last executing test programs:

1.247360295s ago: executing program 0 (id=799):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b1b, &(0x7f0000000040))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf251a0000000700210061c5ecadebe3afd25cab02e5aa4f5b7037fd0000a6b20fa3d127097b1c713e1821e6ae3c286e17fcf09d2a26da9b4682f0944e3cb2a28ef7245fffc73ec08d15da1f8dca40caec6e276baf06a3ecded741f4bb8683d783e3886b62f61241e2c0127486d21a87a6f870d9f0ec09b26b4bb73e738f3a2bfa8ada1d37508d43ce0d52400d8b38439a99909e29a92597a769cbb0105fe20983abb9978dae6ac80d94e11d2ef2c9df8f0b228a66d6ad74db45530a6cd19d14f48b90e6dbfc0b89e28f08be8046ad2238273a0e294a0ed13d58"], 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44)

1.247040634s ago: executing program 1 (id=800):
socket$inet6(0xa, 0x1, 0x84) (async)
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114"], 0xdd12}, {0x0}], 0x2}, 0x20040051) (async)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114"], 0xdd12}, {0x0}], 0x2}, 0x20040051)
sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x400c801, &(0x7f00000000c0)={0xa, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1c)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b9042e1d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

1.245148175s ago: executing program 2 (id=801):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x5}, &(0x7f0000000180)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb00002c0000001e000000000000000100000d0000000000000000040000000000000001000084000000000020000001000000000000000000"], &(0x7f0000000000)=""/31, 0x46, 0x1f, 0x1}, 0x28)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[], 0x0)

1.187911249s ago: executing program 0 (id=802):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x7, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20084084)

1.187169506s ago: executing program 1 (id=803):
unshare(0x480)
r0 = epoll_create1(0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080)={0x90000016})
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)

1.115554963s ago: executing program 1 (id=804):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f0000000280)="3ac4f346136a09ae1c091a55", 0xc, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
shutdown(r0, 0x1)

1.115101388s ago: executing program 0 (id=805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000882}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b060108f9efffffffffffff020000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c000180080001407f0000010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000007f00))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007f40), &(0x7f0000007f80)=0xc)

1.035167848s ago: executing program 0 (id=806):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x5b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x3, 0x9, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0xc, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0x2, 0x4, 0x6, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x120, 0x80, "316f748a6d2d020d1c0dda27a9bca207141b9a451c00aa1271df019aeb512657849383b4"}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x8800)
sendfile(r2, r3, 0x0, 0xffffffff000)
listen(r2, 0x4)
r6 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/15, 0xf}], 0x4, 0x5, 0x5)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'})
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58, &(0x7f0000000040)}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x5b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x3, 0x9, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0xc, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0x2, 0x4, 0x6, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x120, 0x80, "316f748a6d2d020d1c0dda27a9bca207141b9a451c00aa1271df019aeb512657849383b4"}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async)
socket$inet6(0xa, 0x2, 0x3a) (async)
sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x8800) (async)
sendfile(r2, r3, 0x0, 0xffffffff000) (async)
listen(r2, 0x4) (async)
openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async)
preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/15, 0xf}], 0x4, 0x5, 0x5) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x58, &(0x7f0000000040)}, 0x10) (async)

908.174316ms ago: executing program 0 (id=807):
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000001c001800711204000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

901.086105ms ago: executing program 0 (id=808):
r0 = socket$inet6(0xa, 0x80002, 0xa4)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0x0, 0x3}, 0x2}, 0x18)
r3 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x24040800}, 0x1) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) (async, rerun: 32)
read(r4, &(0x7f0000000080)=""/186, 0xba) (async, rerun: 32)
unshare(0x26020480) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00042cbd7000fbdbdf255500000006000000", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async, rerun: 64)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async, rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r9=>0x0}) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=@newlink={0x34, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r9, 0x4982}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x8000)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, 0x0)

317.947588ms ago: executing program 2 (id=809):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r4=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r4, 0x40, 0x1, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x3a, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @empty}}}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000007c0))

247.808798ms ago: executing program 1 (id=810):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000000040)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f14c318adae1"}, @NL80211_ATTR_PMKID={0x14, 0x55, "f0a2434437630701f1be012f9200"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44)

246.072177ms ago: executing program 2 (id=811):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000034000100000000000000000008000000"], 0x14}], 0x1}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xb, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x3c, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x3, 0xa, 0x1, 0xed8, 0x7, 0x8c, 0x40, 0x925e, [{0x101, 0x6, 0x200, 0x3}]}}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}]}, 0x68}}, 0x20040054)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4044004)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x14c, 0x10, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x40c, 0x4000}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xfffffffa, 0x2}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x0, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf2f4, 0x9ab, 0xfffffff9}}]}, {0xd4, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xd}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb121, 0x5}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7, 0x3}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffffc, 0x2a0, 0x7fffffff, 0x88a8}}, {0x14, 0x1, {0x50, 0xfab, 0x1ff, 0x88a8}}, {0x14, 0x1, {0x9, 0x68, 0x4b685356, 0x8100}}, {0x14, 0x1, {0x4, 0x9b6, 0xffffffff, 0x8100}}, {0x14, 0x1, {0x7, 0x7b, 0x9, 0x9a8}}, {0x14, 0x1, {0xae, 0x9b4, 0x2, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0x101, 0x8000, 0x24}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xb, 0x5}}]}, {0x4}]}]}, 0x14c}}, 0x20044050)

188.056639ms ago: executing program 1 (id=812):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xa, 0xe}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0xc, 0x0, 0x0, 0xb, 0x4}, @volatile={0x0, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x32}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000090002000000004702000000080003400000000008"], 0x30}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0x9, 0x4)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r3, 0x8008b705, 0x200000000000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)="d800000018008106bc65f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400100004c230000fab94dcf5c04e04bcb726f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdfd809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97010000000000000000", 0xd8}], 0x1}, 0x4004010)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0xb702, 0x1a0, 0x0, 0x10001, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x2a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80200}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x6}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)

125.983227ms ago: executing program 1 (id=813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000e28974eb675327000000008000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000e7dad700aa0c00028005000100000000000600034061bf03b845c3000100000800074000000400000000000000"], 0x9c}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010d0000000000f6ecd7fa000000300001801c000280020003000f000000080004000600000008000200010001000d0001007564703a73797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r11, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'ip6gre0\x00', <r12=>0x0, 0x29, 0xff, 0x52, 0x5, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, @private2, 0x20, 0x7, 0x6, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', <r13=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=<r14=>0x0, &(0x7f0000000880)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000008c0)={'team0\x00', <r15=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'ip6gre0\x00', <r16=>0x0, 0x4, 0x9, 0x0, 0x1e1, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7, 0x1, 0x400, 0x9}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000009c0)={@dev, @broadcast, <r17=>0x0}, &(0x7f0000000a00)=0xc)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r18=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0, 0x9, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB=' \a\x00\x00', @ANYRES16=r7, @ANYBLOB="000829bd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ec0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000d00000008000600", @ANYRES32=0x0, @ANYBLOB="f8ff0000", @ANYRES32=0x0, @ANYBLOB="80fdc341a1477e00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000dfec0005000300030000000800040099c866ac67d8027bc1a93e449c1ca1c157ea04d6e4357f463a16d7d563eb54512d8d898ef7a029fee31ad37b4bb148cf920c78e33b7b8e7f58d7abe479a8274d83eccb00875749220b9a700f64e54125", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="a001028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400e6ba0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400e700000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004001a40ffff38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040056c500003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r8, @ANYBLOB="3c0102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000f0b000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010400004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r13, @ANYBLOB="4c010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400e300000008000600", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400030000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000a00000008000600", @ANYRES32=r18, @ANYBLOB], 0x720}, 0x1, 0x0, 0x0, 0x800}, 0x94)

