last executing test programs:

538.113713ms ago: executing program 2 (id=787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4ffcc)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4)

478.433765ms ago: executing program 0 (id=789):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async)

476.31832ms ago: executing program 2 (id=791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000003d0007010000000000000000037c000014003780100003007174722834a91973346900"], 0x28}}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000080))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r4, @ANYRES16=r2], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

418.429712ms ago: executing program 0 (id=792):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000c00144000000000000000000500130001"], 0x30}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x66aa}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x58}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000001c0)={r1, r0, 0x7, 0x2d, &(0x7f00000000c0)="966a0ead2fd019c709172286febf6f7ff093ac57b0da32dd1de49ace988609886028f235b6d26ec3e442868ec0", 0x7, 0x7f, 0x8f, 0x5, 0xb8, 0x3, 0x5, 'syz0\x00'})
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x400, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

358.334845ms ago: executing program 0 (id=793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmmsg(r3, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/235, 0xeb}, {&(0x7f0000000a40)=""/6, 0x6}, {&(0x7f0000000a80)=""/17, 0x11}], 0x3}, 0x8}], 0x1, 0x2000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000060000000090a0103fe00000000000008070000000800084000a105010900010073797a30000000001c0009801000028060b5e6940800014000000002080001405fffffff080005400000000408000a4000000000090002"], 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

357.663806ms ago: executing program 2 (id=794):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000080017004e244e2405001600e1000000"], 0x2c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"f6eb47463198b2c195353da882e4773c", 0x0, <r2=>0x0, {0x7, 0x1a4}, {0x200, 0x3}, 0x4, [0x1000, 0x8000000000000000, 0x1, 0x3, 0x800, 0x9, 0x2b, 0xfffffffffffffffc, 0x116c, 0x4, 0x81, 0x5, 0x100000000, 0xb1a, 0x80000001, 0x6]})
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000007c0)={0xf, 0x0, {0x102, @usage=0x6, <r3=>0x0, 0x6, 0x9, 0xe6a, 0x3, 0x385, 0x4, @usage=0xffffffffffffff91, 0xfffffff9, 0x7, [0x2ac, 0x7e, 0x9, 0x4, 0xd8, 0xc84a]}, {0x4, @usage=0x36c, 0x0, 0x6, 0x9, 0x9, 0x81, 0x7f, 0x10, @usage=0xc, 0xfffffffb, 0x2, [0x8, 0x10, 0x40, 0xec9, 0x2, 0x3]}, {0x2, @struct={0x5}, 0x0, 0xcae9, 0x2, 0x39, 0x8, 0x8, 0x11, @struct={0x4, 0x8}, 0x5, 0x0, [0x1, 0x1, 0x80000001, 0x1, 0x0, 0x2f]}, {0x5, 0x1, 0x2}})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000bc0)={{r1}, r2, 0x4, @unused=[0x9, 0x6, 0x2, 0x4], @devid=r3})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r4)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25050000000c0006000900000800000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x80)
r7 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r7, 0x61d8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={<r9=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={<r10=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001bc0)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c00)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x60, r6, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000640)={&(0x7f0000000540)=""/139, 0x8b})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r13 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x308, 0x238, 0x238, 0x308, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x2}, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x6], 0x0, [{0x0, 0x2}, {}, {0x0, 0x3}], 0x0, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x0, 0x1}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xffffff00], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x1, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r16=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r16, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)

279.866421ms ago: executing program 1 (id=796):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="110000000400000004000000ff00100004000000", @ANYRES32, @ANYBLOB="0000000000001b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffeb5, 0x10, &(0x7f00000001c0), &(0x7f0000001000), 0xfffffffffffffce5, 0xa0, 0x8, 0x0, 0x0}}, 0xffffffffffffff75)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232db0eb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x20040040)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x1c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)

230.432101ms ago: executing program 0 (id=797):
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000), 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x800000000000000}, 0x10000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000140)=0xfffffffffffffe9d)

229.542965ms ago: executing program 1 (id=798):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x401, 0x2, 0xd52]}, &(0x7f0000000080)=0x44)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x6, 0x4edb}], 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r2=>r0, 0xffffffffffffffff, 0xc, 0x1})
r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1404, 0x100, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x22004)
recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/77, 0x4d}], 0x2, &(0x7f00000003c0)=""/153, 0x99}}, {{&(0x7f0000000480)=@ax25={{0x3, @null}, [@netrom, @null, @rose, @netrom, @null, @null, @netrom, @default]}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/57, 0x39}, 0xffffffff}], 0x2, 0x0, &(0x7f0000001700)={0x77359400})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001740)={<r4=>r3})
recvfrom$inet(r4, &(0x7f0000001780)=""/253, 0xfd, 0x2001, &(0x7f0000001880)={0x2, 0x4e21, @remote}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001a00)={'batadv0\x00', <r5=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@ifindex=r5, 0x35, 0x1, 0x2, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001900)=[0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000001a40)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0xffffff88, 0x7, 0x8, 0x100, 0x1, 0x40300, r5})
r8 = socket$l2tp(0x2, 0x2, 0x73)
getpeername$l2tp(r8, &(0x7f0000001ac0)={0x2, 0x0, @local}, &(0x7f0000001b00)=0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)=@gettaction={0xbc, 0x32, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1dd}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbd}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
sendmsg$802154_raw(r3, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001cc0)="90473e3ffe78b52330df", 0xa}, 0x1, 0x0, 0x0, 0x24040895}, 0x20004001)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001dc0), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0xa0200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x18, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$packet(r2, &(0x7f0000001ec0)="0f59fbe15d4ac0baa39470befbe6e43ec4d7d59fe68829913de2d33452814e418cdefe1ade67981d0a7718c3fd117560601c2e86cc3b6e9d7e52d92bbce2055fcd6f8da2fe5da92872977a53df765e128959593b5aaac88103f9dce0371ea50c4a27ac5b7841d8cf2186", 0x6a, 0x8000, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x1c}}, 0x20004084)
getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000002040), &(0x7f0000002080)=0x4)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r4)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x40, r10, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cfcb0b5582de"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000044}, 0x4008000)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002240), r3)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002280)={0x84, r11, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xaef}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x95}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000024c0)={r3, &(0x7f00000023c0)="111f03455e14314d3ee85adc3033345ed79a17557cbd5d2972f68302150d70f0b3776e12ba02878ce04c58471856272b2c7e8bdf494b42cc5de66c2a2e102dca754b8344cff9449f499406468350698676faec0040c2d929e06304c091b0746482f02e7c13f9006cd62ba331e99773fe02c727ceab4104de299d62d05c2a9dad8e5f80c7102e9da8016ce80a1add36ed759613a311c24ff9a80300ba0f1838f65151052211f6ea1d84582d3651a147f50ada7585b833e384a15276bc4c702c77431c0cc8a7be295b82de3fbb96b88da410"}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)={@map=r2, r2, 0x19, 0x202c, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r6}, 0x20)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0xa8, r11, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

229.088912ms ago: executing program 2 (id=799):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071120a000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000005000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0)

228.431065ms ago: executing program 1 (id=800):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000449", @ANYRES32=0x0, @ANYBLOB="00a3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

135.08667ms ago: executing program 2 (id=801):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x3, 0x4, 0x12}]}}, @TCA_RATE={0x0, 0x5, {0x7, 0x1}}]}, 0xb8}}, 0x0) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x14) (async, rerun: 64)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}) (async, rerun: 32)
socket(0x2, 0x1, 0x700000) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@private=0xa010102, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) (async)
r7 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async)
epoll_pwait(r4, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99e", 0xbc}, {&(0x7f00000002c0)="9c812b37fa6bd3963c", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d393", 0x67}, {&(0x7f0000000300)="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", 0x125}, {&(0x7f0000000900)="5c3eb8799e8565193cf737e01055d298a4193e91d6dd89384d12d1da97e7e88852e279071ca7a9b536c7911d618feb48b66f1e17e130b7c2f27b77e2053065d05a00ae7bd353283ee3dcaf244ff26600e520af5091696d833f34518e53327718e7e3298de86f15e6a778f6008b96661a10be65", 0x73}, {0x0}], 0x4}}], 0x2, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
close(r8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x13, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x3, 0x0, 0xa, 0x8, 0x6, 0x0, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x11)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x20, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_MARK_MASK={0x8}]}, 0x20}}, 0x0)

