 0x7, 0xc}, {0x1, 0x1, 0x4, 0xa}, {0x0, 0x5, 0xa, 0x3}, {0x1, 0x3, 0x8, 0xb}, {0x3, 0x4, 0x3, 0x9}, {0x5, 0x2, 0x2, 0xa}]}, 0x94)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r12, &(0x7f0000000080)="da484c", 0x3, 0x200000d4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 34 (id=641):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="28f7ff001200010254437000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080400000000020008002e0002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async)
syz_emit_ethernet(0x15f2, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=<r2=>r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESOCT=r0], 0x32600)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="040000002000"/22], 0x1c}}, 0x41)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x13, 0x9, &(0x7f0000001b40)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYBLOB="000000000000001066080000feffffff18000000000000004000000000000000960a0200000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe58}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="50000000de49ce6a7efce05cdf387fc824fe06ff452b7bc17970aee67c11763808de40aad98b0d708d0b1430d3a7317f8a6541916d1a5f33fd6b823aeebf260330cb14d99a6f4668fc6c8ca513aa2705f412a322bd1d2586a219bb946fba3a22a373", @ANYBLOB="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", @ANYBLOB="000126bd7030aafa3ae56c82840008001800e000000105000d0001000000050014006e0000000c001600000000000000000008000c000100000008000a00010000000600020001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
socket(0xa, 0x801, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
socket(0x2a, 0x2, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r7) (async)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r9=>0x0}) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b0600000000000000003000000008000200", @ANYRES32=r9, @ANYBLOB="05003f1b071ec95837aea630c75813c43500079fa55aeb97a21ca61beb80d2"], 0x2c}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffff01}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4009, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
write$bt_hci(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="5100110002b5eb3e37e0d14c6edceb838a3dd85c0e4f"], 0x8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29882' (ED25519) to the list of known hosts.
syzkaller login: [   50.307073][ T5759] cgroup: Unknown subsys name 'net'
[   50.397314][ T5759] cgroup: Unknown subsys name 'cpuset'
[   50.407471][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   52.242122][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.227934][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.232561][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.236440][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.241476][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   57.245671][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   57.257104][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   57.295093][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   57.299138][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   57.303457][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   57.311192][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   57.350813][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   57.354581][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   57.357570][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   57.360916][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   57.365685][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   57.678390][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   57.743070][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   57.755759][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   57.843842][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.847161][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.849551][ T5829] bridge_slave_0: entered allmulticast mode
[   57.853938][ T5829] bridge_slave_0: entered promiscuous mode
[   57.864612][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.866919][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.869518][ T5829] bridge_slave_1: entered allmulticast mode
[   57.872784][ T5829] bridge_slave_1: entered promiscuous mode
[   57.946605][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.963806][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.966664][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.969467][ T5833] bridge_slave_0: entered allmulticast mode
[   57.973678][ T5833] bridge_slave_0: entered promiscuous mode
[   57.978092][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.981930][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.984648][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.986951][ T5837] bridge_slave_0: entered allmulticast mode
[   57.989703][ T5837] bridge_slave_0: entered promiscuous mode
[   57.994550][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.997369][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.000470][ T5837] bridge_slave_1: entered allmulticast mode
[   58.004838][ T5837] bridge_slave_1: entered promiscuous mode
[   58.007981][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.010772][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.013798][ T5833] bridge_slave_1: entered allmulticast mode
[   58.017676][ T5833] bridge_slave_1: entered promiscuous mode
[   58.076236][ T5829] team0: Port device team_slave_0 added
[   58.080294][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.094010][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.100706][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.104901][ T5829] team0: Port device team_slave_1 added
[   58.120537][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.163275][ T5837] team0: Port device team_slave_0 added
[   58.166775][ T5837] team0: Port device team_slave_1 added
[   58.189568][ T5833] team0: Port device team_slave_0 added
[   58.205653][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.207863][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.217497][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.222886][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.225148][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.233797][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.240124][ T5833] team0: Port device team_slave_1 added
[   58.245686][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.248437][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.258797][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.265856][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.267944][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.276679][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.325343][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.328122][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.338120][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.386331][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.389002][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.399434][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.429926][ T5837] hsr_slave_0: entered promiscuous mode
[   58.434531][ T5837] hsr_slave_1: entered promiscuous mode
[   58.459166][ T5829] hsr_slave_0: entered promiscuous mode
[   58.462868][ T5829] hsr_slave_1: entered promiscuous mode
[   58.465687][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.468873][ T5829] Cannot create hsr debugfs directory
[   58.516371][ T5833] hsr_slave_0: entered promiscuous mode
[   58.519402][ T5833] hsr_slave_1: entered promiscuous mode
[   58.522184][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.524770][ T5833] Cannot create hsr debugfs directory
[   58.869612][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.879957][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.886830][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.893355][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.966378][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.973135][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.983973][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.000441][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.055337][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.068340][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.085195][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.089834][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.123261][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.164916][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   59.187093][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.189373][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.195681][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.198116][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.246569][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.263162][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   59.274635][ T5835] Bluetooth: hci0: command tx timeout
[   59.294067][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.296667][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.314608][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.317205][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.330376][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.352438][ T5835] Bluetooth: hci1: command tx timeout
[   59.368668][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   59.384099][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.386352][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.402437][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.404785][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.431386][ T5835] Bluetooth: hci2: command tx timeout
[   59.499471][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.534325][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.554864][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.621450][ T5829] veth0_vlan: entered promiscuous mode
[   59.645496][ T5829] veth1_vlan: entered promiscuous mode
[   59.657733][ T5837] veth0_vlan: entered promiscuous mode
[   59.688412][ T5837] veth1_vlan: entered promiscuous mode
[   59.710345][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.734986][ T5829] veth0_macvtap: entered promiscuous mode
[   59.748996][ T5829] veth1_macvtap: entered promiscuous mode
[   59.776476][ T5837] veth0_macvtap: entered promiscuous mode
[   59.788608][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.797779][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.814718][ T5837] veth1_macvtap: entered promiscuous mode
[   59.825470][ T5833] veth0_vlan: entered promiscuous mode
[   59.831968][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.835542][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.838967][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.843488][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.855591][ T5833] veth1_vlan: entered promiscuous mode
[   59.868670][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.886446][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.907673][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.910563][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.914487][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.917160][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.947130][ T5833] veth0_macvtap: entered promiscuous mode
[   59.953010][ T5833] veth1_macvtap: entered promiscuous mode
[   60.003875][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.010071][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.016010][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.018993][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.022254][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.025501][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.028580][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.032888][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.118301][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.126177][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.155949][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.158691][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.186692][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.189325][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.239093][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.242792][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.250532][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.271485][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.275432][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.426706][ T5904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.431551][ T5902] Zero length message leads to an empty skb
[   60.713605][ T5900] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   60.727908][ T5933] sch_tbf: peakrate 1 is lower than or equals to rate 5 !
[   60.733207][ T5900] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   60.752624][ T5900] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.839906][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   60.942510][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   61.352698][ T5835] Bluetooth: hci0: command tx timeout
[   61.410570][ T5963] netlink: 'syz.2.15': attribute type 58 has an invalid length.
[   61.414317][ T5963] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15'.
[   61.441478][ T5835] Bluetooth: hci1: command tx timeout
[   61.512071][ T5835] Bluetooth: hci2: command tx timeout
[   61.625761][ T5967] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   61.734853][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   61.749078][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'.
[   62.509350][ T5997] netlink: 'syz.1.25': attribute type 7 has an invalid length.