125.443505ms ago: executing program 2 (id=814):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0xf8, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xfff1}}, @TCA_BPF_ACT={0x9c, 0x1, [@m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

37.345867ms ago: executing program 2 (id=815):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32140000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

0s ago: executing program 2 (id=816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0xa}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x54, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x40, 0x1, [@m_mpls={0x3c, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0xd, 0x6, "710d1c3ab6d1bd312b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20000040)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x70bd2b, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x1c}}, 0x8044)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x124, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5f, 0x2, "6f28cae7e763e81067d4ceb813e7feb2a199aa4d55a1ab96f08a0f0e794136b12fef25420295cc1e507f98d439d24055b3819ebc8073730523a0a085ad7669c2155f69b15be1a3c2c548d7259b70c08e808f7af3a3406f731c9d6e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x41, 0x3, "5ae3420e80c07506bfd5002f75393ca25f1b4eaf61a166ad9b6b03caed34ec7ca2d030cc7a9c46dec5fa602fdf022276c1d032155f658f98a411e682d7"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f00000009c0)="d7d87bb55794")
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@mcast1, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x2000000000}, {0x40000000000, 0x0, 0x0, 0x200}, {0xfffffffc}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0xa01, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x804)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:27277' (ED25519) to the list of known hosts.
syzkaller login: [   56.259903][ T5815] cgroup: Unknown subsys name 'net'
[   56.448672][ T5815] cgroup: Unknown subsys name 'cpuset'
[   56.455239][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.326855][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.940511][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.945954][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.949116][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.953186][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.956312][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.997893][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.001502][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.004764][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.007982][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.014740][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.045805][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.049347][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.053296][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.056859][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.060266][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.306614][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   63.404407][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   63.464475][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.467565][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.471020][ T5829] bridge_slave_0: entered allmulticast mode
[   63.473976][ T5829] bridge_slave_0: entered promiscuous mode
[   63.478366][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.480609][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.482999][ T5829] bridge_slave_1: entered allmulticast mode
[   63.486742][ T5829] bridge_slave_1: entered promiscuous mode
[   63.529207][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.535085][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.549291][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   63.640207][ T5829] team0: Port device team_slave_0 added
[   63.649561][ T5829] team0: Port device team_slave_1 added
[   63.651838][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.655106][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.657438][ T5834] bridge_slave_0: entered allmulticast mode
[   63.660129][ T5834] bridge_slave_0: entered promiscuous mode
[   63.663436][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.666266][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.668577][ T5834] bridge_slave_1: entered allmulticast mode
[   63.671302][ T5834] bridge_slave_1: entered promiscuous mode
[   63.739061][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.741287][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.750831][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.776290][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.796652][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.799659][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.802578][ T5836] bridge_slave_0: entered allmulticast mode
[   63.807496][ T5836] bridge_slave_0: entered promiscuous mode
[   63.811556][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.816327][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.826706][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.833497][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.850205][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.852614][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.855262][ T5836] bridge_slave_1: entered allmulticast mode
[   63.858034][ T5836] bridge_slave_1: entered promiscuous mode
[   63.879303][ T5834] team0: Port device team_slave_0 added
[   63.901879][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.907993][ T5834] team0: Port device team_slave_1 added
[   63.920309][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.957095][ T5829] hsr_slave_0: entered promiscuous mode
[   63.959708][ T5829] hsr_slave_1: entered promiscuous mode
[   63.988024][ T5836] team0: Port device team_slave_0 added
[   63.991847][ T5836] team0: Port device team_slave_1 added
[   63.995990][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.998453][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.007263][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.011757][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.014105][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.023067][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.062630][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.065633][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.075383][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.095834][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.098162][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.106710][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.166084][ T5834] hsr_slave_0: entered promiscuous mode
[   64.169270][ T5834] hsr_slave_1: entered promiscuous mode
[   64.171810][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.175173][ T5834] Cannot create hsr debugfs directory
[   64.229472][ T5836] hsr_slave_0: entered promiscuous mode
[   64.232766][ T5836] hsr_slave_1: entered promiscuous mode
[   64.236077][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.239117][ T5836] Cannot create hsr debugfs directory
[   64.412230][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.442182][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.471552][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.503072][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.607263][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.624598][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.649497][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.654324][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.700549][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.714870][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.721160][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.732675][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.769032][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.807645][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   64.830510][ T1376] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.833107][ T1376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.849197][ T1376] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.851629][ T1376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.890063][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.920820][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.928340][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   64.950078][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.952353][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.958620][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   64.965887][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.968108][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.980128][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.982416][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.991946][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.994914][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.009459][ T5830] Bluetooth: hci0: command tx timeout
