last executing test programs:

1.096677642s ago: executing program 2 (id=522):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x8fff5, @mcast2}, 0x1c, 0x0}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r4, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x4, 0xb7, &(0x7f0000000480)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x0)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0xfffffffe)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@gettclass={0x24, 0x2a, 0x8, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0x6}, {0xc, 0x6}, {0x0, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.002117484s ago: executing program 2 (id=524):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x98, r2, 0x1, 0x4, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xfffffffd}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x98}, 0x1, 0x0, 0x0, 0xc085}, 0x4040)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10040}, 0x8004)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

916.746336ms ago: executing program 2 (id=527):
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc4}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0)

914.631684ms ago: executing program 2 (id=528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xffffffff}]}}}]}, 0x4c}}, 0x814)

860.464818ms ago: executing program 2 (id=530):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010000100000000edffffffffffffff0a50000000060a0904000000000000000002000003240004802000018008e700006c6f77001400028006000140fff3000008000540fffffffd0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="280000001814010000000000000000000800030000000000080001"], 0x28}}, 0x24000000)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x31)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
mmap(&(0x7f0000496000/0x1000)=nil, 0x1000, 0x2, 0x12, r3, 0x913e0000)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000009c0)={<r5=>0x0, "056cc86910a8b1adbaf28c3a97ccd124"})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000019c0)={{r3}, r4, 0x2, @inherit={0x70, &(0x7f00000002c0)={0x1, 0x5, 0xfffffffffffffffa, 0xb1, {0x0, 0x7, 0x2, 0xfffffffffffffff7, 0x1}, [0xffff, 0xd10, 0x4, 0x7, 0x43]}}, @devid=r5})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="250300298203494b4b4304"], 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1401000cd68a1ddafa5cbe6fb56c0d9229bc9d8de83109d54d3e4ac66e9cd38c1d3a1399503963e67843ec1ec5d64b1ad487cde3434f1ae91d3eb89d9e165228daf1fd5c97d4dbcfbb641ac90a3cde4ced39370436b143c066c1", @ANYRES16=r8, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000001)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x2000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x0, 0x50, r7, 0x1fc39000)
openat$cgroup_ro(r3, &(0x7f00000007c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff"], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xb, &(0x7f0000000f00)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

460.233247ms ago: executing program 1 (id=540):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002301040028bd7000ffdbdf251600000008004200", @ANYRES32=r0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

459.438117ms ago: executing program 0 (id=541):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x2d, 0x17, 0x3, {0x1, @ah_ip6_spec={@mcast2, @local, 0x1, 0x6}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 0xce, 0xffff, [0x4, 0x4]}, @ah_ip4_spec={@empty, @multicast1, 0x80000000, 0x4}, {0x0, @local, 0x81, 0x5, [0x4, 0x101]}, 0x2, 0x4}}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110040000000000630afcff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)

458.233776ms ago: executing program 1 (id=542):
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @broadcast}, &(0x7f0000000500)=0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@gettaction={0xdc, 0x32, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x74a914c9}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1ff}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7010fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="10000000200800001ced030000000000000062faff7e6d4d56000c0032a5050019000600"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048090}, 0x20000000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8104}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x55c7302b}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x4008010) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

388.957361ms ago: executing program 1 (id=543):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r3}, 0x38)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6   \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000007c0)}, 0x20)
r6 = socket(0x3, 0xf, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r6)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000001c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1a, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x52, 0x5d, &(0x7f0000000980)=""/93, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0x2, 0x760, 0x101}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a40)=[{0x2, 0x3, 0x8, 0xa}, {0x1, 0x4, 0x6, 0x3}, {0x5, 0xdb, 0x1, 0x8}], 0x10, 0xe7e}, 0x94)
syz_emit_ethernet(0x766, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0)

323.495801ms ago: executing program 0 (id=544):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r2)
socket$inet6(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', <r4=>0x0})
ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x5}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r5, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004280)=""/4093, 0xffd}, {&(0x7f0000001700)=""/4082, 0xff2}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x40000005}, {{0x0, 0x0, 0x0}, 0x2002}], 0x4, 0x40010020, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

323.06905ms ago: executing program 1 (id=546):
r0 = socket$inet(0x2, 0x3, 0x30)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$inet6(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
setsockopt$inet_opts(r3, 0x0, 0x33, &(0x7f0000000040)="48a93a2e", 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a320000000018000380140000800400018008000340000000019a930b800900010073797a3000"], 0xd0}}, 0x0)

260.547797ms ago: executing program 0 (id=547):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
unshare(0x22020600) (async)
r0 = socket$tipc(0x1e, 0x5, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (async)
socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x453, 0x4, 0x70bd24, 0x25dfdbbf}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4048800) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f00000013c0)=0xc7f)
recvmsg$can_raw(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) (async)
sendmmsg$unix(r7, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000440)="9b139e05", 0x4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000100)={0xfffc}, 0x8) (async)
sendto$inet6(r8, &(0x7f0000000140)="06", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2, 0x8}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0)

260.015508ms ago: executing program 1 (id=548):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x100000001, 0x12) (async)
write$cgroup_int(r6, &(0x7f0000000040)=0x100000001, 0x12)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18)
socket$can_raw(0x1d, 0x3, 0x1) (async)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000700)={'veth0\x00', <r11=>0x0})
sendmsg$can_raw(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r11}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) (async)
sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000003, 0x80}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a9, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000003, 0x80}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040890}, 0x0)

200.727599ms ago: executing program 0 (id=549):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x180000)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000010000008000"/20, @ANYRES32=0x0, @ANYBLOB="360300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000fcffffff00"/28], 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000010000000100"/28], 0x48)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, 0x0, 0x0, 0xa)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x891a, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', <r9=>0x0})
bind$packet(r6, &(0x7f0000000480)={0x11, 0xf8, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14)
splice(r4, 0x0, r6, 0x0, 0x10500, 0x0)
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[], 0xffdd)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$tun(0xffffffffffffff9c, 0x0, 0x200640, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
r11 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010200000000000000006700000008000300", @ANYRESOCT=r0, @ANYRESDEC=r2], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x11000601}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="01002dbd7000fddbdf25010000000800010080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x800)
sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="a41c00002efcffa40000000079d9811f92cadc199a931e2f8d05ab5418df8ad09a5259f62883b3bebbb766199357cb27d99425f93986c2f66a375212163f26d15b08d8d84523e077fc27448f7bbca7c98118422ddd519149bdd6d822af0122a49fd29cd522e84ad74a70e81c1a36da79c52731a346634d25959f430a41399e829dbb9e97132d6d39625e8dad664638", @ANYRES32=r10, @ANYBLOB="0c0000800800090064010101"], 0x24}], 0x45}, 0x0)