134.460104ms ago: executing program 0 (id=802):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
r0 = epoll_create(0x404)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x40000000})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xb0, 0x1405, 0x400, 0x70bd27, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newlinkprop={0x40, 0x6c, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x20, 0x208}, [@IFLA_WEIGHT={0x8, 0xf, 0x557}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7500000}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000003850000008600000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x841, 0xffffffff, 0x4, 0x20892, r8, 0x2c9d11d4, '\x00', r10, r2, 0x0, 0x4, 0x5, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r12, &(0x7f0000000000)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r12, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

70.542522ms ago: executing program 1 (id=803):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='  71', @ANYRES16=r1, @ANYBLOB="200000000000ffdbdf25080000000c00990034e5000848000000"], 0x20}}, 0x0)

70.026288ms ago: executing program 1 (id=804):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x29, 0x8, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r3)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r6, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
connect$can_bcm(r4, 0x0, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44080)

8.308403ms ago: executing program 2 (id=805):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r1 = socket$inet(0x2, 0x801, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r1, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x800, 0x0, 0x25dfdbfb}, 0x10}], 0x1, 0x0, 0x6, 0x1}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x83}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000dc0)=""/273, 0x111}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4095, 0xfff}, {&(0x7f00000017c0)=""/214, 0xd6}, {&(0x7f0000000340)=""/219, 0xdb}], 0x7}, 0x88000000}], 0x4, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1000)

7.557192ms ago: executing program 1 (id=806):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2a8, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xad}, @NL80211_ATTR_VENDOR_DATA={0x8d, 0xc5, "2fff32b791f18bf807eaef83fd2f8bc3abbc6d8464c55ab00805ca36dc3fe57095eb465696f90122d0eff897414301924dcc5be5e9adbc7fe77917da703902bf42d8c4c3c5f62b223b2fc9c3fbbdbeed10d4bd6fd3b0a2af41378aa02d2d4fe00a4cc779d88b6c4b5cd14678e07cae9a75fe1750ce5ba06b7994aef93611dab8eed8b56397ccd5c9cb"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "7c372f0392ec7443f0fc834260ad89e758a9114af6c8c1ecda9c8c27b1189d0c5f0fdae80f1a5dba661e9346dc7dd530f26e5a2134d6a48d67819fd32db76d2e26b285b869ecec0d0583cad457d9d178422d3dd318234bf93ee243d5f9848022fe4aa70cce80b4f87f21d955bee38ca034bca82b75c6ea6963d223c20da38f75ca2037fbccb15bd3dcddc0090bc77cb3ec903e136b89957f17b079e62430f9e965edd75bee53701288ea89ca96c57d51c60044ab07e56083935d0560ebd98d03f8e700215c910b55e88a2764f4d384c18522d0cf966d2a586f7571bb5d1c"}, @NL80211_ATTR_VENDOR_DATA={0xdf, 0xc5, "efff3e48ef995f5a5cb1f28ee372da1768ee445f852784e699653e8b69008dd8b58fe8cc0f798eba1a33903aef9800f564871787647405ef903f0f286eb9b8d0fb8a9c41f61508edf35628ccc8dd440463825745434951a406034e979eb263c0c41dee3ce6498f81d5b65a5aefd6449fd35498c1ab0682cb2a465ab5ad0937598965e4b7e08351c004ba7744573d83e5e28a7592c02bf2b61ef40812e0cf06d1d907068d6dfd94bb56805e5ffbd52579b2edae3b48a6cf2bc74df143f0cb4e9df876b39f42fbacf8ce66399286e9af28726beab8333593ba0fcf7b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff47fd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fffffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x4000) (async)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x2a8, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3c}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xad}, @NL80211_ATTR_VENDOR_DATA={0x8d, 0xc5, "2fff32b791f18bf807eaef83fd2f8bc3abbc6d8464c55ab00805ca36dc3fe57095eb465696f90122d0eff897414301924dcc5be5e9adbc7fe77917da703902bf42d8c4c3c5f62b223b2fc9c3fbbdbeed10d4bd6fd3b0a2af41378aa02d2d4fe00a4cc779d88b6c4b5cd14678e07cae9a75fe1750ce5ba06b7994aef93611dab8eed8b56397ccd5c9cb"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x400}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "7c372f0392ec7443f0fc834260ad89e758a9114af6c8c1ecda9c8c27b1189d0c5f0fdae80f1a5dba661e9346dc7dd530f26e5a2134d6a48d67819fd32db76d2e26b285b869ecec0d0583cad457d9d178422d3dd318234bf93ee243d5f9848022fe4aa70cce80b4f87f21d955bee38ca034bca82b75c6ea6963d223c20da38f75ca2037fbccb15bd3dcddc0090bc77cb3ec903e136b89957f17b079e62430f9e965edd75bee53701288ea89ca96c57d51c60044ab07e56083935d0560ebd98d03f8e700215c910b55e88a2764f4d384c18522d0cf966d2a586f7571bb5d1c"}, @NL80211_ATTR_VENDOR_DATA={0xdf, 0xc5, "efff3e48ef995f5a5cb1f28ee372da1768ee445f852784e699653e8b69008dd8b58fe8cc0f798eba1a33903aef9800f564871787647405ef903f0f286eb9b8d0fb8a9c41f61508edf35628ccc8dd440463825745434951a406034e979eb263c0c41dee3ce6498f81d5b65a5aefd6449fd35498c1ab0682cb2a465ab5ad0937598965e4b7e08351c004ba7744573d83e5e28a7592c02bf2b61ef40812e0cf06d1d907068d6dfd94bb56805e5ffbd52579b2edae3b48a6cf2bc74df143f0cb4e9df876b39f42fbacf8ce66399286e9af28726beab8333593ba0fcf7b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff47fd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fffffff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket(0x27, 0xa, 0x4)
getpeername$packet(r6, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x5, 0x4a}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36) (async)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

0s ago: executing program 0 (id=807):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x3c43, 0x4)
sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40012020, 0x0, 0xfffffffffffffe08)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800010}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r0, @ANYRES16=r2, @ANYRESOCT=r0, @ANYRESOCT], 0x1e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
shutdown(r0, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x308, 0x238, 0x238, 0x308, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x2}, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x6], 0x0, [{0x0, 0x2}, {}, {0x0, 0x3}], 0x0, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x0, 0x1}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0xffffff00], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x1, 0x8}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c000280080001"], 0x38}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan4\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="2b6e65745f636c73202b726429d907"], 0xf)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES8=r3, @ANYRES32=r0], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = socket(0x1d, 0x2, 0x6)
bind$inet(r9, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r9, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4d}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x22ed}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x2, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4085}, 0x20000031)

kernel console output (not intermixed with test programs):