[   65.088305][ T5830] Bluetooth: hci1: command tx timeout
[   65.090676][   T54] Bluetooth: hci2: command tx timeout
[   65.098915][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.148070][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.221623][ T5829] veth0_vlan: entered promiscuous mode
[   65.239380][ T5829] veth1_vlan: entered promiscuous mode
[   65.259195][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.280139][ T5829] veth0_macvtap: entered promiscuous mode
[   65.286342][ T5829] veth1_macvtap: entered promiscuous mode
[   65.318382][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.326884][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.332236][ T5836] veth0_vlan: entered promiscuous mode
[   65.337005][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.341722][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.345615][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.348314][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.350926][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.358656][ T5836] veth1_vlan: entered promiscuous mode
[   65.400828][ T5836] veth0_macvtap: entered promiscuous mode
[   65.425924][ T5836] veth1_macvtap: entered promiscuous mode
[   65.430688][ T5834] veth0_vlan: entered promiscuous mode
[   65.452919][ T5834] veth1_vlan: entered promiscuous mode
[   65.468754][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.477493][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.480899][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.480964][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.492269][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.496278][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499104][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.501918][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.534900][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.539675][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.569750][ T5834] veth0_macvtap: entered promiscuous mode
[   65.585493][ T5834] veth1_macvtap: entered promiscuous mode
[   65.596496][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.637975][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.660399][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.666984][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.667461][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.669468][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.672449][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.683987][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.686725][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.711102][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.714950][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.821825][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.827618][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.868330][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.873892][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.007536][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.029072][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'.
[   66.325542][ T5912] sctp: [Deprecated]: syz.2.8 (pid 5912) Use of int in max_burst socket option.
[   66.325542][ T5912] Use struct sctp_assoc_value instead
[   67.094456][ T5830] Bluetooth: hci0: command tx timeout
[   67.123243][ T5922] Zero length message leads to an empty skb
[   67.164228][ T5830] Bluetooth: hci1: command tx timeout
[   67.164784][   T54] Bluetooth: hci2: command tx timeout
[   67.289368][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   67.292474][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   67.374702][ T5931] lo speed is unknown, defaulting to 1000
[   67.378620][ T5931] lo speed is unknown, defaulting to 1000
[   67.382575][ T5931] lo speed is unknown, defaulting to 1000
[   67.427036][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   67.591849][ T5891] lo speed is unknown, defaulting to 1000
[   67.595172][ T5931] infiniband syz0: set active
[   67.596909][ T5931] infiniband syz0: added lo
[   67.640934][ T5931] RDS/IB: syz0: added
[   67.646382][ T5931] smc: adding ib device syz0 with port count 1
[   67.648791][ T5931] smc:    ib device syz0 port 1 has pnetid 
[   67.651981][ T5864] lo speed is unknown, defaulting to 1000
[   67.658104][ T5931] lo speed is unknown, defaulting to 1000
[   67.974709][ T5931] lo speed is unknown, defaulting to 1000
[   68.263042][ T5931] lo speed is unknown, defaulting to 1000
[   68.599938][ T5955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'.
[   68.636517][ T5953] lo speed is unknown, defaulting to 1000
[   68.750799][ T5960] openvswitch: netlink: IPv6 tunnel dst address is zero
[   68.861073][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   69.131933][ T5980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'.
[   69.163786][   T54] Bluetooth: hci0: command tx timeout
[   69.249771][   T54] Bluetooth: hci1: command tx timeout
[   69.249828][ T5830] Bluetooth: hci2: command tx timeout
[   69.392023][ T5987] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET)
[   69.568002][ T5990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.600495][ T1269] lo speed is unknown, defaulting to 1000
[   69.882506][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   69.887715][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39'.
[   70.260448][ T6024] x_tables: ip6_tables: mh match: only valid for protocol 135
[   70.337523][ T6030] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.687961][ T6051] netlink: 'syz.0.54': attribute type 21 has an invalid length.
[   70.827473][ T6059] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   70.838636][ T6056] warning: `syz.0.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.868706][ T6056] bridge_slave_0: left allmulticast mode
[   70.881484][ T6056] bridge_slave_0: left promiscuous mode
[   70.887681][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.900231][ T6056] bridge_slave_1: left allmulticast mode
[   70.902622][ T6056] bridge_slave_1: left promiscuous mode
[   70.910699][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.925521][ T6056] bond0: (slave bond_slave_0): Releasing backup interface
[   70.939262][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.941898][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.952051][ T6056] bond0: (slave bond_slave_1): Releasing backup interface
[   70.972502][ T6071] netlink: 'syz.2.57': attribute type 10 has an invalid length.
[   70.978322][ T6056] team0: Port device team_slave_0 removed
[   70.988571][ T6056] team0: Port device team_slave_1 removed
[   70.991819][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.995294][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.999350][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.001672][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.026730][ T6069] bridge_slave_0: left allmulticast mode
[   71.028841][ T6069] bridge_slave_0: left promiscuous mode
[   71.031143][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.042058][ T6069] bridge_slave_1: left allmulticast mode
[   71.060476][ T6069] bridge_slave_1: left promiscuous mode
[   71.062717][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.099912][ T6069] bond0: (slave bond_slave_0): Releasing backup interface
[   71.102588][ T6074] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   71.116756][ T6069] bond0: (slave bond_slave_1): Releasing backup interface
[   71.157994][ T6069] team0: Port device team_slave_0 removed
[   71.186876][ T6069] team0: Port device team_slave_1 removed
[   71.189756][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.192212][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.198650][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.200994][ T6069] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.227477][ T6071] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   71.234676][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.240218][ T6071] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.244315][ T5830] Bluetooth: hci0: command tx timeout
[   71.325800][ T5830] Bluetooth: hci2: command tx timeout
[   71.325845][   T54] Bluetooth: hci1: command tx timeout
[   71.383341][ T6084] __nla_validate_parse: 3 callbacks suppressed
[   71.383359][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   71.495576][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   71.552144][ T6090] netlink: 'syz.1.66': attribute type 2 has an invalid length.