[   62.559564][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.758091][ T6018] xt_NFQUEUE: number of total queues is 0
[   62.812274][ T6025] tipc: Started in network mode
[   62.814657][ T6025] tipc: Node identity c637d5f7cec1, cluster identity 4711
[   62.817906][ T6025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.823957][ T6025] syzkaller0: entered promiscuous mode
[   62.826164][ T6025] syzkaller0: entered allmulticast mode
[   62.837313][ T6024] tipc: Resetting bearer <eth:syzkaller0>
[   62.867132][ T6024] tipc: Disabling bearer <eth:syzkaller0>
[   62.989480][ T6033] warning: `syz.1.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.039470][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.058393][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.069850][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.077418][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.086771][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.090012][ T6037] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   63.120470][ T6042] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   63.212047][ T6046] vlan0: entered promiscuous mode
[   63.256778][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'.
[   63.267759][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'.
[   63.431160][ T5835] Bluetooth: hci0: command tx timeout
[   63.511446][ T5835] Bluetooth: hci1: command tx timeout
[   63.602794][ T5835] Bluetooth: hci2: command tx timeout
[   63.652186][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   63.712613][ T6068] vlan2: entered allmulticast mode
[   63.714294][ T6068] team_slave_1: entered allmulticast mode
[   64.155727][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.52'.
[   64.715891][ T6103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.899638][ T6112] netlink: 88 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.998023][ T6103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.104888][ T6103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.192888][ T6103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.265767][ T6103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.274909][ T6103] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.282738][ T6103] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.290888][ T6103] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.513776][ T5835] Bluetooth: hci0: command tx timeout
[   65.591744][ T5835] Bluetooth: hci1: command tx timeout
[   65.672714][ T5835] Bluetooth: hci2: command tx timeout
[   65.787443][ T6148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.789867][ T6148] syzkaller0: entered promiscuous mode
[   65.792557][ T6148] syzkaller0: entered allmulticast mode
[   65.803618][ T6150] validate_nla: 3 callbacks suppressed
[   65.803651][ T6150] netlink: 'syz.2.67': attribute type 1 has an invalid length.
[   65.817740][ T6148] syzkaller0: mtu less than device minimum
[   65.821354][ T6147] tipc: Resetting bearer <eth:syzkaller0>
[   65.831913][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[   65.859338][ T6150] gretap1: entered promiscuous mode
[   66.045857][ T6164] __nla_validate_parse: 1 callbacks suppressed
[   66.045873][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'.
[   66.059132][ T6164] netlink: 36 bytes leftover after parsing attributes in process `syz.2.71'.
[   66.545671][ T6177] netlink: 'syz.2.74': attribute type 83 has an invalid length.
[   66.669596][ T6177] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.74'.
[   66.675653][ T6177] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   66.847362][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.851547][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.955985][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.966256][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.059257][ T6183] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.062984][ T6183] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.066581][ T6183] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.070062][ T6183] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.197520][ T6193] netlink: 288 bytes leftover after parsing attributes in process `syz.2.79'.
[   67.317555][ T6199] pimreg: entered allmulticast mode
[   67.341238][ T6198] block nbd0: server does not support multiple connections per device.
[   67.349458][ T6198] block nbd0: shutting down sockets
[   67.541825][ T6215] netlink: 'syz.2.86': attribute type 1 has an invalid length.
[   67.855699][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.90'.
[   68.090859][ T6254] sctp: [Deprecated]: syz.2.96 (pid 6254) Use of int in max_burst socket option.
[   68.090859][ T6254] Use struct sctp_assoc_value instead
[   68.110895][ T6250] syz_tun: entered promiscuous mode
[   68.115940][ T6250] batadv_slave_0: entered promiscuous mode
[   68.118891][ T6250] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   68.123689][ T6250] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   68.127894][ T6250] hsr1: entered allmulticast mode
[   68.130004][ T6250] syz_tun: entered allmulticast mode
[   68.134590][ T6250] batadv_slave_0: entered allmulticast mode
[   68.217280][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.98'.
[   68.292282][ T6259] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.99'.
[   68.544683][ T6277] netlink: 106564 bytes leftover after parsing attributes in process `syz.0.103'.
[   68.795142][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.113'.
[   68.814423][ T6301] netlink: 'syz.0.112': attribute type 32 has an invalid length.
[   68.817574][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   68.830910][ T6301] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   69.711330][ T6341] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   69.970194][ T6357] tipc: Started in network mode
[   69.975230][ T6357] tipc: Node identity da8c8af2798f, cluster identity 4711
[   69.977420][ T6357] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   70.006256][ T6357] tipc: Resetting bearer <eth:syzkaller0>
[   70.018899][ T6361] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   70.035400][ T6357] syzkaller1: entered promiscuous mode
[   70.038055][ T6357] syzkaller1: entered allmulticast mode
[   70.193115][ T6356] tipc: Resetting bearer <eth:syzkaller0>
[   70.957921][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.960556][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.042129][  T971] tipc: Node number set to 2734918386
[   71.098099][ T6356] tipc: Disabling bearer <eth:syzkaller0>
[   71.115442][ T6385] erspan0: entered allmulticast mode
[   71.137686][ T6383] veth3: entered promiscuous mode
[   71.227239][ T6391] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   71.431396][ T6404] __nla_validate_parse: 5 callbacks suppressed
[   71.431413][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[   71.481540][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[   71.695071][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   71.700122][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   71.704441][ T6423] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   71.824903][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.158'.
[   71.912899][ T6442] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'.
[   71.919672][ T6437] netlink: 60 bytes leftover after parsing attributes in process `syz.1.159'.
[   71.949396][ T6445] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   72.007796][ T6450] IPv6: Can't replace route, no match found
[   72.020359][ T6451] IPVS: Error connecting to the multicast addr
[   72.053131][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   72.252294][ T6470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'.
[   72.397742][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.171'.
[   72.644173][ T6493] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   72.851241][ T6502] netlink: 'syz.2.179': attribute type 30 has an invalid length.
[   72.865717][ T6502] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.869176][ T6502] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.873984][ T6502] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.877160][ T6502] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.894445][ T6502] netlink: 'syz.2.179': attribute type 30 has an invalid length.
[   73.260169][ T6519] SET target dimension over the limit!
[   73.399117][ T6522] syzkaller1: entered promiscuous mode
[   73.401768][ T6522] syzkaller1: entered allmulticast mode
[   74.528528][ T6566] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 53247 - 0
[   74.532510][ T6566] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 53247 - 0
[   74.536840][ T6566] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 53247 - 0
[   74.540468][ T6566] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 53247 - 0
[   74.545750][ T6566] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 54527 - 0
[   74.549277][ T6566] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 54527 - 0
[   74.555274][ T6566] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 54527 - 0
[   74.560053][ T6566] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 54527 - 0
[   74.570386][ T6566] geneve2: entered promiscuous mode
[   74.577488][ T6566] geneve2: entered allmulticast mode
[   75.250285][ T6614] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   75.250577][ T5700] bond0: (slave bond_slave_0): interface is now down
[   75.270180][ T5700] bond0: (slave bond_slave_1): interface is now down
[   75.273744][ T5700] bond0: (slave wlan1): interface is now down
[   75.286305][ T5700] bond0: now running without any active interface!
[   75.663367][ T6648] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   75.666963][ T6648] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   76.045712][ T6666] netlink: 'syz.1.217': attribute type 10 has an invalid length.
