last executing test programs:

5.006429734s ago: executing program 0 (id=1484):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0c0825bd7000fcdbdf25410000000e0001006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x74}, 0x1, 0x0, 0x0, 0x4045}, 0x800) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r3, 0xfff) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @loopback}], 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@fwd={0x8}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x3a}, 0x28) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x110, 0x6, 0x901}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4}, 0x20) (async)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) (async)
r6 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000003c0)="08003b117c124057", 0x8}, {0x0}], 0x2}, 0x2004c880)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async)
r7 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0)

4.916261722s ago: executing program 0 (id=1485):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000203000000000000000000000d00000000000000000000000a0200"], &(0x7f0000000140)=""/240, 0x56, 0xf0, 0x1}, 0x28)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0xd, 0x4, 0x2, 0x2b, 0x34, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @timestamp_prespec={0x44, 0x1c, 0x38, 0x3, 0x8, [{@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010100, 0x9}]}]}}}}})
r3 = socket$inet6(0xa, 0x80003, 0xff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0)
accept4$ax25(r5, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)
socket(0x11, 0x3, 0x0)

4.036221952s ago: executing program 0 (id=1492):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = accept4$llc(r1, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x40000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x24, r13, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "7bfe"}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
bind$llc(r2, &(0x7f0000000180)={0x1a, 0x2, 0xf, 0x20, 0xa, 0xc, @local}, 0x10) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x1c, 0x1e, 0x800, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0)

3.959502463s ago: executing program 0 (id=1493):
socket$l2tp6(0xa, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02000000"], 0x10)
socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000010008000bfa3000000000000070300000dfeffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e64030000000000360404000100edff1604000001000a007b040000000100007b0af2fe00000000850000000c00000079a0f2fe0000000095000000000000009e17890efeee5e2b7ff8a8cdc218e784909b849d5550ad855dab54d8877a6db61d69f2ffcaa17f82e11cb97c8adf1b831f422543e78461e57b2798779207c9a0c4eeff9674c7fcffffff971e43405d621ffbc9a4fd39b0b56bfe6508ebb3c4631f6dde53b9a53608c10556e5c1e2b8fee684b251e2d107ba7947212e577540497661826c36c5c1df1451ce5413a12e2d9f8004e26b7fcc059c065012828d872b36388b595f6dba87b8031106fb0289ce67a66afd9ac3d09e29a9d542ca9d85b5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee41f5b2e7b91c61ced1eb57ad000000000000e8122a79c3e40000b59b0fc4917de6b0316dec3c080a802a000001000000000031b6a076555125aaffffa7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137e2524847d337ac976376d5074ce1d2638da3261c8362bb7c785d9b7c45218b100ee122040e11e3bdcb9d287ec31cd985841fe91212ee4a38af074c7e2ce006000000dc7777bfae5884e4ba1e9cc44846153ba0dec51a8e4abf07df093101c2c3bc4a59f22e46295a2d89a355bb9bba44f83fed3b2f96520100000040f1a8cde1fc1a1ef36c66880c8351cb06187641ed2f02835a8545a2374c09000000000000003c4e7b6d1a323c41a5d740b95d9317ff00000000000000f9db4a9a840000000033fbf7e9fa4f27245ca051d61c32bc3189af4ead1fca58746120fa0da48604000000000000003a6d824a7649c31576b3b69bd13f5a14c19790e24baf047fe3be299318f86ebb3094756894b2d1a4ff2fb76fed59c97ac9314408399485e659765d8e0000002000000000818d125c58a22151fabaaa7dc9eb40707927d240c6d29508fea81204e41040000000583ef12318bf8b2661f0df85a488f4068d95b59ec07e5aa144dbae3df0000000000000000035d764ee74ee870807942cbd6a28384f6ba7c5fccca601000000e4e9fd18460296d89cc847973955daae01bd99ea1862fdb38410145ade0cf000000055a5efc9ff92e6eb37c3922c8aa02b2dcb4c977a61d989cf088e5c45009d27e1744d9cf4dd50bef1609c13975833c038aee18ed0dcbe865d25e23c0864e50c5a2ed4cc3748672b7cd25067340a37475e0879fe9b3886dd054b43e7c485b2a43c3707d4c686bc5dea5b743d9e4b25adfb068e75b54c09481c8393e94053d99d0f7d67f7ed49b1c744d9f5b19c257136e6b2110000b5480a31359185c89956c2237e4c59d09b5aaab87f0e82802468398ffaac2fa66bb9afae6d449342aa30e443023f0554a756218077d418cf148af56491f0fa5b48582f1b13461fdf9fb9367f44d93d6ece0abe3e84b3279ab1a3f27d4afac67cf28594dd8ef1104c498a7bc63e2f6d3779c70d81c040b88451770eb988e9477d2de85be3555fe48e99d0880acd1c636dd3abff16db16594581d94dad70cc94c689707106000801a5cfad936253d110ca2aa3f13840b34ff956ee55602cad9bb209000000f32edea7a51515c035e55b31c91aeea878a8d51b4ce7bf9023b867ba3f450799f4dbfedad72c7dae607f9075877bd0db50fae9d0e0706c41ca92e71d81e06eaff63dab33c3cb3a8c28a6c2400f04412adeb9416ae3c8cfc8a7f6373247d903d8953de2a3cf07011db94b68af6176d0840a34a9aa493cfed41efc8377e294794771c4278caf7ad1c6c80fef4ae62a62499f9e301a085d14dc7049ddc965f0dabc5b29e972bb585758ac8867bb52cda4f2a73e44ef648d1c74f6ab97e646256a67e237664fa4942a0f1479c31bbeae1d7490d617b926"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x10}, 0x94)

3.874002861s ago: executing program 0 (id=1496):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r2, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x2, 0x20000000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="2cc0822887b2d0c4117e77dbe79abb50170be48ccb1d75c67fde1692b4fb80642d99bafaa1eb57ff37ab8af8c9f629d953b79e980eef08fc8de218dac812059eb3b01fe65813d8df139a2f28faf2e71ccaa6db31bcbba49daf2e5dd97e3ab85ba306f1e4a4808ff53534a3a4b96f278b6bcf", @ANYRES64=r1, @ANYRESHEX=r2, @ANYRES8=r1, @ANYRES8=r0, @ANYRES8=r1, @ANYRES8=r2], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4)
bind$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)

3.746280369s ago: executing program 0 (id=1501):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0), 0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x25, &(0x7f0000001500)={r8, @in={{0x2, 0x4e22, @empty}}}, 0x90)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r5)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ffd}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8850}, 0x4000)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x136d}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa7e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x22f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdfd}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xbce}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf2b}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x6c}}, 0x40000)

404.694951ms ago: executing program 1 (id=1547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x6, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x3c) (async, rerun: 64)
r1 = socket(0x10, 0x3, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xb}, {0xd}, {0x9, 0xc}}}, 0x24}}, 0x40004) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000600)=""/4096}, 0x20) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="811b53cfbc8225f83cd602d424f601000100339cca388783472cc7fcffe4e4310126eb23da38e8f1ada22ceb00", @ANYRES16=r0, @ANYRESOCT=r0], 0x48) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000664285938a000000000000000000e7ff0089b7697dcddea449e4e1ea29018a28b4f708515cb36bf26c15094be945d26af1"], 0x48)
recvmsg$unix(r1, &(0x7f00000003c0)={&(0x7f00000002c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000004c0)=""/192, 0xc0}], 0x2, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}, 0x40000103) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="7a0a00ff00000000711067000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r3=>0x0, 0x7, 0x8, 0x3, 0x0, {{0x7, 0x4, 0x0, 0xb, 0x1c, 0x68, 0x0, 0x4, 0x2f, 0x0, @remote, @private=0xa010102, {[@generic={0x94, 0x7, "510c1a3ba1"}]}}}}}) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1f, 0xb, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8ffff}}]}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

354.489591ms ago: executing program 2 (id=1549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x4000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0xb2, &(0x7f00000001c0)=""/178, 0x41100, 0x28, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x6, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x2, 0xa}, {0x0, 0x1, 0xb, 0xa}, {0x1, 0x5, 0x9, 0x2}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x1}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x37, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcf}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0xe4, &(0x7f0000000bc0)=""/228, 0x21700, 0x51, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xba5a, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000880)=[{0x1, 0x2, 0x3, 0xa}, {0x0, 0x2, 0x8, 0x3}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@map=0x1, 0x2b, 0x1, 0x54, &(0x7f0000000980)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0], <r4=>0x0}, 0x40)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000740)={0x0, 0x4}, 0x8)
setsockopt$inet_opts(r5, 0x0, 0x6, &(0x7f0000000080)='\a', 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0xde6, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x12141, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00)=<r6=>0x0, &(0x7f0000000b40)=0x4)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000780)={'gre0\x00', <r7=>r6, 0x8000, 0x7800, 0x3, 0x2, {{0x24, 0x4, 0x0, 0x22, 0x90, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0x71, [@private=0xa010100, @private=0xa010100, @multicast1, @remote, @loopback, @private=0xa010101]}, @ssrr={0x89, 0x17, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @rand_addr=0x64010102, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x64, 0x0, 0x4, [0x1, 0x1, 0x2, 0x5]}, @generic={0xd3, 0x8, "24087d6200ec"}, @rr={0x7, 0x1f, 0xdc, [@empty, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x2b}, @local, @multicast2]}, @lsrr={0x83, 0xb, 0x8b, [@remote, @remote]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000d00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3d, r7})
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74)
recvmmsg(r8, &(0x7f0000003e80)=[{{&(0x7f0000000d40)=@nl=@unspec, 0x0, &(0x7f0000002200)=[{&(0x7f0000003f80)=""/4101}, {&(0x7f0000000dc0)=""/243}, {&(0x7f0000000ec0)=""/228}, {&(0x7f0000002100)=""/218}, {&(0x7f0000000fc0)=""/99}], 0x0, &(0x7f0000002280)=""/131}, 0x5}, {{&(0x7f0000002340)=@phonet, 0x0, &(0x7f0000002740)=[{&(0x7f00000023c0)=""/163}, {&(0x7f0000001040)=""/31}, {&(0x7f0000002480)=""/1}, {&(0x7f00000024c0)=""/105}, {&(0x7f0000002540)=""/46}, {&(0x7f0000002580)=""/139}, {&(0x7f0000002640)=""/9}, {&(0x7f0000002680)=""/182}], 0x0, &(0x7f00000027c0)=""/15}, 0x1}, {{&(0x7f0000002800)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x0, &(0x7f0000002880)}, 0x7ed}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f00000028c0)=""/19}, {&(0x7f0000002900)=""/4096}, {&(0x7f0000003900)=""/191}, {&(0x7f00000039c0)=""/40}, {&(0x7f0000003a00)=""/149}, {&(0x7f0000003ac0)=""/92}, {&(0x7f00000010c0)=""/64}, {&(0x7f0000003bc0)=""/238}, {&(0x7f0000003cc0)=""/12}], 0x0, &(0x7f0000003dc0)=""/180}, 0xffff}], 0x400000000000255, 0x40000021, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r11, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000)
setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000040)=0x40, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001080)={'wg1\x00', <r12=>0x0})
sendmmsg$inet(r9, &(0x7f00000020c0)=[{{&(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @remote, @dev={0xac, 0x14, 0x14, 0x3d}}}}], 0x20}}], 0x1, 0x24044804)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b80)={0x1, <r13=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@ifindex=r6, r2, 0x7dac372b8a9dc7a6, 0x2030, r3, @void, @void, @value=r13, @void, r4}, 0x20)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r14], 0x38}}, 0x0)

