last executing test programs:

2.364274296s ago: executing program 2 (id=1011):
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'veth1_vlan\x00', @broadcast})
recvfrom$inet(r0, &(0x7f0000000040)=""/19, 0x13, 0x8000, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000800"], 0x24}}, 0x0)
recvfrom$inet(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x21, &(0x7f00000012c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff7}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x1f}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

2.363958417s ago: executing program 2 (id=1012):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x44}}, 0x1)
listen(r0, 0x2)

2.293632307s ago: executing program 2 (id=1013):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x4e23, @empty}})
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8004}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)

1.434349139s ago: executing program 2 (id=1025):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x2f16, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x7, 0x1, 0x4, 0x2, 0x7, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
listen(r1, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r0, 0x0, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000810}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

1.20290841s ago: executing program 1 (id=1028):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='?', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="b0", 0x1}], 0x1}}], 0x2, 0x4000840)
shutdown(r1, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='rcu_utilization\x00', r0}, 0x18)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x3, @local, 0x801}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000e00)="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", 0x1000}], 0x1}}], 0x1, 0x24000044)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={<r5=>0x0, 0x8}, &(0x7f0000000040)=0xc)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r7, r7, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x5, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r9, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffc000)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

973.171362ms ago: executing program 1 (id=1031):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r1], 0xc8}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
epoll_create1(0x0) (async)
r2 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
unshare(0x62040200)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x7fff}, 0x1c) (async)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x7fff}, 0x1c)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xcd, 0x0, 0x20, 0xfd, [0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x8, 0x1]}})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000010073797a300000000040000000090a01040000000000000000070000000c000b4000000000000000050900020073797a31000000000900010073797a31000000000800054000000021400000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000140003800c132f8008000340000000020400000000001000010000000000000000000084000a00"/198], 0xc8}}, 0x40000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x10, r5})
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)=@can_delroute={0x34, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "2cfd003100"}, 0x4}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff7, 0x4, 0x2, 0xcc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (async)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9110000001000020"], &(0x7f0000000100)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[r12], &(0x7f0000000480)=[{0x1, 0x2, 0x5, 0x6}, {0x4, 0x5, 0x2, 0x6}, {0x5, 0x4, 0x3, 0x6}], 0x10, 0x7fff}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="9110000001000020"], &(0x7f0000000100)='syzkaller\x00', 0x800, 0x0, 0x0, 0x41000, 0x40, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x9, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[r12], &(0x7f0000000480)=[{0x1, 0x2, 0x5, 0x6}, {0x4, 0x5, 0x2, 0x6}, {0x5, 0x4, 0x3, 0x6}], 0x10, 0x7fff}, 0x94)

833.856979ms ago: executing program 0 (id=1033):
socket$kcm(0xa, 0x1, 0x106)
r0 = socket$kcm(0x10, 0xb, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=<r1=>0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x15)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
r3 = socket(0xb, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x640100ff}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000240)=0xffe, 0x4)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e1960227826acb24311ed0e67f84565dd8858ca3be23409569e15ba75120c35dffdc8a4b7688d5d02fedf88434274b828fec979ea029405cd1e7cadc867ebdc98c4a523178715828c1a6361e60ff1f2968efc20d6888ac2a6f81e37cbc7f1e89f3421825cc278df26c8722e1672fc9672a8d0a60dded6f0765ac61f8a91acf0195abc177e56cc91a9c11ccf95d2a58de5494e66cfa1e758438ee4bb163ee05927e551e4d05b308a0eb01cea0e43", 0x480}], 0x2}, 0x0)
sendmsg$alg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c4801}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x4, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x3ff, 0x8, 0x1000, 0xf9, 0x0, 0x381d930b}, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000800e9ff00000a0000000c0002006e6c383032313100"], 0x20}}, 0x0)
recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)

762.031332ms ago: executing program 1 (id=1034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00'})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500001d860000850000005b00000005530200080000001812000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000006d810600fcffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r6, 0x29, 0x49, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', <r9=>0x0})
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x2000000)

634.241153ms ago: executing program 0 (id=1035):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0)
socket$kcm(0xa, 0x1, 0x106)

633.954943ms ago: executing program 0 (id=1036):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x230, 0x2c8, 0x130, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@ip={@remote, @local, 0x0, 0x0, 'dummy0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0xff000000, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x2e}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x6, 0x6, 0x1, 0x1], 0x4, 0x2}, {0x2, [0x2, 0x2, 0x4, 0x1, 0x1, 0x3], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
epoll_create1(0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94)
unshare(0x6a040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x28a0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

561.963715ms ago: executing program 2 (id=1037):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
epoll_create1(0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x28a0}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
unshare(0x2a020400)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000040), &(0x7f0000000280)=""/144}, 0x20)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)

557.247632ms ago: executing program 1 (id=1038):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff000000006a8700000000000007010000f8ffffffb7020000003f0000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0xf8ffffff, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)

484.019059ms ago: executing program 1 (id=1039):
unshare(0x48060600) (async, rerun: 64)
gettid() (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
gettid() (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x200000000000011, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003e000701fefff4ff00000000017c0000040042800c00018006000600800a00000c000280070014"], 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) (async, rerun: 64)
listen(r0, 0x0) (async, rerun: 64)
syz_emit_ethernet(0x67, &(0x7f00000000c0)={@random="38999ba91423", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x31, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x0, {[@fastopen={0x1e, 0x3, ':'}]}}, {"198189956260f7aad25a32a6aa44fc82e960bf97de6a160088"}}}}}}}, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0) (async)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) (async)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
close(0x3)

353.667375ms ago: executing program 2 (id=1040):
socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000900", @ANYRES32=0x0, @ANYBLOB="9bcff7eb1568257dd38482dd65dab204a093ee121a00ffa7000000000000000000efbe53200e4035bd2d8e6cb4d638dad6f70172cad8c5cbae5911b62ee6ff0f662a4c2d89e06a29ebd0a598f3ab613c93db3056493e36d966065463432d3fc5836b828c01447a054e76232947a7a43a5907d3dddd9705cf93e142cf3fcb0466f34401157ae3c15b986ed0434042d68d35ea622452356b3daed2"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x21c, r7, 0x810, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80000000, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}], @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x5, 0x8, 0x6, 0x0, 0x3, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x5, 0x5}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x4, 0xa}, {0x4}, {0x1, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x3, 0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x3, 0x4}, {0x4, 0x7}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x6, 0x4}, {0x0, 0x19}, {0x2}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {}, {0x6, 0x6}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x9}, {0x7}, {0x2, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x1}, {0x3, 0xa}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe69, 0x4, 0x0, 0x4, 0x3, 0xfff, 0xb800, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x6, 0x8fae, 0x2, 0x40, 0x81, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x1, 0x82ee, 0x4, 0x7, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x1, 0x8, 0x61, 0x942e, 0x100, 0x1, 0xb207]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x6, 0x8, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x58}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x5}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MESH_SETUP={0x3c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xc1}, @NL80211_MESH_SETUP_IE={0x15, 0x3, "42d7f34943a83d20d69788cb0b60a55a01"}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x48, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_IE={0x3b, 0x3, "4112cb2230c58114c34b549f7aa8376e5be56d6907dc81d1a4cc85ef4d985423122c370c4b79e944375d29c27215e0fa915bbb56ce135b"}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x429afc77}]}, 0x21c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'})