[   76.048232][ T6666] bridge0: port 3(team0) entered blocking state
[   76.050679][ T6666] bridge0: port 3(team0) entered disabled state
[   76.053760][ T6666] team0: entered allmulticast mode
[   76.055307][ T6666] team_slave_0: entered allmulticast mode
[   76.057587][ T6666] team_slave_1: entered allmulticast mode
[   76.060877][ T6666] team0: entered promiscuous mode
[   76.063932][ T6666] team_slave_0: entered promiscuous mode
[   76.065797][ T6666] team_slave_1: entered promiscuous mode
[   76.068586][ T6666] bridge0: port 3(team0) entered blocking state
[   76.071085][ T6666] bridge0: port 3(team0) entered forwarding state
[   76.212570][ T6674] xt_CT: You must specify a L4 protocol and not use inversions on it
[   76.317317][ T6689] sctp: [Deprecated]: syz.1.224 (pid 6689) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.317317][ T6689] Use struct sctp_sack_info instead
[   76.857105][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.000804][ T6739] __nla_validate_parse: 26 callbacks suppressed
[   77.000816][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'.
[   77.025913][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.237'.
[   77.075407][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'.
[   77.223070][ T6747] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.240'.
[   77.380007][ T6755] SET target dimension over the limit!
[   77.397460][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'.
[   77.440491][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[   77.451142][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   77.455066][ T6759] netlink: 'syz.0.245': attribute type 1 has an invalid length.
[   77.471679][ T6759] netlink: 10 bytes leftover after parsing attributes in process `syz.0.245'.
[   77.492460][ T6762] netlink: 'syz.0.245': attribute type 5 has an invalid length.
[   77.495345][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   77.511943][ T6759] nbd: socks must be embedded in a SOCK_ITEM attr
[   77.519056][ T6759] block nbd0: shutting down sockets
[   77.528474][ T6762] bridge1: entered promiscuous mode
[   77.530524][ T6762] bridge1: entered allmulticast mode
[   77.547682][ T6761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.600132][ T6768] x9: renamed from bridge_slave_0 (while UP)
[   77.731136][ T6774] netdevsim netdevsim0: Direct firmware load for .
[   77.731136][ T6774]  failed with error -2
[   77.735405][ T6774] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   77.735405][ T6774] 
[   77.843961][ T6791] ip6gre1: entered promiscuous mode
[   78.144025][ T6810] netlink: 72 bytes leftover after parsing attributes in process `syz.1.258'.
[   78.323569][ T6816] netlink: 'syz.1.260': attribute type 11 has an invalid length.
[   78.533228][ T6822] sctp: [Deprecated]: syz.1.262 (pid 6822) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.533228][ T6822] Use struct sctp_sack_info instead
[   78.594924][ T6827] openvswitch: netlink: Missing key (keys=40, expected=80)
[   78.804558][ T6845] SET target dimension over the limit!
[   78.926263][ T6859] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[   78.946761][ T6858] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.315414][ T6875] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.360279][ T6877] C: renamed from team_slave_0 (while UP)
[   79.366654][ T6877] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   79.370200][ T6877] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   79.375964][ T6878] netlink: 'syz.0.281': attribute type 1 has an invalid length.
[   79.379268][ T6878] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   79.431244][ T6880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.539690][ T6884] xt_hashlimit: size too large, truncated to 1048576
[   81.129842][ T6942] sctp: [Deprecated]: syz.1.299 (pid 6942) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.129842][ T6942] Use struct sctp_sack_info instead
[   81.202694][    T9] cfg80211: failed to load regulatory.db
[   82.146070][ T6958] __nla_validate_parse: 9 callbacks suppressed
[   82.146087][ T6958] netlink: 76 bytes leftover after parsing attributes in process `syz.1.302'.
[   82.216527][ T6964] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   82.244608][ T6962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'.
[   82.300097][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.310268][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.315926][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.319494][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.324106][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.328848][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.333086][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.336775][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'.
[   82.652342][ T6992] xt_hashlimit: max too large, truncated to 1048576
[   82.654867][ T6992] Cannot find add_set index 3 as target
[   82.707141][ T6998] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   82.710619][ T6998] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   82.886839][ T7008] "syz.0.319" (7008) uses obsolete ecb(arc4) skcipher
[   83.137076][ T7033] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   83.176836][ T7033] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.241771][ T7041] 8021q: VLANs not supported on wg1
[   83.450022][ T7051] Bluetooth: MGMT ver 1.23
[   83.774252][ T7079] tipc: Started in network mode
[   83.776094][ T7079] tipc: Node identity 368e0c722bec, cluster identity 4711
[   83.779423][ T7079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.834101][ T7079] syzkaller0: entered promiscuous mode
[   83.836275][ T7079] syzkaller0: entered allmulticast mode
[   83.847355][ T7080] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   83.849452][    T9] IPVS: starting estimator thread 0...
[   83.889294][ T7079] tipc: Resetting bearer <eth:syzkaller0>
[   83.902583][ T7077] tipc: Resetting bearer <eth:syzkaller0>
[   83.922392][ T7077] tipc: Disabling bearer <eth:syzkaller0>
[   83.951305][ T7084] IPVS: using max 53 ests per chain, 127200 per kthread
[   83.978255][ T7086] lo speed is unknown, defaulting to 1000
[   83.980766][ T7086] lo speed is unknown, defaulting to 1000
[   83.986669][ T7086] lo speed is unknown, defaulting to 1000
[   84.005100][ T7086] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.014603][ T7086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.045348][ T7086] lo speed is unknown, defaulting to 1000
[   84.048217][ T7086] lo speed is unknown, defaulting to 1000
[   84.050934][ T7086] lo speed is unknown, defaulting to 1000
[   84.489777][ T7120] lo speed is unknown, defaulting to 1000
[   84.526719][ T7127] netlink: 'syz.1.351': attribute type 8 has an invalid length.
[   84.802049][ T7136] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[   84.871827][ T5222] Bluetooth: hci2: command 0x0405 tx timeout
[   85.142004][ T7152] netlink: 'syz.1.360': attribute type 5 has an invalid length.
[   85.244458][ T7160] syz_tun: entered allmulticast mode
[   85.249546][ T7159] syz_tun: left allmulticast mode
[   85.504193][ T7175] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   85.506657][   T10] IPVS: starting estimator thread 0...
[   85.601460][ T7179] IPVS: using max 44 ests per chain, 105600 per kthread
[   85.996818][ T7216] netlink: 'syz.0.383': attribute type 1 has an invalid length.
[   86.127569][ T7228] IPv6: syztnl1: Disabled Multicast RS
[   86.148311][ T7230] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   86.213330][ T7230] syzkaller0: entered promiscuous mode
[   86.215098][ T7230] syzkaller0: entered allmulticast mode
[   86.249658][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   87.279722][ T7267] __nla_validate_parse: 43 callbacks suppressed
[   87.279738][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'.
[   87.305646][ T7269] openvswitch: netlink: Key type 30 is not supported
[   87.374247][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[   87.481698][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.400'.
[   87.491800][ T7290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.400'.
[   87.761540][ T7304] netlink: 'syz.2.404': attribute type 21 has an invalid length.
[   87.778232][ T7294] bridge0: port 3(team0) entered disabled state
[   87.779188][ T7307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.782357][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.786882][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.850664][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.859768][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.905973][ T7294] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.908548][ T7294] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.917476][ T7294] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.920080][ T7294] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.940320][    T9] lo speed is unknown, defaulting to 1000
[   87.940448][ T7304] netlink: 156 bytes leftover after parsing attributes in process `syz.2.404'.