199.030306ms ago: executing program 1 (id=550):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r1, 0x1)
shutdown(r1, 0x1)
r2 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0)
tee(r4, r3, 0x4, 0x9)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0000, 0x31, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="cd4b285318a7d80fea1914c03a4a50c4682337cee186cb11668ed814c31dc7c50e48b1d8b78252486598c4e1ca5dd3d88c539deee6b54980f9a1d9905e17572523da28dd11de8e4867f4e2b2f7b430", @ANYBLOB="6df8d4e1fa6d7bd1e5daaf5a1b02aa30717c85cc61c90467253f00657d9e5821fccc15f6aea58663caf208ea", @ANYRESHEX=r0, @ANYRESHEX=r7, @ANYRES16=0x0, @ANYRES16=r7, @ANYRES64=r5, @ANYRES16], &(0x7f0000000d40)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
listen(r9, 0xffff)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRES32=r10, @ANYBLOB="ba29c8bd992226c3689818982fb80791265b1995ba71c1af4c09"], 0x38}}, 0x0)
r11 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000200)=""/239, 0x21000, 0x800, 0x4, 0x1}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000010000008000000000000000000052c51a", @ANYRES32=r7, @ANYBLOB="340600"/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="05000000050000000200"/28], 0x50)

100.746719ms ago: executing program 0 (id=551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x14)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001600"/28], 0x48)

481.453µs ago: executing program 0 (id=552):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1c}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6}, {0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0xb0, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x54}, @void, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7ae8ff11d6ec5db9d2182a676c8c65791e9b13257c4570f8"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "103cc33f8a9cac9a7f301c8cc0dec932ab69c904bc02c09d"}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x1e, 0x4, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r11, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x4000094)
write$cgroup_pid(r9, &(0x7f0000000100), 0x12)
r12 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x80000)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'vxcan1\x00'})
setsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x80, &(0x7f0000000500)=0x4, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2a, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0)