352.253419ms ago: executing program 0 (id=1041):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2517000000480006804400040067636d286165d43ed2b319362bfa59e87b91846c80f873290000000000000000000011000000000000000000000000001c0000feb07953f1a08075ebae935e436de1ace2fe62c079b6aa318773832c34"], 0x5c}}, 0x4004)

346.912497ms ago: executing program 0 (id=1042):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7ffffffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
syz_emit_ethernet(0x54, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0xf6, "8b62c328654a5bef9660214dcf030831faeba88b09ad1344c8b205c55b5c57d548ac663b892925be403c34f076e00392084bc7a8d0476009f134d22341c8f796a161"}}}, &(0x7f0000000000)={0x0, 0x4, [0x8e, 0xd36, 0x91f, 0x20e]})
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0)

273.037164ms ago: executing program 0 (id=1043):
unshare(0x48060600)
gettid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x2000000, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40914)
recvmmsg$unix(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/14, 0x30}, {&(0x7f0000000240)=""/83, 0x53}], 0x2}}], 0x1, 0x10101, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x1d, @local, 0x4e22, 0xffffffff, 'fo\x00', 0x5a, 0x3f, 0x200004f}, 0x2c)
gettid()
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000007c0), 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)

0s ago: executing program 1 (id=1044):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6) (async)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
accept(r0, 0x0, 0x0) (async)
accept(r0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19249' (ED25519) to the list of known hosts.
syzkaller login: [   40.857332][ T5754] cgroup: Unknown subsys name 'net'
[   40.963553][ T5754] cgroup: Unknown subsys name 'cpuset'
[   40.967267][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.570502][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.223057][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.226060][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.228461][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.231151][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.233571][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.249481][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.255745][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.258268][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.261865][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.264374][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.289358][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.292823][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.295434][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.298485][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.301715][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.467292][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   46.562968][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   46.606404][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.612396][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.615131][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.617501][ T5829] bridge_slave_0: entered allmulticast mode
[   46.620331][ T5829] bridge_slave_0: entered promiscuous mode
[   46.624837][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.627144][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.629573][ T5829] bridge_slave_1: entered allmulticast mode
[   46.633020][ T5829] bridge_slave_1: entered promiscuous mode
[   46.693356][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.718775][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.737182][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.739506][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.743080][ T5825] bridge_slave_0: entered allmulticast mode
[   46.745882][ T5825] bridge_slave_0: entered promiscuous mode
[   46.774292][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.776562][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.778916][ T5825] bridge_slave_1: entered allmulticast mode
[   46.783477][ T5825] bridge_slave_1: entered promiscuous mode
[   46.788359][ T5829] team0: Port device team_slave_0 added
[   46.790541][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.793334][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.795608][ T5832] bridge_slave_0: entered allmulticast mode
[   46.798289][ T5832] bridge_slave_0: entered promiscuous mode
[   46.801883][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.804181][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.806415][ T5832] bridge_slave_1: entered allmulticast mode
[   46.809071][ T5832] bridge_slave_1: entered promiscuous mode
[   46.828313][ T5829] team0: Port device team_slave_1 added
[   46.856632][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.861851][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.874855][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.878998][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.891085][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.893176][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.900964][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.922573][ T5825] team0: Port device team_slave_0 added
[   46.924873][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.926957][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.935779][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.949065][ T5825] team0: Port device team_slave_1 added
[   46.972195][ T5832] team0: Port device team_slave_0 added
[   46.976335][ T5832] team0: Port device team_slave_1 added
[   46.988981][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.991725][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.999439][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.004113][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.006297][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.014794][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.044139][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.046255][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.054098][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.061524][ T5829] hsr_slave_0: entered promiscuous mode
[   47.064734][ T5829] hsr_slave_1: entered promiscuous mode
[   47.076267][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.078331][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.086288][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.108777][ T5825] hsr_slave_0: entered promiscuous mode
[   47.111681][ T5825] hsr_slave_1: entered promiscuous mode
[   47.113744][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.116096][ T5825] Cannot create hsr debugfs directory
[   47.158866][ T5832] hsr_slave_0: entered promiscuous mode
[   47.162307][ T5832] hsr_slave_1: entered promiscuous mode
[   47.164267][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.166485][ T5832] Cannot create hsr debugfs directory
[   47.368688][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.382506][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.387860][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.397398][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.434756][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.439591][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.450107][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.456487][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.492932][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.499299][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.504620][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.512305][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.592645][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.603633][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.617231][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   47.626041][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.628407][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.642542][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.644739][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.648855][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   47.664080][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.672903][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.675106][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.692725][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.694975][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.708286][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   47.721327][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.723579][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.742775][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.744949][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.769655][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.774386][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.828645][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.866350][ T5832] veth0_vlan: entered promiscuous mode