syzkaller login: [   46.977743][ T5769] cmp (5769) used greatest stack depth: 19960 bytes left
Warning: Permanently added '[localhost]:30781' (ED25519) to the list of known hosts.
[   49.748134][ T5787] cgroup: Unknown subsys name 'net'
[   49.825953][ T5787] cgroup: Unknown subsys name 'cpuset'
[   49.832348][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.336386][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.561968][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.566526][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.570384][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.574400][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.578142][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.610446][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.614571][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.618798][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.623148][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.626828][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.687156][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.691868][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.695405][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.701406][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.705968][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.944119][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   56.010519][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   56.055079][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.058883][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.061627][ T5813] bridge_slave_0: entered allmulticast mode
[   56.064531][ T5813] bridge_slave_0: entered promiscuous mode
[   56.069558][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.072479][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.075644][ T5813] bridge_slave_1: entered allmulticast mode
[   56.080066][ T5813] bridge_slave_1: entered promiscuous mode
[   56.181569][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.185315][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.189030][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.192221][ T5817] bridge_slave_0: entered allmulticast mode
[   56.196134][ T5817] bridge_slave_0: entered promiscuous mode
[   56.202940][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.206058][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.209377][ T5817] bridge_slave_1: entered allmulticast mode
[   56.213439][ T5817] bridge_slave_1: entered promiscuous mode
[   56.219887][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.290808][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.302640][ T5813] team0: Port device team_slave_0 added
[   56.310461][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.316234][ T5813] team0: Port device team_slave_1 added
[   56.356874][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.359605][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.370693][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.391832][ T5817] team0: Port device team_slave_0 added
[   56.394777][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   56.411396][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.414108][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.424276][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.430868][ T5817] team0: Port device team_slave_1 added
[   56.500404][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.502767][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.511469][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.517488][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.520485][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.529488][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.590226][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.593206][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.595650][ T5820] bridge_slave_0: entered allmulticast mode
[   56.599138][ T5820] bridge_slave_0: entered promiscuous mode
[   56.602517][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.604750][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.607080][ T5820] bridge_slave_1: entered allmulticast mode
[   56.610654][ T5820] bridge_slave_1: entered promiscuous mode
[   56.618640][ T5813] hsr_slave_0: entered promiscuous mode
[   56.621363][ T5813] hsr_slave_1: entered promiscuous mode
[   56.626592][ T5817] hsr_slave_0: entered promiscuous mode
[   56.629680][ T5817] hsr_slave_1: entered promiscuous mode
[   56.631788][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.634325][ T5817] Cannot create hsr debugfs directory
[   56.655648][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.669069][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.739980][ T5820] team0: Port device team_slave_0 added
[   56.751838][ T5820] team0: Port device team_slave_1 added
[   56.812388][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.815300][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.825526][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.832619][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.835456][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.844654][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.924013][ T5820] hsr_slave_0: entered promiscuous mode
[   56.926361][ T5820] hsr_slave_1: entered promiscuous mode
[   56.929408][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.931918][ T5820] Cannot create hsr debugfs directory
[   57.000323][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.026053][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.055574][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.072359][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.113527][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.141521][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.156349][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.175193][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.204428][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.215208][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.221216][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.226331][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.332344][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.362387][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   57.366705][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.376553][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.379247][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.392461][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   57.398950][  T363] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.401335][  T363] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.414267][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.430423][  T363] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.432980][  T363] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.436400][  T363] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.438795][  T363] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.480276][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.496293][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   57.509685][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.512860][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.540439][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.543666][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.625121][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.659910][   T54] Bluetooth: hci0: command tx timeout
[   57.662610][   T54] Bluetooth: hci1: command tx timeout
[   57.691295][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.713053][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.748010][ T5815] Bluetooth: hci2: command tx timeout
[   57.752136][ T5820] veth0_vlan: entered promiscuous mode
[   57.769728][ T5820] veth1_vlan: entered promiscuous mode
[   57.803242][ T5817] veth0_vlan: entered promiscuous mode
[   57.813766][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.827333][ T5817] veth1_vlan: entered promiscuous mode
[   57.856787][ T5820] veth0_macvtap: entered promiscuous mode
[   57.865717][ T5820] veth1_macvtap: entered promiscuous mode
[   57.895175][ T5813] veth0_vlan: entered promiscuous mode
[   57.913833][ T5817] veth0_macvtap: entered promiscuous mode
[   57.920866][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.931126][ T5813] veth1_vlan: entered promiscuous mode
[   57.940617][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.949169][ T5817] veth1_macvtap: entered promiscuous mode
[   57.955706][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.960332][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.963196][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.965972][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.992442][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.006207][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.021656][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.025367][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.028990][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.031785][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.049595][ T5813] veth0_macvtap: entered promiscuous mode
[   58.053953][ T5813] veth1_macvtap: entered promiscuous mode
[   58.103981][ T3588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.114510][ T3588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.162140][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.168687][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.171334][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.185476][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.191483][ T3588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.193987][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.198119][ T3588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.200532][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.205538][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.210913][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.245750][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.249005][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.269641][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.291063][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.293967][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.346776][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.356156][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.373333][ T5878] bridge0: port 3(ipvlan2) entered blocking state