255.361234ms ago: executing program 1 (id=1550):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x10a0}, 0x50)
socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="b405000000000000611088000000000063012e000000000095000000000000008d33264096ebb88261704742d85f359c98449d9dfbb2accc02083fbc09d87e968cd46a48ec350ab4c81c910cba7226b83be95662dbe056cde1042863144d153025bf7fc99be1216fcc1168c5bb24a291905a82784ad1d5c1c17f6ec3f8cb58d93d6e9836f94bb66e75102e0580b450b7af36895b8e1143e5af342519a7c3393eb10e8d0194059d03b12779c3ab54a245204d6adfb7bcb4b674e6502a58388751885797fa0543404a9a388b5fa35efe9ac85e944d76d3b92175b6bbb3789a1b5f6568387a23c5f0a073a6c36417d4f62866"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4899, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r1}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', <r4=>0x0, 0x4, 0x8, 0x6, 0x8, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x0, 0x40, 0x200, 0x8}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@fwd={0xb}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xad}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x1}}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @const={0x0, 0x0, 0x0, 0xa, 0x5}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/66, 0x7f, 0x42, 0x1, 0x8}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8001, 0xaa, &(0x7f00000002c0)=""/170, 0x41100, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000580)={0x6, 0x7}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0xe, 0x8}, {0x5, 0x5, 0x4, 0x2}, {0x2, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x7, 0x5}, {0x2, 0x5, 0x2}, {0x4, 0x1, 0x7, 0xe}, {0x1, 0x1, 0x7, 0x4}], 0x10, 0x3}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8001, 0xaa, &(0x7f00000002c0)=""/170, 0x41100, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000580)={0x6, 0x7}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0xe, 0x8}, {0x5, 0x5, 0x4, 0x2}, {0x2, 0x3, 0xf, 0x2}, {0x1, 0x2, 0x7, 0x5}, {0x2, 0x5, 0x2}, {0x4, 0x1, 0x7, 0xe}, {0x1, 0x1, 0x7, 0x4}], 0x10, 0x3}, 0x94)

254.877053ms ago: executing program 2 (id=1551):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0500000000000000f5000f00000008000300", @ANYRES32=r1, @ANYBLOB="38000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001000301b706020200710700ff000101ff2008000c006400000008000d000000000008007e0000000000"], 0x6c}}, 0x0)

252.829238ms ago: executing program 1 (id=1552):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x1}, 0x28)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000500)={0x6, &(0x7f00000003c0)=[{0x7, 0x91, 0x6, 0x7}, {0x1, 0x3, 0x1, 0x480}, {0x5, 0x0, 0x10, 0x6}, {0x7, 0x1, 0x9, 0x453}, {0x7f, 0x1, 0x1, 0x7fff}, {0x0, 0x5, 0xc, 0x3}]}, 0x10)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)

249.651702ms ago: executing program 2 (id=1553):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'bond0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0xfffffffffffffffc)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
accept4$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10, 0x800)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bf0000"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)

85.041931ms ago: executing program 2 (id=1554):
r0 = socket(0x10, 0x803, 0x0)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@default)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x8, 0x3}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYBLOB="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", @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x60000)

84.305312ms ago: executing program 1 (id=1555):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a4693989c36ffffffffffffd0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1530f8d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c11090000000000000000b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c8565117fcb8ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17911540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc240000000000127535a468702cac97b6b82a6e65d4cf1200"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400090525bd7000000300000238"], 0x54}}, 0x4004000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
r4 = accept4(r2, 0x0, &(0x7f00000000c0), 0x180000)
getpeername$ax25(r4, &(0x7f0000000180)={{0x3, @netrom}, [@null, @rose, @bcast, @rose, @default, @null, @rose, @null]}, &(0x7f0000000100)=0x23)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x4c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d830c0c64f689f832d4b576947dd47df"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000100)=0x8)
r11 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x43, 0x3, 'ip_vti0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f0000000780)={0x4, 0xf, "0ae61f", 0x0, 0xfe})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1, <r13=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24b, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000380)='GPL\x00', 0x9, 0xa3, &(0x7f00000003c0)=""/163, 0x41100, 0x41, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x4, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r13, r7, r9, 0x1], &(0x7f0000000680)=[{0x1, 0x2, 0xe, 0x6}, {0x3, 0x3, 0x8, 0x6}, {0x4, 0x4, 0x5, 0xa}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r10], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdcf}, 0x94)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r10, 0x2c3f}, 0x8)

5.104535ms ago: executing program 2 (id=1556):
r0 = socket$inet6(0xa, 0x3, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c)
socket$inet6(0xa, 0x3, 0x42) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x1c) (async)

2.517137ms ago: executing program 1 (id=1557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x8, 0x1, 0x73a0, 0x2}, {0x6, 0x1, 0x3, 0x2, 0x7, 0x9}, 0xdd, 0x5, 0x1e8c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa668cd67f58edc68}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', <r6=>0x0, 0x80, 0xc0, 0x5, 0xab, {{0x1d, 0x4, 0x1, 0x13, 0x74, 0x68, 0x0, 0x1, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x79, 0x3, 0xa, [{@multicast1, 0x7}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x7}, {@remote, 0xffff3e9e}]}, @timestamp_prespec={0x44, 0x1c, 0x26, 0x3, 0x6, [{@local, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x2}]}, @noop]}}}}}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', <r7=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@dev, @empty, <r8=>0x0}, &(0x7f0000000340)=0xc) (async)
r9 = socket(0x11, 0x3, 0x0)
syz_genetlink_get_family_id$SEG6(0x0, r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0xe, 0xc, 0x800, 0x67, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x8, 0x7800, 0xfffffe00, 0xe}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', r11, 0x4, 0x5, 0x0, 0x3, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x86e31bd2a160c898, 0x9}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', <r13=>0x0, 0x2f, 0x3, 0x7, 0xe, 0x0, @mcast1, @mcast1, 0x1, 0x7800, 0x6, 0x9}})
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf4, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711046000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)

2.057735ms ago: executing program 1 (id=1558):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000005c0)={r4, 0x9, 0x3, 0xfff8, 0xfff, 0x99, 0x9, 0xc99b, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xdb, 0x1, 0x8, 0x5}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={r4}, 0x8)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000001080))

