last executing test programs:

1.68006203s ago: executing program 0 (id=654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x8000000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000080)="09000200010005", 0x7)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0, @ANYBLOB='Djw@'], 0x4c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x8090)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
shutdown(r1, 0x1)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)

1.370511396s ago: executing program 0 (id=659):
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r4, 0xfff, 0xfff, 0x4}, 0x10)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080))
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d00003c000000000011adeca2499078000000000000000001441c183164010100000000030a0101010000764000000000000008ff00000000004e2000089078"], 0x0)

1.312836754s ago: executing program 0 (id=661):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@llx, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa556cc2fabc7b233, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x1dc, 0x24, 0x4ee4e6a52ff56541, 0x70b528, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}, 0x0, 0x7f}}, @TCA_TBF_BURST={0x8, 0x6, 0xa815}]}}, @TCA_STAB={0x16c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x3, 0x9, 0x0, 0x200, 0x7e, 0x1}}, {0x6, 0x2, [0x8dd]}}, {{0x1c, 0x1, {0x2, 0x5, 0x95c, 0x4, 0x1, 0x1ebf, 0xf, 0x4}}, {0xc, 0x2, [0x5, 0x4, 0x81, 0x8]}}, {{0x1c, 0x1, {0x0, 0x3, 0xa, 0x80000001, 0x2, 0x200, 0xa, 0x2}}, {0x8, 0x2, [0x4, 0xc]}}, {{0x1c, 0x1, {0x8, 0x8, 0x6d4, 0x101, 0x0, 0x1, 0x2, 0x8}}, {0x14, 0x2, [0x3, 0xe8bb, 0x7fff, 0xff, 0x8, 0x3, 0x2, 0x81]}}, {{0x1c, 0x1, {0x10, 0x4, 0x80, 0x6, 0x2, 0x4, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x9d, 0x9]}}, {{0x1c, 0x1, {0x97, 0x4, 0x0, 0x10001, 0x1, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x8, 0x2, 0x8001, 0x7fff]}}, {{0x1c, 0x1, {0x8, 0x4, 0x77, 0x0, 0x1, 0x4, 0xff3a, 0x7}}, {0x12, 0x2, [0xa549, 0x7, 0x8, 0xfffc, 0x5, 0xee5, 0x2]}}, {{0x1c, 0x1, {0xbd, 0x5, 0x3, 0x10001, 0x2, 0x81, 0x20, 0x4}}, {0xc, 0x2, [0x4000, 0x0, 0x5, 0x4]}}, {{0x1c, 0x1, {0x73, 0x4, 0x1, 0x4, 0x2, 0x5, 0x63}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4d}]}, 0x1dc}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r3, 0x29, 0xa8, 0xe3, 0xf33, 0x67, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, 0x8, 0x700, 0x0, 0x81}})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="c84b1ecc52", &(0x7f0000000100)=@tcp6=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
sendto$packet(r0, &(0x7f0000000340)="77cff0b747186899e6034ac47a2490c6e914a8533b0f57e6ee72a5f520ceb686352f8ee7de6e349c242d62ad51ca64f59366e547f97ca758a2d1b1eaf10076239367b4c7f6d9f97d829370b15a6c2ed274d67c8ee393e89e8c8664153d5735d1d3b04c3b4b39d3ce48d996a1ad02e33dfcfc7e31c004acd6731f77d38ec125c671ca233a0fb5863f0e7bc56296e56c8ac1ac2efa03a519e978b6d0bce479c9cd913935f8211f9560a50cf2b34df1575d8213f96eead17efed7f45ff0c369e69905a9375dbbb15be12f", 0xc9, 0x10, 0x0, 0x0)

1.312484358s ago: executing program 0 (id=662):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\f'}]}], {0x14}}, 0x70}}, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
sendmsg$tipc(r2, &(0x7f0000001e40)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30799af3943473a5}, 0x880)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4)

1.188675051s ago: executing program 0 (id=664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a09040000000000000000020000000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000200001800d00010073796e70726f7879000000000c000280080003400000001a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa8}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r5, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c49", 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000d0eae700070002007f000000b53e0000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000050000000400ff0f"], 0x38, 0x48060}], 0x1, 0x200000d0)
socket$alg(0x26, 0x5, 0x0)
r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
accept4(r6, 0x0, 0x0, 0x2e8c11de0ee822d7)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000340)={'veth0_to_team\x00'})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004081}, 0x4011)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x10, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x202, 0x510, 0x3, 0x6}, {0x6783, 0x2, 0x8801, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'bridge0\x00'}]}}]}, 0x88}}, 0x24040084)
pipe(0x0)
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000020006600000008000300", @ANYRES32=r11, @ANYBLOB="080026006c09000008009f00010000000800b70095000000"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})

790.035817ms ago: executing program 0 (id=667):
r0 = socket(0x840000000002, 0x3, 0xfa)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x1b1, 0x7, 0x2, 0x14}, {0xf, 0x2, 0x5e, 0x7}, {0x3, 0x81, 0x8, 0xfffffffb}, {0x9, 0x2, 0x9, 0x7}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0x6b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0}}, 0x10)

488.986195ms ago: executing program 1 (id=674):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x20, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

488.508107ms ago: executing program 1 (id=675):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x8000000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b2c, &(0x7f0000000040))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(r8, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010125})
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x200, @rand_addr, 0x80000000}, 0x1c)
listen(r7, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x44, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x44}}, 0x8040)

429.407038ms ago: executing program 2 (id=676):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1b00000000000000000000000100010000000000", @ANYRES32=0x1, @ANYBLOB="09ac00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000cd00000000000000000000000000020000da000000de475de23cba8efa94"], 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/4096, 0x136, 0x1000, 0x1, 0x7}, 0x28)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@bloom_filter={0x1e, 0xc01b, 0x7, 0x0, 0x20000, 0xffffffffffffffff, 0xfffff32c, '\x00', 0x0, r2, 0x3, 0x1, 0x2, 0xa}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0x1}, &(0x7f0000001700), &(0x7f0000001740)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{0x1}, &(0x7f00000017c0), &(0x7f0000001800)='%pK    \x00'}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000018c0)=@o_path={&(0x7f0000001880)='./file0\x00', 0x0, 0x0, r0}, 0x18)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x40000000)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast1=0xe0000300, @local}, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

349.086349ms ago: executing program 2 (id=677):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={0xac, 0x0, 0x4, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={0xac, 0x0, 0x4, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)

348.542045ms ago: executing program 1 (id=678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000)

278.760844ms ago: executing program 1 (id=679):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000004c2f11d87744f27b702793c68e1b5b387857f39f5d2a0aeca650955d9176e076307ed2909555363aa05254fd57ca27b800ad7e31674570d7aac7abff920a3383180000009f7c6e11882b73a7c1fae246e2ff0ffb428a6e5264a924d6fa2b68c4c372cc24a217b39b8b4af8eadcf5521f2d43d71f9e3365f0fe8d12ece30c4ebf6c71e8f41a1d490465", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000380)=0x8001, 0x4)