[   58.375805][ T5878] bridge0: port 3(ipvlan2) entered disabled state
[   58.380206][ T5878] ipvlan2: entered allmulticast mode
[   58.382633][ T5878] bridge0: entered allmulticast mode
[   58.386827][ T5878] ipvlan2: left allmulticast mode
[   58.389285][ T5878] bridge0: left allmulticast mode
[   58.441217][ T5882] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.449305][ T5884] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.473463][ T5884] veth3: entered promiscuous mode
[   58.517284][ T5891] bridge_slave_0: left allmulticast mode
[   58.520360][ T5891] bridge_slave_0: left promiscuous mode
[   58.522658][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.553034][ T5891] bridge_slave_1: left allmulticast mode
[   58.555052][ T5891] bridge_slave_1: left promiscuous mode
[   58.557371][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.581031][ T5891] bond0: (slave bond_slave_0): Releasing backup interface
[   58.590053][ T5891] bond0: (slave bond_slave_1): Releasing backup interface
[   58.598973][ T5891] team0: Port device team_slave_0 removed
[   58.603497][ T5891] team0: Port device team_slave_1 removed
[   58.605817][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.608270][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.611776][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.614302][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.681926][ T5896] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[   58.696204][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'.
[   58.875607][ T5918] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9'.
[   58.962809][ T5874] IPVS: starting estimator thread 0...
[   59.059025][ T5929] IPVS: using max 80 ests per chain, 192000 per kthread
[   59.206368][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   59.212314][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   59.218108][ T5944] netlink: 'syz.0.15': attribute type 11 has an invalid length.
[   59.250587][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'.
[   59.268396][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.433931][ T5952] netlink: 45 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.644193][ T5974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21'.
[   59.738460][ T5815] Bluetooth: hci1: command tx timeout
[   59.740751][ T5815] Bluetooth: hci0: command tx timeout
[   59.784356][ T5978] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET)
[   59.806356][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'.
[   59.817895][   T54] Bluetooth: hci2: command tx timeout
[   59.843633][ T5978] netlink: 'syz.1.24': attribute type 11 has an invalid length.
[   59.893188][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.133410][ T5996] IPv6: addrconf: prefix option has invalid lifetime
[   60.251808][ T5998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.143942][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   61.290112][ T6033] netlink: 'syz.1.43': attribute type 7 has an invalid length.
[   61.302743][ T6033] netlink: 'syz.1.43': attribute type 8 has an invalid length.
[   61.356624][ T6040] netlink: 'syz.2.45': attribute type 27 has an invalid length.
[   61.479914][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.483245][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.683106][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.692999][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.765585][ T6040] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.769249][ T6040] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.772727][ T6040] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.776407][ T6040] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.817862][   T54] Bluetooth: hci0: command tx timeout
[   61.819659][   T54] Bluetooth: hci1: command tx timeout
[   61.897896][ T5815] Bluetooth: hci2: command tx timeout
[   62.003706][ T6078] netlink: 'syz.2.58': attribute type 13 has an invalid length.
[   62.007106][ T6078] gretap0: refused to change device tx_queue_len
[   62.009609][ T6078] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.028530][ T6078] Zero length message leads to an empty skb
[   62.042871][ T6079] warning: `syz.0.59' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.227748][   T24] IPVS: starting estimator thread 0...
[   62.234737][ T6092] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   62.317657][ T6095] IPVS: using max 80 ests per chain, 192000 per kthread
[   63.434589][ T6166] netpci0: tun_chr_ioctl cmd 1074025681
[   63.472902][ T6168] nbd: must specify a device to reconfigure
[   63.485399][ T6168] netlink: 'syz.2.89': attribute type 10 has an invalid length.
[   63.494135][ T6168] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.554686][ T6172] netlink: 'syz.1.88': attribute type 10 has an invalid length.
[   63.571959][ T6172] team0: Port device geneve0 added
[   63.725466][ T6177] netlink: 'syz.1.91': attribute type 1 has an invalid length.
[   63.822400][ T6186] __nla_validate_parse: 15 callbacks suppressed
[   63.822415][ T6186] netlink: 248 bytes leftover after parsing attributes in process `syz.1.94'.
[   63.875616][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.94'.
[   63.897701][ T5815] Bluetooth: hci1: command tx timeout
[   63.899089][   T54] Bluetooth: hci0: command tx timeout
[   63.952264][ T6197] sctp: [Deprecated]: syz.1.97 (pid 6197) Use of int in max_burst socket option.
[   63.952264][ T6197] Use struct sctp_assoc_value instead
[   63.977862][   T54] Bluetooth: hci2: command tx timeout
[   63.985262][ T6192] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   64.043629][ T6202] netlink: 268 bytes leftover after parsing attributes in process `syz.1.98'.
[   64.759920][ T6226] netlink: 48 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.781156][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'.
[   64.825657][ T6226] hsr_slave_1 (unregistering): left promiscuous mode
[   64.841080][ T6234] : entered promiscuous mode
[   64.920442][ T6240] netlink: 'syz.0.109': attribute type 1 has an invalid length.
[   64.944857][ T6245] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   64.945264][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.980016][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.108'.
[   65.021696][ T6240] bond1: (slave veth3): Enslaving as an active interface with a down link
[   65.031620][ T6250] vlan2: entered allmulticast mode
[   65.033483][ T6250] bond1: entered allmulticast mode
[   65.036014][ T6250] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   65.092553][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.111'.
[   65.182927][ T6268] sock: sock_timestamping_bind_phc: sock not bind to device
[   65.214308][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'.
[   65.217402][ T6274] netlink: 'syz.2.116': attribute type 5 has an invalid length.
[   65.221444][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'.
[   65.243401][ T6274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   65.248563][ T6274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   65.254162][ T6274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   65.257531][ T6274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   65.261753][ T6274] geneve2: entered promiscuous mode
[   65.263459][ T6274] geneve2: entered allmulticast mode
[   65.293442][ T6277] openvswitch: netlink: IP tunnel TTL not specified.
[   65.371211][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'.
[   65.491832][ T6305] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   65.509750][ T6307] openvswitch: netlink: IP tunnel dst address not specified
[   65.602715][ T6314] netlink: 'syz.2.129': attribute type 4 has an invalid length.
[   66.618897][ T6339] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   66.816637][ T6424] team0: Device gtp1 is of different type
[   67.186565][ T6443] smc: net device bond0 applied user defined pnetid SYZ2
[   67.205352][ T6443] netlink: 'syz.0.165': attribute type 11 has an invalid length.
[   67.393707][ T6460] netlink: 'syz.0.171': attribute type 1 has an invalid length.
[   67.535675][ T6465] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.541601][ T6467] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   67.553103][ T6465] macvlan2: entered promiscuous mode
[   67.555169][ T6465] macvlan2: entered allmulticast mode
[   67.564270][ T6465] bond2: (slave macvlan2): Opening slave failed
[   67.643930][ T6473] x_tables: duplicate underflow at hook 2
[   68.070657][ T6494] netlink: 'syz.0.182': attribute type 12 has an invalid length.
[   68.148429][ T6500] netlink: 'syz.1.184': attribute type 1 has an invalid length.
[   68.377383][ T6518] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   68.492505][ T6529] netem: change failed
[   68.676161][ T6547] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   69.075272][ T6571] __nla_validate_parse: 16 callbacks suppressed
[   69.075283][ T6571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.206'.
[   69.518730][ T6583] netlink: 100 bytes leftover after parsing attributes in process `syz.1.209'.
[   69.556374][ T6592] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.212'.
[   69.564608][ T6590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.211'.
[   69.577831][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.211'.
[   69.581531][ T6594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.649812][ T6599] validate_nla: 1 callbacks suppressed
[   69.649822][ T6599] netlink: 'syz.1.215': attribute type 1 has an invalid length.
[   69.750911][ T6613] openvswitch: netlink: IP tunnel dst address not specified
[   69.782273][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'.