0s ago: executing program 2 (id=553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10820, 0x400}}, 0x20}}, 0x4084)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20944' (ED25519) to the list of known hosts.
syzkaller login: [   48.101580][ T5811] cgroup: Unknown subsys name 'net'
[   48.201006][ T5811] cgroup: Unknown subsys name 'cpuset'
[   48.204845][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.522609][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.868513][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.876859][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.880318][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.883573][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.887237][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.898815][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.913922][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.916051][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.916649][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.919678][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.924268][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.927221][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.931360][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.934610][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.939185][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.160991][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   53.224733][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   53.280421][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   53.288657][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.290984][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.293376][ T5842] bridge_slave_0: entered allmulticast mode
[   53.296229][ T5842] bridge_slave_0: entered promiscuous mode
[   53.314748][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.317198][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.319603][ T5842] bridge_slave_1: entered allmulticast mode
[   53.322328][ T5842] bridge_slave_1: entered promiscuous mode
[   53.362153][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.365198][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.368011][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.370968][ T5837] bridge_slave_0: entered allmulticast mode
[   53.374140][ T5837] bridge_slave_0: entered promiscuous mode
[   53.378328][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.384609][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.387110][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.390584][ T5837] bridge_slave_1: entered allmulticast mode
[   53.393455][ T5837] bridge_slave_1: entered promiscuous mode
[   53.437225][ T5842] team0: Port device team_slave_0 added
[   53.440696][ T5842] team0: Port device team_slave_1 added
[   53.457195][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.460754][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.463316][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.465599][ T5847] bridge_slave_0: entered allmulticast mode
[   53.468936][ T5847] bridge_slave_0: entered promiscuous mode
[   53.472008][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.474376][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.476680][ T5847] bridge_slave_1: entered allmulticast mode
[   53.479835][ T5847] bridge_slave_1: entered promiscuous mode
[   53.490882][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.493109][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.501473][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.506629][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.523906][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.526568][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.536059][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.549841][ T5837] team0: Port device team_slave_0 added
[   53.563881][ T5837] team0: Port device team_slave_1 added
[   53.581868][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.600080][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.605947][ T5842] hsr_slave_0: entered promiscuous mode
[   53.609011][ T5842] hsr_slave_1: entered promiscuous mode
[   53.612057][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.614641][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.624061][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.641952][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.644254][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.652946][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.663041][ T5847] team0: Port device team_slave_0 added
[   53.677922][ T5847] team0: Port device team_slave_1 added
[   53.706959][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.709565][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.717865][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.733557][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.735829][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.744924][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.763090][ T5837] hsr_slave_0: entered promiscuous mode
[   53.765781][ T5837] hsr_slave_1: entered promiscuous mode
[   53.767937][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.770707][ T5837] Cannot create hsr debugfs directory
[   53.836394][ T5847] hsr_slave_0: entered promiscuous mode
[   53.839660][ T5847] hsr_slave_1: entered promiscuous mode
[   53.841790][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.844310][ T5847] Cannot create hsr debugfs directory
[   53.952799][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.964368][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.970143][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.993869][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.037278][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.045506][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.061545][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.067945][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.083626][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.086170][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.088915][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.091217][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.122196][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.124649][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.127178][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.129659][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.134553][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.139327][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.146719][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.152834][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.169277][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.173185][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.176470][ T1027] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.181047][ T1027] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.238126][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.282620][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   54.290486][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.306235][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.308792][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.314087][ T1027] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.316393][ T1027] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.322228][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.337094][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   54.348075][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.352171][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.369356][ T1027] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.371790][ T1027] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.377048][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   54.391964][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.394551][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.406206][ T5837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.410479][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.420933][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.423574][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.438852][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.441319][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.502372][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.530842][ T5842] veth0_vlan: entered promiscuous mode
[   54.537285][ T5842] veth1_vlan: entered promiscuous mode
[   54.549840][ T5842] veth0_macvtap: entered promiscuous mode
[   54.556678][ T5842] veth1_macvtap: entered promiscuous mode
[   54.568127][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.576934][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.583491][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.588456][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.591668][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.594573][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.597644][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.631347][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.660678][ T5837] veth0_vlan: entered promiscuous mode
[   54.677958][ T5837] veth1_vlan: entered promiscuous mode
[   54.691560][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.694447][ T5847] veth0_vlan: entered promiscuous mode