274.919897ms ago: executing program 2 (id=680):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0xc8302b063a7e25fe, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x1}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_emit_ethernet(0x102a, &(0x7f0000001580)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x88fb, @igmp={{0x5, 0x4, 0x1, 0x2, 0x101c, 0x65, 0x0, 0xdc, 0x2, 0x0, @local, @broadcast}, {0x36, 0x80, 0x0, @private=0xa010100, "d2bbae10027962f78c25c4d089031312fca336b0d38df8e331bdab7179cfbc04da5e9c93d95dcba658837370a91f773d19bc02acebbad9f8dadea425fcab7a53b42c64e1d4e2a1f92fc5afa824ecba3331708efa7c0ef286e8ac6f310a38bf25d2b58679fe48ec21b77d7b71bd29e42d8f6300f29ac19bae1d51d1f6ee9467dce8755d166a22cc1b1f696a3400231b505595b8c229a2c8ee8a2984134d0d23117058e82fd2025e64463cc2dd61c096e27e15eb6c5adb070fb9b690a90ad4f37361a870f55bc2116697101d1b06da5253e2bf4a8e97653666507d88914401fa685f324bd5d0342a19ba1ff69b0d6e4950b17742d0ee6574f74a4208c0775b1de4591005e847c216fdb5f8bf26ee1a089fbc5b988287d86a5b3b0159c163f67b97d7a01058efff2bc23ca48a5bfcacdf54012545b3e8a89e7d936a62242fa23bed7761ae194a3d37749a632def5778ac81a1e926cfc1fc7b09a1d6f57da57071e1993797f7903705945f316611dd2b21c4490850db32228d11ae07d8446533878f611d1d8cc5dff5516eafd8dd497e11c55563ddc95f9a4343849c2f9d56940bba97d9c7189a6632266ded070d826d38df0eb699dc38e83de6dd18e6c655c03e2a2229ee39c39f6e313f959656234d0090b79b5c6d5e11a98d3888450c00b8adefc37d78c65925a12a5a847427435021b1263568604b6707f940277de37a9737699cb72aac8c08702d4d04ddf3784c2075d1899ab797e87ec47f8ef2c68e231d754f298ac6e86fd9ee4d775e4da51a240efda69d2896c7d56dee5418e3c7e79df3f5f43c0b0f0ff16356c4b32c598b9d89ac4ca43553745588ba22df2c8714ec7e3d50fa284824f4082e66a77e81b8826e85d0e86a84881a37520ba2dfe09a2ffc23e59c2a38fec8e69421778263dd71a14c63ca09479fd7d02f12d4d489c4d2c6f1b945b2ab019373093345538a11c83d2a26d443268dec1bd3dd1e114642920a9595309725240af463588aa4ef39eecd8e231b88fb5e4e8c83118b84eb8b2ae80514b2c68f2b2cc8f7a2bd46301b0902857c40a26821142c54de97c1356762910a0e653b63aacc4d350204dea4107ab67f8823858794172ae3ddaee8c86bbf811d427ef579a84f16d59ca9f8a1e17600359ab8212c1fd52a6cd609a24e9f838441487c6d5cc1e1908ce5ef265110374f6b37c42a7183073ba55f842a887670f69ab234ecf869720a807948ce4790b4a8d9d5d38101b37f2f0988280a74fc4f5a0e9528d76aaf4b57dbdc669f8cc0ee3122699984d3d67c5c50f646a7249fcbe903fa7c15467e1472345d022b4c354574b0178906af270b354afeb0eac4fbf26175c11d647a2c214c4c39effc3c6807dc12e57163bab335b9fc3c9defd777c94febabb0e167f1afbc3b5beed503fc50804ce3de1260d36eb164264013db3cd6a0dc4c94da089b4882195bec1a2f6d467148a3eb9d23a090aa661cc9599fe23a9cdf6dc1e624f6c656bf7a34d236c8fc771d7aafdd062336889e1ba9aab04ed13a7dad601146ce4a30afe0fe4cf36f51a9b9a9a8c7d563ba21b709c869bd887ad40695e45132e1b154408353fd77a8eb42803469cbd4772ef1997240d7f1640603d2639bbcf1dba2cda667d5cd25990b4c01acbebf9f401c39abf4bf2e8629b3e3255e75a893c43ad22003229f33c2297735a730d0899c07cf951389894039b383c5aa40d22ba32f399bf17d31a2476a77315d2ca1ed95637457ee18cf966c652ac2ae10a9618299cadb74bf01cd491815b3b6b5f8813fc1dfcf1030789ad5c3413a91968913f44677e5a97aca24a37900c6b090ba68f5b61c5f386c335dc278dc06783a10c22d95f402f0c0b8938db0c9c0faf5bd45728249674bff205d60b1028bd0403e0933eb2d2a5b61dac6b95156b6bd50c8335afa9e0e47a234b455015bb81fe40c71a2b1f024bbe76d7a383ff95c291a6ce5490c9532ef6b1b6836290984ff2ae374248d038e436be2b868653b9d8b85c8dbc6050ea3af0a246ca81d4c957d1a1b8080d0a91f9a1a113ebe781f1be989e62c9b00e031a52eaa15a4b8c32a6a942939fca78849dde2d01af4e18d58982c4186aad338c1c3fbf22ef2a2780d5a34965038ec3f51bd8ea590859e87945c33e480dedfeac0211ce4a198321c1030cbfc7695b2f63cd13c7daee04a7359c39845b11f29907695933fc61705eec2e3150be68a4102554f35a99c649e8bc178dcf5c4f8e79230a0e098305cdd9b7571dc5daef42fbea55620021dade0fde569e2a11278e54f546b6f3d169c5a2ea34b9859647cdd14fafb61d1a2fbc74afea4bc08ac024c180ded15874fb5d51e671d103f62aba0cb0f66c2a1e465ad478334dd3106aaac2c1e37ed1b3189a2e2e9fe9dcb9626f6b4eea1fcfe94bd52d7f53e45ef7f3ba287b2e704d899b8927fb4ff3abbc8def0416384a3a65201e639f8933569a068ee40fb89b5d33420f7b4f1f3541d1d287779a09791218b3a3fa324cb19d3d66d72973310eb15ce4469c3e50905c7a8bbb000eee3c150a6ca1068c4400055987e65470ac55b7cb662630f1d9995c3e9e158c581f3c73686308f364bee8503a04afe98f16e1fcb16018f6139d2223d785dc2c207efa1ade2497291512a695d9c70d4fecfd5cfbad8e0ef1a8f7cf3f69658f0caf9cf3694e08f9d20de3305004e1a983d4c672fbe931ad7cdc339b47f3642f64f09cda6a815ff7e95195cdb55b2e5f508160f861f0296673917c473e665f2d8d7888011b3d582e059a039c7d12691c505fb90d5b05496190bf6d94ab792302bc6439a547e10d8b2eea8cf6b2005d4732230cfa00bdc7c0a6b382277a98d2e6c7c83666b6d3b9a5b954076bc30e322361b29aabcfdcaa986d5213fe69a54a71692324e212ad3476384ad6eef3162a99be2a61c8dd7f45f8d3ad2586a3a514006ae25ec95757098efbba74adb1b6ebc1a1a897de5f62928a99c918085d63c8d894f567f13af51b48823bd6db6a21b574883e323d34246146582c11d26e0f24f6610d00b527d9a225348de27c1a515c0e966608d0efcace57e5f04f43eec8b8f1dee8c8211cb2331a599459f2e79781dd427efe966d605f39bf306f5b98a4ae1a39a5f3711a4cde3934ca3f965855e4a422d42f8bd27502fb083a439922b4d04a6bf015d6177ac1be018afb3e2f7b9de4938b45921a434e5f7190cb90ececba69f8388f27185718ac48e9f15537e54395a8bb471829cf7de7d4494dd425357dad724bd26a850bb1d817b13672e66d5f72ec9793727bbe366c71784e82ab80f52eaff6749c2e0d8da9885ce07c10aa23f810237dabfca96684de1affc67f844e635bab21a9f713069cccd68ab535b43af25bc604294e2f3bb776e2cc2345f5dcc583666a5737a0c567c29c3c172bf5e579670d62c8809e0fd3170e273eaaa866e856b5928c4942d3b1cc94e89f7df3689270e5cab4e27ccb293df6b67dca7d63adfdb169197481f7784ec1d705256fa1ee073702ef1ea84bcfd22c997f0fcde4e143bfc798c9eb7ed508fb6aa3ae045e541f327301cf59283e9a35164331839b02e52065a0236a4b27b1076e80ec1b3c1afb6920f12741bd8c4db5212fcb8702d10e20bc524581fd7371d7e5bae69e41cdfd3b593d7fde7d42878555d1ec19601be7263ceb5389495556fe7ef08308c83741bce08559f5de345d1a845b14e380fbc0468a348fa64f1fe8d576b2d4b1b7a015f656e18691ab73eed0d4f45a8025a41570b826d682a573f25dd1cf49608f9affe52f37c67d99a904f822dfcc4ff6505bc5c6ba2f9a1d0b9d9bbbe8f5866a1880ee83f1fedbdd6d8ad4ad360346cbfd97e8d705a9fdb55d6504c220af8fe1fbec2ffead3dd5d84f94509445044a6612eb07fc3ac8c0cd705db4a8a3c05bcc7b575c90b753983364c5584f597c56f62d4cd7538fc3f27371c2f4380ddab350ed71d3c6d3107293fa68205307258a2575b0eeda4b4df57af2568d5b8985b03b25a53dbc9ed7587d05adc571086fc6d8bdce131170b8318c7ecd72c3755d89fe03972cb8573e91d8baf6228f5bdd3d72c06fd0e408dc62a2171e5e7fbc30688939a7076eb3f3fd9e136926a9abe8426f39fbe850ebfd3869c3252543cb51a9f3123bb8e323e50cef16fc30d08d404e9f3f8164715d4544271205e5643379e0380673d961c363862eeb168d623b7d33f9c5b3b2887b04f5789a441599d2fa3e3927c3ac122534e5a53c40213808168c4575524687364e033daaebd067c03af9c3cd205dc07cc8c8a3e48e84f3535c37341320f9d8da0a374a0009bde7bd5ce4f97703178c35fc9f2ba1788961f27b3e614e9eeaed3b5507fae2cc3f257876d7682cacc3ddf8e389c54d2eeffc5b476aa18ee57cc6868a562d85f118791f1cbe1ae7e03114d0c9d06016b3e3b5f508e88ce3340cdcdbc189c999b254a37b6719586e2990d21b4a89eeffcc3f8e3b434339976a6369b435f1610ffb4ee1903a3a006c654525c0ba6a8ae1488b073fd4c1b5da48789446ad2e6246156b3153960875e0ec71e9cb531378843c8a4089270aebf85d0e0de179a2a617b08d4036ed24d40fcc1a940f1cb069577b1919e4631fd24ea87bc2e8a7ea69a78a11f07178a617355a818e4db3e7bc42930ea02400314a2f82f707e016d5d431803a6de8e9c64fc4f1b4ebc7b5d794d4e4a6e3fb0428e2916fea2d3623b1ec80b63aaa11826d3a4d7e9d882b113d578f33608439c2dcea533498fea6b9a10a2301c783ccb703e5f8db76242a1ecdbae2de3071e57612eb67bf33c0e8d33d42230aebf180b859c5feb6fadfed5e657421ca156bc8f59c8f195d03dc1010b57c357d17b903fb8e68eec51702310cb2f71ed56c47415702e7de7f86b5de0246e958640c0054c9d2d55cf700cfd2e885e96868a4c71e9108d8e5b1d07ac62e052a96d2ac4670f1a044830fbbb201df07c60f4e6a3938795c6edff81cf6914786739e8cced47b8e56321df79bafb7e5970155e86aaf30b007d5a8a9cbdec391db09b22807422a144847ce08f4ba7b7645c0eacee275eb2cd39c03778a3ff0cd2e61d8ea7e89de293d40a63d720f521bd8fe3cb1ee32c0add7d28c93f5c3d63e5ed8336fab30cf23969a0aa0f515c77f5d9588a7f51aeff3eb1706e2a4503e5158cdb490c5fdceda6f99fe7f4b69cd77fedebabc7cee7ccf199864d9a43634e549484060ef8dd2906dc93bdd3afccfa9d6029b156972f07e9d0d5e6b9b9d8c972a38f8274e8b640f71fad80f84578fae625dad4c19f1093d46b60959c3dc915ca21fabbd0c103e27e976f27693ebb5400cf4f6c650e789b43b37aef6697ff7f34017c14e2ffa636289b8d4151dedb10bc267bc2983fea93d44307a869bd24ce657dd16b129be354935e8c21a939731e71a5f363c78906925004094dc06e6242e1c5d81780f29531000e3581e1b894ca13685dcf1f452ecfe0b7be922005ab74c7580784ea26fbb66c51d3d0e123377bdfa916b420fdf30f07dc62d01b8e53cad439f15c315edf4a643b018cbde7c0605f63db25b84b0f1e7bd00f9e89c719d7f647f84f5569e70e9f96716f261df57623cd87bb0e52940af7ab0fdc4dbd1a670a4090462a92629f45485d8c49fc5ac4a521d17389933f176ead9ba0bc07d2abcf09568993d9aa96303457d0439a13b06d0d3d9b128c515cab6f2d3f652b3fc7acc32621e7f64d3182d1a0cb5f89a7caaea5eed2d956151765a58285adafbeff7f52adbb839d8b87c1291277b566ecac2cfb035cb8"}}}}}, 0x0)