[   69.882968][ T6626] bridge_slave_0: invalid flags given to default FDB implementation
[   69.899910][    T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   69.932395][ T6628] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   69.935623][ T6628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.227'.
[   69.940638][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'.
[   69.970503][ T6635] netlink: 256 bytes leftover after parsing attributes in process `syz.0.229'.
[   69.974260][ T6635] netlink: 256 bytes leftover after parsing attributes in process `syz.0.229'.
[   69.978811][ T6628] veth3: entered promiscuous mode
[   70.040442][ T6647] netlink: 'syz.1.232': attribute type 1 has an invalid length.
[   70.061982][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.064710][ T6650] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   70.083877][ T6647] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.086808][ T6647] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   70.091599][ T6647] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   70.122335][ T6652] gretap1: entered promiscuous mode
[   70.126349][ T6652] bond1: (slave gretap1): making interface the new active one
[   70.130093][ T6652] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   70.246159][ T6655] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   70.372206][ T6659] syz_tun: entered allmulticast mode
[   70.379892][ T6661] dvmrp8: entered allmulticast mode
[   70.387121][ T6658] syz_tun: left allmulticast mode
[   71.181334][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.325845][ T6715] nftables ruleset with unbound chain
[   71.379716][ T6719] netlink: 'syz.2.252': attribute type 11 has an invalid length.
[   71.474704][ T6730] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.490492][ T6730] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   71.573215][ T6739] dvmrp0: entered allmulticast mode
[   71.649519][ T6749] dvmrp0: left allmulticast mode
[   71.669184][ T6747] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   71.681489][ T6747] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   72.066837][ T6788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   72.111295][ T6791] syzkaller1: entered promiscuous mode
[   72.113588][ T6791] syzkaller1: entered allmulticast mode
[   72.137684][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[   72.473592][ T6814] xt_hashlimit: overflow, rate too high: 1125899906842624
[   72.858937][ T5877] IPVS: starting estimator thread 0...
[   72.889600][ T6860] netlink: 'syz.0.301': attribute type 8 has an invalid length.
[   72.950660][ T6856] IPVS: using max 80 ests per chain, 192000 per kthread
[   73.004375][ T6872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.121932][ T6883] netlink: 'syz.0.310': attribute type 1 has an invalid length.
[   73.232840][ T6891] netlink: 'syz.0.313': attribute type 1 has an invalid length.
[   73.261385][ T6891] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   73.266394][ T5823] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   73.273610][ T6891] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.292604][ T6891] veth5: entered promiscuous mode
[   73.296750][ T6891] bond3: (slave veth5): Enslaving as a backup interface with a down link
[   73.315939][ T6891] bond1: (slave veth3): Releasing active interface
[   73.321311][ T6891] bond3: (slave ip6gretap1): Removing an active aggregator
[   73.325165][ T6891] bond3: (slave ip6gretap1): Releasing backup interface
[   73.332186][ T6891] bond3: (slave ip6gretap1): the permanent HWaddr of slave - e6:18:18:5a:d8:be - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   73.343062][ T6891] bond3: (slave veth5): Releasing backup interface
[   73.703326][ T6918] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   74.217870][ T6937] block nbd0: server does not support multiple connections per device.
[   74.229159][ T6937] block nbd0: shutting down sockets
[   74.283401][ T6939] __nla_validate_parse: 95 callbacks suppressed
[   74.283413][ T6939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'.
[   74.312302][ T6943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.349039][ T6948] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[   74.373491][ T6948] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   74.649742][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'.
[   74.699748][ T1090] wlan1: Trigger new scan to find an IBSS to join
[   74.746461][ T6968] netlink: 'syz.1.337': attribute type 8 has an invalid length.
[   74.835963][ T6972] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[   74.846071][ T6972] dvmrp0: entered allmulticast mode
[   74.849987][ T6972] netlink: ct family unspecified
[   74.851842][ T6972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.004106][ T6983] netlink: 'syz.0.343': attribute type 2 has an invalid length.
[   75.012942][ T6988] xfrm1: entered allmulticast mode
[   75.393782][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'.
[   75.496534][ T7009] x_tables: duplicate underflow at hook 3
[   75.701237][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'.
[   76.009734][ T7042] netlink: 'syz.1.358': attribute type 3 has an invalid length.
[   76.974901][ T7073] x_tables: ip6_tables: mh match: only valid for protocol 135
[   77.058567][ T7082] netlink: 'syz.2.370': attribute type 2 has an invalid length.
[   77.076212][ T7079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.178932][ T7090] netlink: 240 bytes leftover after parsing attributes in process `syz.2.373'.
[   77.205198][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'.
[   77.210232][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'.
[   77.260339][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.376'.
[   77.294092][ T7106] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   77.297218][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[   77.304046][ T7106] vlan2: entered allmulticast mode
[   77.305698][ T7106] geneve1: entered allmulticast mode
[   77.545599][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'.
[   77.657995][ T3588] wlan1: Trigger new scan to find an IBSS to join
[   77.780741][ T7149] Bluetooth: MGMT ver 1.23
[   77.845098][ T7155] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   77.850924][ T7155] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   77.853415][ T7155] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   77.856211][ T7155] netlink: 'syz.0.395': attribute type 1 has an invalid length.
[   78.614083][ T7216] bond0: (slave wlan1): Releasing backup interface
[   79.021133][ T7237] tipc: Enabling of bearer <et:g> rejected, media not registered
[   79.030426][ T7237] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   79.071353][ T7239] team0: Port device geneve1 added
[   79.393438][ T7264] vxcan0: tx drop: invalid sa for name 0x0000000000000003
[   79.465615][ T7269] __nla_validate_parse: 17 callbacks suppressed
[   79.465733][ T7269] netlink: 240 bytes leftover after parsing attributes in process `syz.1.429'.
[   79.560047][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   79.563552][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'.
[   79.622379][ T7273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.427'.
[   79.723073][ T7284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.434'.
[   79.727894][ T7284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.434'.
[   79.782326][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'.
[   80.453952][ T7312] atomic_op ffff88803b876198 conn xmit_atomic 0000000000000000
[   80.489217][ T7314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.444'.
[   80.617826][   T27] wlan1: Trigger new scan to find an IBSS to join
[   80.785368][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.447'.
[   80.790591][ T7325] netlink: 64 bytes leftover after parsing attributes in process `syz.2.447'.
[   80.794293][ T7325] tipc: Invalid UDP bearer configuration
[   80.794375][ T7325] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   80.960568][ T7329] validate_nla: 6 callbacks suppressed
[   80.960577][ T7329] netlink: 'syz.2.449': attribute type 4 has an invalid length.
[   80.984771][ T7329] netlink: 'syz.2.449': attribute type 3 has an invalid length.
[   81.063981][ T7342] netlink: 'syz.2.455': attribute type 10 has an invalid length.
[   81.067226][ T7342] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[   81.074255][ T7342] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[   81.077223][ T7342] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[   81.080412][ T7342] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[   81.087355][ T7342] team0: Port device geneve0 added
[   81.104324][ T7342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.109274][ T7342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.166784][ T7342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.172918][ T7342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.246882][ T7342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.253179][ T7342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.264877][ T7360] xt_hashlimit: size too large, truncated to 1048576
[   81.316818][ T7342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   81.329162][ T7342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   81.341289][ T7367] : renamed from bridge_slave_0 (while UP)
[   81.394296][ T7342] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.397115][ T7342] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   81.406471][ T7342] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.414097][ T7342] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   81.418783][ T1898] cfg80211: failed to load regulatory.db
[   81.451144][ T7342] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.453737][ T7342] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   81.485405][ T7342] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.492371][ T7342] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   81.507821][ T4417] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[   81.516257][ T7377] netlink: 'syz.1.465': attribute type 83 has an invalid length.