0s ago: executing program 2 (id=1559):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0500000000000000f5000f00000008000300", @ANYRES32=r1, @ANYBLOB="38000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001000301b706020200710700ff000101ff2008000c006400000008000d000000000008007e0000000000"], 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32769' (ED25519) to the list of known hosts.
syzkaller login: [   48.256914][ T5819] cgroup: Unknown subsys name 'net'
[   48.363102][ T5819] cgroup: Unknown subsys name 'cpuset'
[   48.367232][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.986964][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.743012][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.746641][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.749517][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.752391][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.755066][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.814106][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.816922][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.819705][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.822638][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.825325][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.836207][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.841398][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.844877][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.849652][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.854524][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.045866][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   54.099304][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.176825][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.179219][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.182047][ T5827] bridge_slave_0: entered allmulticast mode
[   54.184920][ T5827] bridge_slave_0: entered promiscuous mode
[   54.200756][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.203034][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.205295][ T5827] bridge_slave_1: entered allmulticast mode
[   54.208010][ T5827] bridge_slave_1: entered promiscuous mode
[   54.218821][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.250393][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.268123][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.283772][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.286048][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.288313][ T5833] bridge_slave_0: entered allmulticast mode
[   54.292152][ T5833] bridge_slave_0: entered promiscuous mode
[   54.315976][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.318346][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.320901][ T5833] bridge_slave_1: entered allmulticast mode
[   54.323592][ T5833] bridge_slave_1: entered promiscuous mode
[   54.328304][ T5827] team0: Port device team_slave_0 added
[   54.332708][ T5827] team0: Port device team_slave_1 added
[   54.389024][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.391601][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.393800][ T5831] bridge_slave_0: entered allmulticast mode
[   54.396439][ T5831] bridge_slave_0: entered promiscuous mode
[   54.402372][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.405464][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.407585][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.409749][ T5831] bridge_slave_1: entered allmulticast mode
[   54.412699][ T5831] bridge_slave_1: entered promiscuous mode
[   54.415654][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.417915][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.426936][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.431851][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.433988][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.442716][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.447607][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.488460][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.493992][ T5833] team0: Port device team_slave_0 added
[   54.497327][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.518081][ T5833] team0: Port device team_slave_1 added
[   54.539167][ T5827] hsr_slave_0: entered promiscuous mode
[   54.541566][ T5827] hsr_slave_1: entered promiscuous mode
[   54.563752][ T5831] team0: Port device team_slave_0 added
[   54.566515][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.568630][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.576638][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.581857][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.583890][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.591730][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.597014][ T5831] team0: Port device team_slave_1 added
[   54.645982][ T5833] hsr_slave_0: entered promiscuous mode
[   54.648219][ T5833] hsr_slave_1: entered promiscuous mode
[   54.650396][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.652778][ T5833] Cannot create hsr debugfs directory
[   54.676503][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.678547][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.686321][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.712724][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.714792][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.722344][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.778089][ T5831] hsr_slave_0: entered promiscuous mode
[   54.780715][ T5831] hsr_slave_1: entered promiscuous mode
[   54.782827][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.785074][ T5831] Cannot create hsr debugfs directory
[   54.945293][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.958280][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.964108][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.976256][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.031103][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.043919][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.048497][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.054076][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.077243][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.090383][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.098254][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.112549][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.174584][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.201099][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.213368][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.215690][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.219660][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.221992][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.244771][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.269204][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.293294][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.295551][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.306071][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.309563][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.311807][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.341725][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.361020][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.363259][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.378240][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.380755][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.413901][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.417085][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.474104][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.543835][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.546179][ T5827] veth0_vlan: entered promiscuous mode
[   55.556268][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.559422][ T5827] veth1_vlan: entered promiscuous mode
[   55.592416][ T5827] veth0_macvtap: entered promiscuous mode
[   55.597245][ T5827] veth1_macvtap: entered promiscuous mode
[   55.622991][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.634239][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.643088][ T5831] veth0_vlan: entered promiscuous mode
[   55.646050][ T5833] veth0_vlan: entered promiscuous mode
[   55.649404][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.653633][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.656222][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.658765][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.672506][ T5831] veth1_vlan: entered promiscuous mode
[   55.675102][ T5833] veth1_vlan: entered promiscuous mode
[   55.743722][ T5831] veth0_macvtap: entered promiscuous mode
[   55.743943][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.747949][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.751806][ T5833] veth0_macvtap: entered promiscuous mode
[   55.763422][ T5831] veth1_macvtap: entered promiscuous mode
[   55.775739][ T5833] veth1_macvtap: entered promiscuous mode
[   55.789697][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.792687][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.796766][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.800520][ T5830] Bluetooth: hci0: command tx timeout
[   55.808071][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.817169][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.825337][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.829776][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.833730][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.836356][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.838964][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.847887][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.859037][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.862347][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.865015][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.867507][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.880969][ T5830] Bluetooth: hci2: command tx timeout
[   55.881001][   T53] Bluetooth: hci1: command tx timeout
[   55.967815][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.970879][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.993065][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.995515][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.008671][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.011549][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.031329][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.033722][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.065844][ T5896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.125768][ T5899] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.288691][ T5904] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.293366][ T5903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5'.
[   56.436698][ T5912] syzkaller1: entered promiscuous mode
[   56.438762][ T5912] syzkaller1: entered allmulticast mode
[   56.457105][ T5912] netlink: 'syz.1.9': attribute type 3 has an invalid length.
[   56.544233][ T5914] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10'.
[   56.798853][ T5919] Bluetooth: MGMT ver 1.23
[   56.836928][ T5921] netlink: 'syz.0.13': attribute type 3 has an invalid length.
[   56.839400][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   56.846543][ T5921] netlink: 'syz.0.13': attribute type 3 has an invalid length.
[   56.851296][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   56.856544][   T10] IPVS: starting estimator thread 0...
[   56.940298][ T5923] IPVS: using max 62 ests per chain, 148800 per kthread
[   56.972483][ T5925] x_tables: duplicate underflow at hook 2
[   57.487583][ T5952] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   57.674880][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   57.677866][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   57.743400][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[   57.891493][   T53] Bluetooth: hci0: command tx timeout
[   57.960523][   T53] Bluetooth: hci1: command tx timeout
[   57.970126][   T53] Bluetooth: hci2: command tx timeout
[   58.144421][ T6001] netlink: 1 bytes leftover after parsing attributes in process `syz.1.41'.
[   58.284453][ T6014] netlink: 'syz.1.45': attribute type 29 has an invalid length.
[   58.374624][ T6015] x_tables: duplicate underflow at hook 3
[   58.778229][ T6044] Zero length message leads to an empty skb
[   58.878224][ T6053] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004
[   59.061889][ T6065] x_tables: duplicate underflow at hook 1
[   59.436277][ T6093] syzkaller0: entered promiscuous mode
[   59.438115][ T6093] syzkaller0: entered allmulticast mode
[   59.687687][ T6104] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.961196][   T53] Bluetooth: hci0: command tx timeout
[   59.969831][ T6109] warning: `syz.2.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.051709][   T53] Bluetooth: hci2: command tx timeout
[   60.051759][ T5830] Bluetooth: hci1: command tx timeout
[   60.504276][  T790] hid-generic 0005:04F3:8002.0001: collection stack underflow
[   60.506715][  T790] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed
[   60.509401][  T790] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22
[   60.848613][ T6189] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   60.861737][ T6189] bridge_slave_0: left allmulticast mode
[   60.863893][ T6189] bridge_slave_0: left promiscuous mode
[   60.867194][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.872965][ T6189] bridge_slave_1: left allmulticast mode
[   60.874824][ T6189] bridge_slave_1: left promiscuous mode
[   60.876802][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.885103][ T6189] bond0: (slave bond_slave_0): Releasing backup interface
[   60.890624][ T6189] bond0: (slave bond_slave_1): Releasing backup interface
[   60.901397][ T6189] team0: Port device team_slave_0 removed
[   60.906085][ T6189] team0: Port device team_slave_1 removed
[   60.908127][ T6190] netlink: 'syz.2.97': attribute type 10 has an invalid length.
[   60.908447][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.913431][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.916584][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.919016][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.936212][ T6190] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   60.942178][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.947484][ T6190] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.958410][ T6189] netlink: 'syz.2.97': attribute type 3 has an invalid length.