[   87.942828][    T9] syz2: Port: 1 Link DOWN
[   88.448184][ T7339] lo: entered promiscuous mode
[   88.468221][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[   88.622215][ T7337] lo: left promiscuous mode
[   88.725641][ T7355] delete_channel: no stack
[   88.817127][ T7360] IPv6: sit1: Disabled Multicast RS
[   88.822916][ T7360] sit1: entered allmulticast mode
[   88.988644][ T7376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   88.994167][ T7376] syzkaller0: entered promiscuous mode
[   88.996382][ T7376] syzkaller0: entered allmulticast mode
[   89.016339][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[   89.025077][ T7376] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.329169][ T7393] netlink: 244 bytes leftover after parsing attributes in process `syz.0.422'.
[   89.398149][ T7400] netlink: 'syz.0.424': attribute type 32 has an invalid length.
[   89.516596][ T7409] netlink: 68 bytes leftover after parsing attributes in process `syz.2.427'.
[   89.519836][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'.
[   90.267417][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'.
[   90.313075][ T7442] vlan0: left promiscuous mode
[   90.314777][ T7442] veth3: left promiscuous mode
[   90.499260][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   90.515438][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   90.536648][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   90.571087][ T7462] xt_socket: unknown flags 0x8
[   90.804137][ T7469] ieee802154 phy1 wpan1: encryption failed: -22
[   90.858204][ T7472] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   90.866118][ T7472] team0: Device macvtap1 is already an upper device of the team interface
[   90.920450][ T7477] vlan2: entered promiscuous mode
[   90.925899][ T7477] bridge0: entered promiscuous mode
[   90.927585][ T7477] vlan2: entered allmulticast mode
[   90.929237][ T7477] bridge0: entered allmulticast mode
[   91.189790][ T7495] lo speed is unknown, defaulting to 1000
[   91.217888][ T7502] netlink: 'syz.0.454': attribute type 10 has an invalid length.
[   91.258538][ T7502] team0: Cannot enslave team device to itself
[   91.373785][ T7518] tipc: Cannot configure node identity twice
[   91.375719][ T7518] tipc: Cannot configure node identity twice
[   91.401899][ T7517] bridge0: port 3(veth0_to_bridge) entered blocking state
[   91.404144][ T7517] bridge0: port 3(veth0_to_bridge) entered disabled state
[   91.406308][ T7517] veth0_to_bridge: entered allmulticast mode
[   91.414276][ T7517] veth0_to_bridge: entered promiscuous mode
[   91.416141][ T7517] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.419933][ T7517] bridge0: port 3(veth0_to_bridge) entered blocking state
[   91.422207][ T7517] bridge0: port 3(veth0_to_bridge) entered forwarding state
[   91.433578][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.437787][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.441515][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.446155][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.449821][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.453931][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.458425][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.462938][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.467443][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.472260][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   91.924031][ T7526] xt_TCPMSS: Only works on TCP SYN packets
[   92.816727][ T7543] netlink: 'syz.0.466': attribute type 1 has an invalid length.
[   93.076602][ T7543] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.139298][ T7544] bond2: (slave bridge2): making interface the new active one
[   93.149872][ T7544] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   93.197151][ T7545] gretap1: entered promiscuous mode
[   93.215903][ T7545] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   93.266670][ T7546] macvlan0: entered promiscuous mode
[   93.272641][ T7546] macvlan0: entered allmulticast mode
[   93.278174][ T7546] bond2: entered promiscuous mode
[   93.285237][ T7546] bridge2: entered promiscuous mode
[   93.288414][ T7552] __nla_validate_parse: 7 callbacks suppressed
[   93.288428][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.295916][ T7546] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   93.299341][ T7546] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   93.309834][ T7546] bond2: left promiscuous mode
[   93.312868][ T7546] bridge2: left promiscuous mode
[   93.477643][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'.
[   93.973344][ T7576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.976139][ T7576] IPv6: NLM_F_CREATE should be set when creating new route
[   93.978512][ T7576] IPv6: NLM_F_CREATE should be set when creating new route
[   94.112785][ T7583] siw: device registration error -23
[   94.253365][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[   94.257136][ T7591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.480'.
[   94.393967][ T7597] netlink: 'syz.0.482': attribute type 1 has an invalid length.
[   94.398606][ T7599] netlink: 72 bytes leftover after parsing attributes in process `syz.1.481'.
[   94.506494][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[   94.509280][ T7597] netlink: 312 bytes leftover after parsing attributes in process `syz.0.482'.
[   94.533831][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[   94.849686][ T7611] netlink: 'syz.1.485': attribute type 1 has an invalid length.
[   94.854944][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'.
[   95.180230][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'.
[   95.437698][ T7626] lo speed is unknown, defaulting to 1000
[   96.059690][ T7649] netlink: 'syz.1.495': attribute type 1 has an invalid length.
[   96.085943][ T7642] wireguard0: entered promiscuous mode
[   96.088165][ T7642] wireguard0: entered allmulticast mode
[   96.169588][ T7646] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[   96.250894][ T7652] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.263230][ T7652] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   96.274590][ T7657] netlink: 'syz.2.496': attribute type 21 has an invalid length.
[   96.316470][ T7654] gretap1: entered promiscuous mode
[   96.324931][ T7654] bond2: (slave gretap1): making interface the new active one
[   96.328486][ T7654] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   96.397960][ T7649] macvlan2: entered promiscuous mode
[   96.400138][ T7649] macvlan2: entered allmulticast mode
[   96.441064][    C1] net_ratelimit: 26942 callbacks suppressed
[   96.441092][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.446430][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.449038][ T7649] bond2: entered promiscuous mode
[   96.450002][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.454967][ T7649] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.455282][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.461374][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.464926][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.468561][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.472260][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.475836][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.479719][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   96.486143][ T7649] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   96.509285][ T7649] bond2: left promiscuous mode
[   96.587320][ T7660] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   96.625795][ T7649] syz.1.495 (7649) used greatest stack depth: 19832 bytes left
[   96.916662][ T7674] syz.2.501 uses old SIOCAX25GETINFO
[   97.446502][ T7690] tun0: tun_chr_ioctl cmd 2147767507
[   97.664435][ T5700] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   98.190628][ T7698] team0 (unregistering): Port device C removed
[   98.206214][ T7698] team0 (unregistering): Port device team_slave_1 removed
[   98.253808][ T7703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   98.267765][ T7703] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   98.550570][ T7724] smc: net device bond0 applied user defined pnetid SYZ2
[   98.553367][ T7724] __nla_validate_parse: 8 callbacks suppressed
[   98.553375][ T7724] netlink: 14 bytes leftover after parsing attributes in process `syz.1.516'.