[   81.523535][ T7377] netlink: 'syz.1.465': attribute type 18 has an invalid length.
[   81.594576][ T7377] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   81.599477][ T7374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.676395][ T7388] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   81.788269][ T7395] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   81.791222][ T7395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.545348][ T7472] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[   83.822573][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.882740][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.889151][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.395900][ T7499] hsr_slave_0: left promiscuous mode
[   84.707122][ T7521] __nla_validate_parse: 27 callbacks suppressed
[   84.707135][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[   84.870326][ T7532] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'.
[   85.046633][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'.
[   85.090084][ T7546] IPv6: sit1: Disabled Multicast RS
[   85.353087][ T7574] netlink: 'syz.2.521': attribute type 1 has an invalid length.
[   85.381722][ T7574] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.402934][ T7574] bond1: (slave veth9): Enslaving as an active interface with a down link
[   85.407041][ T7574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.521'.
[   85.440659][ T7579] netlink: 68 bytes leftover after parsing attributes in process `syz.0.523'.
[   85.449505][ T7579] unsupported nlmsg_type 40
[   85.633251][ T7596] netlink: 'syz.2.528': attribute type 2 has an invalid length.
[   85.642508][ T7596] : entered promiscuous mode
[   85.717257][ T7608] netlink: 'syz.0.533': attribute type 7 has an invalid length.
[   85.770706][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.535'.
[   85.773628][ T7617] netlink: 84 bytes leftover after parsing attributes in process `syz.1.535'.
[   85.882465][ T7623] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.895309][ T7623] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   85.915855][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'.
[   85.934591][ T7625] netlink: 'syz.1.539': attribute type 2 has an invalid length.
[   85.976690][ T7623] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.987708][ T7623] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   86.042696][ T7623] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.050266][ T7623] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   86.105989][ T7623] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.122161][ T7623] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   86.216296][ T7623] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.221819][ T7623] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[   86.232339][ T7623] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.235505][ T7623] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[   86.246796][ T7623] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.249678][ T7623] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[   86.257417][ T7623] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.262251][ T7623] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[   86.406980][ T7640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.466887][ T7640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.590029][ T7664] bridge0: port 3(erspan0) entered blocking state
[   86.592663][ T7664] bridge0: port 3(erspan0) entered disabled state
[   86.595135][ T7664] erspan0: entered allmulticast mode
[   86.602013][ T7664] erspan0: entered promiscuous mode
[   86.606731][ T7664] erspan0: left allmulticast mode
[   86.610959][ T7664] erspan0: left promiscuous mode
[   86.614228][ T7664] bridge0: port 3(erspan0) entered disabled state
[   86.714813][ T7673] netlink: 'syz.0.553': attribute type 1 has an invalid length.
[   86.721221][ T7673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.553'.
[   86.782897][ T7677] xt_CT: No such helper "snmp"
[   86.981755][ T7693] netlink: 'syz.2.558': attribute type 21 has an invalid length.
[   87.075657][ T7706] netlink: 'syz.0.562': attribute type 6 has an invalid length.
[   87.078621][ T7706] netlink: 'syz.0.562': attribute type 7 has an invalid length.
[   87.081266][ T7706] netlink: 'syz.0.562': attribute type 8 has an invalid length.
[   87.083967][ T7704] ip6tnl0: Master is either lo or non-ether device
[   87.296216][ T7714] sctp: [Deprecated]: syz.0.564 (pid 7714) Use of int in max_burst socket option.
[   87.296216][ T7714] Use struct sctp_assoc_value instead
[   87.309607][ T7714] xt_limit: Overflow, try lower: 0/0
[   87.325752][ T7714] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   87.330628][ T7714] netlink: 184 bytes leftover after parsing attributes in process `syz.0.564'.
[   87.334620][ T7714] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   87.602001][ T7729] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   87.624399][ T7733] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.634101][ T7733] batadv_slave_0: entered promiscuous mode
[   87.852934][ T7741] gtp0: entered promiscuous mode
[   87.938813][ T7763] openvswitch: netlink: Flow key attr not present in new flow.
[   88.225486][ T7779] SET target dimension over the limit!
[   88.993163][ T7828] netlink: 'syz.0.602': attribute type 1 has an invalid length.
[   88.996660][ T7828] NCSI netlink: No device for ifindex 0
[   89.562938][ T7868] SET target dimension over the limit!
[   89.586172][ T7869] netlink: 'syz.1.617': attribute type 10 has an invalid length.
[   89.605904][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.619250][ T7869] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   89.923587][ T7887] __nla_validate_parse: 19 callbacks suppressed
[   89.923608][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.623'.
[   89.944743][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.623'.
[   90.006961][ T7890] bridge3: the hash_elasticity option has been deprecated and is always 16
[   90.013827][ T7890] bridge3: entered allmulticast mode
[   90.210113][ T7898] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   90.328153][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'.
[   90.428022][ T7914] xt_hashlimit: max too large, truncated to 1048576
[   90.488843][ T7917] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[   90.520091][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'.
[   90.552916][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.633'.
[   90.679778][ T7934] nbd: must specify an index to disconnect
[   90.945637][ T7954] netlink: 56 bytes leftover after parsing attributes in process `syz.2.640'.
[   91.059680][ T7959] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.068670][ T7959] bond0: (slave bond3): Enslaving as an active interface with an up link
[   91.075965][ T7962] netlink: 'syz.2.645': attribute type 5 has an invalid length.
[   91.374588][ T7994] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.379428][ T7994] bond0: (slave bond4): Enslaving as an active interface with an up link
[   91.422369][ T7999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.654'.
[   91.448634][ T8001] netlink: 348 bytes leftover after parsing attributes in process `syz.1.655'.
[   91.606257][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'.
[   91.616474][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'.
[   91.622601][ T8014] atomic_op ffff888119f1b998 conn xmit_atomic 0000000000000000
[   91.701823][ T8017] 8021q: adding VLAN 0 to HW filter on device bond4
[   91.707667][ T8017] bond0: (slave bond4): Enslaving as an active interface with an up link
[   91.752927][ T8023] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[   91.756079][ T8023] netlink: 'syz.1.662': attribute type 4 has an invalid length.
[   92.020756][ T8047] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   92.034942][ T8051] 8021q: adding VLAN 0 to HW filter on device bond5
[   92.039170][ T8051] bond0: (slave bond5): Enslaving as an active interface with an up link
[   92.140167][ T8062] veth1_macvtap: left promiscuous mode
[   92.146777][ T8062] macsec0: entered promiscuous mode
[   92.169589][ T8062] veth1_macvtap: entered promiscuous mode
[   92.172977][ T8062] macsec0: left promiscuous mode
[   92.374006][ T8079] 8021q: adding VLAN 0 to HW filter on device bond5
[   92.380173][ T8079] bond0: (slave bond5): Enslaving as an active interface with an up link
[   92.430043][ T8087] GUP no longer grows the stack in syz.2.680 (8087): 200000006000-20000000a000 (200000005000)
[   92.433769][ T8087] CPU: 0 UID: 0 PID: 8087 Comm: syz.2.680 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   92.433783][ T8087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.433788][ T8087] Call Trace:
[   92.433793][ T8087]  <TASK>
[   92.433797][ T8087]  dump_stack_lvl+0x189/0x250
[   92.433819][ T8087]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.433831][ T8087]  ? __pfx__printk+0x10/0x10
[   92.433839][ T8087]  ? find_vma+0xe7/0x160
[   92.433857][ T8087]  __get_user_pages+0x2a60/0x30b0
[   92.433882][ T8087]  ? __pfx___get_user_pages+0x10/0x10
[   92.433891][ T8087]  ? __gup_longterm_locked+0xbf7/0x15b0
[   92.433901][ T8087]  ? down_read_killable+0x1d1/0x350
[   92.433911][ T8087]  ? try_get_folio+0x633/0x660
[   92.433919][ T8087]  __gup_longterm_locked+0xd66/0x15b0
[   92.433933][ T8087]  ? try_grab_folio_fast+0x1be/0x4f0
[   92.433948][ T8087]  ? gup_fast_fallback+0x1afc/0x2260
[   92.433959][ T8087]  gup_fast_fallback+0x1cd4/0x2260
[   92.433984][ T8087]  ? __pfx_gup_fast_fallback+0x10/0x10
[   92.433993][ T8087]  ? trace_contention_end+0x39/0x120
[   92.434003][ T8087]  ? __mutex_lock+0x330/0xe80
[   92.434017][ T8087]  ? is_valid_gup_args+0x11f/0x200
[   92.434029][ T8087]  ? get_user_pages_fast+0x4d/0xb0
[   92.434042][ T8087]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   92.434052][ T8087]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   92.434062][ T8087]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   92.434070][ T8087]  ? wait_for_space+0x24d/0x2d0
[   92.434078][ T8087]  iov_iter_get_pages2+0x5e/0xa0