[   61.081745][ T6194] netlink: 'syz.2.99': attribute type 13 has an invalid length.
[   61.084404][ T6194] netlink: 'syz.2.99': attribute type 17 has an invalid length.
[   61.128820][ T6194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.224009][ T6207] __nla_validate_parse: 7 callbacks suppressed
[   61.224022][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   61.404283][ T6232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.109'.
[   61.408126][ T6231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.109'.
[   61.421857][ T6234] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   61.424257][ T6234] netlink: 232 bytes leftover after parsing attributes in process `syz.1.108'.
[   61.483984][ T6242] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   61.547989][ T6247] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   61.551258][ T6247] netlink: 112 bytes leftover after parsing attributes in process `syz.2.114'.
[   61.572356][ T6249] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[   61.574930][ T6249] netlink: 112 bytes leftover after parsing attributes in process `syz.1.115'.
[   61.726776][ T6267] netlink: 'syz.2.120': attribute type 2 has an invalid length.
[   61.763042][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'.
[   61.777035][ T6277] Cannot find add_set index 0 as target
[   61.921450][ T6296] syz.1.125 uses obsolete (PF_INET,SOCK_PACKET)
[   61.937045][ T6297] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   62.040465][ T5830] Bluetooth: hci0: command tx timeout
[   62.120110][ T5830] Bluetooth: hci1: command tx timeout
[   62.120494][   T53] Bluetooth: hci2: command tx timeout
[   62.458935][ T6336] netlink: 156 bytes leftover after parsing attributes in process `syz.0.137'.
[   62.521824][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[   62.524799][ T6341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'.
[   62.814111][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.822843][ T6360] macvlan8: entered promiscuous mode
[   62.825195][ T6360] macvlan8: entered allmulticast mode
[   62.835223][ T6360] bond1: (slave macvlan8): Opening slave failed
[   62.976215][ T6366] xt_SECMARK: invalid mode: 0
[   63.078259][ T6387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.126332][ T6391] netlink: 'syz.1.155': attribute type 21 has an invalid length.
[   63.128904][ T6391] netlink: 'syz.1.155': attribute type 6 has an invalid length.
[   63.310840][ T6408] xt_hashlimit: size too large, truncated to 1048576
[   63.886311][   T33] audit: type=1800 audit(1752344480.741:2): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.179" name=33FFFF dev="tmpfs" ino=358 res=0 errno=0
[   64.060948][ T6478] macsec1: entered promiscuous mode
[   64.072623][ T6478] macsec1: entered allmulticast mode
[   65.170189][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.175859][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.183420][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.279482][ T6524] bond2: entered promiscuous mode
[   65.281760][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.335166][ T6524] bond2 (unregistering): Released all slaves
[   65.972059][ T6571] netlink: 'syz.2.217': attribute type 21 has an invalid length.
[   65.999650][ T6571] netlink: 'syz.2.217': attribute type 7 has an invalid length.
[   66.003759][ T6571] netlink: 'syz.2.217': attribute type 8 has an invalid length.
[   66.015376][ T6571] gretap0: entered promiscuous mode
[   66.018167][ T6571] batadv_slave_1: entered promiscuous mode
[   66.024328][ T6571] erspan0: entered promiscuous mode
[   66.075420][ T6586] netlink: 'syz.1.220': attribute type 1 has an invalid length.
[   66.146278][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.149036][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.206515][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.212922][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.260364][ T6586] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.263143][ T6586] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.265921][ T6586] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.268616][ T6586] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.457777][ T6615] netlink: 'syz.2.229': attribute type 9 has an invalid length.
[   66.536653][ T6620] __nla_validate_parse: 16 callbacks suppressed
[   66.536665][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'.
[   66.574457][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'.
[   66.640689][ T6629] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   66.643092][ T6629] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.235'.
[   66.976397][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   66.979098][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   67.013647][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   67.016691][ T6657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   67.026663][ T6657] batadv1: entered promiscuous mode
[   67.033945][ T6657] 8021q: adding VLAN 0 to HW filter on device batadv1
[   67.107813][ T6671] Driver unsupported XDP return value 0 on prog  (id 134) dev N/A, expect packet loss!
[   67.144440][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'.
[   67.538999][ T6707] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[   67.553181][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'.
[   67.616778][ T6728] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   67.620245][ T5858] bond0: (slave bond_slave_0): interface is now down
[   67.622392][ T5858] bond0: (slave bond_slave_1): interface is now down
[   67.644372][ T5858] bond0: (slave bond_slave_0): interface is now down
[   67.646392][ T5858] bond0: (slave bond_slave_1): interface is now down
[   67.670179][ T5858] bond0: (slave bond_slave_0): interface is now down
[   67.673242][ T5858] bond0: (slave bond_slave_1): interface is now down
[   67.699995][ T5858] bond0: (slave bond_slave_0): interface is now down
[   67.705057][ T5858] bond0: (slave bond_slave_1): interface is now down
[   67.712061][ T5858] bond0: now running without any active interface!
[   67.746397][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.267'.
[   68.034023][ T6772] netlink: 'syz.1.274': attribute type 13 has an invalid length.
[   68.036358][ T6776] openvswitch: netlink: Missing key (keys=40, expected=80)
[   68.036454][ T6772] netlink: 'syz.1.274': attribute type 17 has an invalid length.
[   68.118476][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.124144][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[   68.129412][ T6772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.734326][ T6855] xt_TPROXY: Can be used only with -p tcp or -p udp
[   68.901615][ T5893] IPVS: starting estimator thread 0...
[   68.918783][ T6791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.923222][ T6791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.989958][ T6878] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.203033][ T6893] ip6gretap0: entered promiscuous mode
[   69.205006][ T6893] vlan2: entered promiscuous mode
[   70.321252][ T5857] bond0: no route to arp_ip_target 168.0.0.0 and arp_validate is set
[   70.379014][ T6973] dvmrp0: entered allmulticast mode
[   70.513101][ T7003] batman_adv: batadv0: Adding interface: dummy0
[   70.515917][ T7003] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.533533][ T7000] netlink: 'syz.1.347': attribute type 10 has an invalid length.
[   70.539221][ T7003] batman_adv: batadv0: Interface activated: dummy0
[   70.552635][ T7000] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.556957][ T7000] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[   70.572948][ T7000] netlink: 'syz.1.347': attribute type 4 has an invalid length.
[   70.673427][ T7022] netlink: 'syz.2.352': attribute type 21 has an invalid length.
[   70.675859][ T7022] netlink: 'syz.2.352': attribute type 5 has an invalid length.
[   70.810329][ T7039] siw: device registration error -23
[   70.821086][ T7038] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.846062][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.848072][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.857322][ T7038] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.987273][ T7055] erspan0: entered promiscuous mode
[   71.092408][ T7071] netlink: 'syz.0.368': attribute type 7 has an invalid length.
[   71.094821][ T7071] netlink: 'syz.0.368': attribute type 8 has an invalid length.
[   71.272763][ T7093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.422216][ T7110] team0: Device ipvlan1 failed to register rx_handler
[   71.565293][ T7138] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[   71.888096][ T7175] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   71.923973][ T7172] __nla_validate_parse: 22 callbacks suppressed
[   71.923982][ T7172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.405'.
[   71.945935][ T7182] validate_nla: 7 callbacks suppressed
[   71.945961][ T7182] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[   71.965430][ T7182] bond2: entered promiscuous mode
[   71.967207][ T7182] 8021q: adding VLAN 0 to HW filter on device bond2
[   72.073797][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'.
[   72.141963][ T7199] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   72.221550][ T7199] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   72.227937][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[   72.418424][ T7225] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   72.491586][ T7233] bond0: option min_links: invalid value (18446744073709551604)
[   72.493902][ T7233] bond0: option min_links: allowed values 0 - 2147483647
[   72.502878][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'.
[   72.513274][ T7233] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   72.547807][ T7238] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.428'.
[   72.623507][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[   72.696987][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'.
[   72.966995][ T7257] netlink: 52639 bytes leftover after parsing attributes in process `syz.1.434'.
[   73.269840][ T7265] netlink: 71 bytes leftover after parsing attributes in process `syz.0.437'.
[   73.278530][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'.
[   73.606626][ T7283] nftables ruleset with unbound chain
[   73.790132][ T7296] tipc: Started in network mode
[   73.791822][ T7296] tipc: Node identity a2499515606a, cluster identity 4711
[   73.794095][ T7296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.800358][   T53] Bluetooth: hci2: command tx timeout
[   73.802347][ T7296] syzkaller0: entered promiscuous mode
[   73.804027][ T7296] syzkaller0: entered allmulticast mode
[   73.830802][ T7296] tipc: Resetting bearer <eth:syzkaller0>
[   73.834922][ T7295] tipc: Resetting bearer <eth:syzkaller0>
[   73.844928][ T7295] tipc: Disabling bearer <eth:syzkaller0>
[   74.658866][ T7337] netlink: 'syz.0.464': attribute type 2 has an invalid length.
[   74.720547][ T7345] veth0: entered promiscuous mode
[   74.766925][ T7343] netlink: 'syz.0.466': attribute type 1 has an invalid length.
[   74.771317][ T7343] netlink: 'syz.0.466': attribute type 7 has an invalid length.
[   74.773999][ T7343] netlink: 'syz.0.466': attribute type 8 has an invalid length.
[   74.782697][ T7343] batadv_slave_1: entered promiscuous mode
[   74.785766][ T7343] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   74.788585][ T7343] Cannot create hsr debugfs directory
[   74.984533][ T7364] veth2: entered allmulticast mode
[   75.027762][ T7344] veth0: left promiscuous mode
[   75.294528][ T7407] 8021q: adding VLAN 0 to HW filter on device bond3
[   75.312966][ T7403] netlink: 'syz.2.482': attribute type 25 has an invalid length.
[   75.706312][ T7457] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   75.711384][ T7455] block nbd0: server does not support multiple connections per device.
[   75.715837][ T7455] block nbd0: shutting down sockets
[   75.969250][ T7485] can: request_module (can-proto-5) failed.
[   76.241454][ T7530] Bluetooth: MGMT ver 1.23
[   76.764999][ T7568] trusted_key: syz.0.538 sent an empty control message without MSG_MORE.
[   76.923474][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.941199][ T7587] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[   76.943639][ T7587] __nla_validate_parse: 18 callbacks suppressed
[   76.943646][ T7587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'.
[   76.953658][ T7587] batman_adv: batadv0: Adding interface: virt_wifi0
[   76.955891][ T7587] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.964632][ T7587] batman_adv: batadv0: Interface activated: virt_wifi0
[   77.032026][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.544'.
[   77.392513][ T7606] xt_CT: You must specify a L4 protocol and not use inversions on it
[   77.777482][ T7586] delete_channel: no stack
[   77.965254][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.568'.
[   78.187694][ T7665] tun0: tun_chr_ioctl cmd 1074025681
[   78.192060][ T7665] tun0: tun_chr_ioctl cmd 1074025673
[   78.823042][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[   78.825689][ T7723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'.
[   78.828229][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.593'.
[   78.832070][ T7723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'.
[   78.886839][ T7730] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.597'.
[   78.943826][ T7741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'.
[   78.946973][ T7741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'.
[   79.582282][ T7775] tipc: Started in network mode
[   79.584344][ T7775] tipc: Node identity ac1414aa, cluster identity 4711
[   79.587314][ T7775] tipc: Enabled bearer <udp:syz2>, priority 10
[   80.047919][ T7819] netlink: 'syz.1.626': attribute type 11 has an invalid length.
[   80.100492][ T7825] openvswitch: netlink: Duplicate or invalid key (type 0).
[   80.103671][ T7825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.106611][ T7827] openvswitch: netlink: Duplicate or invalid key (type 0).