[   99.664320][ T7724] smc: removing net device bond0 with user defined pnetid SYZ2
[   99.675244][ T7724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.688582][ T7724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.697943][ T7724] bond0 (unregistering): Released all slaves
[   99.846944][ T7741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.315716][ T7765] syz.1.527: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  100.332644][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.1.527 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  100.332660][ T7765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.332666][ T7765] Call Trace:
[  100.332671][ T7765]  <TASK>
[  100.332676][ T7765]  dump_stack_lvl+0x189/0x250
[  100.332695][ T7765]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.332704][ T7765]  ? __pfx__printk+0x10/0x10
[  100.332716][ T7765]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.332727][ T7765]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.332738][ T7765]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  100.332749][ T7765]  warn_alloc+0x214/0x310
[  100.332764][ T7765]  ? __pfx_warn_alloc+0x10/0x10
[  100.332804][ T7765]  ? __get_vm_area_node+0x28f/0x300
[  100.332816][ T7765]  ? xskq_create+0xbf/0x170
[  100.332831][ T7765]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  100.332855][ T7765]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  100.332868][ T7765]  ? __kasan_kmalloc+0x93/0xb0
[  100.332880][ T7765]  vmalloc_user_noprof+0xad/0xf0
[  100.332890][ T7765]  ? xskq_create+0xbf/0x170
[  100.332901][ T7765]  xskq_create+0xbf/0x170
[  100.332914][ T7765]  xsk_init_queue+0xb0/0x110
[  100.332927][ T7765]  xsk_setsockopt+0x4de/0x710
[  100.332939][ T7765]  ? __pfx_xsk_setsockopt+0x10/0x10
[  100.332952][ T7765]  ? aa_sock_opt_perm+0x74/0x110
[  100.332967][ T7765]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  100.332979][ T7765]  ? __pfx_xsk_setsockopt+0x10/0x10
[  100.332990][ T7765]  do_sock_setsockopt+0x25a/0x3e0
[  100.333003][ T7765]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  100.333015][ T7765]  ? __fget_files+0x2a/0x420
[  100.333030][ T7765]  __x64_sys_setsockopt+0x18b/0x220
[  100.333043][ T7765]  do_syscall_64+0xfa/0x3b0
[  100.333051][ T7765]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.333063][ T7765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.333070][ T7765]  ? exc_page_fault+0x9f/0xf0
[  100.333082][ T7765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.333090][ T7765] RIP: 0033:0x7fe866b8e929
[  100.333100][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.333106][ T7765] RSP: 002b:00007fe8679c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.333116][ T7765] RAX: ffffffffffffffda RBX: 00007fe866db6080 RCX: 00007fe866b8e929
[  100.333122][ T7765] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000a
[  100.333127][ T7765] RBP: 00007fe866c10b39 R08: 0000000000000004 R09: 0000000000000000
[  100.333132][ T7765] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  100.333136][ T7765] R13: 0000000000000000 R14: 00007fe866db6080 R15: 00007ffdde05f058
[  100.333149][ T7765]  </TASK>
[  100.333153][ T7765] Mem-Info:
[  100.429857][ T7765] active_anon:5292 inactive_anon:0 isolated_anon:0
[  100.429857][ T7765]  active_file:959 inactive_file:38220 isolated_file:0
[  100.429857][ T7765]  unevictable:1768 dirty:26 writeback:0
[  100.429857][ T7765]  slab_reclaimable:9197 slab_unreclaimable:54175
[  100.429857][ T7765]  mapped:18212 shmem:2449 pagetables:967
[  100.429857][ T7765]  sec_pagetables:0 bounce:0
[  100.429857][ T7765]  kernel_misc_reclaimable:0
[  100.429857][ T7765]  free:294893 free_pcp:20158 free_cma:0
[  100.450156][ T7765] Node 0 active_anon:11276kB inactive_anon:0kB active_file:3128kB inactive_file:139080kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20860kB dirty:88kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5980kB pagetables:1964kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.464920][ T7765] Node 1 active_anon:9892kB inactive_anon:0kB active_file:708kB inactive_file:13800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51988kB dirty:16kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5648kB pagetables:1904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.478565][ T7765] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.491586][ T7765] lowmem_reserve[]: 0 812 812 812 812
[  100.494014][ T7765] Node 0 DMA32 free:302740kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11296kB inactive_anon:0kB active_file:3128kB inactive_file:139080kB unevictable:3536kB writepending:88kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:42284kB local_pcp:21508kB free_cma:0kB
[  100.515412][ T7765] lowmem_reserve[]: 0 0 0 0 0
[  100.517587][ T7765] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.559174][ T7765] lowmem_reserve[]: 0 0 854 854 854
[  100.566326][ T7765] Node 1 Normal free:402260kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9856kB inactive_anon:0kB active_file:708kB inactive_file:13800kB unevictable:3536kB writepending:16kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38428kB local_pcp:20652kB free_cma:0kB
[  100.587145][ T7765] lowmem_reserve[]: 0 0 0 0 0
[  100.588901][ T7765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.597019][ T7765] Node 0 DMA32: 509*4kB (M) 184*8kB (ME) 110*16kB (UME) 224*32kB (UME) 86*64kB (UM) 39*128kB (UME) 5*256kB (UME) 2*512kB (ME) 11*1024kB (UME) 4*2048kB (UME) 63*4096kB (M) = 302740kB
[  100.604983][ T7765] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  100.609953][ T7765] Node 1 Normal: 68*4kB (UME) 57*8kB (ME) 186*16kB (ME) 219*32kB (UME) 304*64kB (UME) 121*128kB (UME) 46*256kB (UM) 13*512kB (UM) 6*1024kB (UM) 4*2048kB (UME) 79*4096kB (M) = 402008kB
[  100.619886][ T7765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.623722][ T7765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.626686][ T7765] 41629 total pagecache pages
[  100.628265][ T7765] 0 pages in swap cache
[  100.630094][ T7765] Free swap  = 124996kB
[  100.634528][ T7765] Total swap = 124996kB
[  100.636161][ T7765] 786301 pages RAM
[  100.637669][ T7765] 0 pages HighMem/MovableOnly
[  100.639614][ T7765] 241085 pages reserved
[  100.641953][ T7765] 0 pages cma reserved
[  100.960871][ T7783] netlink: 'syz.1.530': attribute type 7 has an invalid length.
[  100.965651][ T7783] netlink: 'syz.1.530': attribute type 8 has an invalid length.
[  100.968028][ T7783] netlink: 224 bytes leftover after parsing attributes in process `syz.1.530'.
[  101.175400][ T7793] bridge0: entered allmulticast mode
[  101.208358][ T7795] netlink: 256 bytes leftover after parsing attributes in process `syz.1.532'.
[  101.242326][ T7795] netlink: 88 bytes leftover after parsing attributes in process `syz.1.532'.
[  101.257104][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.532'.
[  101.290804][ T7805] netlink: 'syz.0.537': attribute type 9 has an invalid length.
[  101.451064][    C1] net_ratelimit: 22545 callbacks suppressed
[  101.451076][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.456307][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.459778][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.463364][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.466806][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.470189][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.473653][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.477044][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.480439][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.484290][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  101.537268][ T7820] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.540'.
[  101.678614][ T7826] tipc: Can't bind to reserved service type 2
[  101.748885][ T7832] netlink: 'syz.1.544': attribute type 4 has an invalid length.
[  101.863017][ T7839] ip6erspan0: entered allmulticast mode
[  101.974688][ T7839] lo speed is unknown, defaulting to 1000
[  103.207146][ T7897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.557'.
[  103.447273][ T7915] netlink: 17 bytes leftover after parsing attributes in process `syz.1.563'.
[  103.457043][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'.
[  103.506040][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'.
[  103.524198][ T7921] ip6tnl2: entered promiscuous mode
[  103.525964][ T7921] ip6tnl2: entered allmulticast mode
[  103.598735][ T7925] __nla_validate_parse: 1 callbacks suppressed
[  103.598754][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[  103.724712][ T7926] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  103.735083][ T7926] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  103.845730][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  103.852864][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  103.866118][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  104.032603][ T7942] lo speed is unknown, defaulting to 1000
[  104.263923][ T7950] netlink: 'syz.0.574': attribute type 1 has an invalid length.
[  104.266812][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.574'.
[  104.574279][ T7959] smc: net device bond0 applied user defined pnetid SYZ2
[  104.730839][ T7965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.267635][ T7988] netlink: 'syz.2.584': attribute type 13 has an invalid length.
[  105.281366][ T7988] gretap0: refused to change device tx_queue_len
[  105.301935][ T7987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'.