[   71.629645][    T9] cfg80211: failed to load regulatory.db
[   71.637873][ T6098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'.
[   71.909658][    T9] IPVS: starting estimator thread 0...
[   72.006940][ T6117] IPVS: using max 63 ests per chain, 151200 per kthread
[   72.347959][ T6147] netlink: 'syz.2.84': attribute type 2 has an invalid length.
[   72.349040][ T6146] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.351251][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'.
[   72.455855][ T6095] delete_channel: no stack
[   72.520779][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.87'.
[   72.584837][ T6155] netlink: 'syz.0.89': attribute type 1 has an invalid length.
[   72.646742][ T6156] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   72.649759][ T6160] netlink: 'syz.1.90': attribute type 3 has an invalid length.
[   72.652054][ T6160] netlink: 666 bytes leftover after parsing attributes in process `syz.1.90'.
[   72.655176][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.664823][ T6160] xt_time: invalid argument - start or stop time greater than 23:59:59
[   72.728490][ T6164] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   72.732831][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.91'.
[   72.841439][ T6166] xt_CT: No such helper "snmp"
[   73.309959][ T6195] netlink: 'syz.1.103': attribute type 29 has an invalid length.
[   73.316284][ T6195] netlink: 'syz.1.103': attribute type 29 has an invalid length.
[   73.322374][ T6195] netlink: 52 bytes leftover after parsing attributes in process `syz.1.103'.
[   73.365332][ T6199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   73.502648][ T6204] syzkaller1: tun_chr_ioctl cmd 1074025672
[   73.505314][ T6204] syzkaller1: ignored: set checksum enabled
[   73.968186][ T6232] vlan2: entered promiscuous mode
[   73.970845][ T6232] vlan2: entered allmulticast mode
[   73.973118][ T6232] hsr_slave_1: entered allmulticast mode
[   74.031464][ T6236] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   74.057536][ T6238] syzkaller1: entered promiscuous mode
[   74.063861][ T6238] syzkaller1: entered allmulticast mode
[   74.233773][ T6248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.121'.
[   74.440336][ T6253] geneve2: entered promiscuous mode
[   74.459484][ T6253] tipc: Started in network mode
[   74.461531][ T6253] tipc: Node identity 8a4af4871023, cluster identity 4711
[   74.475306][ T6253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.497817][ T6253] tipc: Resetting bearer <eth:syzkaller0>
[   74.533465][ T6252] tipc: Disabling bearer <eth:syzkaller0>
[   75.407316][ T6281] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   75.430726][ T6283] bridge_slave_0: left allmulticast mode
[   75.433033][ T6283] bridge_slave_0: left promiscuous mode
[   75.437741][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.445103][ T6283] bridge_slave_1: left allmulticast mode
[   75.447344][ T6283] bridge_slave_1: left promiscuous mode
[   75.449752][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.463235][ T6283] bond0: (slave bond_slave_0): Releasing backup interface
[   75.472133][ T6283] bond0: (slave bond_slave_1): Releasing backup interface
[   75.489558][ T6283] team0: Port device team_slave_0 removed
[   75.498819][ T6283] team0: Port device team_slave_1 removed
[   75.501886][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.505347][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.509695][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.512266][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.525555][ T6293] batadv_slave_0: entered promiscuous mode
[   75.527885][ T6293] batadv_slave_0: entered allmulticast mode
[   75.707317][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   75.710866][ T6303] validate_nla: 2 callbacks suppressed
[   75.710903][ T6303] netlink: 'syz.2.140': attribute type 18 has an invalid length.
[   75.861797][ T6313] netlink: 'syz.1.144': attribute type 7 has an invalid length.
[   75.863905][ T6314] netlink: 'syz.1.144': attribute type 7 has an invalid length.
[   75.876904][ T6313] netlink: 'syz.1.144': attribute type 8 has an invalid length.
[   75.969667][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   76.151482][ T6328] lo speed is unknown, defaulting to 1000
[   76.420042][ T6335] lo speed is unknown, defaulting to 1000
[   76.622425][ T6349] delete_channel: no stack
[   77.114283][ T6371] __nla_validate_parse: 3 callbacks suppressed
[   77.114304][ T6371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'.
[   77.266307][ T6379] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.160'.
[   77.272420][ T6371] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   77.546451][ T6393] netlink: 56 bytes leftover after parsing attributes in process `syz.2.168'.
[   77.728435][ T6404] netlink: 'syz.2.170': attribute type 1 has an invalid length.
[   77.784926][ T6404] bond1: (slave gretap1): making interface the new active one
[   77.788651][ T6404] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   77.839260][ T6404] vlan2: entered allmulticast mode
[   77.841014][ T6404] bond1: entered allmulticast mode
[   77.842662][ T6404] gretap1: entered allmulticast mode
[   77.846297][ T6404] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   78.015602][ T6422] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.021278][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.176'.
[   78.024785][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[   78.028122][ T6422] gretap0: entered promiscuous mode
[   78.030297][ T6422] gretap0: entered allmulticast mode
[   78.101880][ T6426] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   78.221302][ T6432] x_tables: ip_tables: osf match: only valid for protocol 6
[   78.320850][ T6434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   78.379565][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'.
[   78.421244][ T6442] x_tables: duplicate underflow at hook 2
[   78.605767][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.718308][ T6457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.190'.
[   78.812584][ T6457] bond0 (unregistering): Released all slaves
[   79.094091][ T6471] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   79.273261][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'.
[   79.277299][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'.
[   79.383857][ T6484] openvswitch: netlink: Key type 16143 is out of range max 32
[   79.405432][ T6489] Bluetooth: MGMT ver 1.23
[   79.678707][ T6508] netlink: 80 bytes leftover after parsing attributes in process `syz.2.207'.
[   80.620788][ T6556] bridge_slave_0: entered allmulticast mode
[   80.634698][ T6556] netlink: 'syz.0.220': attribute type 83 has an invalid length.
[   80.710669][ T6558] lo speed is unknown, defaulting to 1000
[   81.090046][ T6576] netlink: 'syz.1.228': attribute type 4 has an invalid length.
[   81.139997][ T6576] netlink: 'syz.1.228': attribute type 4 has an invalid length.
[   81.197884][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.397248][ T6588] dummy0: entered promiscuous mode
[   81.399049][ T6588] macvtap1: entered promiscuous mode
[   81.420768][ T6588] macvtap1: entered allmulticast mode
[   81.423760][ T6588] dummy0: entered allmulticast mode
[   81.444973][ T6585] dummy0: left allmulticast mode
[   81.450626][ T6585] dummy0: left promiscuous mode
[   81.764849][ T6603] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   81.829579][ T6607] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   81.898936][ T6609] lo speed is unknown, defaulting to 1000
[   82.392893][ T6618] __nla_validate_parse: 8 callbacks suppressed
[   82.392905][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'.
[   82.441701][ T6620] netlink: 'syz.1.241': attribute type 1 has an invalid length.
[   82.452792][ T6620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.467063][ T6620] netlink: 'syz.1.241': attribute type 21 has an invalid length.
[   82.488937][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.242'.
[   82.492781][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'.
[   82.880728][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'.
[   82.887461][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'.
[   83.210296][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   83.216324][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   83.224053][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[   83.456269][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   83.460523][ T6672] netlink: 164 bytes leftover after parsing attributes in process `syz.1.255'.