[   80.108827][ T7827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.234331][ T7830] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   80.454708][ T7870] syzkaller0: entered promiscuous mode
[   80.456376][ T7870] syzkaller0: entered allmulticast mode
[   80.591668][  T789] tipc: Node number set to 2886997162
[   81.102173][    T9] cfg80211: failed to load regulatory.db
[   81.171536][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[   81.734217][ T7934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.877152][ T7942] netlink: 'syz.2.665': attribute type 12 has an invalid length.
[   82.030875][ T7953] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.091362][ T7958] __nla_validate_parse: 9 callbacks suppressed
[   82.091374][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.672'.
[   82.477101][ T7983] netlink: 'syz.0.682': attribute type 10 has an invalid length.
[   82.486257][ T7983] batman_adv: batadv0: Adding interface: team0
[   82.488190][ T7983] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.499693][ T7983] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   82.505979][ T7983] netlink: 'syz.0.682': attribute type 10 has an invalid length.
[   82.508372][ T7983] netlink: 2 bytes leftover after parsing attributes in process `syz.0.682'.
[   82.514009][ T7983] team0: entered promiscuous mode
[   82.516172][ T7983] team_slave_0: entered promiscuous mode
[   82.518052][ T7983] team_slave_1: entered promiscuous mode
[   82.522898][ T7983] 8021q: adding VLAN 0 to HW filter on device team0
[   82.525217][ T7983] batman_adv: batadv0: Interface activated: team0
[   82.527222][ T7983] batman_adv: batadv0: Interface deactivated: team0
[   82.529224][ T7983] batman_adv: batadv0: Removing interface: team0
[   82.533534][ T7983] bridge0: port 3(team0) entered blocking state
[   82.536407][ T7983] bridge0: port 3(team0) entered disabled state
[   82.538416][ T7983] team0: entered allmulticast mode
[   82.540597][ T7983] team_slave_0: entered allmulticast mode
[   82.543121][ T7983] team_slave_1: entered allmulticast mode
[   82.546682][ T7983] bridge0: port 3(team0) entered blocking state
[   82.548687][ T7983] bridge0: port 3(team0) entered forwarding state
[   82.566220][ T7984] veth3: entered promiscuous mode
[   82.572678][ T6792] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[   82.596009][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[   82.769016][ T8005] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   82.838144][ T8007] can: request_module (can-proto-4) failed.
[   82.988899][ T8024] netlink: 'syz.1.697': attribute type 1 has an invalid length.
[   83.028919][ T8024] 8021q: adding VLAN 0 to HW filter on device bond4
[   83.038464][ T8024] ipvlan2: entered allmulticast mode
[   83.040596][ T8024] bond4: entered allmulticast mode
[   83.054000][ T8024] bond4: (slave gretap1): making interface the new active one
[   83.056331][ T8024] gretap1: entered allmulticast mode
[   83.059155][ T8024] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   83.077670][ T8024] syz.1.697 (8024) used greatest stack depth: 18712 bytes left
[   83.376125][ T8065] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.712'.
[   83.395827][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'.
[   83.435782][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'.
[   83.438297][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.716'.
[   83.487082][ T8081] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.717'.
[   83.493676][ T8075] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.717'.
[   83.509254][ T8075] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   83.512045][ T8075] Cannot find add_set index 3 as target
[   83.631535][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'.
[   83.646804][ T8093] netlink: 'syz.1.724': attribute type 19 has an invalid length.
[   83.703797][ T8103] netlink: 'syz.1.726': attribute type 2 has an invalid length.
[   84.072469][ T8137] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   84.312460][ T8155] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[   84.346566][ T8155] gretap1: entered promiscuous mode
[   84.352161][ T8155] bond3: (slave gretap1): making interface the new active one
[   84.355310][ T8155] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   84.362327][ T8156] macvlan28: entered promiscuous mode
[   84.364147][ T8156] macvlan28: entered allmulticast mode
[   84.366322][ T8156] bond3: entered promiscuous mode
[   84.368540][ T8156] 8021q: adding VLAN 0 to HW filter on device macvlan28
[   84.371313][ T8156] bond3: (slave macvlan28): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   84.376478][ T8156] bond3: left promiscuous mode
[   84.459709][ T8159] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   84.557827][ T8170] netlink: 'syz.1.752': attribute type 1 has an invalid length.
[   84.582520][ T8170] bond6: (slave ip6gretap0): Enslaving as a backup interface with an up link
[   84.599046][ T8170] veth5: entered promiscuous mode
[   84.604536][ T8170] bond6: (slave veth5): Enslaving as a backup interface with a down link
[   85.395444][ T8244] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.396383][ T8244] netlink: 'syz.0.777': attribute type 29 has an invalid length.
[   85.402336][ T8244] netlink: 'syz.0.777': attribute type 29 has an invalid length.
[   85.512248][ T8256] bridge0: port 1(vlan2) entered blocking state
[   85.514689][ T8256] bridge0: port 1(vlan2) entered disabled state
[   85.516925][ T8256] vlan2: entered allmulticast mode
[   85.518681][ T8256] bridge0: entered allmulticast mode
[   85.522045][ T8256] vlan2: left allmulticast mode
[   85.523764][ T8256] bridge0: left allmulticast mode
[   85.644064][ T8261] vlan2: entered promiscuous mode
[   85.645773][ T8261] bridge0: entered promiscuous mode
[   85.647567][ T8261] vlan2: entered allmulticast mode
[   85.649254][ T8261] bridge0: entered allmulticast mode
[   85.665364][ T8262] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   85.667644][ T8262] batman_adv: batadv0: Removing interface: virt_wifi0
[   85.675435][ T8262] bond0: (slave wlan1): Releasing backup interface
[   86.101949][ T8276] sctp: [Deprecated]: syz.1.786 (pid 8276) Use of int in maxseg socket option.
[   86.101949][ T8276] Use struct sctp_assoc_value instead
[   86.106331][ T8275] sctp: [Deprecated]: syz.1.786 (pid 8275) Use of int in maxseg socket option.
[   86.106331][ T8275] Use struct sctp_assoc_value instead
[   86.332808][ T8290] syzkaller0: entered promiscuous mode
[   86.334693][ T8290] syzkaller0: entered allmulticast mode
[   86.338731][ T8292] ieee802154 phy0 wpan0: encryption failed: -22
[   86.377094][ T8294] NCSI netlink: No device for ifindex 246
[   86.385369][ T8294] gtp0: entered promiscuous mode
[   86.386969][ T8294] gtp0: entered allmulticast mode
[   87.299191][ T8302] validate_nla: 40 callbacks suppressed
[   87.299203][ T8302] netlink: 'syz.2.796': attribute type 1 has an invalid length.
[   87.303790][ T8302] __nla_validate_parse: 10 callbacks suppressed
[   87.303799][ T8302] netlink: 224 bytes leftover after parsing attributes in process `syz.2.796'.
[   87.373428][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[   87.510508][ T8329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.804'.
[   87.514009][ T8326] netlink: 60 bytes leftover after parsing attributes in process `syz.1.804'.
[   87.597010][ T8336] netlink: 136 bytes leftover after parsing attributes in process `syz.0.808'.
[   87.600130][ T8336] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   87.614483][ T8336] x_tables: duplicate underflow at hook 1
[   87.616651][ T8336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.808'.
[   87.741873][ T8357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'.
[   87.773123][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'.
[   87.793884][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.817'.
[   87.796899][ T8364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'.
[   87.909616][ T8380] netlink: 'syz.0.823': attribute type 5 has an invalid length.
[   87.967420][ T8387] bridge0: port 3(team0) entered disabled state
[   88.064921][ T8387] team0 (unregistering): left allmulticast mode
[   88.067220][ T8387] team_slave_0: left allmulticast mode
[   88.069170][ T8387] team_slave_1: left allmulticast mode
[   88.071187][ T8387] bridge0: port 3(team0) entered disabled state
[   88.076129][ T8387] team_slave_0: left promiscuous mode
[   88.085155][ T8387] team0 (unregistering): Port device team_slave_0 removed
[   88.087654][ T8387] team_slave_1: left promiscuous mode
[   88.094054][ T8387] team0 (unregistering): Port device team_slave_1 removed
[   88.305068][ T8414] openvswitch: netlink: Flow actions attr not present in new flow.
[   88.385801][ T8422] vlan0: entered promiscuous mode
[   88.604453][ T8438] netlink: 'syz.2.845': attribute type 58 has an invalid length.
[   88.776563][ T8446] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.269597][ T8459] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[   89.273947][ T8461] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   89.466622][ T8470] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004
[   89.468954][ T8470] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000
[   89.902348][ T8504] sctp: [Deprecated]: syz.2.869 (pid 8504) Use of int in max_burst socket option.
[   89.902348][ T8504] Use struct sctp_assoc_value instead
[   89.921089][ T8504] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   89.942744][ T8508] sctp: [Deprecated]: syz.2.869 (pid 8508) Use of int in max_burst socket option.
[   89.942744][ T8508] Use struct sctp_assoc_value instead
[   90.051927][ T8516] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   90.056034][ T8516] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   90.705475][ T8575] netlink: 'syz.1.891': attribute type 2 has an invalid length.
[   90.708959][ T8575] netlink: 'syz.1.891': attribute type 2 has an invalid length.
[   91.722165][ T8615] openvswitch: netlink: Flow actions attr not present in new flow.
[   92.534909][ T8663] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[   92.537338][ T8663] __nla_validate_parse: 16 callbacks suppressed
[   92.537348][ T8663] netlink: 184 bytes leftover after parsing attributes in process `syz.0.922'.
[   92.543285][ T8663] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[   92.754162][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.1.929'.
[   92.758297][ T8681] xt_l2tp: v2 sid > 0xffff: 4294901760
[   92.953031][ T8710] netlink: 'syz.1.937': attribute type 9 has an invalid length.
[   93.070683][ T8725] netlink: 'syz.0.944': attribute type 12 has an invalid length.
[   93.073074][ T8725] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.944'.
[   93.128690][ T8728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.943'.
[   93.384311][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'.
[   93.387773][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'.
[   93.420927][ T8763] No such timeout policy "syz1"
[   93.422836][ T8764] No such timeout policy "syz1"
[   93.474058][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.961'.
[   93.476785][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.961'.
[   93.502939][ T8772] ipvlan2: entered promiscuous mode
[   93.505672][ T8772] bridge0: port 3(ipvlan2) entered blocking state
[   93.507895][ T8772] bridge0: port 3(ipvlan2) entered disabled state
[   93.512330][ T8772] ipvlan2: entered allmulticast mode
[   93.514057][ T8772] bridge0: entered allmulticast mode
[   93.516993][ T8772] ipvlan2: left allmulticast mode
[   93.518662][ T8772] bridge0: left allmulticast mode
[   93.727002][ T8791] netlink: 'syz.1.969': attribute type 1 has an invalid length.
[   93.754591][ T8791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   93.757614][ T8791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   93.760533][ T8791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.763288][ T8791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.767778][ T8791] bond7: (slave geneve3): making interface the new active one
[   93.771501][ T8791] bond7: (slave geneve3): Enslaving as an active interface with an up link
[   93.780837][ T8791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'.
[   93.786477][ T8791] 8021q: adding VLAN 0 to HW filter on device bond7
[   93.829651][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'.
[   93.847195][ T8797] vlan2: entered promiscuous mode
[   93.848723][ T8797] bridge0: entered promiscuous mode
[   93.932927][ T8806] : entered promiscuous mode
[   93.966483][ T8813] raw_sendmsg: syz.1.974 forgot to set AF_INET. Fix it!
[   94.024641][ T8817] lo speed is unknown, defaulting to 1000
[   94.028535][ T8817] lo speed is unknown, defaulting to 1000
[   94.031169][ T8817] lo speed is unknown, defaulting to 1000
[   94.097040][ T8822] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   94.117485][ T8822] bond8: entered promiscuous mode
[   94.119105][ T8822] bond8: entered allmulticast mode
[   94.122748][ T8822] 8021q: adding VLAN 0 to HW filter on device bond8
[   94.143632][ T8817] infiniband syz0: set down
[   94.145272][ T8817] infiniband syz0: added lo
[   94.150580][   T59] lo speed is unknown, defaulting to 1000
[   94.153991][ T8824] netlink: 'syz.2.979': attribute type 29 has an invalid length.
[   94.172083][ T8817] RDS/IB: syz0: added
[   94.173573][ T8817] smc: adding ib device syz0 with port count 1
[   94.175490][ T8817] smc:    ib device syz0 port 1 has pnetid 
[   94.177762][ T8824] netlink: 'syz.2.979': attribute type 29 has an invalid length.
[   94.180889][   T59] lo speed is unknown, defaulting to 1000
[   94.183894][ T8817] lo speed is unknown, defaulting to 1000
[   94.325891][ T8817] lo speed is unknown, defaulting to 1000
[   94.379730][ T8836] delete_channel: no stack
[   94.435946][ T8817] lo speed is unknown, defaulting to 1000
[   94.679184][ T8857] netlink: 'syz.2.989': attribute type 2 has an invalid length.
[   94.853790][ T8879] can: request_module (can-proto-0) failed.
[   94.991375][ T8898] ieee802154 phy0 wpan0: encryption failed: -22
[   94.996976][ T8900] Set syz0 is full, maxelem 0 reached
[   95.286846][ T8926] syzkaller0: entered promiscuous mode
[   95.288741][ T8926] syzkaller0: entered allmulticast mode
[   95.293306][ T8927] ieee802154 phy0 wpan0: encryption failed: -22
[   95.841826][ T8956] netlink: 'syz.0.1019': attribute type 5 has an invalid length.