[  105.310813][ T7987] pim6reg: entered allmulticast mode
[  105.498725][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'.
[  105.663347][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'.
[  105.717099][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.587'.
[  106.104789][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'.
[  106.461044][    C1] net_ratelimit: 23739 callbacks suppressed
[  106.461062][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.468077][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.472973][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.478002][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.482745][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.487401][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.492350][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.497053][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.501935][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  106.506643][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  107.592614][ T8047] x_tables: duplicate underflow at hook 1
[  108.208806][ T8068] netlink: 'syz.0.604': attribute type 4 has an invalid length.
[  108.869185][ T8073] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  108.887267][ T8073] __nla_validate_parse: 2 callbacks suppressed
[  108.887287][ T8073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.606'.
[  109.021439][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'.
[  109.324216][ T8093] netlink: 256 bytes leftover after parsing attributes in process `syz.0.611'.
[  109.370002][ T8093] lo speed is unknown, defaulting to 1000
[  110.226103][ T8129] sctp: [Deprecated]: syz.0.621 (pid 8129) Use of int in maxseg socket option.
[  110.226103][ T8129] Use struct sctp_assoc_value instead
[  110.280734][ T8131] netlink: 'syz.0.622': attribute type 5 has an invalid length.
[  110.683715][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  110.690559][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'.
[  111.207759][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'.
[  111.232459][ T8171] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  111.249264][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  111.471158][    C0] net_ratelimit: 17122 callbacks suppressed
[  111.471175][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.471189][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  111.471475][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  111.473941][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.478264][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  111.482525][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.486787][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  111.491459][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  111.495466][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  111.499675][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.481064][    C1] net_ratelimit: 42625 callbacks suppressed
[  116.481076][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.481111][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.483463][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  116.487985][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.491461][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  116.495855][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.499751][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.503167][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.506917][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  116.510385][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  120.451330][ T4615] sched: DL replenish lagged too much
[  121.491151][    C1] net_ratelimit: 41027 callbacks suppressed
[  121.491168][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  121.491735][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.493819][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  121.498541][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.502605][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.506914][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.510248][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.514666][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  121.518015][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  121.523414][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.501058][    C1] net_ratelimit: 37468 callbacks suppressed
[  126.501075][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.501208][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.503878][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.507193][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.511776][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  126.515768][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.520078][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  126.524319][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.529045][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  126.532872][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.004897][ T8193] netlink: 'syz.1.639': attribute type 64 has an invalid length.
[  129.253694][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  131.511413][    C0] net_ratelimit: 34020 callbacks suppressed
[  131.511425][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.511764][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  131.513720][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.517429][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  131.522102][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.525853][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.530104][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.533713][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.537780][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  131.541125][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  136.521358][    C1] net_ratelimit: 32627 callbacks suppressed
[  136.521374][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.521404][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.523914][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  136.528563][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.532176][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  136.536501][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.539881][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  136.544660][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.548436][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  136.553440][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.531286][    C1] net_ratelimit: 36659 callbacks suppressed
[  141.531291][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.531304][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.533396][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.537423][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.540805][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.544953][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  141.548542][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.552432][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  141.555947][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  141.558974][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  141.786137][ T5878] page_pool_release_retry() stalled pool shutdown: id 22, 2 inflight 62 sec
[  146.541082][    C1] net_ratelimit: 38585 callbacks suppressed
[  146.541093][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.541148][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.543220][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.548098][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.551342][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.555954][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.559284][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  146.563560][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  146.566978][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.571536][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.551112][    C0] net_ratelimit: 38233 callbacks suppressed
[  151.551131][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.551279][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.553909][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.558049][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.562111][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.567001][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  151.570536][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.575029][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.579652][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  151.584041][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.561080][    C0] net_ratelimit: 34155 callbacks suppressed
[  156.561092][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.561319][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  156.563495][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.567119][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  156.570611][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.580370][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.580831][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.584230][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.587745][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  156.591448][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  161.571275][    C1] net_ratelimit: 37970 callbacks suppressed
[  161.571293][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.571843][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.573955][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.577681][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.582133][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  161.585724][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.590159][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  161.594259][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  161.598669][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  161.603558][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.581079][    C1] net_ratelimit: 35811 callbacks suppressed
[  166.581097][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.581150][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.583872][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.588847][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.592746][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  166.597379][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.601879][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  166.606083][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.610187][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  166.614815][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.591032][    C1] net_ratelimit: 36584 callbacks suppressed