230.024621ms ago: executing program 1 (id=681):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$802154_raw(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="711f664e185906a9b8e2818bb9", 0xd}, 0x1, 0x0, 0x0, 0x20040040}, 0x4044014)
recvmmsg(r4, &(0x7f0000002e40)=[{{0x0, 0xffffffffffffff22, 0x0, 0x0, 0x0, 0x3b}}], 0x40000000000019e, 0x142, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x1, 0xdffffffe)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000f8102e47f70000140012800900010076657468000000000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
socket$can_bcm(0x1d, 0x2, 0x2)
r9 = socket(0x1e, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="06253bfd0dc2c40a2985c92cbf021008000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r10, 0x0, 0x80, 0x0, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r11)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58da402486ff3e32e31fc038b8c02de0a779db06ff7da479cd2f4527242dd7b1d211f55913d1742e58bd760c7f7d8fba35ddadd04b7aaaeef220fa36d22e54524a04f67c7001a47d5eb572fa8e6f4aef5f9303f6501d19e355afbe4cd7dc8247b56c3a1b50277dc8c5778c6b941c920b8a861fc7", @ANYRES16=r12, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000034000480050003000100000005000300010000000500030001000000050003000200000005000300050000000500030007000000080002"], 0x58}}, 0x0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r13, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)

228.96815ms ago: executing program 2 (id=682):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r0, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

160.08425ms ago: executing program 2 (id=683):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf30, 0x30, 0xb, 0x0, 0x0, {}, [{0xf1c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xed0, 0x2, 0x0, 0x0, {{0xa}, {0xea4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fefffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4890}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x6602}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf30}}, 0x0)

80.142958ms ago: executing program 2 (id=684):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000)