[   95.844597][ T8956] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[   96.163105][ T8978] dvmrp0: entered allmulticast mode
[   96.388525][ T8990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.394351][ T8992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.556107][ T9013] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   96.802221][ T9041] netdevsim0: mtu less than device minimum
[   96.973336][ T9066] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.053869][ T9075] lo speed is unknown, defaulting to 1000
[   97.151165][ T9091] tipc: Started in network mode
[   97.152728][ T9091] tipc: Node identity e274a3ce815b, cluster identity 4711
[   97.154932][ T9091] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.163107][ T9090] veth1_virt_wifi: mtu less than device minimum
[   97.168255][ T9089] tipc: Disabling bearer <eth:syzkaller0>
[   97.305933][ T9105] veth0: entered promiscuous mode
[   97.314851][ T9103] veth0: left promiscuous mode
[   97.578925][ T9136] lo speed is unknown, defaulting to 1000
[   97.689245][ T9137] lo speed is unknown, defaulting to 1000
[   97.924930][ T9151] __nla_validate_parse: 31 callbacks suppressed
[   97.924943][ T9151] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1091'.
[   97.998120][ T9154] validate_nla: 5 callbacks suppressed
[   97.998131][ T9154] netlink: 'syz.1.1092': attribute type 10 has an invalid length.
[   98.288142][ T9166] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   98.444790][ T9169] lo speed is unknown, defaulting to 1000
[   99.037766][ T9198] lo speed is unknown, defaulting to 1000
[   99.298705][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1109'.
[   99.372392][ T9211] xt_hashlimit: size too large, truncated to 1048576
[   99.377897][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'.
[   99.470080][ T9218] xt_bpf: check failed: parse error
[   99.491384][   T59] IPVS: starting estimator thread 0...
[   99.580029][ T9224] IPVS: using max 62 ests per chain, 148800 per kthread
[   99.640698][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'.
[   99.694044][ T9233] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[   99.696635][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1119'.
[   99.818182][ T9240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.821968][ T9241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.964396][ T9245] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20001
[  100.207205][ T9262] netlink: 'syz.0.1130': attribute type 11 has an invalid length.
[  100.209648][ T9262] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1130'.
[  100.289639][ T9266] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1131'.
[  100.325697][ T9268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.329121][ T9268] D: renamed from syzkaller0
[  100.332691][ T9268] tipc: Disabling bearer <eth:syzkaller0>
[  100.396721][ T9270] tipc: Enabled bearer <ib:caif0>, priority 10
[  100.510056][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'.
[  100.513233][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'.
[  100.518677][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1139'.
[  100.699458][ T9299] netlink: 'syz.0.1146': attribute type 7 has an invalid length.
[  100.821160][ T9313] bridge3: entered allmulticast mode
[  101.002372][ T9331] netlink: 'syz.2.1156': attribute type 2 has an invalid length.
[  101.106475][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.109027][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.120359][ T9343] netlink: 'syz.2.1162': attribute type 39 has an invalid length.
[  101.123359][ T9339] batman_adv: batadv0: Interface deactivated: dummy0
[  101.170406][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.176815][ T9339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.224552][ T9339] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.227362][ T9339] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.235585][ T9339] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.238310][ T9339] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.272796][ T9339] bond2: left promiscuous mode
[  101.277194][ T9339] gretap1: left promiscuous mode
[  101.400417][   T59] tipc: Node number set to 1664066510
[  101.492832][ T9355] "syz.0.1166" (9355) uses obsolete ecb(arc4) skcipher
[  101.544210][ T9372] netlink: 'syz.1.1169': attribute type 11 has an invalid length.
[  102.821697][ T9414] netlink: 'syz.2.1181': attribute type 11 has an invalid length.
[  102.867699][ T5830] Bluetooth: hci2: link tx timeout
[  102.869625][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.125849][ T9451] __nla_validate_parse: 14 callbacks suppressed
[  103.125860][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'.
[  103.127065][ T9452] netlink: 'syz.0.1195': attribute type 7 has an invalid length.
[  103.136237][ T9452] netlink: 'syz.0.1195': attribute type 8 has an invalid length.
[  103.215377][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  103.724487][ T9471] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1201'.
[  103.771147][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'.
[  103.819624][ T9486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1206'.
[  103.862281][ T9489] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1207'.
[  103.938182][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1209'.
[  103.980365][ T9504] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1212'.
[  104.004179][ T9508] netlink: 1300 bytes leftover after parsing attributes in process `syz.2.1213'.
[  104.076085][ T9513] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1215'.
[  104.133624][ T9521] netlink: 'syz.2.1218': attribute type 10 has an invalid length.
[  104.247515][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.252342][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.259627][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.265160][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.268164][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.272179][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.275150][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.279515][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.283579][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.287352][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.290354][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.294315][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.305786][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.309629][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.314136][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.317915][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.321978][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.326290][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.329258][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.334769][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.337711][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.341863][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.345247][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.348999][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.359663][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.364491][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.367366][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.373078][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.376045][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.380099][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.382904][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.386755][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.389654][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.394206][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.397133][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.401047][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.403926][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.407703][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.411178][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.415692][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.418710][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.422803][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.425781][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.429670][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.433039][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.440043][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.443045][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.446955][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.450332][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.454205][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.457211][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.463595][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.466634][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.472628][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.475514][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.479557][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.483403][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.487192][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.490375][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.494368][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.499214][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.505348][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.510125][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.513995][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.517322][ T9537] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  104.529974][ T9537] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  104.592733][ T9556] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  104.758865][ T9578] lo speed is unknown, defaulting to 1000
[  104.832672][ T9582] gtp0: entered promiscuous mode
[  104.834185][ T9582] gtp0: entered allmulticast mode
[  104.873361][ T9586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.921134][ T5830] Bluetooth: hci2: command 0x0405 tx timeout
[  105.210416][ T9618] netlink: 'syz.2.1250': attribute type 1 has an invalid length.
[  105.229340][ T9618] bond3: entered promiscuous mode
[  105.233209][ T9618] bond3: entered allmulticast mode
[  105.235029][ T9618] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.257333][ T9618] bridge4: entered promiscuous mode
[  105.259116][ T9618] bridge4: entered allmulticast mode
[  105.262585][ T9618] bond3: (slave bridge4): Enslaving as a backup interface with an up link
[  105.292263][ T9624] openvswitch: netlink: IP tunnel dst address not specified
[  105.295543][ T9629] xt_TPROXY: Can be used only with -p tcp or -p udp
[  105.331631][ T5858] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.378727][ T9631] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.387403][ T9635] netlink: 'syz.2.1255': attribute type 1 has an invalid length.
[  105.441571][ T5858] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  105.508182][ T9650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.622368][ T9666] Bluetooth: hci0: Opcode 0x080f failed: -22
[  105.731971][ T9675] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  105.743974][ T9675] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  105.746968][ T9675] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  105.784178][ T9678] ieee802154 phy0 wpan0: encryption failed: -22
[  105.820697][ T9680] xt_connbytes: Forcing CT accounting to be enabled
[  105.822853][ T9680] xt_bpf: check failed: parse error
[  105.826096][ T9680] xt_bpf: check failed: parse error
[  106.078877][ T9702] smc: net device bond0 applied user defined pnetid SYZ2
[  106.095869][ T9702] smc: removing net device bond0 with user defined pnetid SYZ2
[  106.099402][ T9702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.104495][ T9702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.108081][ T9702] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  106.111699][ T9702] bond0 (unregistering): Released all slaves
[  106.287688][ T9713] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  107.124263][ T9733] veth0: entered promiscuous mode
[  107.188842][ T9732] veth0: left promiscuous mode
[  107.325881][ T9766] netlink: 'syz.1.1298': attribute type 3 has an invalid length.
[  107.419225][ T9773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.430273][ T9773] tipc: Resetting bearer <eth:syzkaller0>
[  107.449403][ T9771] tipc: Disabling bearer <eth:syzkaller0>
[  107.488924][ T9766] lo speed is unknown, defaulting to 1000
[  107.640116][   T53] Bluetooth: hci0: command tx timeout
[  108.052330][ T9813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  108.291385][ T9839] __nla_validate_parse: 21 callbacks suppressed
[  108.291396][ T9839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1325'.
[  108.312836][ T9839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1325'.
[  108.356755][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1326'.
[  108.391372][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1327'.
[  108.645827][ T9853] ieee802154 phy0 wpan0: encryption failed: -90
[  108.768783][ T9860] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  108.808758][ T9860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'.
[  109.006166][ T9871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1337'.
[  109.014387][ T9871] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1337'.
[  109.311172][ T9911] ip6gre1: entered allmulticast mode
[  109.547769][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'.
[  109.715555][ T9966] netlink: 'syz.0.1365': attribute type 29 has an invalid length.
[  109.718562][ T9964] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  109.721689][ T9964] netlink: 'syz.1.1364': attribute type 2 has an invalid length.
[  109.724299][ T9966] netlink: 'syz.0.1365': attribute type 29 has an invalid length.
[  109.728795][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'.
[  109.733511][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'.
[  109.736375][ T9966] unsupported nla_type 58
[  110.058795][ T9994] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  110.061251][ T9994] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  110.099828][ T9996] xt_policy: output policy not valid in PREROUTING and INPUT
[  110.214796][T10008] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  110.477502][T10021] netlink: 'syz.0.1383': attribute type 1 has an invalid length.