[   83.590521][ T6676] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   83.609484][ T6676] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   83.612636][ T6676] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   83.625609][ T6676] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   83.980293][ T6706] openvswitch: netlink: ct_state flags 80070014 unsupported
[   83.998445][ T6707] pimreg: entered allmulticast mode
[   84.246974][ T6723] netlink: 'syz.2.273': attribute type 1 has an invalid length.
[   84.249533][ T6723] netlink: 'syz.2.273': attribute type 4 has an invalid length.
[   84.542250][ T6739] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   84.830418][ T6755] batadv_slave_0: entered promiscuous mode
[   85.185209][ T6775] netlink: zone id is out of range
[   85.187564][ T6775] netlink: zone id is out of range
[   85.260006][ T6775] netlink: set zone limit has 4 unknown bytes
[   85.297694][ T6784] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   85.471732][ T6788] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   86.280202][ T6831] Cannot find set identified by id 1 to match
[   86.331101][ T6836] lo speed is unknown, defaulting to 1000
[   87.405037][ T1088] wlan0: Trigger new scan to find an IBSS to join
[   87.520855][ T6886] lo speed is unknown, defaulting to 1000
[   88.021454][ T6908] __nla_validate_parse: 14 callbacks suppressed
[   88.021474][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[   88.027250][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[   88.065850][ T6908] lo: entered promiscuous mode
[   88.067383][ T6908] lo: entered allmulticast mode
[   88.073464][ T6908] tunl0: entered promiscuous mode
[   88.080337][ T6908] tunl0: entered allmulticast mode
[   88.085287][ T6908] gre0: entered promiscuous mode
[   88.086869][ T6908] gre0: entered allmulticast mode
[   88.089141][ T6908] gretap0: entered promiscuous mode
[   88.091215][ T6908] gretap0: entered allmulticast mode
[   88.096247][ T6908] erspan0: entered promiscuous mode
[   88.097927][ T6908] erspan0: entered allmulticast mode
[   88.101474][ T6908] ip_vti0: entered promiscuous mode
[   88.103942][ T6908] ip_vti0: entered allmulticast mode
[   88.106283][ T6908] ip6_vti0: entered promiscuous mode
[   88.108272][ T6908] ip6_vti0: entered allmulticast mode
[   88.115520][ T6908] sit0: entered promiscuous mode
[   88.118519][ T6908] sit0: entered allmulticast mode
[   88.121601][ T6908] ip6tnl0: entered promiscuous mode
[   88.125414][ T6908] ip6tnl0: entered allmulticast mode
[   88.128177][ T6908] ip6gre0: entered promiscuous mode
[   88.129931][ T6908] ip6gre0: entered allmulticast mode
[   88.133242][ T6908] syz_tun: entered promiscuous mode
[   88.135657][ T6908] syz_tun: entered allmulticast mode
[   88.137871][ T6908] ip6gretap0: entered promiscuous mode
[   88.140370][ T6908] ip6gretap0: entered allmulticast mode
[   88.143128][ T6908] bridge0: entered promiscuous mode
[   88.145469][ T6908] bridge0: entered allmulticast mode
[   88.147701][ T6908] vcan0: entered promiscuous mode
[   88.149259][ T6908] vcan0: entered allmulticast mode
[   88.152843][ T6908] bond0: entered promiscuous mode
[   88.156771][ T6908] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   88.159518][ T6908] bond0: entered allmulticast mode
[   88.161588][ T6908] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   88.166120][ T6908] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   88.206629][ T6911] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   88.210350][ T6911] ipt_ECN: cannot use operation on non-tcp rule
[   88.241359][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'.
[   88.468494][ T6941] can: request_module (can-proto-3) failed.
[   88.470563][ T6940] delete_channel: no stack
[   88.516472][ T6953] team0: Port device gtp0 added
[   88.649485][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   88.649551][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   88.652784][ T6968] ip_vti0: left allmulticast mode
[   88.759409][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'.
[   88.785990][ T6986] netlink: 'syz.1.352': attribute type 32 has an invalid length.
[   88.841766][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   88.846623][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'.
[   88.916403][ T6997] Illegal XDP return value 16128 on prog  (id 113) dev syz_tun, expect packet loss!
[   88.919972][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[   88.925055][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[   88.968030][ T7005] netem: change failed
[   89.061510][ T7014] xt_HMARK: spi-set and port-set can't be combined
[   89.339683][ T7034] netlink: 'syz.2.362': attribute type 2 has an invalid length.
[   89.342523][ T7034] netlink: 'syz.2.362': attribute type 8 has an invalid length.
[   89.347080][ T7031] netlink: 'syz.2.362': attribute type 2 has an invalid length.
[   89.351006][ T7031] netlink: 'syz.2.362': attribute type 8 has an invalid length.
[   89.444682][ T7046] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.447522][ T7046] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.450113][ T7046] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.452871][ T7046] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.490770][ T7051] netlink: 'syz.1.367': attribute type 58 has an invalid length.
[   89.659247][ T7067] netlink: 'syz.1.370': attribute type 13 has an invalid length.
[   89.751898][ T7073] netlink: 'syz.0.372': attribute type 1 has an invalid length.
[   89.781154][ T7073] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.786066][ T7074] lo speed is unknown, defaulting to 1000
[   89.824660][ T7073] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.826957][ T7073] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   89.830867][ T7073] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   89.897540][ T7082] bond3: (slave bridge2): Enslaving as an active interface with a down link
[   90.242651][ T7092] @: renamed from bond_slave_0
[   90.443940][   T28] wlan0: Trigger new scan to find an IBSS to join
[   90.591095][ T7111] macvlan0: entered promiscuous mode
[   90.773178][ T7129] netlink: 'syz.1.388': attribute type 2 has an invalid length.
[   91.055181][ T7155] tipc: Can't bind to reserved service type 1
[   91.360322][ T7186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.367227][ T7186] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.438166][ T7186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.442285][ T7186] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.498328][ T7186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.502850][ T7186] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.569430][ T7186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.573117][ T7186] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.629866][ T7186] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.632773][ T7186] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.646048][ T7186] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.649358][ T7186] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.663384][ T7186] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.666149][ T7186] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.675447][ T7186] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.678989][ T7186] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.774238][ T7199] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[   91.859244][ T7200] bridge4: entered promiscuous mode
[   91.860999][ T7200] bridge4: entered allmulticast mode
[   92.239723][ T7233] x_tables: duplicate underflow at hook 3
[   92.469486][   T33] audit: type=1107 audit(1752119705.128:2): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   92.500885][ T7251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.186247][ T7254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   93.216441][ T7256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.219755][ T7256] syzkaller0: entered promiscuous mode
[   93.221867][ T7256] syzkaller0: entered allmulticast mode
[   93.270298][ T7256] tipc: Resetting bearer <eth:syzkaller0>
[   93.297086][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   93.349719][ T7255] tipc: Disabling bearer <eth:syzkaller0>
[   93.404300][ T1088] wlan0: Creating new IBSS network, BSSID 82:c7:1b:14:ef:68
[   93.458895][ T7269] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   93.673208][ T7281] geneve1: entered promiscuous mode
[   93.682247][ T7281] xt_CONNSECMARK: invalid mode: 254
[   93.686095][ T7281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   93.694434][ T7282] __nla_validate_parse: 15 callbacks suppressed
[   93.694448][ T7282] netlink: 224 bytes leftover after parsing attributes in process `syz.1.432'.
[   94.553315][ T7292] ip6erspan0: entered allmulticast mode
[   94.669106][ T7308] validate_nla: 3 callbacks suppressed