[   47.873038][ T5832] veth1_vlan: entered promiscuous mode
[   47.923982][ T5832] veth0_macvtap: entered promiscuous mode
[   47.928406][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.933385][ T5832] veth1_macvtap: entered promiscuous mode
[   47.957624][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.962399][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.974244][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.988245][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.992768][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.995349][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.997907][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.013757][ T5829] veth0_vlan: entered promiscuous mode
[   48.026727][ T5829] veth1_vlan: entered promiscuous mode
[   48.044269][ T5825] veth0_vlan: entered promiscuous mode
[   48.057887][ T5825] veth1_vlan: entered promiscuous mode
[   48.087157][ T5829] veth0_macvtap: entered promiscuous mode
[   48.094543][ T5825] veth0_macvtap: entered promiscuous mode
[   48.100357][ T5825] veth1_macvtap: entered promiscuous mode
[   48.112166][ T5829] veth1_macvtap: entered promiscuous mode
[   48.128282][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.134818][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.135332][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.144619][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.154182][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.167042][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.173369][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.176054][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.178680][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.182700][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.189760][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.194108][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.196640][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.199159][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.206046][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.208980][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.277461][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.281285][   T54] Bluetooth: hci0: command tx timeout
[   48.301155][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.303602][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.313377][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.315814][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.336410][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.341123][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.351262][   T54] Bluetooth: hci2: command tx timeout
[   48.353150][   T54] Bluetooth: hci1: command tx timeout
[   48.362901][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.365292][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.507447][ T5905] Zero length message leads to an empty skb
[   49.066914][ T5957] netlink: 'syz.2.20': attribute type 12 has an invalid length.
[   49.412815][ T5968] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   49.482606][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   49.485409][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'.
[   49.557818][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27'.
[   49.567951][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'.
[   49.575914][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27'.
[   49.579031][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27'.
[   49.796645][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.799233][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.862571][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.868894][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.914992][ T5991] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.917800][ T5991] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.920611][ T5991] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.924618][ T5991] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.123628][ T5999] netlink: 192 bytes leftover after parsing attributes in process `syz.2.32'.
[   50.361008][ T5218] Bluetooth: hci0: command tx timeout
[   50.432577][ T5218] Bluetooth: hci1: command tx timeout
[   50.434273][ T5218] Bluetooth: hci2: command tx timeout
[   50.544475][ T6019] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   50.556312][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'.
[   51.229994][ T6032] xt_hashlimit: size too large, truncated to 1048576
[   51.288371][ T6034] netlink: 14 bytes leftover after parsing attributes in process `syz.2.42'.
[   51.344011][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.349009][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.353641][ T6034] bond0 (unregistering): Released all slaves
[   51.435659][ T6040] netlink: 'syz.0.44': attribute type 4 has an invalid length.
[   51.454866][ T6040] netlink: 'syz.0.44': attribute type 4 has an invalid length.
[   51.593232][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.124564][ T6067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'.
[   52.432019][ T5218] Bluetooth: hci0: command tx timeout
[   52.457588][ T6081] Bluetooth: MGMT ver 1.23
[   52.510950][ T5218] Bluetooth: hci1: command tx timeout
[   52.511099][   T54] Bluetooth: hci2: command tx timeout
[   52.832682][ T6099] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   52.847998][ T6098] tipc: Started in network mode
[   52.849811][ T6098] tipc: Node identity 2247e340caaf, cluster identity 4711
[   52.852713][ T6098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.855309][ T6098] syzkaller0: entered promiscuous mode
[   52.857191][ T6098] syzkaller0: entered allmulticast mode
[   52.873598][ T6098] tipc: Resetting bearer <eth:syzkaller0>
[   53.667723][ T6097] tipc: Resetting bearer <eth:syzkaller0>
[   53.676633][ T6097] tipc: Disabling bearer <eth:syzkaller0>
[   54.510846][   T54] Bluetooth: hci0: command tx timeout
[   54.590803][   T54] Bluetooth: hci2: command tx timeout
[   54.600988][   T54] Bluetooth: hci1: command tx timeout
[   54.707383][ T6172] Cannot find del_set index 0 as target
[   54.715488][ T6170] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.770346][ T6175] __nla_validate_parse: 4 callbacks suppressed
[   54.770357][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'.
[   55.029510][ T6194] net veth1_virt_wifi : renamed from virt_wifi0
[   55.139993][ T6199] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   55.145939][ T6200] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   55.286435][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   55.292940][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'.
[   55.627312][ T6224] IPv6: sit1: Disabled Multicast RS
[   56.086499][ T6275] bridge_slave_0: left allmulticast mode
[   56.088289][ T6275] bridge_slave_0: left promiscuous mode
[   56.091837][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.097792][ T6275] bridge_slave_1: left allmulticast mode
[   56.100001][ T6275] bridge_slave_1: left promiscuous mode
[   56.104259][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.109649][ T6275] bond0: (slave bond_slave_0): Releasing backup interface
[   56.115341][ T6275] bond0: (slave bond_slave_1): Releasing backup interface
[   56.126092][ T6275] team0: Port device team_slave_0 removed
[   56.133428][ T6275] team0: Port device team_slave_1 removed
[   56.135832][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.138324][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.143813][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.146252][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.005277][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'.
[   57.008652][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'.
[   57.482467][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   57.559477][ T6405] batadv_slave_1: entered promiscuous mode
[   57.599667][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   57.610956][ T6403] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82
[   57.626137][ T6401] batadv_slave_1: left promiscuous mode
[   57.704933][ T6416] xt_SECMARK: invalid mode: 0
[   57.711355][ T6416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.115'.
[   57.769370][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'.