[   54.702340][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.704849][ T5847] veth1_vlan: entered promiscuous mode
[   54.723180][ T5837] veth0_macvtap: entered promiscuous mode
[   54.734497][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.735448][ T5837] veth1_macvtap: entered promiscuous mode
[   54.739588][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.757602][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.763261][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.766639][ T5847] veth0_macvtap: entered promiscuous mode
[   54.773853][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.776811][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.786137][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.791207][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.794037][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.801574][ T5847] veth1_macvtap: entered promiscuous mode
[   54.840694][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.852106][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.870453][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.873518][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.876399][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.880001][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.885504][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.888091][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.957534][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.962820][ T1027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.965728][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.968721][ T1027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.971593][ T5840] Bluetooth: hci1: command tx timeout
[   54.971675][ T5850] Bluetooth: hci0: command tx timeout
[   54.973608][ T5218] Bluetooth: hci2: command tx timeout
[   54.992267][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.994895][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.049302][ T5913] netlink: 'syz.2.4': attribute type 1 has an invalid length.
[   55.104174][ T5913] vlan2: entered allmulticast mode
[   55.105155][ T5917] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.106547][ T5913] erspan0: entered allmulticast mode
[   55.132155][ T5916] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   55.197779][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   55.206599][ T5920] openvswitch: netlink: nsh attr 4 is out of range max 3
[   55.209317][ T5920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.283956][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'.
[   55.321413][ T5922] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   55.325676][ T5922] team0: Device ipvlan2 is already an upper device of the team interface
[   55.345362][ T5928] atomic_op ffff88801fa1c198 conn xmit_atomic 0000000000000000
[   55.353430][ T5918] Zero length message leads to an empty skb
[   55.484305][ T5931] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6'.
[   55.812570][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   55.929930][ T5949] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12'.
[   56.032521][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.042941][ T5955] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   56.045540][ T5955] team0: Device ipvlan2 is already an upper device of the team interface
[   56.087456][ T5956] atomic_op ffff888119ee3198 conn xmit_atomic 0000000000000000
[   56.206459][ T5967] netlink: 'syz.0.18': attribute type 1 has an invalid length.
[   56.209980][ T5966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19'.
[   56.229838][ T5967] 8021q: VLANs not supported on vxcan0
[   56.246658][ T5969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20'.
[   57.049312][ T5218] Bluetooth: hci0: command tx timeout
[   57.057426][ T5850] Bluetooth: hci1: command tx timeout
[   57.059495][ T5218] Bluetooth: hci2: command tx timeout
[   58.317122][ T5972] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   58.354376][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   58.377398][ T5977] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   58.384511][ T5977] team0: Device ipvlan2 is already an upper device of the team interface
[   58.428184][ T5982] atomic_op ffff888119759998 conn xmit_atomic 0000000000000000
[   58.487771][ T5987] openvswitch: netlink: nsh attr 4 is out of range max 3
[   58.491477][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.583395][ T5994] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   58.602012][ T5994] xt_l2tp: v2 tid > 0xffff: 4294967295
[   58.961121][ T6009] sctp: [Deprecated]: syz.1.34 (pid 6009) Use of int in max_burst socket option.
[   58.961121][ T6009] Use struct sctp_assoc_value instead
[   59.129248][ T5850] Bluetooth: hci1: command tx timeout
[   59.129304][ T5840] Bluetooth: hci0: command tx timeout
[   59.131028][ T5218] Bluetooth: hci2: command tx timeout
[   59.612267][ T6012] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   59.614786][ T6011] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   59.620197][ T6011] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   59.623976][ T6011] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   59.627205][ T6011] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   59.675788][ T6018] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   59.686439][ T6018] syzkaller1: entered promiscuous mode
[   59.690052][ T6018] syzkaller1: entered allmulticast mode
[   59.818781][ T6024] IPv6: addrconf: prefix option has invalid lifetime
[   60.004254][ T6038] netlink: 'syz.1.45': attribute type 6 has an invalid length.
[   60.017092][ T6038] netlink: 'syz.1.45': attribute type 7 has an invalid length.
[   60.020175][ T6038] netlink: 'syz.1.45': attribute type 8 has an invalid length.
[   60.143479][ T6048] warning: `syz.1.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.360771][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   61.186714][ T6080] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   61.190040][ T6080] __nla_validate_parse: 5 callbacks suppressed
[   61.190052][ T6080] netlink: 224 bytes leftover after parsing attributes in process `syz.0.58'.
[   61.208329][ T5218] Bluetooth: hci0: command tx timeout
[   61.218406][ T5218] Bluetooth: hci2: command tx timeout
[   61.220093][ T5840] Bluetooth: hci1: command tx timeout
[   61.234972][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'.
[   61.354665][ T6090] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   61.358081][ T6090] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   61.361387][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.374375][ T6090] tipc: Started in network mode
[   61.376125][ T6090] tipc: Node identity f2ad6c7e4003, cluster identity 4711
[   61.381643][ T6090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.386366][ T6090] syzkaller0: entered promiscuous mode
[   61.388374][ T6090] syzkaller0: entered allmulticast mode
[   61.395980][ T6090] tipc: Resetting bearer <eth:syzkaller0>
[   61.408621][ T6089] tipc: Resetting bearer <eth:syzkaller0>
[   61.414517][ T6089] tipc: Disabling bearer <eth:syzkaller0>
[   61.603279][ T6111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'.
[   61.613600][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   61.616380][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'.
[   61.642651][ T6117] macvlan2: entered allmulticast mode
[   61.650397][ T6117] veth1_vlan: entered allmulticast mode
[   61.655786][ T6117] team0: Port device macvlan2 added
[   61.671489][ T6120] xt_TPROXY: Can be used only with -p tcp or -p udp
[   61.772160][ T6123] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   61.775160][ T5871] IPVS: starting estimator thread 0...
[   61.834082][ T6133] xt_TCPMSS: Only works on TCP SYN packets
[   61.836741][ T6133] xt_bpf: check failed: parse error
[   61.858514][ T6127] IPVS: using max 44 ests per chain, 105600 per kthread
[   62.418551][ T6106] syz.0.66 (6106) used greatest stack depth: 19576 bytes left
[   62.436791][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.440002][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.475189][ T6141] netlink: 'syz.1.75': attribute type 8 has an invalid length.
[   62.513433][ T6146] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.74'.
[   62.685996][ T6153] netlink: 'syz.2.82': attribute type 11 has an invalid length.
[   62.774593][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'.
[   62.829140][ T6157] team0 (unregistering): Port device team_slave_0 removed
[   62.834652][ T6157] team0 (unregistering): Port device team_slave_1 removed
[   62.997069][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.000584][ T6161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.86'.
[   63.177053][ T6174] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   63.180712][ T6174] netlink: 'syz.2.90': attribute type 2 has an invalid length.
[   63.184377][ T6175] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   63.186889][ T6175] netlink: 'syz.2.90': attribute type 2 has an invalid length.
[   63.257940][ T6182] netlink: 104 bytes leftover after parsing attributes in process `syz.2.92'.
[   63.426163][ T6192] xt_l2tp: invalid flags combination: c
[   63.642948][ T6202] gretap0: entered promiscuous mode
[   63.647169][ T6202] batman_adv: batadv0: Adding interface: macvlan3
[   63.650386][ T6202] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.661168][ T6202] batman_adv: batadv0: Interface activated: macvlan3