0s ago: executing program 1 (id=685):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0xd9, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x400)
close(r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="070000000000000004000000", @ANYRES32=r4, @ANYBLOB="e5d18ec9254332bc09edbc7338d9771f4e050bdef55206cf33fb72e76cd69f783a2fee6d8f40e693a69684a26fdfaa9c100bdd91d0c1fa478abbcea083941f2e57b2031f7b669aee866937eca7d96244cbaa845f5209f481d0ca2e90be573cecbd02a55f67cac760736ea9011c2a10466f79b4aa2e5f06b50d327a320f38bb7026cf53b2249486e45a5a8235103a2bdf63609bceef4b695548e2173a98d6204788ed6cf9b9719343f584f4a1b4143d8ef63ea83bf61a40d2669fa8ae", @ANYRES64=0x0], 0x20)
bind$bt_l2cap(r2, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003200)=ANY=[@ANYBLOB="2400e901", @ANYRES32=r9, @ANYBLOB="0c0001800500060002000000"], 0x24}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000040900010073797a30000000000900020073797a010000000000000080140001800e000100636f6e6e6c696d69740000000500074012000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x4004084)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r10, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r11 = socket$netlink(0x10, 0x3, 0x4)
writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60011' (ED25519) to the list of known hosts.
syzkaller login: [   49.307181][ T5755] cgroup: Unknown subsys name 'net'
[   49.416392][ T5755] cgroup: Unknown subsys name 'cpuset'
[   49.422411][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.234225][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.223650][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.227032][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.230039][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.233491][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.237343][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.245778][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.251328][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.254274][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.261833][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.264824][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.297162][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.301962][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.305972][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.309362][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.312135][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.577564][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.599949][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   55.634359][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.733619][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.736523][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.739110][ T5831] bridge_slave_0: entered allmulticast mode
[   55.741923][ T5831] bridge_slave_0: entered promiscuous mode
[   55.761035][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.763726][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.766320][ T5831] bridge_slave_1: entered allmulticast mode
[   55.769404][ T5831] bridge_slave_1: entered promiscuous mode
[   55.823601][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.826812][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.829904][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.833839][ T5823] bridge_slave_0: entered allmulticast mode
[   55.837850][ T5823] bridge_slave_0: entered promiscuous mode
[   55.856036][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.859211][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.862244][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.865981][ T5827] bridge_slave_0: entered allmulticast mode
[   55.869875][ T5827] bridge_slave_0: entered promiscuous mode
[   55.875115][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.877999][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.881190][ T5823] bridge_slave_1: entered allmulticast mode
[   55.886082][ T5823] bridge_slave_1: entered promiscuous mode
[   55.925210][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.927858][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.930605][ T5827] bridge_slave_1: entered allmulticast mode
[   55.934628][ T5827] bridge_slave_1: entered promiscuous mode
[   55.965109][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.970099][ T5831] team0: Port device team_slave_0 added
[   55.974166][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.991277][ T5831] team0: Port device team_slave_1 added
[   56.010746][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.017751][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.060213][ T5823] team0: Port device team_slave_0 added
[   56.070395][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.073318][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.084308][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.089887][ T5823] team0: Port device team_slave_1 added
[   56.096688][ T5827] team0: Port device team_slave_0 added
[   56.099729][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.102160][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.110881][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.117319][ T5827] team0: Port device team_slave_1 added
[   56.177602][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.180241][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.190978][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.196932][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.199863][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.211321][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.230163][ T5831] hsr_slave_0: entered promiscuous mode
[   56.232545][ T5831] hsr_slave_1: entered promiscuous mode
[   56.235760][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.238211][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.246882][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.251122][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.254657][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.266900][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.320294][ T5823] hsr_slave_0: entered promiscuous mode
[   56.323873][ T5823] hsr_slave_1: entered promiscuous mode
[   56.326152][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.329216][ T5823] Cannot create hsr debugfs directory
[   56.394535][ T5827] hsr_slave_0: entered promiscuous mode
[   56.397657][ T5827] hsr_slave_1: entered promiscuous mode
[   56.400772][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.405419][ T5827] Cannot create hsr debugfs directory
[   56.695889][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.705532][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.712721][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.720262][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.779153][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.802549][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.809871][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.832328][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.868095][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.876464][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.882638][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.890820][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.986204][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.020018][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   57.031358][  T741] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.034439][  T741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.048037][  T741] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.051230][  T741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.097107][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.124296][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.159428][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   57.178340][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   57.195206][  T741] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.197889][  T741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.214479][  T741] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.217585][  T741] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.227341][  T741] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.230626][  T741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.284630][   T55] Bluetooth: hci1: command tx timeout
[   57.286913][  T741] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.287155][   T55] Bluetooth: hci0: command tx timeout
[   57.289813][  T741] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.375823][ T5224] Bluetooth: hci2: command tx timeout
[   57.455127][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.530401][ T5831] veth0_vlan: entered promiscuous mode
[   57.539660][ T5831] veth1_vlan: entered promiscuous mode
[   57.556468][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.581899][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.598701][ T5831] veth0_macvtap: entered promiscuous mode
[   57.616520][ T5831] veth1_macvtap: entered promiscuous mode
[   57.647885][ T5827] veth0_vlan: entered promiscuous mode
[   57.663051][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.672353][ T5827] veth1_vlan: entered promiscuous mode
[   57.675431][ T5823] veth0_vlan: entered promiscuous mode
[   57.680504][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.701723][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.706632][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.710101][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713991][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.725111][ T5823] veth1_vlan: entered promiscuous mode
[   57.786548][ T5823] veth0_macvtap: entered promiscuous mode
[   57.804661][ T5827] veth0_macvtap: entered promiscuous mode
[   57.816866][ T5823] veth1_macvtap: entered promiscuous mode
[   57.821970][ T5827] veth1_macvtap: entered promiscuous mode
[   57.861216][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.861355][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.868727][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.872697][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.887919][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.899174][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.908006][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.911734][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.916424][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.919814][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.951101][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.955377][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.958808][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.962289][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.977445][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.982426][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.046586][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.055124][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.058193][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.114335][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.117442][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.154010][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.154108][  T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.157147][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.160197][  T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.169353][ T5895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.287423][ T5899] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   58.300022][ T5901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.358870][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.469894][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.576893][ T5919] sock: sock_timestamping_bind_phc: sock not bind to device