[  171.591044][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  171.591117][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.593147][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  171.596919][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.600056][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  171.603954][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.607277][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.610806][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.614143][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.617335][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  172.908597][ T5222] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  173.510507][ T5222] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  173.530599][ T5222] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  173.693952][ T5222] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  173.697162][ T5222] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  173.763435][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.099376][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.338314][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.579992][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.597364][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  175.978254][ T5831] Bluetooth: hci0: command tx timeout
[  176.601127][    C0] net_ratelimit: 38742 callbacks suppressed
[  176.601139][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.601167][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.603203][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.606522][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.610443][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.614019][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.618940][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.622226][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.625783][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  176.628924][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  178.053408][   T54] Bluetooth: hci3: command tx timeout
[  178.083265][   T54] Bluetooth: hci0: command tx timeout
[  180.221965][   T54] Bluetooth: hci3: command tx timeout
[  180.224193][   T54] Bluetooth: hci0: command tx timeout
[  180.952003][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.611242][    C1] net_ratelimit: 33965 callbacks suppressed
[  181.611259][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.611531][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.614031][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.617123][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.621636][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  181.625121][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.629707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  181.633011][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  181.637587][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  181.642436][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  182.288324][ T5831] Bluetooth: hci0: command tx timeout
[  182.290179][ T5831] Bluetooth: hci3: command tx timeout
[  183.399375][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  183.479115][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  183.505668][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  183.773058][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  183.835584][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  184.321738][ T5831] Bluetooth: hci3: command tx timeout
[  186.064211][ T5831] Bluetooth: hci4: command tx timeout
[  186.621250][    C0] net_ratelimit: 30278 callbacks suppressed
[  186.621256][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.621262][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.621676][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.623359][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.627707][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  186.631210][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.636204][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  186.639269][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  186.643908][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  186.648116][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  188.116508][ T5831] Bluetooth: hci4: command tx timeout
[  190.278233][ T5831] Bluetooth: hci4: command tx timeout
[  191.631150][    C1] net_ratelimit: 27510 callbacks suppressed
[  191.631168][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  191.631498][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.633887][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.637274][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.641851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  191.645219][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.649374][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.653350][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.657383][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  191.662984][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  192.455855][ T5831] Bluetooth: hci4: command tx timeout
[  196.641094][    C0] net_ratelimit: 32558 callbacks suppressed
[  196.641110][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.641188][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.645046][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.648488][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  196.652886][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.656278][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.661202][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.664458][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.669242][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  196.672926][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.651221][    C0] net_ratelimit: 29065 callbacks suppressed
[  201.651241][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.651390][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.653895][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.658388][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.664473][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.667900][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  201.672171][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.675910][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  201.680566][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  201.684840][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  203.809821][ T5829] syz_tun (unregistering): left promiscuous mode
[  206.661214][    C1] net_ratelimit: 29133 callbacks suppressed
[  206.661232][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.661318][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.663962][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.667506][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.672105][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.675625][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.679064][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  206.683323][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  206.687073][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  206.691060][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.671283][    C1] net_ratelimit: 32851 callbacks suppressed
[  211.671301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ca:b4:f9:08:de:e0, vlan:0)
[  211.671578][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.674064][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.677746][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.682220][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.685831][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.690347][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.694069][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  211.698962][    C1] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  211.703913][    C0] bridge0: received packet on 1x9 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  212.258143][ T7459] ==================================================================
[  212.261398][ T7459] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  212.264237][ T7459] Read of size 8 at addr ffff88810afc00a0 by task khidpd_16bf5505/7459
[  212.268669][ T7459] 
[  212.269620][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  212.269641][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.269650][ T7459] Call Trace:
[  212.269658][ T7459]  <TASK>
[  212.269666][ T7459]  dump_stack_lvl+0x189/0x250
[  212.269688][ T7459]  ? __virt_addr_valid+0x1c8/0x5c0
[  212.269706][ T7459]  ? rcu_is_watching+0x15/0xb0
[  212.269721][ T7459]  ? __kasan_check_byte+0x12/0x40
[  212.269739][ T7459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.269754][ T7459]  ? rcu_is_watching+0x15/0xb0
[  212.269768][ T7459]  ? lock_release+0x4b/0x3e0
[  212.269784][ T7459]  ? __virt_addr_valid+0x1c8/0x5c0
[  212.269800][ T7459]  ? __virt_addr_valid+0x4a5/0x5c0
[  212.269817][ T7459]  print_report+0xd2/0x2b0
[  212.269830][ T7459]  ? __mutex_lock+0x738/0xe80
[  212.269841][ T7459]  kasan_report+0x118/0x150
[  212.269856][ T7459]  ? __mutex_lock+0x738/0xe80
[  212.269869][ T7459]  __mutex_lock+0x738/0xe80
[  212.269882][ T7459]  ? __mutex_lock+0x51b/0xe80
[  212.269893][ T7459]  ? l2cap_unregister_user+0x6a/0x1b0
[  212.269913][ T7459]  ? __pfx___mutex_lock+0x10/0x10
[  212.269925][ T7459]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.269948][ T7459]  l2cap_unregister_user+0x6a/0x1b0
[  212.269968][ T7459]  hidp_session_thread+0x3c9/0x410
[  212.269982][ T7459]  ? __pfx_hidp_session_thread+0x10/0x10
[  212.269994][ T7459]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.270011][ T7459]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  212.270025][ T7459]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  212.270038][ T7459]  ? __kthread_parkme+0x7b/0x200
[  212.270054][ T7459]  ? __kthread_parkme+0x1a1/0x200
[  212.270071][ T7459]  kthread+0x711/0x8a0
[  212.270089][ T7459]  ? __pfx_hidp_session_thread+0x10/0x10
[  212.270101][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.270119][ T7459]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.270136][ T7459]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.270155][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.270172][ T7459]  ret_from_fork+0x3fc/0x770