[   57.940347][ T6432] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   58.053127][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.121'.
[   58.799748][ T6468] syz.0.127 uses old SIOCAX25GETINFO
[   59.098073][ T6492] warning: `syz.1.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.268630][ T6498] netlink: 'syz.2.134': attribute type 1 has an invalid length.
[   59.965338][ T6520] netlink: 'syz.0.139': attribute type 13 has an invalid length.
[   59.968394][ T6520] netlink: 'syz.0.139': attribute type 17 has an invalid length.
[   60.096758][ T6520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.163805][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.219449][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.278435][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.728322][ T6569] __nla_validate_parse: 5 callbacks suppressed
[   60.728334][ T6569] netlink: 52 bytes leftover after parsing attributes in process `syz.2.152'.
[   60.898252][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[   60.929764][ T6583] syz.1.153 uses obsolete (PF_INET,SOCK_PACKET)
[   60.957978][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'.
[   60.967168][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.2.155'.
[   61.020996][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[   61.024465][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[   61.028693][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[   61.031754][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[   61.225816][ T6601] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   61.412003][ T6607] xt_hashlimit: size too large, truncated to 1048576
[   61.522952][ T6607] netlink: 14 bytes leftover after parsing attributes in process `syz.0.161'.
[   61.554764][ T6606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.162'.
[   61.590103][ T6607] bond0 (unregistering): Released all slaves
[   62.191534][ T6642] batadv_slave_1: entered promiscuous mode
[   62.651229][ T6678] netlink: 'syz.0.170': attribute type 9 has an invalid length.
[   63.254834][ T6703] netlink: 'syz.2.177': attribute type 1 has an invalid length.
[   64.299325][ T6767] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.301952][ T6767] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.390465][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.405959][ T6767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.508940][ T6767] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.511922][ T6767] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.514595][ T6767] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.517231][ T6767] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.547266][ T6765] netlink: 'syz.0.196': attribute type 12 has an invalid length.
[   65.041680][ T6786] netlink: 'syz.2.201': attribute type 13 has an invalid length.
[   65.044349][ T6786] netlink: 'syz.2.201': attribute type 17 has an invalid length.
[   65.097076][ T6786] 8021q: adding VLAN 0 to HW filter on device team0
[   65.104839][ T6786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.233748][ T6786] netlink: 'syz.2.201': attribute type 29 has an invalid length.
[   65.237296][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.292166][ T6787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.346685][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.963372][ T6822] netlink: 'syz.2.212': attribute type 24 has an invalid length.
[   65.991010][ T6820] __nla_validate_parse: 4 callbacks suppressed
[   65.991023][ T6820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.208'.
[   66.255150][ T6838] raw_sendmsg: syz.1.215 forgot to set AF_INET. Fix it!
[   66.606284][ T6863] IPv6: sit1: Disabled Multicast RS
[   66.624191][ T6870] netlink: 'syz.1.221': attribute type 12 has an invalid length.
[   66.839249][ T6894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'.
[   66.888562][ T6900] netlink: 'syz.2.229': attribute type 12 has an invalid length.
[   67.368207][ T6923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[   67.925443][ T6945] netlink: 'syz.2.243': attribute type 13 has an invalid length.
[   67.928110][ T6945] netlink: 'syz.2.243': attribute type 17 has an invalid length.
[   68.309192][ T6960] netlink: 'syz.0.247': attribute type 12 has an invalid length.
[   68.828406][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'.
[   68.874706][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   69.145630][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'.
[   70.455091][ T7052] netlink: 'syz.0.271': attribute type 12 has an invalid length.
[   70.517907][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[   70.528854][ T7061] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   70.691905][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   70.803726][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   70.817709][ T7078] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   70.836325][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.838736][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.939479][ T7090] netlink: 'syz.0.279': attribute type 27 has an invalid length.
[   72.289976][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'.
[   72.294566][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'.
[   72.562012][ T7143] IPv6: sit1: Disabled Multicast RS
[   72.756625][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'.
[   72.826740][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'.
[   72.833892][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'.
[   72.935211][ T7166] xt_cgroup: xt_cgroup: no path or classid specified
[   72.946734][ T7166] netlink: 'syz.2.300': attribute type 62 has an invalid length.
[   73.109566][ T7178] netlink: 'syz.0.304': attribute type 12 has an invalid length.
[   73.426775][ T7195] netlink: 'syz.2.307': attribute type 12 has an invalid length.
[   74.015306][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[   74.295727][ T7215] netlink: 'syz.1.312': attribute type 17 has an invalid length.
[   74.325847][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.329008][ T7215] 8021q: adding VLAN 0 to HW filter on device team0
[   74.334671][ T7215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.464640][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.706053][ T7233] bond0: option mode: unable to set because the bond device has slaves
[   74.840917][ T7244] netlink: 'syz.1.317': attribute type 12 has an invalid length.
[   74.951026][ T7257] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   76.485758][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   76.488899][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   76.492626][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   76.495292][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   76.620889][ T7282] tipc: Started in network mode
[   76.622835][ T7282] tipc: Node identity da47b2e95754, cluster identity 4711
[   76.625097][ T7282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.641173][ T7282] tipc: Disabling bearer <eth:syzkaller0>
[   76.696079][ T7289] netlink: 'syz.2.331': attribute type 9 has an invalid length.
[   76.821565][ T7300] x_tables: duplicate underflow at hook 3
[   77.296666][ T7350] __nla_validate_parse: 5 callbacks suppressed
[   77.296680][ T7350] netlink: 64 bytes leftover after parsing attributes in process `syz.2.343'.
[   77.305737][ T7349] netlink: 'syz.0.347': attribute type 13 has an invalid length.
[   77.308169][ T7349] netlink: 'syz.0.347': attribute type 17 has an invalid length.
[   77.319781][ T7349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.457130][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.517212][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.575620][ T7349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.127427][ T7372] xt_hashlimit: size too large, truncated to 1048576
[   78.231681][ T7370] netlink: 14 bytes leftover after parsing attributes in process `syz.2.352'.
[   78.558393][ T7381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.354'.
[   78.563587][ T7381] unsupported nlmsg_type 40
[   79.259709][ T7409] netlink: 'syz.2.359': attribute type 12 has an invalid length.
[   79.306797][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'.
[   79.421861][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'.
[   80.009010][ T7444] netlink: 156 bytes leftover after parsing attributes in process `syz.1.370'.
[   80.091256][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'.
[   80.229243][ T7467] netlink: 'syz.0.375': attribute type 12 has an invalid length.
[   80.395926][ T7473] netlink: 'syz.1.377': attribute type 1 has an invalid length.
[   80.405274][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.081957][  T790] cfg80211: failed to load regulatory.db