[   63.782553][ T6209] vlan2: entered allmulticast mode
[   63.865147][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.868397][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.871070][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.873688][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.876787][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.879441][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.882065][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.884927][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   63.887573][ T6211] ICMPv6: RA: ndisc_router_discovery failed to add default route
[   64.400539][ T6241] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   64.638134][ T6263] sctp: [Deprecated]: syz.2.120 (pid 6263) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.638134][ T6263] Use struct sctp_sack_info instead
[   64.644977][ T6263] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.714734][ T6264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.175163][ T6300] Bluetooth: MGMT ver 1.23
[   65.245977][ T6300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.282387][ T6303] tipc: Failed to obtain node identity
[   65.285322][ T6303] tipc: Enabling of bearer <ib:syz_tun> rejected, failed to enable media
[   65.333804][ T6300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.405497][ T6300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.475619][ T6300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.483302][ T6305] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[   65.540927][ T6300] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.557271][ T6300] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.572765][ T6300] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.576215][ T6308] veth1_to_team: entered allmulticast mode
[   65.594958][ T6300] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.771640][   T33] audit: type=1800 audit(1752784146.758:2): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.135" name="memory.events" dev="tmpfs" ino=258 res=0 errno=0
[   65.793198][ T6318] xt_hashlimit: size too large, truncated to 1048576
[   65.802814][ T6318] syz.0.136: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   65.814423][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz.0.136 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   65.814436][ T6318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   65.814440][ T6318] Call Trace:
[   65.814443][ T6318]  <TASK>
[   65.814447][ T6318]  dump_stack_lvl+0x189/0x250
[   65.814461][ T6318]  ? __pfx_dump_stack_lvl+0x10/0x10
[   65.814470][ T6318]  ? __pfx__printk+0x10/0x10
[   65.814480][ T6318]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   65.814490][ T6318]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   65.814500][ T6318]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   65.814510][ T6318]  warn_alloc+0x214/0x310
[   65.814520][ T6318]  ? __pfx_warn_alloc+0x10/0x10
[   65.814530][ T6318]  ? __get_vm_area_node+0x28f/0x300
[   65.814541][ T6318]  ? htable_create+0xfc/0x7a0
[   65.814550][ T6318]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   65.814572][ T6318]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   65.814586][ T6318]  ? rcu_is_watching+0x15/0xb0
[   65.814596][ T6318]  ? htable_create+0xfc/0x7a0
[   65.814602][ T6318]  ? htable_create+0xfc/0x7a0
[   65.814607][ T6318]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   65.814618][ T6318]  ? htable_create+0xfc/0x7a0
[   65.814624][ T6318]  ? hashlimit_pernet+0x23/0x240
[   65.814633][ T6318]  htable_create+0xfc/0x7a0
[   65.814643][ T6318]  hashlimit_mt_check_common+0x719/0xa10
[   65.814654][ T6318]  xt_check_match+0x3d1/0xab0
[   65.814665][ T6318]  ? __pfx___mutex_lock+0x10/0x10
[   65.814674][ T6318]  ? __pfx_xt_check_match+0x10/0x10
[   65.814686][ T6318]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   65.814701][ T6318]  ? xt_find_match+0x1f7/0x250
[   65.814714][ T6318]  translate_table+0x1553/0x2040
[   65.814733][ T6318]  ? __pfx_translate_table+0x10/0x10
[   65.814744][ T6318]  ? __might_fault+0xb0/0x130
[   65.814766][ T6318]  ? _copy_from_user+0x94/0xb0
[   65.814785][ T6318]  do_ip6t_set_ctl+0x970/0xce0
[   65.814804][ T6318]  ? rcu_is_watching+0x15/0xb0
[   65.814841][ T6318]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   65.814872][ T6318]  ? __pfx___mutex_lock+0x10/0x10
[   65.814885][ T6318]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   65.814904][ T6318]  ? __lock_acquire+0xab9/0xd20
[   65.814920][ T6318]  nf_setsockopt+0x26f/0x290
[   65.814941][ T6318]  rawv6_setsockopt+0x23b/0x5b0
[   65.814955][ T6318]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   65.814965][ T6318]  ? aa_sock_opt_perm+0x74/0x110
[   65.814975][ T6318]  ? sock_common_setsockopt+0x36/0xc0
[   65.814984][ T6318]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   65.814994][ T6318]  do_sock_setsockopt+0x17c/0x1b0
[   65.815006][ T6318]  __x64_sys_setsockopt+0x13f/0x1b0
[   65.815019][ T6318]  do_syscall_64+0xfa/0x3b0
[   65.815029][ T6318]  ? lockdep_hardirqs_on+0x9c/0x150
[   65.815036][ T6318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.815043][ T6318]  ? exc_page_fault+0x9f/0xf0
[   65.815051][ T6318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.815058][ T6318] RIP: 0033:0x7fb78078e929
[   65.815066][ T6318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   65.815072][ T6318] RSP: 002b:00007fb78153b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   65.815081][ T6318] RAX: ffffffffffffffda RBX: 00007fb7809b5fa0 RCX: 00007fb78078e929
[   65.815086][ T6318] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[   65.815090][ T6318] RBP: 00007fb780810ca1 R08: 00000000000005c0 R09: 0000000000000000
[   65.815094][ T6318] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[   65.815098][ T6318] R13: 0000000000000000 R14: 00007fb7809b5fa0 R15: 00007ffefae43cb8
[   65.815109][ T6318]  </TASK>
[   65.815113][ T6318] Mem-Info:
[   65.945078][ T6318] active_anon:5659 inactive_anon:0 isolated_anon:0
[   65.945078][ T6318]  active_file:1034 inactive_file:38207 isolated_file:0
[   65.945078][ T6318]  unevictable:1768 dirty:1517 writeback:0
[   65.945078][ T6318]  slab_reclaimable:9168 slab_unreclaimable:53487
[   65.945078][ T6318]  mapped:18151 shmem:2441 pagetables:907
[   65.945078][ T6318]  sec_pagetables:0 bounce:0
[   65.945078][ T6318]  kernel_misc_reclaimable:0
[   65.945078][ T6318]  free:301346 free_pcp:18869 free_cma:0
[   65.967290][ T6318] Node 0 active_anon:15412kB inactive_anon:0kB active_file:3184kB inactive_file:146828kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48608kB dirty:4064kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5984kB pagetables:2176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   65.979809][ T6318] Node 1 active_anon:7088kB inactive_anon:0kB active_file:952kB inactive_file:6000kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23860kB dirty:2004kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5544kB pagetables:1452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   65.991508][ T6318] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.003643][ T6318] lowmem_reserve[]: 0 812 812 812 812
[   66.005567][ T6318] Node 0 DMA32 free:271872kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15548kB inactive_anon:0kB active_file:3184kB inactive_file:146828kB unevictable:3536kB writepending:4064kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:45036kB local_pcp:16592kB free_cma:0kB
[   66.016434][ T6318] lowmem_reserve[]: 0 0 0 0 0
[   66.018812][ T6318] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.029545][ T6318] lowmem_reserve[]: 0 0 854 854 854
[   66.031641][ T6318] Node 1 Normal free:459072kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7088kB inactive_anon:0kB active_file:952kB inactive_file:6000kB unevictable:3536kB writepending:2004kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:31192kB local_pcp:15860kB free_cma:0kB
[   66.055693][ T6318] lowmem_reserve[]: 0 0 0 0 0
[   66.057769][ T6318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   66.062792][ T6318] Node 0 DMA32: 836*4kB (UME) 425*8kB (UM) 278*16kB (UME) 47*32kB (UM) 33*64kB (UME) 17*128kB (UM) 7*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 59*4096kB (M) = 270680kB
[   66.076342][ T6318] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   66.088322][ T6318] Node 1 Normal: 223*4kB (UME) 74*8kB (UM) 136*16kB (UME) 272*32kB (UME) 54*64kB (UME) 25*128kB (UM) 7*256kB (UM) 4*512kB (ME) 4*1024kB (UM) 3*2048kB (UME) 104*4096kB (M) = 459084kB
[   66.097091][ T6318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.103276][ T6318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.106350][ T6318] 41682 total pagecache pages
[   66.108036][ T6318] 0 pages in swap cache
[   66.110847][ T6318] Free swap  = 124996kB
[   66.112328][ T6318] Total swap = 124996kB
[   66.114158][ T6318] 786301 pages RAM
[   66.115534][ T6318] 0 pages HighMem/MovableOnly
[   66.117124][ T6318] 241056 pages reserved
[   66.118808][ T6318] 0 pages cma reserved
[   66.162842][ T6339] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0
[   66.245442][ T6347] __nla_validate_parse: 15 callbacks suppressed
[   66.245457][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'.
[   66.257673][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.144'.
[   66.356262][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'.
[   66.427587][ T6360] nbd: must specify a size in bytes for the device