[  212.270187][ T7459]  ? __pfx_ret_from_fork+0x10/0x10
[  212.270202][ T7459]  ? __switch_to_asm+0x39/0x70
[  212.270218][ T7459]  ? __switch_to_asm+0x33/0x70
[  212.270233][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.270249][ T7459]  ret_from_fork_asm+0x1a/0x30
[  212.270271][ T7459]  </TASK>
[  212.270276][ T7459] 
[  212.356720][ T7459] Allocated by task 5837:
[  212.358422][ T7459]  kasan_save_track+0x3e/0x80
[  212.360209][ T7459]  __kasan_kmalloc+0x93/0xb0
[  212.362079][ T7459]  __kmalloc_noprof+0x27a/0x4f0
[  212.363998][ T7459]  hci_alloc_dev_priv+0x28/0x2040
[  212.365933][ T7459]  vhci_create_device+0x120/0x6e0
[  212.367827][ T7459]  vhci_write+0x3ce/0x4a0
[  212.369478][ T7459]  vfs_write+0x54b/0xa90
[  212.371099][ T7459]  ksys_write+0x145/0x250
[  212.372763][ T7459]  do_syscall_64+0xfa/0x3b0
[  212.374528][ T7459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.376875][ T7459] 
[  212.377817][ T7459] Freed by task 8199:
[  212.379364][ T7459]  kasan_save_track+0x3e/0x80
[  212.381174][ T7459]  kasan_save_free_info+0x46/0x50
[  212.383114][ T7459]  __kasan_slab_free+0x62/0x70
[  212.384931][ T7459]  kfree+0x18e/0x440
[  212.386437][ T7459]  bt_host_release+0x82/0x90
[  212.388191][ T7459]  device_release+0x9c/0x1c0
[  212.389984][ T7459]  kobject_put+0x22b/0x480
[  212.391697][ T7459]  vhci_release+0x88/0xd0
[  212.393371][ T7459]  __fput+0x44c/0xa70
[  212.394897][ T7459]  task_work_run+0x1d4/0x260
[  212.396669][ T7459]  do_exit+0x6b5/0x22e0
[  212.398354][ T7459]  do_group_exit+0x21c/0x2d0
[  212.400170][ T7459]  get_signal+0x1286/0x1340
[  212.401923][ T7459]  arch_do_signal_or_restart+0x9a/0x750
[  212.404026][ T7459]  exit_to_user_mode_loop+0x75/0x110
[  212.406037][ T7459]  do_syscall_64+0x2bd/0x3b0
[  212.407816][ T7459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.410020][ T7459] 
[  212.410968][ T7459] Last potentially related work creation:
[  212.413111][ T7459]  kasan_save_stack+0x3e/0x60
[  212.414907][ T7459]  kasan_record_aux_stack+0xbd/0xd0
[  212.416926][ T7459]  insert_work+0x3d/0x330
[  212.418587][ T7459]  __queue_work+0xcfc/0xfe0
[  212.420434][ T7459]  queue_work_on+0x181/0x270
[  212.422277][ T7459]  hci_cmd_sync_submit+0x285/0x2b0
[  212.424215][ T7459]  process_scheduled_works+0xae1/0x17b0
[  212.426394][ T7459]  worker_thread+0x8a0/0xda0
[  212.428217][ T7459]  kthread+0x711/0x8a0
[  212.429860][ T7459]  ret_from_fork+0x3fc/0x770
[  212.431664][ T7459]  ret_from_fork_asm+0x1a/0x30
[  212.433523][ T7459] 
[  212.434491][ T7459] Second to last potentially related work creation:
[  212.437059][ T7459]  kasan_save_stack+0x3e/0x60
[  212.438927][ T7459]  kasan_record_aux_stack+0xbd/0xd0
[  212.441033][ T7459]  insert_work+0x3d/0x330
[  212.442768][ T7459]  __queue_work+0xbd9/0xfe0
[  212.444585][ T7459]  queue_work_on+0x181/0x270
[  212.446402][ T7459]  hci_cmd_sync_submit+0x285/0x2b0
[  212.448385][ T7459]  process_scheduled_works+0xae1/0x17b0
[  212.450486][ T7459]  worker_thread+0x8a0/0xda0
[  212.452249][ T7459]  kthread+0x711/0x8a0
[  212.453878][ T7459]  ret_from_fork+0x3fc/0x770
[  212.455742][ T7459]  ret_from_fork_asm+0x1a/0x30
[  212.457573][ T7459] 
[  212.458481][ T7459] The buggy address belongs to the object at ffff88810afc0000
[  212.458481][ T7459]  which belongs to the cache kmalloc-8k of size 8192
[  212.463593][ T7459] The buggy address is located 160 bytes inside of
[  212.463593][ T7459]  freed 8192-byte region [ffff88810afc0000, ffff88810afc2000)
[  212.468723][ T7459] 
[  212.469681][ T7459] The buggy address belongs to the physical page:
[  212.472085][ T7459] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10afc0
[  212.475411][ T7459] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  212.478584][ T7459] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  212.481517][ T7459] page_type: f5(slab)
[  212.483076][ T7459] raw: 057ff00000000040 ffff88801a442280 ffffea0004494000 dead000000000002
[  212.486358][ T7459] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  212.489630][ T7459] head: 057ff00000000040 ffff88801a442280 ffffea0004494000 dead000000000002
[  212.492929][ T7459] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  212.496150][ T7459] head: 057ff00000000003 ffffea00042bf001 00000000ffffffff 00000000ffffffff
[  212.499443][ T7459] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  212.502664][ T7459] page dumped because: kasan: bad access detected
[  212.505358][ T7459] page_owner tracks the page as allocated
[  212.507513][ T7459] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5282, tgid 5282 (S10udev), ts 21905518426, free_ts 21652123888
[  212.514925][ T7459]  post_alloc_hook+0x240/0x2a0
[  212.516822][ T7459]  get_page_from_freelist+0x21e4/0x22c0
[  212.519008][ T7459]  __alloc_frozen_pages_noprof+0x181/0x370
[  212.521309][ T7459]  alloc_pages_mpol+0x232/0x4a0
[  212.523246][ T7459]  allocate_slab+0x8a/0x3b0
[  212.525061][ T7459]  ___slab_alloc+0xbfc/0x1480
[  212.526936][ T7459]  __kmalloc_cache_noprof+0x296/0x3d0
[  212.529017][ T7459]  tomoyo_init_log+0x111f/0x1f70
[  212.530970][ T7459]  tomoyo_supervisor+0x340/0x1480
[  212.532963][ T7459]  tomoyo_env_perm+0x149/0x1e0
[  212.534859][ T7459]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  212.537071][ T7459]  tomoyo_bprm_check_security+0x11c/0x180
[  212.539266][ T7459]  security_bprm_check+0x89/0x270
[  212.541293][ T7459]  bprm_execve+0x8ee/0x1450
[  212.543138][ T7459]  do_execveat_common+0x510/0x6a0
[  212.545128][ T7459]  __x64_sys_execve+0x94/0xb0
[  212.546997][ T7459] page last free pid 5280 tgid 5280 stack trace:
[  212.549481][ T7459]  __free_frozen_pages+0xc71/0xe70
[  212.551508][ T7459]  __put_partials+0x161/0x1c0
[  212.553285][ T7459]  put_cpu_partial+0x17c/0x250
[  212.555124][ T7459]  __slab_free+0x2f7/0x400
[  212.556832][ T7459]  qlist_free_all+0x97/0x140
[  212.558620][ T7459]  kasan_quarantine_reduce+0x148/0x160
[  212.560737][ T7459]  __kasan_slab_alloc+0x22/0x80
[  212.562591][ T7459]  __kmalloc_noprof+0x224/0x4f0
[  212.564470][ T7459]  tomoyo_supervisor+0xbd5/0x1480
[  212.566391][ T7459]  tomoyo_path_permission+0x25a/0x380
[  212.568456][ T7459]  tomoyo_check_open_permission+0x24d/0x3b0
[  212.570791][ T7459]  security_file_open+0xb1/0x270
[  212.572699][ T7459]  do_dentry_open+0x35e/0x1970
[  212.574559][ T7459]  vfs_open+0x3b/0x340
[  212.576119][ T7459]  path_openat+0x2ee5/0x3830
[  212.577928][ T7459]  do_filp_open+0x1fa/0x410
[  212.579696][ T7459] 
[  212.580637][ T7459] Memory state around the buggy address:
[  212.582824][ T7459]  ffff88810afbff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  212.585933][ T7459]  ffff88810afc0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.588962][ T7459] >ffff88810afc0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.592066][ T7459]                                ^
[  212.594078][ T7459]  ffff88810afc0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.597183][ T7459]  ffff88810afc0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  212.600223][ T7459] ==================================================================
[  212.610546][ T7459] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  212.613376][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  212.618190][ T7459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.622066][ T7459] Call Trace:
[  212.623378][ T7459]  <TASK>
[  212.624533][ T7459]  dump_stack_lvl+0x99/0x250
[  212.626267][ T7459]  ? __asan_memcpy+0x40/0x70
[  212.628073][ T7459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.630121][ T7459]  ? __pfx__printk+0x10/0x10
[  212.631972][ T7459]  panic+0x2db/0x790
[  212.633489][ T7459]  ? __pfx_panic+0x10/0x10
[  212.635233][ T7459]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  212.637545][ T7459]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.639904][ T7459]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  212.642440][ T7459]  ? print_memory_metadata+0x314/0x400
[  212.644603][ T7459]  ? __mutex_lock+0x738/0xe80
[  212.646484][ T7459]  check_panic_on_warn+0x89/0xb0
[  212.648393][ T7459]  ? __mutex_lock+0x738/0xe80
[  212.650243][ T7459]  end_report+0x78/0x160
[  212.651941][ T7459]  kasan_report+0x129/0x150
[  212.653742][ T7459]  ? __mutex_lock+0x738/0xe80
[  212.655592][ T7459]  __mutex_lock+0x738/0xe80
[  212.657408][ T7459]  ? __mutex_lock+0x51b/0xe80
[  212.659271][ T7459]  ? l2cap_unregister_user+0x6a/0x1b0
[  212.661427][ T7459]  ? __pfx___mutex_lock+0x10/0x10
[  212.663438][ T7459]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.665782][ T7459]  l2cap_unregister_user+0x6a/0x1b0
[  212.667861][ T7459]  hidp_session_thread+0x3c9/0x410
[  212.669901][ T7459]  ? __pfx_hidp_session_thread+0x10/0x10
[  212.672114][ T7459]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  212.674450][ T7459]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  212.676903][ T7459]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  212.679340][ T7459]  ? __kthread_parkme+0x7b/0x200
[  212.681335][ T7459]  ? __kthread_parkme+0x1a1/0x200
[  212.683292][ T7459]  kthread+0x711/0x8a0
[  212.684880][ T7459]  ? __pfx_hidp_session_thread+0x10/0x10
[  212.687041][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.688829][ T7459]  ? _raw_spin_unlock_irq+0x23/0x50
[  212.690908][ T7459]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.692914][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.694747][ T7459]  ret_from_fork+0x3fc/0x770
[  212.696599][ T7459]  ? __pfx_ret_from_fork+0x10/0x10
[  212.698558][ T7459]  ? __switch_to_asm+0x39/0x70
[  212.700429][ T7459]  ? __switch_to_asm+0x33/0x70
[  212.702262][ T7459]  ? __pfx_kthread+0x10/0x10
[  212.704049][ T7459]  ret_from_fork_asm+0x1a/0x30
[  212.705891][ T7459]  </TASK>
[  212.707787][ T7459] Kernel Offset: disabled
[  212.709476][ T7459] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:31:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000006 RCX=dffffc0000000000 RDX=000055bf4f643716
RSI=ffffc9000294fc50 RDI=0000000000000000 RBP=ffffc9000294fdf0 RSP=ffffc9000294f840
R8 =ffff8880223b2967 R9 =1ffff1100447652c R10=dffffc0000000000 R11=ffffed100447652d
R12=000055bf4f643748 R13=0000000000000001 R14=ffffc9000294fc62 R15=0000000000000000
RIP=ffffffff823a4225 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efff3152800 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555765e4fc78 CR3=0000000026ae6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001c3f370
R8 =ffff8881081a0237 R9 =1ffff11021034046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98cb R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2fc99b6038 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