[   81.129104][ T7483] IPVS: set_ctl: invalid protocol: 58 172.30.1.3:20001
[   81.287795][ T7490] tipc: Started in network mode
[   81.289446][ T7490] tipc: Node identity , cluster identity 4711
[   81.370051][ T7501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.385'.
[   81.413884][ T7504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'.
[   81.416910][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'.
[   81.686332][ T7523] syzkaller1: entered promiscuous mode
[   81.688420][ T7523] syzkaller1: entered allmulticast mode
[   81.725242][ T7535] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   81.728224][ T7535] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   82.781212][ T7559] __nla_validate_parse: 3 callbacks suppressed
[   82.781231][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'.
[   82.852946][ T7561] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   83.081556][ T7580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.405'.
[   83.969816][ T7620] xt_connbytes: Forcing CT accounting to be enabled
[   83.972541][ T7620] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   83.976127][ T7620] xt_bpf: check failed: parse error
[   84.183028][ T7640] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   85.352277][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.363289][ T7669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.429'.
[   85.366577][ T7669] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   86.287025][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'.
[   86.289672][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'.
[   86.608000][ T7722] netlink: 60 bytes leftover after parsing attributes in process `syz.0.444'.
[   86.686175][ T7728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.445'.
[   86.852946][ T7743] netlink: 'syz.1.449': attribute type 12 has an invalid length.
[   87.064263][ T7755] netlink: 'syz.0.453': attribute type 1 has an invalid length.
[   87.066703][ T7755] netlink: 244 bytes leftover after parsing attributes in process `syz.0.453'.
[   87.739069][ T7799] x_tables: unsorted underflow at hook 3
[   87.970739][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'.
[   87.973525][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'.
[   87.985227][ T7824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.989877][ T7824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.115427][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.474'.
[   88.118168][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'.
[   88.121020][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.474'.
[   88.123667][ T7830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.474'.
[   88.879639][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[   88.883676][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'.
[   88.902186][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'.
[   89.167710][ T7866] netlink: 'syz.2.485': attribute type 1 has an invalid length.
[   89.169982][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.485'.
[   89.556514][ T7885] netlink: 'syz.2.490': attribute type 4 has an invalid length.
[   89.978325][ T7908] netlink: 'syz.2.495': attribute type 12 has an invalid length.
[   89.983040][ T7910] netlink: 'syz.2.495': attribute type 12 has an invalid length.
[   90.165903][ T7919] netlink: 'syz.2.498': attribute type 3 has an invalid length.
[   90.895911][ T7963] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   93.017080][ T8078] xt_HMARK: proto mask must be zero with L3 mode
[   93.576418][ T8111] netlink: 'syz.1.547': attribute type 4 has an invalid length.
[   93.792510][ T8117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.803320][ T8119] __nla_validate_parse: 14 callbacks suppressed
[   93.803333][ T8119] netlink: 60 bytes leftover after parsing attributes in process `syz.2.548'.
[   93.907909][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   93.944867][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'.
[   94.722670][ T8182] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   94.825467][ T8200] netlink: 'syz.2.568': attribute type 13 has an invalid length.
[   94.833385][ T8200] netlink: 'syz.2.568': attribute type 17 has an invalid length.
[   94.877288][ T8200] 8021q: adding VLAN 0 to HW filter on device team0
[   94.882732][ T8200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.978112][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.053703][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.108189][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.614243][ T8200] syz.2.568 (8200) used greatest stack depth: 19136 bytes left
[   95.916338][ T8236] netlink: 'syz.2.578': attribute type 9 has an invalid length.
[   96.072720][ T8247] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   96.108939][ T8249] netlink: 'syz.1.582': attribute type 12 has an invalid length.
[   96.118407][ T8249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.122471][ T8249] syzkaller0: entered promiscuous mode
[   96.124498][ T8249] syzkaller0: entered allmulticast mode
[   96.129187][ T8249] tipc: Resetting bearer <eth:syzkaller0>
[   96.133905][ T8248] tipc: Resetting bearer <eth:syzkaller0>
[   96.143278][ T8248] tipc: Disabling bearer <eth:syzkaller0>
[   96.327149][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[   96.329980][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'.
[   96.338160][ T8255] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.341273][ T8255] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.343925][ T8255] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.346867][ T8255] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.392886][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[   96.395698][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[   97.172318][ T8316] IPVS: Scheduler module ip_vs_sip not found
[   97.216556][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.598'.
[   97.925545][ T8333] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.928382][ T8333] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.933453][ T8333] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.936291][ T8333] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.993955][ T8336] netlink: 'syz.0.603': attribute type 4 has an invalid length.
[   97.997834][ T8336] netlink: 'syz.0.603': attribute type 4 has an invalid length.
[   99.507648][ T8383] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   99.567162][ T8384] netlink: 'syz.2.616': attribute type 12 has an invalid length.
[   99.957996][ T8395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.970961][ T8395] tipc: Disabling bearer <eth:syzkaller0>
[  100.096829][ T8399] netlink: 'syz.1.619': attribute type 5 has an invalid length.
[  100.321188][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.622'.
[  100.324033][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.622'.
[  100.326855][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.622'.
[  100.329731][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.622'.
[  101.405411][ T8462] Set syz0 is full, maxelem 0 reached
[  101.526006][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.528785][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.531387][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.533894][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.536477][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.539036][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.541702][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.544285][ T8465] netlink: 'syz.0.634': attribute type 12 has an invalid length.
[  101.767096][ T8477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.637'.
[  102.664051][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  102.666649][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'.
[  102.751825][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  102.869073][ T8554] IPVS: Scheduler module ip_vs_sip not found
[  102.871702][ T8554] IPVS: length: 8 != 446622349272
[  103.138237][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[  103.293069][ T8572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.661'.
[  103.295813][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.661'.
[  104.089350][ T8584] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20000
[  104.097997][ T8584] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004
[  104.428608][ T8603] Cannot find del_set index 0 as target
[  104.535016][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  105.318108][ T8625] batadv_slave_1: entered promiscuous mode
[  105.323971][ T8628] Bluetooth: MGMT ver 1.23
[  105.329007][ T8624] batadv_slave_1: left promiscuous mode