[   66.489704][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[   66.596573][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   66.637121][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   66.645091][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[   66.717662][ T6391] xt_CT: No such helper "snmp"
[   66.759451][ T6397] x_tables: duplicate underflow at hook 1
[   66.771935][ T6399] validate_nla: 4 callbacks suppressed
[   66.771946][ T6399] netlink: 'syz.1.163': attribute type 1 has an invalid length.
[   66.777052][ T6399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.163'.
[   66.781940][ T6401] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   66.782668][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   66.786375][ T6401] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   66.794167][ T6401] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   67.007397][ T6424] netlink: 'syz.0.167': attribute type 7 has an invalid length.
[   67.011935][ T6424] netlink: 'syz.0.167': attribute type 8 has an invalid length.
[   67.014794][ T6424] netlink: 'syz.0.167': attribute type 4 has an invalid length.
[   67.019416][ T6424] netlink: 204 bytes leftover after parsing attributes in process `syz.0.167'.
[   67.141900][ T6441] xt_SECMARK: invalid mode: 0
[   67.471002][ T6460] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   67.563889][ T6464] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   67.567433][ T6464] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   67.575526][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.589691][ T6464] batadv_slave_0: entered promiscuous mode
[   68.165261][ T6477] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   68.167783][ T6477] netlink: 'syz.1.183': attribute type 3 has an invalid length.
[   68.489932][ T6513] veth6: entered allmulticast mode
[   68.494858][ T6513] veth7: entered promiscuous mode
[   69.558000][ T6570] vxcan3: entered allmulticast mode
[   69.575858][ T6576] net_ratelimit: 50 callbacks suppressed
[   69.575869][ T6576] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   69.600561][ T6579] netem: unknown loss type 13
[   69.602390][ T6579] netem: change failed
[   69.710004][ T6577] Illegal XDP return value 4294967274 on prog  (id 55) dev N/A, expect packet loss!
[   70.894589][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.974936][ T6652] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   71.267496][ T6683] __nla_validate_parse: 21 callbacks suppressed
[   71.267514][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   71.291779][ T6683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.544627][ T6723] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   71.555532][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'.
[   71.580154][ T6723] netlink: 'syz.0.260': attribute type 5 has an invalid length.
[   71.653047][ T6734] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   71.657731][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'.
[   71.672706][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.264'.
[   71.700888][ T6742] netlink: del zone limit has 4 unknown bytes
[   71.735411][ T6744] ieee802154 phy0 wpan0: encryption failed: -22
[   71.735650][ T6746] netlink: 'syz.0.269': attribute type 7 has an invalid length.
[   71.745589][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   71.749327][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'.
[   71.779058][ T6736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.782347][ T6736] IPv6: NLM_F_CREATE should be set when creating new route
[   71.785258][ T6736] IPv6: NLM_F_CREATE should be set when creating new route
[   71.815236][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.271'.
[   71.819474][ T6750] netlink: 260 bytes leftover after parsing attributes in process `syz.0.271'.
[   71.866316][ T6756] bridge0: entered allmulticast mode
[   71.910105][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.927669][ T6753] bond_slave_0: entered promiscuous mode
[   71.929891][ T6753] bond_slave_1: entered promiscuous mode
[   71.935650][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.0.275'.
[   71.936360][ T6753] 8021q: adding VLAN 0 to HW filter on device macvlan4
[   71.944744][ T6753] bond1: (slave macvlan4): Enslaving as a backup interface with an up link
[   71.957710][ T6753] bridge_slave_0: left promiscuous mode
[   71.960201][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.965704][ T6753] bridge_slave_1: left allmulticast mode
[   71.968084][ T6753] bridge_slave_1: left promiscuous mode
[   71.972230][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.982889][ T6753] bond0: (slave bond_slave_0): Releasing backup interface
[   71.986627][ T6753] bond_slave_0: left promiscuous mode
[   71.992586][ T6753] bond0: (slave bond_slave_1): Releasing backup interface
[   71.996183][ T6771] netlink: 104 bytes leftover after parsing attributes in process `syz.2.278'.
[   71.997322][ T6753] bond_slave_1: left promiscuous mode
[   72.014062][ T6753] team0: Port device team_slave_0 removed
[   72.020777][ T6753] team0: Port device team_slave_1 removed
[   72.023890][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.026983][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.033177][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.035898][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.045072][ T6753] veth1_vlan: left allmulticast mode
[   72.049758][ T6753] team0: Port device macvlan2 removed
[   72.051745][ T6753] batman_adv: batadv0: Interface deactivated: macvlan3
[   72.054114][ T6753] batman_adv: batadv0: Removing interface: macvlan3
[   72.057986][ T6753] bond1: (slave macvlan4): Removing an active aggregator
[   72.061719][ T6753] bond1: (slave macvlan4): Releasing backup interface
[   72.233200][ T6789] unsupported nlmsg_type 40
[   72.303124][ T6796] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   72.382673][ T6803] gretap1: entered promiscuous mode
[   72.465230][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.475460][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.488760][   T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.758930][   T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.928676][   T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.935746][ T6841] netlink: 'syz.0.298': attribute type 83 has an invalid length.
[   73.270250][ T6857] xt_l2tp: invalid flags combination: c
[   73.375643][ T6861] batadv_slave_1: entered promiscuous mode
[   73.379367][ T6861] batadv_slave_1: left promiscuous mode
[   73.408045][ T6863] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   73.638735][ T6872] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   73.641680][ T6872] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   73.653609][ T6872] syz.1.310 (6872) used greatest stack depth: 19384 bytes left
[   73.795622][ T6893] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.798420][ T6893] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.855821][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.862912][ T6893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.866855][ T6900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.866911][ T6901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.921975][ T6900] xt_hashlimit: size too large, truncated to 1048576
[   73.944652][ T6893] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.947899][ T6893] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.952471][ T6893] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.955229][ T6893] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.135313][ T6918] netlink: 'syz.1.320': attribute type 4 has an invalid length.
[   74.145445][ T6918] netlink: 'syz.1.320': attribute type 4 has an invalid length.
[   74.254710][ T6922] bond2: entered promiscuous mode
[   74.258548][ T6922] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.504265][ T6942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.508414][ T6942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.580035][ T6942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.584486][ T6942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.631617][ T6942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.635051][ T6942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.686120][ T6942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.690244][ T6942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   74.750262][ T6942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   74.753066][ T6942] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   74.765147][ T6942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   74.768038][ T6942] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   74.776347][ T6951] ip6erspan1: entered allmulticast mode
[   74.785540][ T6942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   74.789226][ T6942] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   74.798109][ T6942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   74.801046][ T6942] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   74.923621][ T6966] veth0: entered promiscuous mode
[   74.972744][ T6967] veth0: left promiscuous mode
[   75.099082][ T6985] netlink: 'syz.0.343': attribute type 6 has an invalid length.
[   75.260495][ T7004] syzkaller1: entered promiscuous mode
[   75.262505][ T7004] syzkaller1: entered allmulticast mode
[   76.225874][ T7045] af_packet: tpacket_rcv: packet too big, clamped from 584 to 4294967272. macoff=96