[   58.579812][ T5919] sctp: [Deprecated]: syz.2.9 (pid 5919) Use of int in max_burst socket option.
[   58.579812][ T5919] Use struct sctp_assoc_value instead
[   58.660974][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'.
[   58.909869][ T5940] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14'.
[   58.917099][ T5940] netlink: 108 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.034722][ T5942] Zero length message leads to an empty skb
[   59.160952][ T5952] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   59.234956][ T5960] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   59.297137][ T5965] netlink: 'syz.1.22': attribute type 32 has an invalid length.
[   59.300142][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   59.304152][ T5965] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   59.363676][ T5224] Bluetooth: hci0: command tx timeout
[   59.367579][ T5224] Bluetooth: hci1: command tx timeout
[   59.456506][   T55] Bluetooth: hci2: command tx timeout
[   59.727349][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.732313][ T6001] xt_CT: No such helper "snmp"
[   59.820522][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'.
[   59.883744][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'.
[   59.930987][ T6016] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   59.938542][ T6016] netlink: 'syz.0.36': attribute type 3 has an invalid length.
[   59.948873][ T6016] netlink: 224 bytes leftover after parsing attributes in process `syz.0.36'.
[   59.956722][ T6017] : renamed from lo (while UP)
[   60.194634][ T6031] xt_l2tp: invalid flags combination: 8
[   60.302185][ T6040] syz.1.43 uses obsolete (PF_INET,SOCK_PACKET)
[   60.338022][ T6035] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   60.351116][ T6035] bridge1: the hash_elasticity option has been deprecated and is always 16
[   60.354007][ T6035] bridge1: entered promiscuous mode
[   60.355810][ T6035] bridge1: entered allmulticast mode
[   60.374440][ T6035] team0: Port device bridge1 added
[   60.418388][ T6043] Illegal XDP return value 4294967283 on prog  (id 12) dev N/A, expect packet loss!
[   60.424614][ T6045] netlink: 'syz.2.44': attribute type 10 has an invalid length.
[   60.475940][ T6047] IPVS: length: 24 != 12312
[   60.677702][   T33] audit: type=1107 audit(1753124423.394:2): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']=g
[   60.677702][   T33] Ä|LpoS'sKSS :Qk,-&J@yx&ŕ?tu{"~d==rVS'
[   60.775760][ T6066] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.296662][ T6089] Bluetooth: MGMT ver 1.23
[   61.447745][   T55] Bluetooth: hci1: command tx timeout
[   61.450000][   T55] Bluetooth: hci0: command tx timeout
[   61.524694][ T5224] Bluetooth: hci2: command tx timeout
[   61.638645][ T6119] netlink: 'syz.0.64': attribute type 1 has an invalid length.
[   61.651329][ T6119] vlan2: entered promiscuous mode
[   61.655686][ T6119] batadv_slave_0: entered promiscuous mode
[   61.657898][ T6119] vlan2: entered allmulticast mode
[   61.660099][ T6119] batadv_slave_0: entered allmulticast mode
[   61.766982][ T6125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.814551][ T6131] openvswitch: netlink: Unknown nsh attribute 0
[   61.817143][ T6131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.393066][ T6170] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[   62.695340][ T6172] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   62.706689][ T6172] macvlan2: entered promiscuous mode
[   62.709029][ T6172] macvlan2: entered allmulticast mode
[   62.711743][ T6172] bond2: (slave macvlan2): Error -98 calling set_mac_address
[   62.846318][ T6177] 8021q: VLANs not supported on ipvlan0
[   63.072176][ T6198] trusted_key: syz.0.89 sent an empty control message without MSG_MORE.
[   63.130073][ T6200] openvswitch: netlink: Missing key (keys=40, expected=100)
[   63.282363][ T6213] __nla_validate_parse: 29 callbacks suppressed
[   63.282374][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.288245][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.291186][ T6213] netlink: 'syz.0.96': attribute type 20 has an invalid length.
[   63.298991][ T6213] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.301995][ T6213] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.305105][ T6213] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.308208][ T6213] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.319403][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.322233][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'.
[   63.332491][ T6213] netlink: 'syz.0.96': attribute type 20 has an invalid length.
[   63.337583][ T6216] No such timeout policy "syz0"
[   63.411349][ T6222] netlink: 'syz.2.100': attribute type 1 has an invalid length.
[   63.417947][ T6222] netlink: 228 bytes leftover after parsing attributes in process `syz.2.100'.
[   63.523070][ T5224] Bluetooth: hci0: command tx timeout
[   63.524949][   T55] Bluetooth: hci1: command tx timeout
[   63.602882][ T5224] Bluetooth: hci2: command tx timeout
[   63.757479][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   63.851591][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'.
[   64.400045][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'.
[   64.660658][ T6294] tipc: Started in network mode
[   64.662470][ T6294] tipc: Node identity 66dd58d5ff91, cluster identity 4711
[   64.665462][ T6294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.668316][ T6294] syzkaller0: entered promiscuous mode
[   64.670382][ T6294] syzkaller0: entered allmulticast mode
[   64.679670][ T6294] sch_fq: defrate 257 ignored.
[   64.686027][ T6294] tipc: Resetting bearer <eth:syzkaller0>
[   64.694254][ T6293] tipc: Resetting bearer <eth:syzkaller0>
[   64.710271][ T6293] tipc: Disabling bearer <eth:syzkaller0>
[   64.806691][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'.
[   65.038988][ T6314] netlink: 'syz.2.130': attribute type 10 has an invalid length.
[   65.041804][ T6315] syz.1.131 (6315) used obsolete PPPIOCDETACH ioctl
[   65.075071][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'.
[   65.867592][ T6395] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.547259][ T6425] sit0: entered promiscuous mode
[   66.878833][ T6450] syzkaller1: entered promiscuous mode
[   66.881479][ T6450] syzkaller1: entered allmulticast mode
[   67.140844][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.157466][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.161644][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.192074][ T6476] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.214754][ T6476] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   67.267286][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.270561][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.274225][ T6476] wg1 speed is unknown, defaulting to 1000
[   67.417167][ T6495] bridge1: left promiscuous mode
[   67.798554][ T6527] syzkaller1: entered promiscuous mode
[   67.801944][ T6527] syzkaller1: entered allmulticast mode
[   67.960147][ T6536] netlink: 'syz.0.191': attribute type 11 has an invalid length.
[   68.404780][ T6558] __nla_validate_parse: 16 callbacks suppressed
[   68.404790][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.411462][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.417090][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.422916][ T6558] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.504662][ T6565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.508164][ T6566] syzkaller0: entered promiscuous mode
[   68.510692][ T6566] syzkaller0: entered allmulticast mode
[   68.531474][ T6567] tipc: Resetting bearer <eth:syzkaller0>
[   68.554284][ T6567] tipc: Disabling bearer <eth:syzkaller0>
[   68.800084][ T6581] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.805485][ T6581] netlink: 'syz.2.206': attribute type 23 has an invalid length.
[   68.951919][ T2285] cfg80211: failed to load regulatory.db
[   68.974683][ T6586] netlink: 85 bytes leftover after parsing attributes in process `syz.2.207'.
[   69.090022][ T6590] netlink: 'syz.0.210': attribute type 15 has an invalid length.
[   69.438858][ T6614] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.216'.
[   70.595246][ T6644] syz_tun: entered allmulticast mode
[   70.615094][ T6644] dvmrp8: entered allmulticast mode
[   70.680429][ T6646] syz_tun: left allmulticast mode
[   70.774563][ T6649] syz_tun: entered allmulticast mode
[   70.780220][ T6648] syz_tun: left allmulticast mode
[   70.885369][ T6651] bridge1: entered allmulticast mode
[   70.890045][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.897605][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.080655][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.083940][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.088445][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.092207][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.206658][ T6660] bridge3: entered promiscuous mode
[   71.208851][ T6660] bridge3: entered allmulticast mode
[   71.224750][ T6660] team0: Port device bridge3 added
[   71.447552][ T6661] infiniband syz1: set active
[   71.450829][ T6661] infiniband syz1: added macvlan1
[   71.456254][ T6661] syz1: rxe_create_cq: returned err = -12
[   71.459139][ T6661] infiniband syz1: Couldn't create ib_mad CQ
[   71.461940][ T6661] infiniband syz1: Couldn't open port 1
[   71.486623][ T6661] RDS/IB: syz1: added
[   71.493645][ T6661] smc: adding ib device syz1 with port count 1
[   71.496769][ T6661] smc:    ib device syz1 port 1 has pnetid 
[   71.578528][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.236'.
[   71.658704][ T6677] ipvlan2: entered promiscuous mode
[   72.192539][ T6693] netlink: 'syz.2.243': attribute type 12 has an invalid length.
[   72.218260][ T6695] netlink: 'syz.1.244': attribute type 1 has an invalid length.
[   72.445086][ T6708] netlink: 'syz.1.247': attribute type 1 has an invalid length.
[   72.689509][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'.
[   72.700439][ T6718] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   72.704223][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'.
[   72.708580][ T6717] ipt_ECN: cannot use operation on non-tcp rule
[   72.863576][ T6727] xt_ecn: cannot match TCP bits for non-tcp packets
[   72.884673][ T6727] netlink: 'syz.1.254': attribute type 4 has an invalid length.
[   72.911842][ T6727] netlink: 'syz.1.254': attribute type 4 has an invalid length.
[   72.938819][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'.
[   73.089641][ T6737] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   73.250919][ T6752] syz_tun: entered allmulticast mode
[   73.337806][ T6752] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   73.346185][ T6751] syz_tun: left allmulticast mode
[   73.382276][ T6762] netlink: 'syz.1.265': attribute type 1 has an invalid length.
[   73.439937][ T6765] __nla_validate_parse: 5 callbacks suppressed
[   73.439958][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'.
[   73.455423][ T6765] netlink: 'syz.1.267': attribute type 1 has an invalid length.
[   73.486042][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.498788][ T6765] bond3: (slave gretap1): making interface the new active one
[   73.506283][ T6765] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   73.519181][ T6765] vlan2: entered allmulticast mode
[   73.521536][ T6765] bond3: entered allmulticast mode
[   73.524007][ T6765] gretap1: entered allmulticast mode