[  105.361482][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.364538][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.367578][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.375256][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.378368][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.382976][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.386088][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.389806][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.394759][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  105.397811][ T8629] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  106.314539][ T8652] __nla_validate_parse: 12 callbacks suppressed
[  106.314554][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.684'.
[  106.330880][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.684'.
[  106.409131][ T8664] validate_nla: 28 callbacks suppressed
[  106.409158][ T8664] netlink: 'syz.0.687': attribute type 9 has an invalid length.
[  106.566897][ T8671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.687'.
[  107.204208][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'.
[  107.265394][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'.
[  107.394962][ T8692] Cannot find add_set index 4 as target
[  108.076801][ T8713] xt_SECMARK: invalid mode: 0
[  108.122823][ T8718] netlink: 'syz.0.699': attribute type 21 has an invalid length.
[  108.125619][ T8718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.699'.
[  108.392242][ T8701] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  108.537084][ T8745] netlink: 'syz.0.708': attribute type 1 has an invalid length.
[  108.548113][ T8745] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.708'.
[  108.761967][ T8758] netlink: 72 bytes leftover after parsing attributes in process `syz.0.709'.
[  109.093037][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.713'.
[  109.356014][ T8781] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.716'.
[  109.413703][ T8787] netlink: 'syz.1.715': attribute type 12 has an invalid length.
[  109.630786][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  110.262392][ T8821] netlink: 'syz.1.725': attribute type 13 has an invalid length.
[  110.264798][ T8821] netlink: 'syz.1.725': attribute type 17 has an invalid length.
[  110.284450][ T8821] gretap0: refused to change device tx_queue_len
[  110.286533][ T8821] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  110.382829][ T8830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.446246][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.500417][ T8821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.043828][ T8843] delete_channel: no stack
[  111.373631][ T8864] __nla_validate_parse: 5 callbacks suppressed
[  111.373642][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'.
[  111.590068][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  111.879094][ T8908] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[  112.359330][ T8949] xt_hashlimit: size too large, truncated to 1048576
[  112.416218][ T8951] netlink: 14 bytes leftover after parsing attributes in process `syz.1.758'.
[  112.534989][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.538754][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.544386][ T8951] bond0 (unregistering): Released all slaves
[  112.827304][ T8965] ieee802154 phy1 wpan1: encryption failed: -22
[  112.856333][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'.
[  113.175303][ T8988] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.178230][ T8988] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.181112][ T8988] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.183842][ T8988] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.198193][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'.
[  113.943470][ T9028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.778'.
[  113.946204][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'.
[  113.948927][ T9028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.778'.
[  113.952259][ T9028] netlink: 36 bytes leftover after parsing attributes in process `syz.2.778'.
[  114.042689][ T9033] xt_hashlimit: size too large, truncated to 1048576
[  114.148636][ T9033] netlink: 14 bytes leftover after parsing attributes in process `syz.2.779'.
[  114.953708][ T9051] IPVS: Scheduler module ip_vs_sip not found
[  115.149901][ T9064] netlink: 'syz.2.787': attribute type 1 has an invalid length.
[  115.226743][ T9070] bridge_slave_0: left allmulticast mode
[  115.228624][ T9070] bridge_slave_0: left promiscuous mode
[  115.230516][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.235714][ T9070] bridge_slave_1: left allmulticast mode
[  115.237577][ T9070] bridge_slave_1: left promiscuous mode
[  115.239477][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.245406][ T9070] team0: Port device team_slave_0 removed
[  115.248185][ T9070] team0: Port device team_slave_1 removed
[  115.250289][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.255671][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.286918][ T9072] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  116.189360][ T9087] netlink: 'syz.2.794': attribute type 9 has an invalid length.
[  116.635089][ T9104] __nla_validate_parse: 10 callbacks suppressed
[  116.635102][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[  117.197881][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'.
[  117.258315][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.803'.
[  117.453845][ T9143] xt_hashlimit: size too large, truncated to 1048576
[  117.512719][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'.
[  117.520305][ T9134] netlink: 14 bytes leftover after parsing attributes in process `syz.2.804'.
[  118.076999][ T9151] netlink: 'syz.0.807': attribute type 12 has an invalid length.
[  118.493878][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  118.605364][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.818'.
[  118.675651][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  118.909502][ T9213] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  119.369394][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'.
[  119.448803][ T9232] netlink: 'syz.2.827': attribute type 13 has an invalid length.
[  119.512768][ T9234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.572224][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.630791][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.648150][ T9252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.725490][ T9259] netlink: 'syz.1.832': attribute type 11 has an invalid length.
[  119.940077][ T9275] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  119.942572][ T9275] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  120.597671][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  120.644375][ T9293] x_tables: duplicate underflow at hook 1
[  120.866187][   T54] Bluetooth: hci2: link tx timeout
[  120.868433][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  120.920602][ T9316] netlink: 'syz.1.849': attribute type 4 has an invalid length.
[  121.662772][ T9336] __nla_validate_parse: 7 callbacks suppressed
[  121.662785][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.856'.
[  121.723608][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'.
[  121.726355][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.856'.
[  121.728939][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'.
[  121.732175][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.856'.
[  121.740554][ T9340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.828721][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  121.831547][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  121.971768][ T9339] tipc: Disabling bearer <eth:syzkaller0>
[  122.068950][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.861'.
[  122.074859][ T9356] netlink: 'syz.1.861': attribute type 9 has an invalid length.
[  122.520036][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  122.575943][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[  122.578748][ T9360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.911149][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  123.028023][ T9394] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  123.103252][ T9401] netlink: 'syz.1.872': attribute type 5 has an invalid length.
[  123.149369][ T9405] netlink: 'syz.1.874': attribute type 1 has an invalid length.
[  123.198682][ T9407] pim6reg1: entered promiscuous mode
[  123.200538][ T9407] pim6reg1: entered allmulticast mode
[  123.551170][ T9432] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  124.213663][ T9470] netlink: 'syz.1.891': attribute type 13 has an invalid length.