[  110.602020][T10030] lo speed is unknown, defaulting to 1000
[  110.803001][T10030] syzkaller1: entered promiscuous mode
[  110.805661][T10030] syzkaller1: entered allmulticast mode
[  110.868232][T10048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.091475][   T26] tipc: Resetting bearer <eth:syzkaller0>
[  111.150095][T10067] lo speed is unknown, defaulting to 1000
[  111.434829][T10083] netlink: 'syz.2.1401': attribute type 10 has an invalid length.
[  111.441221][T10083] batman_adv: batadv0: Adding interface: team0
[  111.443196][T10083] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.452169][T10083] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  111.456803][T10083] netlink: 'syz.2.1401': attribute type 10 has an invalid length.
[  111.459716][T10083] team0: entered promiscuous mode
[  111.463484][T10083] 8021q: adding VLAN 0 to HW filter on device team0
[  111.465617][T10083] batman_adv: batadv0: Interface activated: team0
[  111.467550][T10083] batman_adv: batadv0: Interface deactivated: team0
[  111.469484][T10083] batman_adv: batadv0: Removing interface: team0
[  111.808873][T10095] netlink: 'syz.2.1407': attribute type 10 has an invalid length.
[  111.821106][T10097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.856888][T10096] sctp: [Deprecated]: syz.2.1407 (pid 10096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.856888][T10096] Use struct sctp_sack_info instead
[  111.863986][T10095] sctp: [Deprecated]: syz.2.1407 (pid 10095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.863986][T10095] Use struct sctp_sack_info instead
[  111.951546][  T789] tipc: Node number set to 3257111829
[  111.985434][T10109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.007147][T10107] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  112.108129][T10114] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  112.283317][T10133] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.285794][T10133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.288140][T10133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.292638][T10133] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.295375][T10133] geneve2: entered promiscuous mode
[  112.299813][T10129] syzkaller1: entered promiscuous mode
[  112.302364][T10129] syzkaller1: entered allmulticast mode
[  112.456056][T10142] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  115.723086][T10185] macsec2: entered promiscuous mode
[  115.725249][T10185] macsec2: entered allmulticast mode
[  115.727265][T10185] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  115.736828][T10185] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  115.739423][T10185] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  115.743061][T10185] tipc: Resetting bearer <eth:syzkaller0>
[  115.767237][T10187] __nla_validate_parse: 25 callbacks suppressed
[  115.767254][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'.
[  115.785574][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'.
[  115.841018][T10200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.843982][T10200] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  115.846190][T10200] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  115.849351][T10200] tipc: Resetting bearer <eth:syzkaller0>
[  115.854725][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  115.857545][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'.
[  115.869431][T10200] tipc: Resetting bearer <eth:syzkaller0>
[  115.943610][T10213] veth1_macvtap: left promiscuous mode
[  115.945337][T10213] macsec0: entered promiscuous mode
[  115.949263][T10215] veth1_macvtap: entered promiscuous mode
[  115.954560][T10215] macsec0: left promiscuous mode
[  116.082620][T10235] siw: device registration error -23
[  116.086307][T10237] siw: device registration error -23
[  116.166551][T10248] tipc: Resetting bearer <eth:syzkaller0>
[  116.205692][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'.
[  116.212201][T10246] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1457'.
[  116.307859][T10260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1462'.
[  116.310774][T10260] nbd: illegal input index -381222912
[  116.358458][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'.
[  116.374415][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'.
[  116.384535][   T33] audit: type=1107 audit(1752344533.241:3): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  116.708132][T10321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.764665][ T6792] tipc: Resetting bearer <eth:syzkaller0>
[  116.993108][T10348] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  117.105373][T10356] can: request_module (can-proto-4) failed.
[  117.305929][T10365] lo speed is unknown, defaulting to 1000
[  117.905448][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'.
[  118.057796][T10382] openvswitch: netlink: Flow actions attr not present in new flow.
[  118.068114][T10382] IPVS: length: 27 != 24
[  118.073895][T10382] netlink: 'syz.2.1491': attribute type 4 has an invalid length.
[  118.106089][T10382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.620585][T10422] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  118.624984][T10422] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  118.632492][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  118.638124][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  118.642855][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  118.645735][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  118.648311][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  118.676606][T10424] lo speed is unknown, defaulting to 1000
[  118.884347][T10424] chnl_net:caif_netlink_parms(): no params data found
[  118.963011][T10424] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.965548][T10424] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.968214][T10424] bridge_slave_0: entered allmulticast mode
[  118.972347][T10424] bridge_slave_0: entered promiscuous mode
[  118.975756][T10424] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.980507][T10424] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.982796][T10424] bridge_slave_1: entered allmulticast mode
[  118.985544][T10424] bridge_slave_1: entered promiscuous mode
[  119.020475][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.025873][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.059032][T10424] team0: Port device team_slave_0 added
[  119.063024][T10424] team0: Port device team_slave_1 added
[  119.081396][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.083497][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.092540][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.096858][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.098890][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.108604][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.137838][T10424] hsr_slave_0: entered promiscuous mode
[  119.141004][T10424] hsr_slave_1: entered promiscuous mode
[  119.143390][T10424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  119.145734][T10424] Cannot create hsr debugfs directory
[  119.249800][T10424] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.336547][T10424] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.406018][T10473] lo speed is unknown, defaulting to 1000
[  119.422470][T10424] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.476274][T10424] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.596048][T10424] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  119.601438][T10424] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  119.614734][T10424] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  119.634605][T10424] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  119.725276][T10424] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.756430][T10486] lo speed is unknown, defaulting to 1000
[  119.758152][T10424] 8021q: adding VLAN 0 to HW filter on device team0
[  119.768901][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.771150][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.777406][T10494] netlink: 'syz.2.1520': attribute type 21 has an invalid length.
[  119.784868][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.787177][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.913063][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.943768][T10424] veth0_vlan: entered promiscuous mode
[  119.954094][T10424] veth1_vlan: entered promiscuous mode
[  119.977758][T10424] veth0_macvtap: entered promiscuous mode
[  120.015760][T10424] veth1_macvtap: entered promiscuous mode
[  120.052410][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.058540][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.070953][T10424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.073659][T10424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.076305][T10424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.078986][T10424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.134480][  T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.137085][  T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.157342][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.160414][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.426757][T10513] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  120.815986][T10537] lo speed is unknown, defaulting to 1000
[  121.151673][T10545] __nla_validate_parse: 6 callbacks suppressed
[  121.151684][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'.
[  121.251120][T10548] gtp1: entered promiscuous mode
[  121.252858][T10548] gtp1: entered allmulticast mode
[  121.316451][T10552] tipc: Resetting bearer <eth:syzkaller0>
[  121.353154][T10554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'.
[  121.355928][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1538'.
[  121.362833][T10554] netlink: 'syz.1.1538': attribute type 13 has an invalid length.
[  121.379043][T10554] gretap0: refused to change device tx_queue_len
[  121.385527][T10554] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  121.428839][T10557] sctp: [Deprecated]: syz.1.1539 (pid 10557) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.428839][T10557] Use struct sctp_sack_info instead
[  121.468678][T10559] dvmrp1: entered allmulticast mode
[  121.618103][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1544'.
[  121.799811][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1549'.
[  121.949841][T10601] netlink: 'syz.2.1553': attribute type 1 has an invalid length.
[  121.954015][T10601] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1553'.
[  122.063809][T10608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1555'.
[  122.066317][T10604] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1554'.
[  122.104657][T10614] sch_tbf: burst 2 is lower than device lo mtu (81) !
[  122.197014][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'.
[  122.200485][ T5857] 
[  122.201278][ T5857] ============================================
[  122.203180][ T5857] WARNING: possible recursive locking detected
[  122.205052][ T5857] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  122.208369][ T5857] --------------------------------------------
[  122.210279][ T5857] kworker/u8:3/5857 is trying to acquire lock:
[  122.212167][ T5857] ffff88801edc6558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  122.215138][ T5857] 
[  122.215138][ T5857] but task is already holding lock:
[  122.217392][ T5857] ffff8880276b4958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  122.220370][ T5857] 
[  122.220370][ T5857] other info that might help us debug this:
[  122.222932][ T5857]  Possible unsafe locking scenario:
[  122.222932][ T5857] 
[  122.225211][ T5857]        CPU0
[  122.226388][ T5857]        ----
[  122.227430][ T5857]   lock(&qdisc_xmit_lock_key#4);
[  122.228969][ T5857]   lock(&qdisc_xmit_lock_key#4);
[  122.230509][ T5857] 
[  122.230509][ T5857]  *** DEADLOCK ***
[  122.230509][ T5857] 
[  122.233000][ T5857]  May be due to missing lock nesting notation
[  122.233000][ T5857] 
[  122.235717][ T5857] 9 locks held by kworker/u8:3/5857:
[  122.237623][ T5857]  #0: ffff88802fba9948 ((wq_completion)bond4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  122.241327][ T5857]  #1: ffffc9000472fbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  122.245208][ T5857]  #2: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800
[  122.248120][ T5857]  #3: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  122.251126][ T5857]  #4: ffff88802fa6c258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  122.255304][ T5857]  #5: ffff8880276b4958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0
[  122.258420][ T5857]  #6: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160
[  122.261430][ T5857]  #7: ffffffff8e13f1c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70
[  122.264438][ T5857]  #8: ffff88802eb99258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{3:3}, at: __dev_queue_xmit+0x1300/0x3a70
[  122.268197][ T5857] 
[  122.268197][ T5857] stack backtrace:
[  122.270032][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: kworker/u8:3 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  122.270042][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.270050][ T5857] Workqueue: bond4 bond_alb_monitor
[  122.270064][ T5857] Call Trace:
[  122.270069][ T5857]  <TASK>
[  122.270075][ T5857]  dump_stack_lvl+0x189/0x250
[  122.270088][ T5857]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.270096][ T5857]  ? __pfx__printk+0x10/0x10
[  122.270108][ T5857]  ? print_lock_name+0xde/0x100
[  122.270118][ T5857]  print_deadlock_bug+0x28b/0x2a0
[  122.270129][ T5857]  validate_chain+0x1a3f/0x2140
[  122.270138][ T5857]  ? validate_xmit_xfrm+0xbf/0x1130
[  122.270153][ T5857]  ? __pfx_validate_xmit_xfrm+0x10/0x10
[  122.270166][ T5857]  __lock_acquire+0xab9/0xd20
[  122.270175][ T5857]  ? sch_direct_xmit+0x153/0x4b0
[  122.270183][ T5857]  lock_acquire+0x120/0x360
[  122.270190][ T5857]  ? sch_direct_xmit+0x153/0x4b0
[  122.270200][ T5857]  _raw_spin_lock+0x2e/0x40
[  122.270212][ T5857]  ? sch_direct_xmit+0x153/0x4b0
[  122.270219][ T5857]  sch_direct_xmit+0x153/0x4b0
[  122.270228][ T5857]  ? __pfx_sch_direct_xmit+0x10/0x10
[  122.270236][ T5857]  ? __pfx_usage_match+0x10/0x10
[  122.270245][ T5857]  __dev_queue_xmit+0x17b6/0x3a70