[   73.528783][ T6765] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   73.766658][ T6778] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.273'.
[   73.825634][ T6780] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.936211][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.277'.
[   73.940383][ T6787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.277'.
[   73.946523][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'.
[   74.071654][ T6800] validate_nla: 1 callbacks suppressed
[   74.071665][ T6800] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[   74.085643][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'.
[   74.137953][ T6800] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.166192][ T6793] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.278'.
[   74.645938][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[   74.777634][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[   74.784325][ T6848] netlink: 'syz.1.296': attribute type 7 has an invalid length.
[   74.787552][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.296'.
[   74.828705][ T6850] netlink: 'syz.2.298': attribute type 10 has an invalid length.
[   74.857930][ T6850] 8021q: adding VLAN 0 to HW filter on device team0
[   74.863569][ T6850] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.196126][ T6875] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   75.274404][ T6879] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   75.476696][ T6890] netlink: 'syz.1.310': attribute type 7 has an invalid length.
[   75.479502][ T6890] netlink: 'syz.1.310': attribute type 8 has an invalid length.
[   75.516542][ T6892] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   75.560102][ T6892] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.590759][ T6892] veth3: entered promiscuous mode
[   75.597757][ T6892] bond2: (slave veth3): Enslaving as an active interface with a down link
[   75.905749][ T6924] x_tables: duplicate underflow at hook 1
[   75.919339][ T6924] netlink: 'syz.2.318': attribute type 32 has an invalid length.
[   76.167206][ T6949] xt_HMARK: spi-set and port-set can't be combined
[   76.212517][ T6952] netlink: 'syz.0.324': attribute type 13 has an invalid length.
[   76.379147][ T6960] SET target dimension over the limit!
[   76.694905][ T6969] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.812478][ T6975] syzkaller1: entered promiscuous mode
[   76.816036][ T6975] syzkaller1: entered allmulticast mode
[   76.955150][ T6981] netlink: 'syz.2.334': attribute type 1 has an invalid length.
[   77.052718][ T6989] syzkaller0: entered promiscuous mode
[   77.054688][ T6989] syzkaller0: entered allmulticast mode
[   77.061166][   T13] bond0: (slave bond_slave_0): interface is now down
[   77.064578][ T6989] bond0: option arp_validate: invalid value (18446744073491447809)
[   77.067633][   T13] bond0: (slave bond_slave_1): interface is now down
[   77.071777][   T13] bond0: now running without any active interface!
[   77.828358][ T6994] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   77.833523][ T6994] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   77.937526][ T7001] netlink: 'syz.1.341': attribute type 11 has an invalid length.
[   78.079807][ T7015] netlink: 'syz.2.348': attribute type 11 has an invalid length.
[   78.523017][ T7058] __nla_validate_parse: 19 callbacks suppressed
[   78.523032][ T7058] netlink: 44 bytes leftover after parsing attributes in process `syz.1.362'.
[   78.638976][ T7073] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   78.661961][ T7075] xt_CT: You must specify a L4 protocol and not use inversions on it
[   79.603987][ T7093] validate_nla: 8 callbacks suppressed
[   79.603997][ T7093] netlink: 'syz.0.372': attribute type 1 has an invalid length.
[   79.649643][ T7093] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   79.650936][ T7100] netlink: 104 bytes leftover after parsing attributes in process `syz.2.373'.
[   79.654262][ T7093] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   79.665225][ T7093] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   79.669640][ T7093] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   79.669916][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   79.675474][ T7093] bond4: (slave geneve2): making interface the new active one
[   79.681695][ T7093] bond4: (slave geneve2): Enslaving as an active interface with an up link
[   79.744057][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'.
[   79.815186][ T7093] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[   79.821937][ T7102] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.828392][ T7093] syz.0.372 (7093) used greatest stack depth: 18872 bytes left
[   79.920924][ T7107] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   79.937469][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'.
[   79.992673][ T7120] netlink: 163952 bytes leftover after parsing attributes in process `syz.2.376'.
[   80.882727][ T7135] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.885961][ T7135] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.924574][ T7139] x_tables: duplicate underflow at hook 1
[   80.960808][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.971583][ T7135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.985122][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.041424][ T7135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.046733][ T7135] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.050147][ T7135] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.053856][ T7135] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.092243][ T7135] bridge1: left allmulticast mode
[   81.102393][ T7135] bridge3: left promiscuous mode
[   81.105048][ T7135] bridge3: left allmulticast mode
[   81.113355][ T7133] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   81.116920][ T7133] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   81.126615][ T2285] syz1: Port: 1 Link DOWN
[   81.145031][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'.
[   81.229625][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.241612][ T7146] syz.1.384 uses old SIOCAX25GETINFO
[   81.299467][ T7152] sctp: [Deprecated]: syz.2.385 (pid 7152) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.299467][ T7152] Use struct sctp_sack_info instead
[   81.310537][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[   81.754150][ T7181] netlink: 68 bytes leftover after parsing attributes in process `syz.0.391'.
[   82.727700][ T7215] netlink: 'syz.2.399': attribute type 10 has an invalid length.
[   83.418147][ T7226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.455905][ T7228] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   83.726182][ T7251] set match dimension is over the limit!
[   83.787413][ T7255] __nla_validate_parse: 4 callbacks suppressed
[   83.787427][ T7255] netlink: 156 bytes leftover after parsing attributes in process `syz.2.411'.
[   83.797150][ T7255] netlink: 'syz.2.411': attribute type 1 has an invalid length.
[   83.841308][ T7255] bond3: (slave bridge2): making interface the new active one
[   83.845434][ T7255] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   84.075919][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'.
[   84.099071][ T7282] wg1 speed is unknown, defaulting to 1000
[   84.794877][ T7300] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   84.808127][ T7303] macvlan0: entered promiscuous mode
[   84.820074][ T7303] netlink: 'syz.0.423': attribute type 1 has an invalid length.
[   84.836027][ T7303] netlink: 'syz.0.423': attribute type 2 has an invalid length.
[   84.900754][ T7311] netlink: 156 bytes leftover after parsing attributes in process `syz.1.426'.
[   84.907419][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.426'.
[   85.011239][ T7329] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   85.179776][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.437'.
[   85.214676][ T7341] syzkaller0: entered promiscuous mode
[   85.217930][ T7341] syzkaller0: entered allmulticast mode
[   85.781293][ T7350] batadv0: entered promiscuous mode
[   85.830067][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[   85.882295][ T7349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.905380][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'.
[   85.945140][ T7349] siw: device registration error -23
[   85.971255][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'.
[   85.978336][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'.
[   85.981385][ T7365] netlink: 'syz.2.444': attribute type 1 has an invalid length.
[   85.984937][ T7365] netlink: 10 bytes leftover after parsing attributes in process `syz.2.444'.
[   86.053823][   T56] block nbd0: Receive control failed (result -32)
[   86.284776][ T7386] sock: sock_set_timeout: `syz.2.448' (pid 7386) tries to set negative timeout
[   86.745634][ T7400] netlink: 'syz.1.451': attribute type 7 has an invalid length.
[   86.748297][ T7400] netlink: 'syz.1.451': attribute type 8 has an invalid length.
[   86.757237][ T7400] gretap0: entered promiscuous mode
[   86.760060][ T7400] batadv_slave_1: entered promiscuous mode
[   86.762401][ T7400] erspan0: entered promiscuous mode
[   86.766063][ T7400] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[   86.769244][ T7400] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.772963][ T7400] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[   87.117947][ T7428] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   87.314186][ T7434] netlink: 'syz.2.458': attribute type 21 has an invalid length.
[   87.836941][ T7424] Bluetooth: hci0: Opcode 0x080f failed: -4
[   87.939243][    C1] Unknown status report in ack skb
[   88.045881][ T7452] wg1 speed is unknown, defaulting to 1000
[   88.130071][ T7453] syzkaller1: entered promiscuous mode
[   88.131988][ T7453] syzkaller1: entered allmulticast mode
[   88.401294][ T7463] bpq0: entered promiscuous mode
[   88.547529][ T7467] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.854783][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.882424][ T7477] __nla_validate_parse: 8 callbacks suppressed
[   88.882438][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.885687][ T7476] bridge0: port 3(vlan2) entered blocking state
[   88.897351][ T7476] bridge0: port 3(vlan2) entered disabled state
[   88.900678][ T7476] vlan2: entered allmulticast mode
[   88.907379][ T7476] bond0: entered allmulticast mode
[   88.910322][ T7476] bond_slave_0: entered allmulticast mode
[   88.913661][ T7476] bond_slave_1: entered allmulticast mode
[   88.919831][ T7476] vlan2: entered promiscuous mode
[   88.922028][ T7476] bond0: entered promiscuous mode
[   88.924355][ T7476] bond_slave_0: entered promiscuous mode
[   88.927052][ T7476] bond_slave_1: entered promiscuous mode
[   88.991879][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'.
[   88.997691][ T7482] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   89.000959][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.006016][ T7479] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   89.009722][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[   89.124653][ T5224] Bluetooth: hci0: command 0x080f tx timeout
[   89.137399][ T7493] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   89.226495][ T7495] netlink: 'syz.0.475': attribute type 13 has an invalid length.
[   89.229758][ T7495] netlink: 'syz.0.475': attribute type 17 has an invalid length.
[   89.267995][ T7495] sit0: left promiscuous mode
[   89.299486][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.304901][ T7495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.346892][ T7496] wg1 speed is unknown, defaulting to 1000