[   94.669116][ T7308] netlink: 'syz.1.440': attribute type 2 has an invalid length.
[   94.674609][ T7308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.440'.
[   94.750057][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'.
[   94.808927][ T7317] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.914446][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.445'.
[   94.921376][ T7328] netlink: 'syz.1.447': attribute type 21 has an invalid length.
[   94.938966][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.447'.
[   95.041259][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   95.046390][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   95.049788][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'.
[   95.158515][ T7336] macsec1: entered promiscuous mode
[   95.160277][ T7336] macsec1: entered allmulticast mode
[   95.367502][ T7343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.452'.
[   95.884670][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   96.285896][ T7379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'.
[   96.587636][ T7400] netlink: 'syz.1.468': attribute type 29 has an invalid length.
[   96.767848][ T7415] veth0: entered promiscuous mode
[   96.860263][ T7420] syzkaller1: entered promiscuous mode
[   96.862548][ T7420] syzkaller1: entered allmulticast mode
[   96.960876][ T7424] lo speed is unknown, defaulting to 1000
[   97.242467][ T7436] netlink: 'syz.2.479': attribute type 2 has an invalid length.
[   97.378592][ T7441] nbd: socks must be embedded in a SOCK_ITEM attr
[   97.381698][ T7441] block nbd0: shutting down sockets
[   97.460496][ T7441] bond4: entered promiscuous mode
[   97.462221][ T7441] bond4: entered allmulticast mode
[   98.022511][ T7474] lo speed is unknown, defaulting to 1000
[   98.038701][   T51] IPVS: starting estimator thread 0...
[   98.061055][ T7479] : renamed from bond_slave_0
[   98.123768][ T7480] IPVS: using max 62 ests per chain, 148800 per kthread
[   98.190458][ T7485] lo speed is unknown, defaulting to 1000
[   98.362167][ T7495] netlink: 'syz.2.495': attribute type 2 has an invalid length.
[   98.401235][ T7495] : entered promiscuous mode
[   98.490432][ T7497] netlink: zone id is out of range
[   98.492365][ T7497] netlink: del zone limit has 4 unknown bytes
[   98.707654][ T7509] xt_nfacct: accounting object `syz1' does not exists
[   98.802841][ T7516] __nla_validate_parse: 6 callbacks suppressed
[   98.802856][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[   99.082898][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[   99.152413][ T7537] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   99.162323][ T7535] netlink: 300 bytes leftover after parsing attributes in process `syz.0.508'.
[   99.177572][ T7537] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.509'.
[   99.405794][ T7548] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   99.409948][ T7545] IPVS: stopping backup sync thread 7548 ...
[   99.645985][ T7556] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   99.657971][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.514'.
[   99.678951][ T7556] bridge1: entered promiscuous mode
[   99.681041][ T7556] bridge1: entered allmulticast mode
[   99.688986][ T7556] team0: Port device bridge1 added
[  100.018110][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[  100.050340][ T7576] netlink: 'syz.0.520': attribute type 2 has an invalid length.
[  100.054111][ T7576] netlink: 224 bytes leftover after parsing attributes in process `syz.0.520'.
[  100.401369][ T7595] netlink: 'syz.2.529': attribute type 1 has an invalid length.
[  100.410974][ T7595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.529'.
[  100.488965][ T7603] netlink: 44 bytes leftover after parsing attributes in process `syz.1.531'.
[  100.757933][ T7616] tipc: Failed to remove unknown binding: 66,1,1/0:341137872/341137874
[  100.762564][ T7616] tipc: Failed to remove unknown binding: 66,1,1/0:341137872/341137874
[  100.768201][ T7616] tipc: Failed to remove unknown binding: 66,1,1/0:341137872/341137874
[  100.773280][ T7616] netlink: 356 bytes leftover after parsing attributes in process `syz.1.535'.
[  100.906488][ T7628] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  101.815147][ T7671] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  101.832109][ T7671] netlink: 'syz.2.551': attribute type 21 has an invalid length.
[  101.842989][ T7671] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  101.864319][ T7671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.036542][ T7685] lo speed is unknown, defaulting to 1000
[  102.479654][ T7705] tipc: Started in network mode
[  102.481631][ T7705] tipc: Node identity 6e091949a908, cluster identity 4711
[  102.486043][ T7705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.488877][ T7708] syzkaller0: entered promiscuous mode
[  102.491063][ T7708] syzkaller0: entered allmulticast mode
[  102.508740][ T7708] tipc: Resetting bearer <eth:syzkaller0>
[  102.520753][ T7708] tipc: Disabling bearer <eth:syzkaller0>
[  102.587065][ T7713] netlink: 'syz.1.562': attribute type 1 has an invalid length.
[  102.737276][ T7723] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[  103.438296][ T7766] netlink: 'syz.1.580': attribute type 2 has an invalid length.
[  103.895938][ T7810] bridge2: the hash_elasticity option has been deprecated and is always 16
[  103.898827][ T7810] bridge2: entered allmulticast mode
[  104.166039][ T7835] __nla_validate_parse: 10 callbacks suppressed
[  104.166051][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'.
[  104.211144][ T7838] netlink: 'syz.2.607': attribute type 1 has an invalid length.
[  104.217241][ T7838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.607'.
[  104.239329][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'.
[  104.301797][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[  104.406432][ T7853] lo speed is unknown, defaulting to 1000
[  104.474979][ T7860] netlink: 'syz.2.615': attribute type 15 has an invalid length.
[  104.477420][ T7860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.615'.
[  104.480988][ T7860] bond0: option resend_igmp: invalid value (196616)
[  104.483054][ T7860] bond0: option resend_igmp: allowed values 0 - 255
[  104.566910][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'.
[  104.573668][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.616'.
[  104.628480][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'.
[  104.858347][ T7877] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  104.865363][ T7877] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  104.873522][ T7877] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  105.149020][ T7891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.223377][ T7898] netlink: 'syz.0.626': attribute type 1 has an invalid length.
[  105.255485][ T7898] 8021q: adding VLAN 0 to HW filter on device bond4
[  105.279513][ T7899] erspan0: entered allmulticast mode
[  105.466482][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'.
[  105.553458][ T7916] netlink: 596 bytes leftover after parsing attributes in process `syz.0.632'.
[  105.762366][ T7929] 8021q: VLANs not supported on team0
[  105.806643][ T7931] raw_sendmsg: syz.0.636 forgot to set AF_INET. Fix it!
[  105.929646][ T7935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.933058][ T7935] syzkaller0: entered promiscuous mode
[  105.936343][ T7935] syzkaller0: entered allmulticast mode
[  105.952243][ T7935] tipc: Resetting bearer <eth:syzkaller0>
[  105.970185][ T7935] tipc: Resetting bearer <eth:syzkaller0>
[  105.980314][ T7935] tipc: Disabling bearer <eth:syzkaller0>
[  106.272662][ T7966] netlink: 'syz.2.645': attribute type 2 has an invalid length.
[  106.778324][ T7994] lo speed is unknown, defaulting to 1000
[  107.213344][ T8007] x_tables: duplicate underflow at hook 2
[  107.959003][ T8044] xt_CT: You must specify a L4 protocol and not use inversions on it
[  108.387451][ T8069] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  109.095115][ T8104] netlink: 'syz.1.693': attribute type 2 has an invalid length.
[  109.126649][ T8102] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  109.136775][ T8102] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  109.960186][ T8132] __nla_validate_parse: 11 callbacks suppressed
[  109.960201][ T8132] netlink: 5 bytes leftover after parsing attributes in process `syz.0.703'.
[  109.968155][ T8135] netlink: 5 bytes leftover after parsing attributes in process `syz.0.703'.
[  110.017230][ T8132] SET target dimension over the limit!
[  110.063306][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[  110.070570][ T8142] bridge_slave_0: entered promiscuous mode
[  110.292454][ T8150] netlink: 'syz.0.708': attribute type 2 has an invalid length.