[   76.354921][ T7055] syzkaller0: entered promiscuous mode
[   76.356788][ T7055] syzkaller0: entered allmulticast mode
[   76.728440][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   77.242228][ T7093] netlink: 'syz.1.375': attribute type 29 has an invalid length.
[   77.545378][ T7115] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   77.574821][   T33] audit: type=1804 audit(1752784158.568:3): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.383" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=680 res=1 errno=0
[   77.582911][ T7117] __nla_validate_parse: 20 callbacks suppressed
[   77.582924][ T7117] netlink: 120 bytes leftover after parsing attributes in process `syz.2.383'.
[   77.592477][   T33] audit: type=1800 audit(1752784158.568:4): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.383" name="cgroup.controllers" dev="tmpfs" ino=680 res=0 errno=0
[   77.602540][ T7119] vxcan1: entered allmulticast mode
[   77.623938][ T7121] netlink: 'syz.2.384': attribute type 1 has an invalid length.
[   77.626448][ T7121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.384'.
[   77.662208][ T7124] netlink: 172 bytes leftover after parsing attributes in process `syz.2.385'.
[   77.687547][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'.
[   77.691163][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'.
[   77.695004][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'.
[   77.767363][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   77.990816][ T7155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.393'.
[   77.993214][ T7156] tipc: Can't bind to reserved service type 0
[   77.993878][ T7153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.001000][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'.
[   78.154482][ T7163] pimreg: entered allmulticast mode
[   78.165565][ T7163] pimreg: left allmulticast mode
[   78.263499][ T7172] xt_TPROXY: Can be used only with -p tcp or -p udp
[   79.581440][ T7212] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[   80.107376][ T7224] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   80.173771][ T7226] IPv6: Can't replace route, no match found
[   80.461456][ T7241] nbd: must specify a size in bytes for the device
[   80.514186][ T7248] batadv1: entered promiscuous mode
[   80.515978][ T7248] batadv1: entered allmulticast mode
[   80.640163][ T7263] net veth1_virt_wifi : renamed from virt_wifi0
[   80.693670][ T7271] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   80.706355][ T7273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   81.132848][ T1277] cfg80211: failed to load regulatory.db
[   81.561853][ T7310] IPVS: set_ctl: invalid protocol: 135 172.30.0.3:20003
[   81.565266][ T7310] x_tables: duplicate underflow at hook 1
[   81.803947][ T7317] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.808920][ T7317] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.872028][ T7317] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.876268][ T7317] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.923699][ T7317] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   81.927830][ T7317] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   82.011626][ T7317] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   82.015128][ T7317] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   82.115452][ T7327] bridge0: entered promiscuous mode
[   82.135207][ T7317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   82.139012][ T7317] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   82.144023][ T7325] bridge0: left promiscuous mode
[   82.151215][ T7317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   82.154408][ T7317] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   82.164285][ T7317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   82.167257][ T7317] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   82.179812][ T7317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   82.183446][ T7317] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   82.217754][ T7329] nbd: must specify a size in bytes for the device
[   82.551598][ T7370] netlink: 'syz.0.454': attribute type 2 has an invalid length.
[   82.554427][ T7370] netlink: 'syz.0.454': attribute type 8 has an invalid length.
[   82.606013][ T7379] netlink: 'syz.0.456': attribute type 26 has an invalid length.
[   82.740778][ T7392] gre1: entered promiscuous mode
[   82.776417][ T7395] __nla_validate_parse: 19 callbacks suppressed
[   82.776427][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'.
[   83.134325][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'.
[   83.184938][ T7443] xt_hashlimit: size too large, truncated to 1048576
[   83.187428][ T7443] xt_hashlimit: max too large, truncated to 1048576
[   83.201757][ T7443] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   83.580329][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'.
[   83.877703][ T7460] netlink: 'syz.1.483': attribute type 1 has an invalid length.
[   83.881437][ T7460] netlink: 'syz.1.483': attribute type 3 has an invalid length.
[   83.884922][ T7460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.483'.
[   84.164466][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'.
[   84.168362][ T7482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'.
[   84.211457][ T7484] xt_hashlimit: size too large, truncated to 1048576
[   84.382182][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'.
[   84.412349][ T7499] x9: renamed from bridge_slave_0
[   84.601179][ T7520] netlink: 88 bytes leftover after parsing attributes in process `syz.2.501'.
[   84.626216][ T7522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.502'.
[   84.671381][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'.
[   84.978401][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   85.002678][ T7555] bridge0: entered promiscuous mode
[   85.004952][ T7555] macsec1: entered promiscuous mode
[   85.007556][ T7555] bridge0: port 3(macsec1) entered blocking state
[   85.010872][ T7555] bridge0: port 3(macsec1) entered disabled state
[   85.013668][ T7555] macsec1: entered allmulticast mode
[   85.016909][ T7555] macsec1: left allmulticast mode
[   85.020312][ T7555] bridge0: left promiscuous mode
[   85.371567][ T7593] can: request_module (can-proto-0) failed.
[   85.384234][   T10] IPVS: starting estimator thread 0...
[   85.479420][ T7603] IPVS: using max 45 ests per chain, 108000 per kthread
[   85.635877][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.639144][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.671984][ T7625] bond0: entered promiscuous mode
[   85.674249][ T7625] bond_slave_0: entered promiscuous mode
[   85.676813][ T7625] bond_slave_1: entered promiscuous mode
[   85.809917][ T7637] netlink: 'syz.0.545': attribute type 1 has an invalid length.
[   85.952263][ T7652] syzkaller0: entered promiscuous mode
[   85.954255][ T7652] syzkaller0: entered allmulticast mode
[   86.127356][ T7666] openvswitch: netlink: IPv4 tunnel dst address is zero
[   86.311281][ T7672] ------------[ cut here ]------------
[   86.313870][ T7672] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[   86.327208][ T7672] WARNING: CPU: 1 PID: 7672 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.332935][ T7672] Modules linked in:
[   86.335758][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.0.552 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   86.341647][ T7672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.345966][ T7672] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.348958][ T7672] Code: 71 17 00 00 48 c7 c7 c0 ac 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 e0 9c 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd b2 cd fa 90 0f 0b 90 e9 fe fe ff
[   86.357101][ T7672] RSP: 0018:ffffc9000621efd0 EFLAGS: 00010282
[   86.360253][ T7672] RAX: e3799b68470acb00 RBX: 0000000000000014 RCX: 0000000000080000
[   86.363428][ T7672] RDX: ffffc900033d1000 RSI: 00000000000019f1 RDI: 00000000000019f2
[   86.366605][ T7672] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[   86.369385][ T7672] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 0000000000000000
[   86.372038][ T7672] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[   86.375049][ T7672] FS:  00007fb78153b6c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[   86.377988][ T7672] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.380217][ T7672] CR2: 0000001b30c1fffc CR3: 0000000111340000 CR4: 00000000000006f0
[   86.382906][ T7672] Call Trace:
[   86.384407][ T7672]  <TASK>
[   86.385645][ T7672]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[   86.388322][ T7672]  mac80211_hwsim_sta_add+0xa3/0x310
[   86.390747][ T7672]  drv_sta_state+0x8c1/0x1840
[   86.392864][ T7672]  sta_info_insert_rcu+0xd32/0x1940
[   86.395035][ T7672]  ? sta_info_insert_rcu+0x2ce/0x1940
[   86.397351][ T7672]  sta_info_insert+0x16/0xc0
[   86.399160][ T7672]  rdev_add_station+0x108/0x290
[   86.400872][ T7672]  nl80211_new_station+0x1723/0x1b40
[   86.402832][ T7672]  ? __pfx_nl80211_new_station+0x10/0x10
[   86.405044][ T7672]  ? netdev_run_todo+0xe1d/0xea0
[   86.407172][ T7672]  ? nl80211_pre_doit+0x4f1/0x930
[   86.409480][ T7672]  genl_family_rcv_msg_doit+0x215/0x300
[   86.411858][ T7672]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   86.414210][ T7672]  ? bpf_lsm_capable+0x9/0x20
[   86.416000][ T7672]  ? security_capable+0x7e/0x2e0
[   86.417570][ T7672]  genl_rcv_msg+0x60e/0x790