[  122.270255][ T5857]  ? register_lock_class+0x51/0x320
[  122.270264][ T5857]  ? __dev_queue_xmit+0x27e/0x3a70
[  122.270275][ T5857]  ? neigh_resolve_output+0x438/0x750
[  122.270284][ T5857]  ? __pfx___dev_queue_xmit+0x10/0x10
[  122.270294][ T5857]  ? read_seqbegin+0x122/0x250
[  122.270300][ T5857]  ? neigh_resolve_output+0x438/0x750
[  122.270307][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.270320][ T5857]  ? read_seqbegin+0x1ac/0x250
[  122.270326][ T5857]  ? __pfx_read_seqbegin+0x10/0x10
[  122.270333][ T5857]  ? __local_bh_enable_ip+0x12d/0x1c0
[  122.270343][ T5857]  ? eth_header+0x11b/0x200
[  122.270354][ T5857]  ? __asan_memcpy+0x40/0x70
[  122.270368][ T5857]  ip_finish_output2+0xd40/0x1160
[  122.270375][ T5857]  ? ip_skb_dst_mtu+0x147/0xc50
[  122.270387][ T5857]  ? ip_finish_output2+0x452/0x1160
[  122.270394][ T5857]  ? __pfx_ip_finish_output2+0x10/0x10
[  122.270423][ T5857]  ? ip_skb_dst_mtu+0x147/0xc50
[  122.270434][ T5857]  ? ip_skb_dst_mtu+0x147/0xc50
[  122.270444][ T5857]  ? ip_skb_dst_mtu+0x970/0xc50
[  122.270455][ T5857]  ? __ip_finish_output+0x336/0x3f0
[  122.270462][ T5857]  iptunnel_xmit+0x571/0xa00
[  122.270475][ T5857]  ip_tunnel_xmit+0x1c3c/0x2380
[  122.270487][ T5857]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  122.270494][ T5857]  ? gre_build_header+0x3fd/0xa40
[  122.270508][ T5857]  ? __pfx_gre_build_header+0x10/0x10
[  122.270520][ T5857]  gre_tap_xmit+0x590/0x7a0
[  122.270531][ T5857]  ? __pfx_gre_tap_xmit+0x10/0x10
[  122.270540][ T5857]  ? __lock_acquire+0xab9/0xd20
[  122.270549][ T5857]  dev_hard_start_xmit+0x2d7/0x830
[  122.270562][ T5857]  sch_direct_xmit+0x241/0x4b0
[  122.270570][ T5857]  ? __pfx_sch_direct_xmit+0x10/0x10
[  122.270579][ T5857]  __dev_queue_xmit+0x17b6/0x3a70
[  122.270591][ T5857]  ? __dev_queue_xmit+0x27e/0x3a70
[  122.270603][ T5857]  ? __pfx___dev_queue_xmit+0x10/0x10
[  122.270613][ T5857]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  122.270622][ T5857]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  122.270632][ T5857]  ? __build_skb_around+0x257/0x3e0
[  122.270644][ T5857]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  122.270653][ T5857]  ? alb_send_lp_vid+0x139/0x510
[  122.270665][ T5857]  alb_send_lp_vid+0x324/0x510
[  122.270676][ T5857]  ? rcu_is_watching+0x15/0xb0
[  122.270687][ T5857]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  122.270698][ T5857]  ? __lock_acquire+0xab9/0xd20
[  122.270706][ T5857]  alb_send_learning_packets+0x10d/0x2c0
[  122.270717][ T5857]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  122.270730][ T5857]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  122.270739][ T5857]  bond_alb_monitor+0x3e4/0x1800
[  122.270750][ T5857]  ? bond_alb_monitor+0xf1/0x1800
[  122.270760][ T5857]  ? process_scheduled_works+0x9ef/0x17b0
[  122.270768][ T5857]  ? __pfx_bond_alb_monitor+0x10/0x10
[  122.270779][ T5857]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.270789][ T5857]  ? process_scheduled_works+0x9ef/0x17b0
[  122.270796][ T5857]  ? process_scheduled_works+0x9ef/0x17b0
[  122.270804][ T5857]  process_scheduled_works+0xae1/0x17b0
[  122.270817][ T5857]  ? __pfx_process_scheduled_works+0x10/0x10
[  122.270828][ T5857]  worker_thread+0x8a0/0xda0
[  122.270837][ T5857]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.270848][ T5857]  ? __kthread_parkme+0x7b/0x200
[  122.270860][ T5857]  kthread+0x711/0x8a0
[  122.270870][ T5857]  ? __pfx_worker_thread+0x10/0x10
[  122.270878][ T5857]  ? __pfx_kthread+0x10/0x10
[  122.270887][ T5857]  ? _raw_spin_unlock_irq+0x23/0x50
[  122.270901][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.270911][ T5857]  ? __pfx_kthread+0x10/0x10
[  122.270921][ T5857]  ret_from_fork+0x3fc/0x770
[  122.270930][ T5857]  ? __pfx_ret_from_fork+0x10/0x10
[  122.270939][ T5857]  ? __switch_to_asm+0x39/0x70
[  122.270948][ T5857]  ? __switch_to_asm+0x33/0x70
[  122.270957][ T5857]  ? __pfx_kthread+0x10/0x10
[  122.270967][ T5857]  ret_from_fork_asm+0x1a/0x30
[  122.270979][ T5857]  </TASK>
[  122.428752][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.440116][T10632] syzkaller1: entered promiscuous mode
[  122.441910][T10632] syzkaller1: entered allmulticast mode
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  122.447167][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.451931][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.456253][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.478428][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.481124][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.555635][T10642] lo speed is unknown, defaulting to 1000
[  122.672551][T10642] chnl_net:caif_netlink_parms(): no params data found
[  122.702013][T10642] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.704233][T10642] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.706407][T10642] bridge_slave_0: entered allmulticast mode
[  122.708722][T10642] bridge_slave_0: entered promiscuous mode
[  122.712236][T10642] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.714424][T10642] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.716567][T10642] bridge_slave_1: entered allmulticast mode
[  122.718806][T10642] bridge_slave_1: entered promiscuous mode
[  122.732724][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  122.736672][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  122.749264][T10642] team0: Port device team_slave_0 added
[  122.752271][T10642] team0: Port device team_slave_1 added
[  122.763483][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.765576][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.774404][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.778228][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.780917][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.788556][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.807703][T10642] hsr_slave_0: entered promiscuous mode
[  122.810083][T10642] hsr_slave_1: entered promiscuous mode
[  122.812567][T10642] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.814830][T10642] Cannot create hsr debugfs directory
[  124.332788][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.373898][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.415438][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.463899][ T5858] bridge_slave_1: left allmulticast mode
[  124.465701][ T5858] bridge_slave_1: left promiscuous mode
[  124.467496][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.470946][ T5858] bridge_slave_0: left allmulticast mode
[  124.472683][ T5858] bridge_slave_0: left promiscuous mode
[  124.474410][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.583342][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.587001][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.590424][ T5858] bond0 (unregistering): Released all slaves
[  124.600546][ T5830] Bluetooth: hci0: command tx timeout
[  124.849211][ T5858] hsr_slave_0: left promiscuous mode
[  124.851475][ T5858] hsr_slave_1: left promiscuous mode
[  124.853368][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.855611][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.858172][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.862662][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.867664][ T5858] veth1_macvtap: left promiscuous mode
[  124.869389][ T5858] veth0_macvtap: left promiscuous mode
[  124.871330][ T5858] veth1_vlan: left promiscuous mode
[  124.873030][ T5858] veth0_vlan: left promiscuous mode
[  124.990356][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  125.004837][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  125.227182][T10642] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  125.231203][T10642] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  125.234643][T10642] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  125.238046][T10642] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  125.291193][T10642] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.298918][T10642] 8021q: adding VLAN 0 to HW filter on device team0
[  125.304191][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.306364][ T6792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.319093][T10642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.325372][T10642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.330116][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.332251][ T6792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.402183][T10642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.419624][T10642] veth0_vlan: entered promiscuous mode
[  125.424805][T10642] veth1_vlan: entered promiscuous mode
[  125.440220][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  125.446510][T10642] veth0_macvtap: entered promiscuous mode
[  125.449701][T10642] veth1_macvtap: entered promiscuous mode
[  125.458291][T10642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.464761][T10642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.468745][T10642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.472585][T10642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.475239][T10642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.477774][T10642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.487732][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  125.504484][T10642] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  125.515906][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.518271][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.529329][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  125.533740][T10642] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  125.545279][ T6792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.547697][ T6792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.583055][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  125.633036][ T5858] bridge_slave_1: left allmulticast mode
[  125.634811][ T5858] bridge_slave_1: left promiscuous mode
[  125.636577][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.639464][ T5858] bridge_slave_0: left allmulticast mode
[  125.641756][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.674090][ T5858] bond6 (unregistering): (slave ip6gretap0): Releasing backup interface
[  125.676577][ T5858] bond6 (unregistering): (slave ip6gretap0): the permanent HWaddr of slave - f6:4d:b2:76:28:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  125.730840][ T5858] bond4 (unregistering): (slave gretap1): Releasing active interface
[  125.733326][ T5858] gretap1 (unregistering): left allmulticast mode
[  125.755090][ T5858] dvmrp1 (unregistering): left allmulticast mode
[  125.761419][ T5858] bond7 (unregistering): (slave geneve3): Releasing active interface
[  126.237911][ T5858] bond1 (unregistering): Released all slaves
[  126.242891][ T5858] bond2 (unregistering): Released all slaves
[  126.300989][ T5858] bond3 (unregistering): Released all slaves
[  126.307616][ T5858] bond4 (unregistering): Released all slaves
[  126.312503][ T5858] bond5 (unregistering): Released all slaves
[  126.317687][ T5858] bond6 (unregistering): (slave veth5): Releasing backup interface
[  126.321736][ T5858] bond6 (unregistering): Released all slaves
[  126.327828][ T5858] bond7 (unregistering): Released all slaves
[  126.393345][ T5858] bond8 (unregistering): Released all slaves
[  126.442212][ T5858] tipc: Disabling bearer <udp:syz2>
[  126.443944][ T5858] tipc: Disabling bearer <eth:syzkaller0>
[  126.449428][ T5858] tipc: Left network mode
[  126.714343][ T5858] hsr_slave_0: left promiscuous mode
[  126.716720][ T5858] hsr_slave_1: left promiscuous mode
[  126.719065][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.734296][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.980826][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  126.998949][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  127.483288][ T5858] IPVS: stop unused estimator thread 0...
[  127.554562][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.224020][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.273582][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.324292][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.374163][ T5858] bridge_slave_1: left allmulticast mode
[  129.375915][ T5858] bridge_slave_1: left promiscuous mode
[  129.377639][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.381491][ T5858] bridge_slave_0: left allmulticast mode
[  129.383249][ T5858] bridge_slave_0: left promiscuous mode
[  129.385002][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.447817][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.451469][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.454572][ T5858] bond0 (unregistering): Released all slaves
[  129.690953][ T5858] hsr_slave_0: left promiscuous mode
[  129.692893][ T5858] hsr_slave_1: left promiscuous mode
[  129.694734][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.696906][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.699319][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.701964][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.706441][ T5858] veth1_macvtap: left promiscuous mode
[  129.708492][ T5858] veth0_macvtap: left promiscuous mode
[  129.727439][ T5858] veth1_vlan: left promiscuous mode
[  129.737799][ T5858] veth0_vlan: left promiscuous mode
[  129.808529][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  129.821617][ T5858] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
18:22:19  Registers:
info registers vcpu 0

CPU#0
RAX=b412dfe672c86c00 RBX=ffffffff81976c78 RCX=b412dfe672c86c00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000012c0 CR3=000000010e44e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=00007fcd92585478 00007fcd92585450 XMM03=00007fcd92585488 00007fcd92585480
XMM04=00007fcd930ed100 00007fcd92585440 XMM05=00007fcd92585458 00007fcd925854a0
XMM06=00007fcd92585498 00007fcd92585490 XMM07=00007fcd92585488 00007fcd92585480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcd92411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bfc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfe970 RSP=ffffc9000472e050
R8 =ffff888021a50237 R9 =1ffff1100434a046 R10=dffffc0000000000 R11=ffffffff854786b0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478727 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555645fe808 CR3=000000010e10e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcd92411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