[   89.714573][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'.
[   89.782520][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'.
[   89.955237][ T7527] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   90.127821][   T13] tipc: Subscription rejected, illegal request
[   90.224847][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'.
[   90.265220][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   90.461040][ T7571] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.480609][ T7573] bpq0: left promiscuous mode
[   90.509771][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'.
[   90.512707][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'.
[   90.516032][ T7575] netlink: 'syz.0.503': attribute type 1 has an invalid length.
[   90.518631][ T7575] netlink: 10 bytes leftover after parsing attributes in process `syz.0.503'.
[   90.594971][   T56] block nbd1: Receive control failed (result -32)
[   91.228075][ T7588] netlink: 'syz.2.508': attribute type 17 has an invalid length.
[   91.232371][ T7588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.568644][ T7609] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   91.582944][ T7609] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[   91.586401][ T7609] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[   91.654338][ T7613] wg1 speed is unknown, defaulting to 1000
[   91.711155][ T7619] netlink: 'syz.2.521': attribute type 11 has an invalid length.
[   91.915198][ T7623] bond0: entered promiscuous mode
[   91.917538][ T7623] bond_slave_0: entered promiscuous mode
[   91.920279][ T7623] bond_slave_1: entered promiscuous mode
[   91.931526][ T7623] team0: entered promiscuous mode
[   91.934153][ T7623] team_slave_0: entered promiscuous mode
[   91.937311][ T7623] team_slave_1: entered promiscuous mode
[   92.069193][ T7633] syzkaller1: entered promiscuous mode
[   92.071519][ T7633] syzkaller1: entered allmulticast mode
[   92.275024][ T7637] macsec1: entered promiscuous mode
[   92.277518][ T7637] macsec1: entered allmulticast mode
[   92.524423][ T7654] tipc: Started in network mode
[   92.526857][ T7654] tipc: Node identity ae93d98c5ad5, cluster identity 4711
[   92.530301][ T7654] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.534707][ T7654] syzkaller0: entered promiscuous mode
[   92.537243][ T7654] syzkaller0: entered allmulticast mode
[   92.555512][ T7654] tipc: Resetting bearer <eth:syzkaller0>
[   92.560460][ T7652] tipc: Resetting bearer <eth:syzkaller0>
[   92.570767][ T7652] tipc: Disabling bearer <eth:syzkaller0>
[   92.758129][ T7666] delete_channel: no stack
[   92.950927][ T7678] No such timeout policy "syz0"
[   93.051207][ T7688] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[   93.054741][ T7688] netlink: 'syz.2.545': attribute type 2 has an invalid length.
[   93.139893][ T7693] nft_compat: unsupported protocol 0
[   93.182357][ T7700] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   93.437946][ T7709] wg1 speed is unknown, defaulting to 1000
[   93.491605][ T7710] wg1 speed is unknown, defaulting to 1000
[   93.664834][ T7716] IPv6: sit1: Disabled Multicast RS
[   93.901347][ T7727] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   94.205687][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.307953][ T7753] delete_channel: no stack
[   94.422255][ T7758] __nla_validate_parse: 6 callbacks suppressed
[   94.422270][ T7758] netlink: 128 bytes leftover after parsing attributes in process `syz.2.569'.
[   94.500529][ T7758] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   94.818223][ T7785] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.575'.
[   95.074172][ T7810] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   95.121898][ T7814] wg1 speed is unknown, defaulting to 1000
[   95.278125][ T7818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.280969][ T7818] syzkaller0: entered promiscuous mode
[   95.284230][ T7818] syzkaller0: entered allmulticast mode
[   95.325594][ T7818] tipc: Resetting bearer <eth:syzkaller0>
[   95.336627][ T7817] tipc: Resetting bearer <eth:syzkaller0>
[   95.349685][ T7817] tipc: Disabling bearer <eth:syzkaller0>
[   95.524953][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'.
[   95.572676][ T7840] openvswitch: netlink: Flow key attr not present in new flow.
[   95.579454][ T7835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'.
[   95.618231][ T7843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'.
[   95.696555][ T7852] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   95.710925][ T7854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.597'.
[   95.715218][ T7852] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   95.761975][ T7854] netlink: 542 bytes leftover after parsing attributes in process `syz.2.597'.
[   95.835572][ T7857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.598'.
[   95.919190][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[   95.932611][ T7865] syzkaller0: entered promiscuous mode
[   95.937733][ T7865] syzkaller0: entered allmulticast mode
[   95.940527][ T7868] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   95.960240][ T7868] netlink: 'syz.1.602': attribute type 2 has an invalid length.
[   95.986174][ T7866] netlink: 830 bytes leftover after parsing attributes in process `syz.0.599'.
[   96.105322][ T7873] tipc: Can't bind to reserved service type 1
[   97.154982][ T7898] wg1 speed is unknown, defaulting to 1000
[   97.728998][ T7947] macsec1: entered promiscuous mode
[   97.730874][ T7947] bridge0: entered promiscuous mode
[   97.736088][ T7947] bridge0: port 4(macsec1) entered blocking state
[   97.739193][ T7947] bridge0: port 4(macsec1) entered disabled state
[   97.742071][ T7947] macsec1: entered allmulticast mode
[   97.744319][ T7947] bridge0: entered allmulticast mode
[   97.749350][ T7947] macsec1: left allmulticast mode
[   97.751914][ T7947] bridge0: left allmulticast mode
[   97.759732][ T7947] bridge0: left promiscuous mode
[   97.880974][ T7957] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   97.911944][ T7960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   97.995206][ T5824] udevd[5824]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   98.196726][ T7998] netlink: 'syz.1.635': attribute type 1 has an invalid length.
[   98.292181][ T7999] netlink: 'syz.2.634': attribute type 1 has an invalid length.
[   98.346878][ T8009] netlink: 'syz.1.639': attribute type 4 has an invalid length.
[   98.522077][ T8015] netlink: 'syz.1.641': attribute type 6 has an invalid length.
[   98.562703][ T8017] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[   98.681785][ T8020] wg1 speed is unknown, defaulting to 1000
[   99.099635][ T8034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.103206][ T8034] IPv6: NLM_F_CREATE should be set when creating new route
[   99.106188][ T8034] IPv6: NLM_F_CREATE should be set when creating new route
[   99.109300][ T8034] IPv6: NLM_F_CREATE should be set when creating new route
[   99.114119][ T8034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   99.154848][ T8038] tc_dump_action: action bad kind
[   99.257395][ T8053] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[   99.366937][ T8063] Bluetooth: MGMT ver 1.23
[   99.426945][ T8065] __nla_validate_parse: 18 callbacks suppressed
[   99.426961][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[   99.437917][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'.
[   99.737196][ T8084] ieee802154 phy0 wpan0: encryption failed: -22
[   99.739759][ T8085] netlink: 196 bytes leftover after parsing attributes in process `syz.2.663'.
[   99.743433][ T8084] netlink: 196 bytes leftover after parsing attributes in process `syz.2.663'.
[   99.834055][ T8091] netlink: 108 bytes leftover after parsing attributes in process `syz.0.664'.
[   99.842196][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.845608][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.858463][ T8084] bond0: left promiscuous mode
[   99.860270][ T8084] bond_slave_0: left promiscuous mode
[   99.862208][ T8084] bond_slave_1: left promiscuous mode
[   99.865170][ T8084] team0: left promiscuous mode
[   99.867096][ T8084] team_slave_0: left promiscuous mode
[   99.869681][ T8084] team_slave_1: left promiscuous mode
[  100.012805][ T8084] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.015660][ T8084] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.018464][ T8084] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.021334][ T8084] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.068630][ T5892] wg1 speed is unknown, defaulting to 1000
[  100.070833][ T5892] syz0: Port: 1 Link DOWN
[  100.141127][ T8097] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.665'.
[  100.176561][ T8099] sch_fq: defrate 0 ignored.
[  100.242117][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'.
[  100.489855][ T8128] bpq0: entered promiscuous mode
[  100.506062][ T8132] x_tables: ip6_tables: CHECKSUM.0 target: invalid size 8 (kernel) != (user) 0
[  100.564275][ T8136] syz_tun: entered allmulticast mode
[  100.596882][ T8135] syz_tun: left allmulticast mode
[  100.643832][ T8142] netlink: 'syz.2.677': attribute type 1 has an invalid length.
[  100.675620][ T8142] bond5: (slave bridge3): making interface the new active one
[  100.678745][ T8142] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  100.778516][ T8154] netlink: 'syz.1.681': attribute type 1 has an invalid length.
[  100.817518][ T8154] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.842197][ T8154] 8021q: adding VLAN 0 to HW filter on device bond4
[  100.846738][ T8154] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  100.854332][ T8154] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  100.879451][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.681'.
[  101.038368][ T8169] netlink: 180 bytes leftover after parsing attributes in process `syz.2.684'.
[  101.041788][ T8103] ==================================================================
[  101.045249][ T8103] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  101.048457][ T8103] Read of size 1 at addr ffff888120507832 by task syz.0.667/8103
[  101.052452][ T8103] 
[  101.053482][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: syz.0.667 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  101.053497][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.053504][ T8103] Call Trace:
[  101.053510][ T8103]  <TASK>
[  101.053516][ T8103]  dump_stack_lvl+0x189/0x250
[  101.053534][ T8103]  ? __kasan_check_byte+0x12/0x40
[  101.053553][ T8103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.053569][ T8103]  ? lock_release+0x4b/0x3e0
[  101.053584][ T8103]  ? __virt_addr_valid+0x4a5/0x5c0
[  101.053602][ T8103]  print_report+0xd2/0x2b0
[  101.053614][ T8103]  ? rose_transmit_link+0x5c3/0x740
[  101.053625][ T8103]  kasan_report+0x118/0x150
[  101.053642][ T8103]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  101.053660][ T8103]  ? rose_transmit_link+0x5c3/0x740
[  101.053674][ T8103]  rose_transmit_link+0x5c3/0x740
[  101.053690][ T8103]  ? skb_put+0x11b/0x210
[  101.053709][ T8103]  rose_write_internal+0x11dc/0x1ac0
[  101.053727][ T8103]  ? __pfx_rose_write_internal+0x10/0x10
[  101.053740][ T8103]  ? __timer_delete+0x5d/0x390
[  101.053760][ T8103]  rose_release+0x24e/0x520
[  101.053779][ T8103]  sock_close+0xc3/0x240
[  101.053793][ T8103]  ? __pfx_sock_close+0x10/0x10
[  101.053806][ T8103]  __fput+0x44c/0xa70
[  101.053822][ T8103]  task_work_run+0x1d4/0x260
[  101.053842][ T8103]  ? __pfx_task_work_run+0x10/0x10
[  101.053860][ T8103]  ? task_work_add+0x377/0x420
[  101.053878][ T8103]  ? __pfx_task_work_add+0x10/0x10
[  101.053895][ T8103]  get_signal+0x11ed/0x1340