[   92.434092][ T8087]  __se_sys_vmsplice+0x548/0x10d0
[   92.434107][ T8087]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   92.434114][ T8087]  ? __lock_acquire+0xab9/0xd20
[   92.434125][ T8087]  ? __pfx_futex_wake+0x10/0x10
[   92.434139][ T8087]  ? __lock_acquire+0xab9/0xd20
[   92.434163][ T8087]  ? do_pipe2+0xf7/0x170
[   92.434174][ T8087]  ? rcu_is_watching+0x15/0xb0
[   92.434187][ T8087]  ? do_syscall_64+0xbe/0x3b0
[   92.434197][ T8087]  do_syscall_64+0xfa/0x3b0
[   92.434202][ T8087]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.434212][ T8087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.434219][ T8087]  ? exc_page_fault+0x9f/0xf0
[   92.434230][ T8087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.434237][ T8087] RIP: 0033:0x7f3da518e929
[   92.434245][ T8087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.434251][ T8087] RSP: 002b:00007f3da5f8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   92.434261][ T8087] RAX: ffffffffffffffda RBX: 00007f3da53b5fa0 RCX: 00007f3da518e929
[   92.434266][ T8087] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[   92.434270][ T8087] RBP: 00007f3da5210b39 R08: 0000000000000000 R09: 0000000000000000
[   92.434275][ T8087] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   92.434279][ T8087] R13: 0000000000000000 R14: 00007f3da53b5fa0 R15: 00007ffc999e2308
[   92.434291][ T8087]  </TASK>
[   92.616755][ T8094] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   92.671466][ T8098] netlink: 'syz.0.683': attribute type 4 has an invalid length.
[   92.855257][ T8111] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.862086][ T8111] bond0: (slave bond2): Enslaving as an active interface with an up link
[   93.211107][ T8145] 8021q: adding VLAN 0 to HW filter on device bond3
[   93.214286][ T8145] bond0: (slave bond3): Enslaving as an active interface with an up link
[   93.503815][ T8169] netlink: 'syz.1.706': attribute type 10 has an invalid length.
[   93.563559][ T8171] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.586070][ T8171] bond0: (slave bond4): Enslaving as an active interface with an up link
[   93.827148][ T8195] netlink: 'syz.2.711': attribute type 5 has an invalid length.
[   93.830657][ T8195] netlink: 'syz.2.711': attribute type 1 has an invalid length.
[   94.061760][ T8217] 8021q: adding VLAN 0 to HW filter on device bond5
[   94.065349][ T8217] bond0: (slave bond5): Enslaving as an active interface with an up link
[   94.450856][ T8241] xt_hashlimit: max too large, truncated to 1048576
[   94.457420][ T8241] Cannot find add_set index 3 as target
[   94.615564][ T8248] 8021q: adding VLAN 0 to HW filter on device bond6
[   94.620210][ T8248] bond0: (slave bond6): Enslaving as an active interface with an up link
[   94.782794][ T8262] x_tables: unsorted underflow at hook 3
[   94.797280][ T8261] tipc: Started in network mode
[   94.799590][ T8261] tipc: Node identity 5e7431d37565, cluster identity 4711
[   94.802802][ T8261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.873236][ T8261] syzkaller0: entered promiscuous mode
[   94.875891][ T8261] syzkaller0: entered allmulticast mode
[   94.883360][ T8261] tipc: Resetting bearer <eth:syzkaller0>
[   94.906644][ T8256] tipc: Resetting bearer <eth:syzkaller0>
[   95.731230][ T8277] __nla_validate_parse: 9 callbacks suppressed
[   95.731246][ T8277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.733'.
[   95.799676][ T5874] tipc: Node number set to 722547155
[   96.378240][ T8256] tipc: Disabling bearer <eth:syzkaller0>
[   96.386674][ T8274] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[   96.466860][ T8294] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   96.471489][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'.
[   96.475569][ T8294] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   96.500095][ T8297] netlink: 84 bytes leftover after parsing attributes in process `syz.0.738'.
[   96.506101][ T8299] netlink: 84 bytes leftover after parsing attributes in process `syz.0.738'.
[   96.525544][ T8300] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   96.608900][ T8311] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.612614][ T8311] bond0: (slave bond6): Enslaving as an active interface with an up link
[   96.728603][ T8323] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[   96.731809][ T8323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.745'.
[   96.752724][ T8323] xt_CT: No such helper "snmp"
[   96.773743][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'.
[   96.823099][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.746'.
[   96.952873][ T8333] xt_CT: You must specify a L4 protocol and not use inversions on it
[   97.469467][ T8349] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.477039][ T8349] bond0: (slave bond7): Enslaving as an active interface with an up link
[   97.601012][ T8357] netlink: 'syz.1.755': attribute type 21 has an invalid length.
[   97.604112][ T8357] netlink: 128 bytes leftover after parsing attributes in process `syz.1.755'.
[   97.609137][ T8357] netlink: 'syz.1.755': attribute type 5 has an invalid length.
[   97.612132][ T8357] netlink: 3 bytes leftover after parsing attributes in process `syz.1.755'.
[   97.690341][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.758'.
[   97.766330][ T8369] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.772719][ T8369] bond0: (slave bond6): Enslaving as an active interface with an up link
[   97.883192][ T8376] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   97.993510][ T8387] xt_limit: Overflow, try lower: 262144/524288
[   98.003627][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881108e6400: rx timeout, send abort
[   98.194536][ T8403] ip6gre1: entered promiscuous mode
[   98.508286][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881108e6400: abort rx timeout. Force session deactivation
[   98.606363][ T8424] 8021q: adding VLAN 0 to HW filter on device bond7
[   98.612166][ T8424] bond0: (slave bond7): Enslaving as an active interface with an up link
[   99.026080][ T8449] 8021q: adding VLAN 0 to HW filter on device bond9
[   99.032413][ T8449] bond0: (slave bond9): Enslaving as an active interface with an up link
[   99.273812][ T8474] 8021q: adding VLAN 0 to HW filter on device bond10
[   99.277239][ T8474] bond0: (slave bond10): Enslaving as an active interface with an up link
[   99.433325][ T8490] pim6reg1: entered promiscuous mode
[   99.435178][ T8490] pim6reg1: entered allmulticast mode
[   99.563555][ T8499] 8021q: adding VLAN 0 to HW filter on device bond7
[   99.584183][ T8499] bond0: (slave bond7): Enslaving as an active interface with an up link
[   99.712109][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.717802][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.729590][    C1] ------------[ cut here ]------------
[   99.732013][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[   99.736517][    C1] WARNING: CPU: 1 PID: 5854 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[   99.740771][    C1] Modules linked in:
[   99.743076][    C1] CPU: 1 UID: 0 PID: 5854 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   99.748594][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.752855][    C1] Workqueue: bat_events batadv_nc_worker
[   99.755191][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[   99.757912][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[   99.766079][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[   99.768754][    C1] RAX: 349cc48d0f040900 RBX: 000000000000000c RCX: ffff8880225e1cc0
[   99.772090][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[   99.775359][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[   99.776048][ T8511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.778717][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8881172d1528
[   99.778736][    C1] R13: 0000000000000000 R14: ffff888106ee8e40 R15: ffff888106eeb0d8
[   99.778746][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[   99.778757][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   99.778766][    C1] CR2: 00007f310c4e7d60 CR3: 0000000104ec2000 CR4: 00000000000006f0
[   99.778801][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   99.778812][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   99.805958][    C1] Call Trace:
[   99.807398][    C1]  <IRQ>
[   99.808769][    C1]  rate_control_send_low+0x194/0x7a0
[   99.811070][    C1]  rate_control_get_rate+0x20b/0x5d0
[   99.813262][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[   99.815715][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[   99.818394][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[   99.820795][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[   99.823115][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   99.825405][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   99.827828][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[   99.830133][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   99.832457][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[   99.834804][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[   99.837370][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[   99.839831][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   99.842882][    C1]  __iterate_interfaces+0x2ab/0x590
[   99.845008][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   99.847488][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   99.850573][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   99.853099][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[   99.856027][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[   99.858295][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   99.860744][    C1]  __hrtimer_run_queues+0x52c/0xc60
[   99.862927][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   99.865271][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   99.867799][    C1]  hrtimer_run_softirq+0x187/0x2b0
[   99.870002][    C1]  handle_softirqs+0x286/0x870
[   99.872099][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[   99.874160][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   99.876485][    C1]  __irq_exit_rcu+0xca/0x1f0