[  124.216216][ T9470] netlink: 'syz.1.891': attribute type 17 has an invalid length.
[  124.255545][ T9470] 8021q: adding VLAN 0 to HW filter on device team0
[  124.261805][ T9470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.372576][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.427112][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.483550][ T9471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.720396][ T9503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.732514][ T9503] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.329918][ T9543] xt_recent: Unsupported userspace flags (00000048)
[  125.883348][ T9577] netlink: 'syz.2.916': attribute type 13 has an invalid length.
[  125.887077][ T9577] netlink: 'syz.2.916': attribute type 17 has an invalid length.
[  125.905700][ T9577] gretap0: refused to change device tx_queue_len
[  125.907936][ T9577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.028058][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.083412][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.137989][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.952588][ T9635] __nla_validate_parse: 13 callbacks suppressed
[  126.952601][ T9635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.930'.
[  126.972415][ T9635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'.
[  127.217892][ T9646] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  127.640447][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'.
[  128.350339][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'.
[  128.942521][ T9734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.954'.
[  128.946430][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.954'.
[  129.234705][ T9742] netlink: 'syz.2.957': attribute type 1 has an invalid length.
[  129.467588][ T9754] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.959'.
[  129.570861][ T5855] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  130.354391][ T9779] netlink: 'syz.0.965': attribute type 9 has an invalid length.
[  131.214621][ T9795] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  131.225309][ T9795] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  131.228226][ T9795] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  131.418254][ T9803] netlink: 'syz.2.971': attribute type 12 has an invalid length.
[  131.777149][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'.
[  131.782906][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[  131.789838][ T9834] netlink: 'syz.1.981': attribute type 12 has an invalid length.
[  132.273144][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.870322][ T9872] netlink: 'syz.1.988': attribute type 13 has an invalid length.
[  132.879899][ T9872] netlink: 'syz.1.988': attribute type 17 has an invalid length.
[  132.902602][ T9872] 8021q: adding VLAN 0 to HW filter on device team0
[  132.907718][ T9872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.005426][ T9872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.060169][ T9872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.070882][ T9877] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.114829][ T9872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.156661][ T9880] netlink: 'syz.0.990': attribute type 12 has an invalid length.
[  133.668720][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'.
[  133.998129][ T9896] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.995'.
[  134.172678][ T9905] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  134.174992][ T9905] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  134.207268][ T9909] netlink: 'syz.0.999': attribute type 1 has an invalid length.
[  134.209578][ T9909] netlink: 244 bytes leftover after parsing attributes in process `syz.0.999'.
[  134.628418][ T9929] netlink: 'syz.1.1004': attribute type 12 has an invalid length.
[  134.635175][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'.
[  134.639539][ T9928] netlink: 'syz.1.1004': attribute type 12 has an invalid length.
[  134.652252][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1004'.
[  134.816441][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1007'.
[  134.819374][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'.
[  134.822736][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1007'.
[  134.827498][ T9952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1007'.
[  134.843913][ T9951] netlink: 440 bytes leftover after parsing attributes in process `syz.1.1009'.
[  135.364437][ T9954] netlink: 'syz.2.1010': attribute type 11 has an invalid length.
[  136.818230][T10026] netlink: 'syz.0.1030': attribute type 2 has an invalid length.
[  136.946004][T10037] netlink: 'syz.0.1033': attribute type 58 has an invalid length.
[  136.993858][T10039] xt_hashlimit: size too large, truncated to 1048576
[  137.430166][T10071] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  137.472224][T10075] netlink: 'syz.0.1042': attribute type 4 has an invalid length.
[  137.834704][T10086] ------------[ cut here ]------------
[  137.836729][T10086] WARNING: CPU: 1 PID: 10086 at net/mptcp/pm.c:353 mptcp_pm_alloc_anno_list+0x329/0x390
[  137.839671][T10086] Modules linked in:
[  137.841256][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.1.1044 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  137.845729][T10086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.848772][T10086] RIP: 0010:mptcp_pm_alloc_anno_list+0x329/0x390
[  137.850781][T10086] Code: b0 01 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 26 f4 64 f6 90 0f 0b 90 e9 8b fd ff ff e8 18 f4 64 f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 30 02 a2 8f 80 e1 07 80 c1 03 38 c1
[  137.856662][T10086] RSP: 0018:ffffc90008486db8 EFLAGS: 00010293
[  137.858512][T10086] RAX: ffffffff8b5b34d8 RBX: ffff88811c920c00 RCX: ffff888110909cc0
[  137.860942][T10086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  137.863382][T10086] RBP: 0000000000000000 R08: 00004e2300020001 R09: 00000000aa1414ac
[  137.865955][T10086] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff888104a0c300
[  137.868440][T10086] R13: ffff8881031c0000 R14: dffffc0000000000 R15: ffff88811c921681
[  137.870933][T10086] FS:  00007ff7e43346c0(0000) GS:ffff8881a3c25000(0000) knlGS:0000000000000000
[  137.873654][T10086] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.875682][T10086] CR2: 00007ff7e3574a00 CR3: 0000000111720000 CR4: 00000000000006f0
[  137.878135][T10086] Call Trace:
[  137.879187][T10086]  <TASK>
[  137.880075][T10086]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  137.882245][T10086]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  137.884374][T10086]  ? do_trace_netlink_extack+0x7e/0x1d0
[  137.886084][T10086]  ? __nla_validate_parse+0x251c/0x2d40
[  137.887792][T10086]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  137.890000][T10086]  ? __lock_acquire+0xab9/0xd20
[  137.891552][T10086]  ? __lock_acquire+0xab9/0xd20
[  137.893054][T10086]  ? do_raw_spin_lock+0x121/0x290
[  137.894552][T10086]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  137.896195][T10086]  ? mptcp_addresses_equal+0x392/0x4d0
[  137.897865][T10086]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  137.899604][T10086]  ? __nla_validate_parse+0x251c/0x2d40
[  137.901294][T10086]  ? __sock_sendmsg+0x21c/0x270
[  137.902741][T10086]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  137.904540][T10086]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  137.906388][T10086]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  137.908410][T10086]  genl_family_rcv_msg_doit+0x215/0x300
[  137.910220][T10086]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  137.912160][T10086]  ? bpf_lsm_capable+0x9/0x20
[  137.913658][T10086]  ? security_capable+0x7e/0x2e0
[  137.915189][T10086]  genl_rcv_msg+0x60e/0x790
[  137.916601][T10086]  ? __pfx_genl_rcv_msg+0x10/0x10
[  137.918164][T10086]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  137.920037][T10086]  netlink_rcv_skb+0x208/0x470
[  137.921581][T10086]  ? __pfx_genl_rcv_msg+0x10/0x10
[  137.923129][T10086]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  137.924761][T10086]  ? down_read+0x1ad/0x2e0
[  137.926159][T10086]  genl_rcv+0x28/0x40
[  137.927411][T10086]  netlink_unicast+0x75c/0x8e0
[  137.928914][T10086]  netlink_sendmsg+0x805/0xb30
[  137.930389][T10086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.932320][T10086]  ? aa_sock_msg_perm+0x94/0x160
[  137.933893][T10086]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  137.935546][T10086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.937226][T10086]  __sock_sendmsg+0x21c/0x270
[  137.938697][T10086]  ____sys_sendmsg+0x505/0x830