[  110.297404][ T8150] netlink: 224 bytes leftover after parsing attributes in process `syz.0.708'.
[  110.712469][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  110.717110][ T8162] netlink: 64 bytes leftover after parsing attributes in process `syz.2.713'.
[  110.839970][ T8166] netlink: 'syz.2.715': attribute type 2 has an invalid length.
[  110.990706][ T8176] lo speed is unknown, defaulting to 1000
[  111.226323][ T8190] netlink: 324 bytes leftover after parsing attributes in process `syz.2.718'.
[  111.231423][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'.
[  111.235837][ T8179] gretap0: left promiscuous mode
[  111.251647][ T8179] netlink: 'syz.1.717': attribute type 4 has an invalid length.
[  111.638088][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'.
[  111.697130][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'.
[  112.097794][ T8243] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  112.103008][ T8243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.553023][ T8268] netlink: 'syz.0.745': attribute type 4 has an invalid length.
[  112.668469][ T8279] netlink: 'syz.0.747': attribute type 2 has an invalid length.
[  112.728430][ T8278] @: renamed from vlan0 (while UP)
[  112.911967][ T8292] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  112.940515][ T8292] bond6: entered promiscuous mode
[  112.943130][ T8292] 8021q: adding VLAN 0 to HW filter on device bond6
[  112.956310][ T8292] batadv1: entered promiscuous mode
[  112.958459][ T8292] batadv1: entered allmulticast mode
[  112.962357][ T8292] 8021q: adding VLAN 0 to HW filter on device batadv1
[  112.969336][ T8292] bond6: (slave batadv1): making interface the new active one
[  112.973413][ T8292] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  113.322125][ T8317] netlink: 'syz.1.760': attribute type 1 has an invalid length.
[  113.785934][ T8351] netlink: 'syz.1.771': attribute type 2 has an invalid length.
[  114.070231][ T8355] netlink: 'syz.2.773': attribute type 24 has an invalid length.
[  114.076721][ T8355] netlink: 'syz.2.773': attribute type 15 has an invalid length.
[  114.148989][ T8357] ip6tnl2: entered promiscuous mode
[  114.151088][ T8357] ip6tnl2: entered allmulticast mode
[  114.155067][ T8357] team0: Device ip6tnl2 is of different type
[  115.162814][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.170462][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.178484][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.182453][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.188234][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.192336][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.197480][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.202899][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.209544][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.214446][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.219161][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.226050][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.230469][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.235991][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.240902][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.793482][ T8420] SET target dimension over the limit!
[  115.855492][ T8428] validate_nla: 2 callbacks suppressed
[  115.855504][ T8428] netlink: 'syz.1.800': attribute type 4 has an invalid length.
[  115.859728][ T8428] __nla_validate_parse: 23 callbacks suppressed
[  115.859736][ T8428] netlink: 152 bytes leftover after parsing attributes in process `syz.1.800'.
[  116.007135][ T8439] netlink: 'syz.1.804': attribute type 2 has an invalid length.
[  116.010231][ T8439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.804'.
[  116.883159][ T8468] netlink: 'syz.1.812': attribute type 21 has an invalid length.
[  116.889866][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'.
[  116.936763][ T8470] netlink: 76 bytes leftover after parsing attributes in process `syz.1.813'.
[  116.939653][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'.
[  117.091985][ T8482] netlink: 'syz.2.816': attribute type 5 has an invalid length.
[  117.099975][    C0] ------------[ cut here ]------------
[  117.102080][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  117.106534][    C0] WARNING: CPU: 0 PID: 28 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  117.110279][    C0] Modules linked in:
[  117.112253][    C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  117.118024][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.121774][    C0] Workqueue: events_unbound linkwatch_event
[  117.124168][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  117.126526][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 20 af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 fb 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  117.133955][    C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00010246
[  117.136496][    C0] RAX: 8c6e63e333de8c00 RBX: 000000000000000c RCX: ffff88801ceb1cc0
[  117.139367][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  117.142536][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  117.145732][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88802f4207a8
[  117.148909][    C0] R13: 0000000000000000 R14: ffff888031cf8e40 R15: ffff888031cfb0d8
[  117.151318][    C0] FS:  0000000000000000(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  117.154682][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.156657][    C0] CR2: 00007ffdc5d13010 CR3: 000000000df38000 CR4: 00000000000006f0
[  117.159013][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.161678][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.164643][    C0] Call Trace:
[  117.165693][    C0]  <IRQ>
[  117.166635][    C0]  rate_control_send_low+0x194/0x7a0
[  117.168469][    C0]  rate_control_get_rate+0x20b/0x5d0
[  117.170122][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  117.172101][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  117.174658][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.176703][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.178641][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  117.180837][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  117.183141][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.185128][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.187035][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  117.189070][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.191075][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  117.193000][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  117.195384][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  117.197310][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  117.199827][    C0]  __iterate_interfaces+0x2ab/0x590
[  117.201669][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  117.203943][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  117.206439][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  117.208693][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  117.210835][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  117.212683][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  117.214760][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  117.216423][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  117.218354][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  117.220178][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  117.221804][    C0]  handle_softirqs+0x286/0x870
[  117.223433][    C0]  ? do_softirq+0xec/0x180
[  117.225010][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  117.227009][    C0]  ? __fib6_clean_all+0x23c/0x380
[  117.228710][    C0]  do_softirq+0xec/0x180
[  117.230165][    C0]  </IRQ>
[  117.231222][    C0]  <TASK>
[  117.232422][    C0]  ? __pfx_do_softirq+0x10/0x10
[  117.234402][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.236465][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.238469][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  117.240522][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  117.242549][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.244912][    C0]  ? __fib6_clean_all+0x23c/0x380
[  117.246869][    C0]  __fib6_clean_all+0x23c/0x380
[  117.248721][    C0]  ? __fib6_clean_all+0x9b/0x380
[  117.250653][    C0]  ? __pfx_fib6_ifup+0x10/0x10
[  117.252528][    C0]  ? __pfx___fib6_clean_all+0x10/0x10
[  117.254733][    C0]  ? __pfx_fib6_clean_node+0x10/0x10
[  117.256822][    C0]  ? __pfx_fib6_ifup+0x10/0x10
[  117.258735][    C0]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  117.260958][    C0]  rt6_sync_up+0x128/0x160
[  117.262697][    C0]  ? __pfx_rt6_sync_up+0x10/0x10
[  117.264709][    C0]  ? ipv6_mc_up+0x3da/0x580