[   99.878538][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[   99.880709][    C1]  irq_exit_rcu+0x9/0x30
[   99.882546][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   99.884895][    C1]  </IRQ>
[   99.886148][    C1]  <TASK>
[   99.887390][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   99.889920][    C1] RIP: 0010:lock_acquire+0x175/0x360
[   99.892041][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[   99.898183][    C1] RSP: 0018:ffffc900035ef910 EFLAGS: 00000206
[   99.900132][    C1] RAX: 349cc48d0f040900 RBX: 0000000000000000 RCX: 349cc48d0f040900
[   99.902968][    C1] RDX: 0000000000000000 RSI: ffffffff8db6efe6 RDI: ffffffff8be28d40
[   99.906171][    C1] RBP: ffffffff8b34f33a R08: 0000000000000000 R09: ffffffff8b34f33a
[   99.909359][    C1] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 0000000000000002
[   99.912539][    C1] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246
[   99.915788][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[   99.918192][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[   99.920541][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[   99.922933][    C1]  ? __pfx_batadv_nc_sniffed_purge+0x10/0x10
[   99.925465][    C1]  batadv_nc_process_nc_paths+0xdb/0x3a0
[   99.927923][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[   99.930336][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[   99.932735][    C1]  batadv_nc_worker+0x52b/0x610
[   99.934726][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[   99.937185][    C1]  process_scheduled_works+0xae1/0x17b0
[   99.939600][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[   99.942088][    C1]  worker_thread+0x8a0/0xda0
[   99.944014][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.946574][    C1]  ? __kthread_parkme+0x7b/0x200
[   99.948684][    C1]  kthread+0x711/0x8a0
[   99.950393][    C1]  ? __pfx_worker_thread+0x10/0x10
[   99.952535][    C1]  ? __pfx_kthread+0x10/0x10
[   99.954431][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[   99.956569][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.958736][    C1]  ? __pfx_kthread+0x10/0x10
[   99.960599][    C1]  ret_from_fork+0x3fc/0x770
[   99.962553][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[   99.964690][    C1]  ? __switch_to_asm+0x39/0x70
[   99.966678][    C1]  ? __switch_to_asm+0x33/0x70
[   99.968741][    C1]  ? __pfx_kthread+0x10/0x10
[   99.970607][    C1]  ret_from_fork_asm+0x1a/0x30
[   99.972713][    C1]  </TASK>
[   99.974047][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   99.976993][    C1] CPU: 1 UID: 0 PID: 5854 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   99.982338][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.986580][    C1] Workqueue: bat_events batadv_nc_worker
[   99.988932][    C1] Call Trace:
[   99.990379][    C1]  <IRQ>
[   99.991595][    C1]  dump_stack_lvl+0x99/0x250
[   99.993554][    C1]  ? __asan_memcpy+0x40/0x70
[   99.995487][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.997585][    C1]  ? __pfx__printk+0x10/0x10
[   99.999461][    C1]  panic+0x2db/0x790
[  100.001045][    C1]  ? __pfx_panic+0x10/0x10
[  100.002847][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  100.004869][    C1]  __warn+0x31b/0x4b0
[  100.006477][    C1]  ? __rate_control_send_low+0x5df/0x820
[  100.008728][    C1]  ? __rate_control_send_low+0x5df/0x820
[  100.011064][    C1]  report_bug+0x2be/0x4f0
[  100.012942][    C1]  ? __rate_control_send_low+0x5df/0x820
[  100.015278][    C1]  ? __rate_control_send_low+0x5df/0x820
[  100.017563][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  100.019868][    C1]  handle_bug+0x84/0x160
[  100.021668][    C1]  exc_invalid_op+0x1a/0x50
[  100.023513][    C1]  asm_exc_invalid_op+0x1a/0x20
[  100.025511][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  100.028069][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  100.035786][    C1] RSP: 0018:ffffc900001e0758 EFLAGS: 00010246
[  100.038293][    C1] RAX: 349cc48d0f040900 RBX: 000000000000000c RCX: ffff8880225e1cc0
[  100.041534][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  100.044785][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  100.047969][    C1] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8881172d1528
[  100.051198][    C1] R13: 0000000000000000 R14: ffff888106ee8e40 R15: ffff888106eeb0d8
[  100.054455][    C1]  ? __rate_control_send_low+0x5de/0x820
[  100.056767][    C1]  rate_control_send_low+0x194/0x7a0
[  100.058980][    C1]  rate_control_get_rate+0x20b/0x5d0
[  100.061154][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  100.063546][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  100.066104][    C1]  ? __pfx___netdev_alloc_skb+0x10/0x10
[  100.068432][    C1]  ? __ieee80211_beacon_get+0xfc9/0x17b0
[  100.070670][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  100.072879][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  100.075240][    C1]  __ieee80211_beacon_get+0x1033/0x17b0
[  100.077525][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[  100.079805][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  100.082104][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  100.084648][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  100.086950][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  100.089787][    C1]  __iterate_interfaces+0x2ab/0x590
[  100.091594][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  100.093961][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  100.096801][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  100.099237][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  100.102122][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  100.104144][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  100.106573][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  100.108801][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  100.111097][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  100.113528][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  100.115622][    C1]  handle_softirqs+0x286/0x870
[  100.117618][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  100.119566][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  100.121739][    C1]  __irq_exit_rcu+0xca/0x1f0
[  100.123680][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  100.125845][    C1]  irq_exit_rcu+0x9/0x30
[  100.127557][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  100.129923][    C1]  </IRQ>
[  100.131151][    C1]  <TASK>
[  100.132370][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  100.134844][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  100.136988][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  100.144750][    C1] RSP: 0018:ffffc900035ef910 EFLAGS: 00000206
[  100.147246][    C1] RAX: 349cc48d0f040900 RBX: 0000000000000000 RCX: 349cc48d0f040900
[  100.150571][    C1] RDX: 0000000000000000 RSI: ffffffff8db6efe6 RDI: ffffffff8be28d40
[  100.153795][    C1] RBP: ffffffff8b34f33a R08: 0000000000000000 R09: ffffffff8b34f33a
[  100.157075][    C1] R10: dffffc0000000000 R11: fffffbfff1f4219f R12: 0000000000000002
[  100.160371][    C1] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246
[  100.163535][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  100.165910][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  100.168253][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  100.170399][    C1]  ? __pfx_batadv_nc_sniffed_purge+0x10/0x10
[  100.172726][    C1]  batadv_nc_process_nc_paths+0xdb/0x3a0
[  100.175010][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  100.177376][    C1]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  100.179785][    C1]  batadv_nc_worker+0x52b/0x610
[  100.181909][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  100.184402][    C1]  process_scheduled_works+0xae1/0x17b0
[  100.186736][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  100.189200][    C1]  worker_thread+0x8a0/0xda0
[  100.191194][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.193832][    C1]  ? __kthread_parkme+0x7b/0x200
[  100.195861][    C1]  kthread+0x711/0x8a0
[  100.197570][    C1]  ? __pfx_worker_thread+0x10/0x10
[  100.199638][    C1]  ? __pfx_kthread+0x10/0x10
[  100.201510][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.203638][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.205814][    C1]  ? __pfx_kthread+0x10/0x10
[  100.207681][    C1]  ret_from_fork+0x3fc/0x770
[  100.209669][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  100.211671][    C1]  ? __switch_to_asm+0x39/0x70
[  100.213651][    C1]  ? __switch_to_asm+0x33/0x70
[  100.215751][    C1]  ? __pfx_kthread+0x10/0x10
[  100.217675][    C1]  ret_from_fork_asm+0x1a/0x30
[  100.219677][    C1]  </TASK>
[  100.221733][    C1] Kernel Offset: disabled
[  100.223478][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:03:10  Registers:
info registers vcpu 0

CPU#0
RAX=201573948f433200 RBX=0000000000000200 RCX=201573948f433200 RDX=0000000000000000
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffc900033afc00 RSP=ffffc900033afab8
R8 =ffffffff8fa10cf7 R9 =1ffffffff1f4219e R10=dffffc0000000000 R11=fffff52000675f71
R12=ffff88804b031401 R13=0000000000000000 R14=0000000000000000 R15=ffff88804b0314f0
RIP=ffffffff81001756 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555564d65500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbf0657e2d8 CR3=0000000028d0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00000000ffffffff 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fbf06411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfef0
R8 =ffff888107ef0237 R9 =1ffff11020fde046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48c8 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f310c4e7d60 CR3=0000000104ec2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3da5384478 00007f3da5384450 XMM03=00007f3da5384488 00007f3da5384480
XMM04=00007f3da5eed100 00007f3da5384440 XMM05=00007f3da5384458 00007f3da53844a0
XMM06=00007f3da5384498 00007f3da5384490 XMM07=00007f3da5384488 00007f3da5384480
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