[  137.940220][T10086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  137.941981][T10086]  ? import_iovec+0x74/0xa0
[  137.943413][T10086]  ___sys_sendmsg+0x21f/0x2a0
[  137.944908][T10086]  ? __pfx____sys_sendmsg+0x10/0x10
[  137.946513][T10086]  ? __fget_files+0x2a/0x420
[  137.947963][T10086]  ? __fget_files+0x3a0/0x420
[  137.949424][T10086]  __x64_sys_sendmsg+0x19b/0x260
[  137.951035][T10086]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  137.952706][T10086]  ? rcu_is_watching+0x15/0xb0
[  137.954166][T10086]  ? do_syscall_64+0xbe/0x3b0
[  137.955632][T10086]  do_syscall_64+0xfa/0x3b0
[  137.957063][T10086]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.958675][T10086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.960542][T10086]  ? exc_page_fault+0x9f/0xf0
[  137.962073][T10086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.963892][T10086] RIP: 0033:0x7ff7e358e9a9
[  137.965290][T10086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.971206][T10086] RSP: 002b:00007ff7e4334038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  137.973899][T10086] RAX: ffffffffffffffda RBX: 00007ff7e37b6160 RCX: 00007ff7e358e9a9
[  137.976351][T10086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  137.978826][T10086] RBP: 00007ff7e3610d69 R08: 0000000000000000 R09: 0000000000000000
[  137.981359][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  137.983803][T10086] R13: 0000000000000000 R14: 00007ff7e37b6160 R15: 00007ffe2a0cfd48
[  137.986238][T10086]  </TASK>
[  137.987230][T10086] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  137.989438][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.1.1044 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  137.993102][T10086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.996002][T10086] Call Trace:
[  137.997018][T10086]  <TASK>
[  137.997942][T10086]  dump_stack_lvl+0x99/0x250
[  137.999385][T10086]  ? __asan_memcpy+0x40/0x70
[  138.000830][T10086]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.002376][T10086]  ? __pfx__printk+0x10/0x10
[  138.003788][T10086]  panic+0x2db/0x790
[  138.005024][T10086]  ? __pfx_panic+0x10/0x10
[  138.006420][T10086]  __warn+0x31b/0x4b0
[  138.007687][T10086]  ? mptcp_pm_alloc_anno_list+0x329/0x390
[  138.009343][T10086]  ? mptcp_pm_alloc_anno_list+0x329/0x390
[  138.011234][T10086]  report_bug+0x2be/0x4f0
[  138.012704][T10086]  ? mptcp_pm_alloc_anno_list+0x329/0x390
[  138.014607][T10086]  ? mptcp_pm_alloc_anno_list+0x329/0x390
[  138.016773][T10086]  ? mptcp_pm_alloc_anno_list+0x32b/0x390
[  138.019000][T10086]  handle_bug+0x84/0x160
[  138.020465][T10086]  exc_invalid_op+0x1a/0x50
[  138.021933][T10086]  asm_exc_invalid_op+0x1a/0x20
[  138.023461][T10086] RIP: 0010:mptcp_pm_alloc_anno_list+0x329/0x390
[  138.025635][T10086] Code: b0 01 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 26 f4 64 f6 90 0f 0b 90 e9 8b fd ff ff e8 18 f4 64 f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 30 02 a2 8f 80 e1 07 80 c1 03 38 c1
[  138.032633][T10086] RSP: 0018:ffffc90008486db8 EFLAGS: 00010293
[  138.034904][T10086] RAX: ffffffff8b5b34d8 RBX: ffff88811c920c00 RCX: ffff888110909cc0
[  138.037806][T10086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  138.040338][T10086] RBP: 0000000000000000 R08: 00004e2300020001 R09: 00000000aa1414ac
[  138.042903][T10086] R10: 00000000aa1414ac R11: 0000000000000000 R12: ffff888104a0c300
[  138.045473][T10086] R13: ffff8881031c0000 R14: dffffc0000000000 R15: ffff88811c921681
[  138.048011][T10086]  ? mptcp_pm_alloc_anno_list+0x328/0x390
[  138.049986][T10086]  ? mptcp_pm_alloc_anno_list+0x328/0x390
[  138.051788][T10086]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  138.054100][T10086]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  138.056520][T10086]  ? do_trace_netlink_extack+0x7e/0x1d0
[  138.058247][T10086]  ? __nla_validate_parse+0x251c/0x2d40
[  138.059962][T10086]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  138.062218][T10086]  ? __lock_acquire+0xab9/0xd20
[  138.063769][T10086]  ? __lock_acquire+0xab9/0xd20
[  138.065353][T10086]  ? do_raw_spin_lock+0x121/0x290
[  138.067359][T10086]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  138.069256][T10086]  ? mptcp_addresses_equal+0x392/0x4d0
[  138.070967][T10086]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  138.072763][T10086]  ? __nla_validate_parse+0x251c/0x2d40
[  138.074455][T10086]  ? __sock_sendmsg+0x21c/0x270
[  138.076350][T10086]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  138.078445][T10086]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  138.080422][T10086]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  138.082376][T10086]  genl_family_rcv_msg_doit+0x215/0x300
[  138.084093][T10086]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  138.086049][T10086]  ? bpf_lsm_capable+0x9/0x20
[  138.087505][T10086]  ? security_capable+0x7e/0x2e0
[  138.089068][T10086]  genl_rcv_msg+0x60e/0x790
[  138.090472][T10086]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.092016][T10086]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  138.093928][T10086]  netlink_rcv_skb+0x208/0x470
[  138.095521][T10086]  ? __pfx_genl_rcv_msg+0x10/0x10
[  138.097176][T10086]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  138.098807][T10086]  ? down_read+0x1ad/0x2e0
[  138.100433][T10086]  genl_rcv+0x28/0x40
[  138.101687][T10086]  netlink_unicast+0x75c/0x8e0
[  138.103150][T10086]  netlink_sendmsg+0x805/0xb30
[  138.104644][T10086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.106405][T10086]  ? aa_sock_msg_perm+0x94/0x160
[  138.108050][T10086]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  138.109853][T10086]  ? __pfx_netlink_sendmsg+0x10/0x10
[  138.111469][T10086]  __sock_sendmsg+0x21c/0x270
[  138.112934][T10086]  ____sys_sendmsg+0x505/0x830
[  138.114414][T10086]  ? __pfx_____sys_sendmsg+0x10/0x10
[  138.116281][T10086]  ? import_iovec+0x74/0xa0
[  138.117714][T10086]  ___sys_sendmsg+0x21f/0x2a0
[  138.119409][T10086]  ? __pfx____sys_sendmsg+0x10/0x10
[  138.121076][T10086]  ? __fget_files+0x2a/0x420
[  138.122571][T10086]  ? __fget_files+0x3a0/0x420
[  138.124328][T10086]  __x64_sys_sendmsg+0x19b/0x260
[  138.126296][T10086]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  138.128474][T10086]  ? rcu_is_watching+0x15/0xb0
[  138.130367][T10086]  ? do_syscall_64+0xbe/0x3b0
[  138.132219][T10086]  do_syscall_64+0xfa/0x3b0
[  138.134024][T10086]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.135616][T10086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.137454][T10086]  ? exc_page_fault+0x9f/0xf0
[  138.138895][T10086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.140700][T10086] RIP: 0033:0x7ff7e358e9a9
[  138.142065][T10086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.147879][T10086] RSP: 002b:00007ff7e4334038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  138.150401][T10086] RAX: ffffffffffffffda RBX: 00007ff7e37b6160 RCX: 00007ff7e358e9a9
[  138.152762][T10086] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  138.155135][T10086] RBP: 00007ff7e3610d69 R08: 0000000000000000 R09: 0000000000000000
[  138.157480][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.159865][T10086] R13: 0000000000000000 R14: 00007ff7e37b6160 R15: 00007ffe2a0cfd48
[  138.162235][T10086]  </TASK>
[  138.163759][T10086] Kernel Offset: disabled
[  138.165031][T10086] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:54:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000001 RCX=1c1aa6f8a2df5900 RDX=0000000000000000
RSI=ffffffff8db83333 RDI=ffffffff8be28c00 RBP=00000000ffffffff RSP=ffffc900067c7880
R8 =0000000000000000 R9 =ffffffff822d641d R10=dffffc0000000000 R11=fffff94000091c41
R12=0000000000000246 R13=ffff888110908000 R14=ffffffff8e13f0e0 R15=0000000000000001
RIP=ffffffff8b6da255 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555646aa500 ffffffff 00c00000
GS =0000 ffff8880b8625000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45085585c0 CR3=000000001f440000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00ff000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4508611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008486550
R8 =ffff888108ab8237 R9 =1ffff11021157046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99aef8b4 R14=ffffffff99df4300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7e43346c0 ffffffff 00c00000
GS =0000 ffff8881a3c25000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff7e3574a00 CR3=0000000111720000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007ff7e42ed100 00007ff7e3786440 XMM05=00007ff7e3786458 00007ff7e37864a0
XMM06=00007ff7e3786498 00007ff7e3786490 XMM07=00007ff7e3786488 00007ff7e3786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff7e3611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