[  101.053915][ T8103]  arch_do_signal_or_restart+0x9a/0x750
[  101.053935][ T8103]  ? __pfx___sys_connect+0x10/0x10
[  101.053951][ T8103]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  101.053974][ T8103]  ? exit_to_user_mode_loop+0x40/0x110
[  101.053987][ T8103]  exit_to_user_mode_loop+0x75/0x110
[  101.054000][ T8103]  do_syscall_64+0x2bd/0x3b0
[  101.054038][ T8103]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.054051][ T8103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.054063][ T8103]  ? exc_page_fault+0x9f/0xf0
[  101.054076][ T8103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.054088][ T8103] RIP: 0033:0x7f86aad8e9a9
[  101.054100][ T8103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.054111][ T8103] RSP: 002b:00007f86a8bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  101.054125][ T8103] RAX: fffffffffffffe00 RBX: 00007f86aafb5fa0 RCX: 00007f86aad8e9a9
[  101.054134][ T8103] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b
[  101.054142][ T8103] RBP: 00007f86aae10d69 R08: 0000000000000000 R09: 0000000000000000
[  101.054149][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.054156][ T8103] R13: 0000000000000000 R14: 00007f86aafb5fa0 R15: 00007ffdd8e3eb38
[  101.054170][ T8103]  </TASK>
[  101.054174][ T8103] 
[  101.163257][ T8103] Allocated by task 7573:
[  101.165050][ T8103]  kasan_save_track+0x3e/0x80
[  101.167050][ T8103]  __kasan_kmalloc+0x93/0xb0
[  101.169047][ T8103]  __kmalloc_cache_noprof+0x230/0x3d0
[  101.171314][ T8103]  rose_add_node+0x23a/0xde0
[  101.173259][ T8103]  rose_rt_ioctl+0xa48/0xfb0
[  101.175197][ T8103]  rose_ioctl+0x3ce/0x8b0
[  101.177041][ T8103]  sock_do_ioctl+0xdc/0x300
[  101.178935][ T8103]  sock_ioctl+0x576/0x790
[  101.180735][ T8103]  __se_sys_ioctl+0xfc/0x170
[  101.182676][ T8103]  do_syscall_64+0xfa/0x3b0
[  101.184642][ T8103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.187074][ T8103] 
[  101.188097][ T8103] Freed by task 8128:
[  101.189796][ T8103]  kasan_save_track+0x3e/0x80
[  101.191722][ T8103]  kasan_save_free_info+0x46/0x50
[  101.193798][ T8103]  __kasan_slab_free+0x62/0x70
[  101.195754][ T8103]  kfree+0x18e/0x440
[  101.197366][ T8103]  rose_rt_device_down+0x473/0x4c0
[  101.199435][ T8103]  rose_device_event+0x603/0x6a0
[  101.201488][ T8103]  notifier_call_chain+0x1b6/0x3e0
[  101.203577][ T8103]  __dev_notify_flags+0x18d/0x2e0
[  101.205608][ T8103]  netif_change_flags+0xe8/0x1a0
[  101.207639][ T8103]  dev_change_flags+0x130/0x260
[  101.209647][ T8103]  dev_ioctl+0x7b4/0x1150
[  101.211410][ T8103]  sock_do_ioctl+0x22c/0x300
[  101.213327][ T8103]  sock_ioctl+0x576/0x790
[  101.215091][ T8103]  __se_sys_ioctl+0xfc/0x170
[  101.217081][ T8103]  do_syscall_64+0xfa/0x3b0
[  101.218968][ T8103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.221364][ T8103] 
[  101.222378][ T8103] The buggy address belongs to the object at ffff888120507800
[  101.222378][ T8103]  which belongs to the cache kmalloc-512 of size 512
[  101.227856][ T8103] The buggy address is located 50 bytes inside of
[  101.227856][ T8103]  freed 512-byte region [ffff888120507800, ffff888120507a00)
[  101.233276][ T8103] 
[  101.234208][ T8103] The buggy address belongs to the physical page:
[  101.236826][ T8103] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120507c00 pfn:0x120504
[  101.240815][ T8103] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  101.244241][ T8103] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  101.247747][ T8103] page_type: f5(slab)
[  101.249430][ T8103] raw: 057ff00000000240 ffff88801a441c80 ffffea00043ab510 ffffea000421c210
[  101.252826][ T8103] raw: ffff888120507c00 000000000010000c 00000000f5000000 0000000000000000
[  101.256263][ T8103] head: 057ff00000000240 ffff88801a441c80 ffffea00043ab510 ffffea000421c210
[  101.259672][ T8103] head: ffff888120507c00 000000000010000c 00000000f5000000 0000000000000000
[  101.263116][ T8103] head: 057ff00000000002 ffffea0004814101 00000000ffffffff 00000000ffffffff
[  101.266532][ T8103] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  101.270028][ T8103] page dumped because: kasan: bad access detected
[  101.272572][ T8103] page_owner tracks the page as allocated
[  101.274902][ T8103] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5823, tgid 5823 (syz-executor), ts 57847621030, free_ts 57838355752
[  101.283618][ T8103]  post_alloc_hook+0x240/0x2a0
[  101.285599][ T8103]  get_page_from_freelist+0x21e4/0x22c0
[  101.287900][ T8103]  __alloc_frozen_pages_noprof+0x181/0x370
[  101.290422][ T8103]  alloc_pages_mpol+0x232/0x4a0
[  101.292536][ T8103]  allocate_slab+0x8a/0x3b0
[  101.294527][ T8103]  ___slab_alloc+0xbfc/0x1480
[  101.296509][ T8103]  __kmalloc_noprof+0x305/0x4f0
[  101.298546][ T8103]  fib6_info_alloc+0x30/0xf0
[  101.300538][ T8103]  ip6_route_info_create+0x142/0x860
[  101.302711][ T8103]  addrconf_f6i_alloc+0x1d2/0x450
[  101.304758][ T8103]  ipv6_add_addr+0x56e/0x1090
[  101.306664][ T8103]  inet6_addr_add+0x387/0xc00
[  101.308268][ T8103]  inet6_rtm_newaddr+0x93d/0xd20
[  101.309879][ T8103]  rtnetlink_rcv_msg+0x7cf/0xb70
[  101.311521][ T8103]  netlink_rcv_skb+0x208/0x470
[  101.313154][ T8103]  netlink_unicast+0x75c/0x8e0
[  101.314824][ T8103] page last free pid 5831 tgid 5831 stack trace:
[  101.316846][ T8103]  __free_frozen_pages+0xc71/0xe70
[  101.318564][ T8103]  stack_depot_save_flags+0x445/0x900
[  101.320489][ T8103]  kasan_save_track+0x4f/0x80
[  101.322064][ T8103]  __kasan_slab_alloc+0x6c/0x80
[  101.323624][ T8103]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  101.325466][ T8103]  alloc_inode+0x6a/0x1b0
[  101.326868][ T8103]  new_inode+0x22/0x170
[  101.328232][ T8103]  __debugfs_create_file+0x14d/0x4f0
[  101.330239][ T8103]  debugfs_create_file_full+0x3f/0x60
[  101.332102][ T8103]  mac80211_hwsim_new_radio+0x30eb/0x5340
[  101.334081][ T8103]  hwsim_new_radio_nl+0xea4/0x1b10
[  101.335829][ T8103]  genl_family_rcv_msg_doit+0x215/0x300
[  101.337589][ T8103]  genl_rcv_msg+0x60e/0x790
[  101.339036][ T8103]  netlink_rcv_skb+0x208/0x470
[  101.340654][ T8103]  genl_rcv+0x28/0x40
[  101.341954][ T8103]  netlink_unicast+0x75c/0x8e0
[  101.343808][ T8103] 
[  101.344643][ T8103] Memory state around the buggy address:
[  101.346644][ T8103]  ffff888120507700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  101.349249][ T8103]  ffff888120507780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  101.352424][ T8103] >ffff888120507800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.355372][ T8103]                                      ^
[  101.357189][ T8103]  ffff888120507880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.360253][ T8103]  ffff888120507900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  101.363323][ T8103] ==================================================================
[  101.374930][ T8103] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  101.377373][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: syz.0.667 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  101.381369][ T8103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.384988][ T8103] Call Trace:
[  101.386143][ T8103]  <TASK>
[  101.387167][ T8103]  dump_stack_lvl+0x99/0x250
[  101.388811][ T8103]  ? __asan_memcpy+0x40/0x70
[  101.390387][ T8103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.392107][ T8103]  ? __pfx__printk+0x10/0x10
[  101.393724][ T8103]  panic+0x2db/0x790
[  101.395023][ T8103]  ? __pfx_preempt_schedule+0x10/0x10
[  101.396776][ T8103]  ? __pfx_panic+0x10/0x10
[  101.398284][ T8103]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  101.400171][ T8103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  101.402268][ T8103]  ? rose_transmit_link+0x5c3/0x740
[  101.404256][ T8103]  check_panic_on_warn+0x89/0xb0
[  101.405839][ T8103]  ? rose_transmit_link+0x5c3/0x740
[  101.407534][ T8103]  end_report+0x78/0x160
[  101.408985][ T8103]  kasan_report+0x129/0x150
[  101.410556][ T8103]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  101.412660][ T8103]  ? rose_transmit_link+0x5c3/0x740
[  101.414406][ T8103]  rose_transmit_link+0x5c3/0x740
[  101.416070][ T8103]  ? skb_put+0x11b/0x210
[  101.417462][ T8103]  rose_write_internal+0x11dc/0x1ac0
[  101.419207][ T8103]  ? __pfx_rose_write_internal+0x10/0x10
[  101.421000][ T8103]  ? __timer_delete+0x5d/0x390
[  101.422759][ T8103]  rose_release+0x24e/0x520
[  101.424470][ T8103]  sock_close+0xc3/0x240
[  101.425849][ T8103]  ? __pfx_sock_close+0x10/0x10
[  101.427460][ T8103]  __fput+0x44c/0xa70
[  101.428814][ T8103]  task_work_run+0x1d4/0x260
[  101.430327][ T8103]  ? __pfx_task_work_run+0x10/0x10
[  101.432068][ T8103]  ? task_work_add+0x377/0x420
[  101.433850][ T8103]  ? __pfx_task_work_add+0x10/0x10
[  101.435621][ T8103]  get_signal+0x11ed/0x1340
[  101.437236][ T8103]  arch_do_signal_or_restart+0x9a/0x750
[  101.439371][ T8103]  ? __pfx___sys_connect+0x10/0x10
[  101.441321][ T8103]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  101.443648][ T8103]  ? exit_to_user_mode_loop+0x40/0x110
[  101.445610][ T8103]  exit_to_user_mode_loop+0x75/0x110
[  101.447631][ T8103]  do_syscall_64+0x2bd/0x3b0
[  101.449349][ T8103]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.451247][ T8103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.453409][ T8103]  ? exc_page_fault+0x9f/0xf0
[  101.455074][ T8103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.457041][ T8103] RIP: 0033:0x7f86aad8e9a9
[  101.458526][ T8103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.465266][ T8103] RSP: 002b:00007f86a8bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  101.468170][ T8103] RAX: fffffffffffffe00 RBX: 00007f86aafb5fa0 RCX: 00007f86aad8e9a9
[  101.470788][ T8103] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000b
[  101.473782][ T8103] RBP: 00007f86aae10d69 R08: 0000000000000000 R09: 0000000000000000
[  101.476381][ T8103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.479032][ T8103] R13: 0000000000000000 R14: 00007f86aafb5fa0 R15: 00007ffdd8e3eb38
[  101.482200][ T8103]  </TASK>
[  101.484271][ T8103] Kernel Offset: disabled
[  101.486060][ T8103] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:01:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003401 RDI=0000000000003402 RBP=00000000000003f8 RSP=ffffc900024cf210
R8 =ffff888107e90237 R9 =1ffff11020fd2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8a3 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f86a8bf66c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000010a6bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=2e6682b60a05ae20 91e1a8296ebcf437 XMM03=f4c0533a12a93cb6 62ba4a3a26c32c9b
XMM04=c29faef00a8a05bf 894c14b863443cbf XMM05=1a058e35cb0c675f 2e72d9e9c61e79e4
XMM06=7a4f52930fc1f5c7 4038aeda43766593 XMM07=70a30d094676d97f 7d6393c1dd7c263e
XMM08=701748fccdb7c29f aef00a8a05bf894c XMM09=0000000000000000 00007f86aae11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff903e9130 RCX=0000000000000000 RDX=ffffffff903e9131
RSI=0000000000000001 RDI=ffffc90008a876c8 RBP=dffffc0000000000 RSP=ffffc90008a87598
R8 =ffffc90008a876c7 R9 =0000000000000000 R10=ffffc90008a876b8 R11=fffff52001150ed9
R12=ffffc90008a87a08 R13=ffffc90008a876b8 R14=ffffc90008a87668 R15=1ffffffff207d226
RIP=ffffffff8172c174 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=00000001236da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f50e3586478 00007f50e3586450 XMM03=00007f50e3586488 00007f50e3586480
XMM04=00007f50e40ed100 00007f50e3586440 XMM05=00007f50e3586458 00007f50e35864a0
XMM06=00007f50e3586498 00007f50e3586490 XMM07=00007f50e3586488 00007f50e3586480
XMM08=0000004001000880 0300400000000030 XMM09=0000000000000000 00007f50e3411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