[   86.419204][ T7672]  ? __pfx_genl_rcv_msg+0x10/0x10
[   86.421075][ T7672]  ? ref_tracker_free+0x63a/0x7d0
[   86.422783][ T7672]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   86.424914][ T7672]  ? __pfx_nl80211_new_station+0x10/0x10
[   86.426793][ T7672]  ? __pfx_nl80211_post_doit+0x10/0x10
[   86.428888][ T7672]  ? __pfx_ref_tracker_free+0x10/0x10
[   86.430702][ T7672]  netlink_rcv_skb+0x208/0x470
[   86.432370][ T7672]  ? __pfx_genl_rcv_msg+0x10/0x10
[   86.434421][ T7672]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   86.436318][ T7672]  ? down_read+0x1ad/0x2e0
[   86.437843][ T7672]  genl_rcv+0x28/0x40
[   86.439299][ T7672]  netlink_unicast+0x75c/0x8e0
[   86.440848][ T7672]  netlink_sendmsg+0x805/0xb30
[   86.442401][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.444240][ T7672]  ? aa_sock_msg_perm+0x94/0x160
[   86.445924][ T7672]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   86.447647][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.449501][ T7672]  __sock_sendmsg+0x21c/0x270
[   86.451084][ T7672]  ____sys_sendmsg+0x505/0x830
[   86.452743][ T7672]  ? __pfx_____sys_sendmsg+0x10/0x10
[   86.455010][ T7672]  ? import_iovec+0x74/0xa0
[   86.456531][ T7672]  ___sys_sendmsg+0x21f/0x2a0
[   86.458077][ T7672]  ? __pfx____sys_sendmsg+0x10/0x10
[   86.459954][ T7672]  ? __fget_files+0x2a/0x420
[   86.461510][ T7672]  ? __fget_files+0x3a0/0x420
[   86.463170][ T7672]  __x64_sys_sendmsg+0x19b/0x260
[   86.464969][ T7672]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   86.467395][ T7672]  ? rcu_is_watching+0x15/0xb0
[   86.469583][ T7672]  ? do_syscall_64+0xbe/0x3b0
[   86.471590][ T7672]  do_syscall_64+0xfa/0x3b0
[   86.473563][ T7672]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.475856][ T7672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.478553][ T7672]  ? exc_page_fault+0x9f/0xf0
[   86.480316][ T7672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.482255][ T7672] RIP: 0033:0x7fb78078e929
[   86.483798][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.490124][ T7672] RSP: 002b:00007fb78153b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.493259][ T7672] RAX: ffffffffffffffda RBX: 00007fb7809b5fa0 RCX: 00007fb78078e929
[   86.496434][ T7672] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[   86.499459][ T7672] RBP: 00007fb780810ca1 R08: 0000000000000000 R09: 0000000000000000
[   86.502176][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.504811][ T7672] R13: 0000000000000000 R14: 00007fb7809b5fa0 R15: 00007ffefae43cb8
[   86.507393][ T7672]  </TASK>
[   86.508811][ T7672] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   86.511186][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.0.552 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   86.515243][ T7672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.518644][ T7672] Call Trace:
[   86.519818][ T7672]  <TASK>
[   86.521204][ T7672]  dump_stack_lvl+0x99/0x250
[   86.523182][ T7672]  ? __asan_memcpy+0x40/0x70
[   86.525220][ T7672]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.527420][ T7672]  ? __pfx__printk+0x10/0x10
[   86.529468][ T7672]  panic+0x2db/0x790
[   86.531135][ T7672]  ? __pfx_panic+0x10/0x10
[   86.533069][ T7672]  __warn+0x31b/0x4b0
[   86.534635][ T7672]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.536663][ T7672]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.538613][ T7672]  report_bug+0x2be/0x4f0
[   86.540049][ T7672]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.541977][ T7672]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.544056][ T7672]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[   86.546027][ T7672]  handle_bug+0x84/0x160
[   86.547442][ T7672]  exc_invalid_op+0x1a/0x50
[   86.548941][ T7672]  asm_exc_invalid_op+0x1a/0x20
[   86.550546][ T7672] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   86.552759][ T7672] Code: 71 17 00 00 48 c7 c7 c0 ac 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 e0 9c 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd b2 cd fa 90 0f 0b 90 e9 fe fe ff
[   86.560782][ T7672] RSP: 0018:ffffc9000621efd0 EFLAGS: 00010282
[   86.562991][ T7672] RAX: e3799b68470acb00 RBX: 0000000000000014 RCX: 0000000000080000
[   86.566046][ T7672] RDX: ffffc900033d1000 RSI: 00000000000019f1 RDI: 00000000000019f2
[   86.568736][ T7672] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[   86.571472][ T7672] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 0000000000000000
[   86.574523][ T7672] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[   86.577838][ T7672]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[   86.580393][ T7672]  mac80211_hwsim_sta_add+0xa3/0x310
[   86.582672][ T7672]  drv_sta_state+0x8c1/0x1840
[   86.584442][ T7672]  sta_info_insert_rcu+0xd32/0x1940
[   86.586410][ T7672]  ? sta_info_insert_rcu+0x2ce/0x1940
[   86.588261][ T7672]  sta_info_insert+0x16/0xc0
[   86.589822][ T7672]  rdev_add_station+0x108/0x290
[   86.591446][ T7672]  nl80211_new_station+0x1723/0x1b40
[   86.593279][ T7672]  ? __pfx_nl80211_new_station+0x10/0x10
[   86.595630][ T7672]  ? netdev_run_todo+0xe1d/0xea0
[   86.597821][ T7672]  ? nl80211_pre_doit+0x4f1/0x930
[   86.599962][ T7672]  genl_family_rcv_msg_doit+0x215/0x300
[   86.602280][ T7672]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   86.604700][ T7672]  ? bpf_lsm_capable+0x9/0x20
[   86.606283][ T7672]  ? security_capable+0x7e/0x2e0
[   86.607907][ T7672]  genl_rcv_msg+0x60e/0x790
[   86.609414][ T7672]  ? __pfx_genl_rcv_msg+0x10/0x10
[   86.611127][ T7672]  ? ref_tracker_free+0x63a/0x7d0
[   86.612830][ T7672]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   86.614970][ T7672]  ? __pfx_nl80211_new_station+0x10/0x10
[   86.616931][ T7672]  ? __pfx_nl80211_post_doit+0x10/0x10
[   86.618829][ T7672]  ? __pfx_ref_tracker_free+0x10/0x10
[   86.620679][ T7672]  netlink_rcv_skb+0x208/0x470
[   86.622358][ T7672]  ? __pfx_genl_rcv_msg+0x10/0x10
[   86.624347][ T7672]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   86.626683][ T7672]  ? down_read+0x1ad/0x2e0
[   86.628590][ T7672]  genl_rcv+0x28/0x40
[   86.630316][ T7672]  netlink_unicast+0x75c/0x8e0
[   86.632380][ T7672]  netlink_sendmsg+0x805/0xb30
[   86.634482][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.636799][ T7672]  ? aa_sock_msg_perm+0x94/0x160
[   86.638762][ T7672]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   86.641109][ T7672]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.643447][ T7672]  __sock_sendmsg+0x21c/0x270
[   86.645547][ T7672]  ____sys_sendmsg+0x505/0x830
[   86.647674][ T7672]  ? __pfx_____sys_sendmsg+0x10/0x10
[   86.650010][ T7672]  ? import_iovec+0x74/0xa0
[   86.651934][ T7672]  ___sys_sendmsg+0x21f/0x2a0
[   86.654007][ T7672]  ? __pfx____sys_sendmsg+0x10/0x10
[   86.656000][ T7672]  ? __fget_files+0x2a/0x420
[   86.657655][ T7672]  ? __fget_files+0x3a0/0x420
[   86.659308][ T7672]  __x64_sys_sendmsg+0x19b/0x260
[   86.660960][ T7672]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   86.662759][ T7672]  ? rcu_is_watching+0x15/0xb0
[   86.664785][ T7672]  ? do_syscall_64+0xbe/0x3b0
[   86.666843][ T7672]  do_syscall_64+0xfa/0x3b0
[   86.668892][ T7672]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.671192][ T7672]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.673830][ T7672]  ? exc_page_fault+0x9f/0xf0
[   86.675861][ T7672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.678471][ T7672] RIP: 0033:0x7fb78078e929
[   86.680431][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.688063][ T7672] RSP: 002b:00007fb78153b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.690947][ T7672] RAX: ffffffffffffffda RBX: 00007fb7809b5fa0 RCX: 00007fb78078e929
[   86.693776][ T7672] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[   86.696830][ T7672] RBP: 00007fb780810ca1 R08: 0000000000000000 R09: 0000000000000000
[   86.699496][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.702514][ T7672] R13: 0000000000000000 R14: 00007fb7809b5fa0 R15: 00007ffefae43cb8
[   86.705734][ T7672]  </TASK>
[   86.707903][ T7672] Kernel Offset: disabled
[   86.709831][ T7672] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:29:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81d5d6b1 RBX=0000000000000000 RCX=0000000000000002 RDX=ffff88803af59cc0
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900028ff300 RSP=ffffc900028fefc0
R8 =ffff88803af59cc7 R9 =1ffff110075eb398 R10=dffffc0000000000 R11=ffffed10075eb399
R12=ffff888021242b00 R13=dffffc0000000000 R14=ffff8880247b5ef0 R15=0000000000000000
RIP=ffffffff81d5d6b1 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcaa73666c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd751e2dfc8 CR3=0000000023f18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd751186478 00007fd751186450 XMM03=00007fd751186488 00007fd751186480
XMM04=00007fd751ced100 00007fd751186440 XMM05=00007fd751186458 00007fd7511864a0
XMM06=00007fd751186498 00007fd751186490 XMM07=00007fd751186488 00007fd751186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd751011df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000d923 RDI=000000000000d924 RBP=00000000000003f8 RSP=ffffc9000621e770
R8 =ffff888021b60237 R9 =1ffff1100436c046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee882 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb78153b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30c1fffc CR3=0000000111340000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb780811df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