[  117.266493][    C0]  addrconf_notify+0xd55/0x1010
[  117.268388][    C0]  notifier_call_chain+0x1b6/0x3e0
[  117.270369][    C0]  netif_state_change+0x284/0x3a0
[  117.272333][    C0]  ? __pfx_netif_state_change+0x10/0x10
[  117.274626][    C0]  linkwatch_do_dev+0x117/0x170
[  117.276498][    C0]  __linkwatch_run_queue+0x56d/0x7e0
[  117.278535][    C0]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  117.280842][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.282877][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  117.285169][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  117.287367][    C0]  linkwatch_event+0x4c/0x60
[  117.289194][    C0]  process_scheduled_works+0xae1/0x17b0
[  117.291167][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.292957][    C0]  worker_thread+0x8a0/0xda0
[  117.294562][    C0]  kthread+0x711/0x8a0
[  117.295906][    C0]  ? __pfx_worker_thread+0x10/0x10
[  117.297461][    C0]  ? __pfx_kthread+0x10/0x10
[  117.298998][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.300727][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.302360][    C0]  ? __pfx_kthread+0x10/0x10
[  117.303942][    C0]  ret_from_fork+0x3fc/0x770
[  117.305386][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  117.307096][    C0]  ? __switch_to_asm+0x39/0x70
[  117.308901][    C0]  ? __switch_to_asm+0x33/0x70
[  117.310686][    C0]  ? __pfx_kthread+0x10/0x10
[  117.312418][    C0]  ret_from_fork_asm+0x1a/0x30
[  117.314282][    C0]  </TASK>
[  117.315332][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  117.317562][    C0] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  117.321937][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.325228][    C0] Workqueue: events_unbound linkwatch_event
[  117.327366][    C0] Call Trace:
[  117.328688][    C0]  <IRQ>
[  117.329843][    C0]  dump_stack_lvl+0x99/0x250
[  117.331409][    C0]  ? __asan_memcpy+0x40/0x70
[  117.332935][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.334642][    C0]  ? __pfx__printk+0x10/0x10
[  117.336166][    C0]  panic+0x2db/0x790
[  117.337417][    C0]  ? __pfx_panic+0x10/0x10
[  117.338826][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  117.340410][    C0]  __warn+0x31b/0x4b0
[  117.341706][    C0]  ? __rate_control_send_low+0x5df/0x820
[  117.343539][    C0]  ? __rate_control_send_low+0x5df/0x820
[  117.345436][    C0]  report_bug+0x2be/0x4f0
[  117.346865][    C0]  ? __rate_control_send_low+0x5df/0x820
[  117.348637][    C0]  ? __rate_control_send_low+0x5df/0x820
[  117.350387][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  117.352268][    C0]  handle_bug+0x84/0x160
[  117.353644][    C0]  exc_invalid_op+0x1a/0x50
[  117.355061][    C0]  asm_exc_invalid_op+0x1a/0x20
[  117.356658][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  117.358612][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 20 af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 92 fb 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  117.364847][    C0] RSP: 0018:ffffc900000075d8 EFLAGS: 00010246
[  117.366815][    C0] RAX: 8c6e63e333de8c00 RBX: 000000000000000c RCX: ffff88801ceb1cc0
[  117.369251][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  117.371738][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  117.374261][    C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88802f4207a8
[  117.376938][    C0] R13: 0000000000000000 R14: ffff888031cf8e40 R15: ffff888031cfb0d8
[  117.379758][    C0]  ? __rate_control_send_low+0x5de/0x820
[  117.381807][    C0]  rate_control_send_low+0x194/0x7a0
[  117.383684][    C0]  rate_control_get_rate+0x20b/0x5d0
[  117.385415][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  117.387165][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  117.389095][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.390721][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.392596][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  117.394711][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  117.396666][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.398346][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.400101][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  117.402062][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  117.403791][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  117.405393][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  117.407351][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  117.409332][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  117.412039][    C0]  __iterate_interfaces+0x2ab/0x590
[  117.414005][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  117.416267][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  117.418948][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  117.421244][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  117.423939][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  117.425904][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  117.428093][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  117.429885][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  117.431577][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  117.433437][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  117.435119][    C0]  handle_softirqs+0x286/0x870
[  117.436623][    C0]  ? do_softirq+0xec/0x180
[  117.438013][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  117.439701][    C0]  ? __fib6_clean_all+0x23c/0x380
[  117.441242][    C0]  do_softirq+0xec/0x180
[  117.442588][    C0]  </IRQ>
[  117.443633][    C0]  <TASK>
[  117.444592][    C0]  ? __pfx_do_softirq+0x10/0x10
[  117.446135][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.447850][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.449475][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  117.451123][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  117.452829][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.454652][    C0]  ? __fib6_clean_all+0x23c/0x380
[  117.456248][    C0]  __fib6_clean_all+0x23c/0x380
[  117.457818][    C0]  ? __fib6_clean_all+0x9b/0x380
[  117.459358][    C0]  ? __pfx_fib6_ifup+0x10/0x10
[  117.460898][    C0]  ? __pfx___fib6_clean_all+0x10/0x10
[  117.462521][    C0]  ? __pfx_fib6_clean_node+0x10/0x10
[  117.464289][    C0]  ? __pfx_fib6_ifup+0x10/0x10
[  117.465771][    C0]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  117.467476][    C0]  rt6_sync_up+0x128/0x160
[  117.468955][    C0]  ? __pfx_rt6_sync_up+0x10/0x10
[  117.470551][    C0]  ? ipv6_mc_up+0x3da/0x580
[  117.471996][    C0]  addrconf_notify+0xd55/0x1010
[  117.473499][    C0]  notifier_call_chain+0x1b6/0x3e0
[  117.475261][    C0]  netif_state_change+0x284/0x3a0
[  117.476979][    C0]  ? __pfx_netif_state_change+0x10/0x10
[  117.478817][    C0]  linkwatch_do_dev+0x117/0x170
[  117.480442][    C0]  __linkwatch_run_queue+0x56d/0x7e0
[  117.482096][    C0]  ? __pfx___linkwatch_run_queue+0x10/0x10
[  117.483889][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.485425][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  117.487137][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  117.488893][    C0]  linkwatch_event+0x4c/0x60
[  117.490598][    C0]  process_scheduled_works+0xae1/0x17b0
[  117.492524][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.494526][    C0]  worker_thread+0x8a0/0xda0
[  117.496008][    C0]  kthread+0x711/0x8a0
[  117.497283][    C0]  ? __pfx_worker_thread+0x10/0x10
[  117.498866][    C0]  ? __pfx_kthread+0x10/0x10
[  117.500347][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.501915][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.503698][    C0]  ? __pfx_kthread+0x10/0x10
[  117.505431][    C0]  ret_from_fork+0x3fc/0x770
[  117.507313][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  117.509337][    C0]  ? __switch_to_asm+0x39/0x70
[  117.511087][    C0]  ? __switch_to_asm+0x33/0x70
[  117.512836][    C0]  ? __pfx_kthread+0x10/0x10
[  117.514585][    C0]  ret_from_fork_asm+0x1a/0x30
[  117.516336][    C0]  </TASK>
[  117.518310][    C0] Kernel Offset: disabled
[  117.520181][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:55:29  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006d70
R8 =ffff888021a90237 R9 =1ffff11004352046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78e3 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffdc5d13010 CR3=00000000332a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f641ce11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0b5dec4b558c6600 RBX=ffffffff81975d58 RCX=0b5dec4b558c6600 RDX=0000000000000001
RSI=ffffffff8d996d18 RDI=ffffffff8be28fc0 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f994e78e440 CR3=0000000027c56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
