last executing test programs:

2.791221337s ago: executing program 2 (id=609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x13}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004441)
shutdown(r6, 0x0) (async)
recvmmsg(r6, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe)
socket(0x2b, 0x6, 0x8000)

2.701892381s ago: executing program 0 (id=611):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x2}, 0x3c)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
unshare(0x62040200)
write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ff7f004500002c00000000002f9000"/29], 0x3e)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x2, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x9, 0x7ff, 0xfffe, 0x0, 0x2000040, 0x85000040})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.700307133s ago: executing program 2 (id=612):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) (async, rerun: 32)
shutdown(r1, 0x0) (rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000580)={r2}, &(0x7f0000000180)=0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3280}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0xfd}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x48}}, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000020000100000004a6b0dadf250a008000a90000073500000014000200fc020000000000000000000000000001"], 0x30}}, 0x40) (async)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)

2.611973646s ago: executing program 2 (id=613):
poll(&(0x7f0000009b00)=[{}], 0x1, 0x72)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="da17530080ff", @ANYRES32=0x0, @ANYBLOB="08d10000000000006401128009000100766c616e00000000540102800c0002000e0000000c0000000600050088a800007c0003800c0001007b4b0000000000000c00010005000000090000000c00010002"], 0x198}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)

2.510705264s ago: executing program 0 (id=614):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf250600000030000180140002007369743000000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="080003000200000008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="60000180080003000200000008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468315f746f5f6261746164760014000200766c616e300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e3000000000000000003800018008000100", @ANYRES32=0x0, @ANYBLOB="088d7006f0a3dd9def3e02db600100", @ANYRES32=r10, @ANYRES64=r10, @ANYRES32=r10, @ANYBLOB="20000180140002007465616d5f736c6176655f300000000008000300010000001c0001800800030001000000080003000000000008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r1, @ANYBLOB="5c000180140002006970766c616e3100000000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYBLOB="ca6ce5825f741183cda73d10cd06bce8145e0236aebf6492991e22950aceb371b2afbafb2620238023ecf84be3975cb851b89386eec27d88a8c909893ebda3b378", @ANYBLOB="080003000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030003000000140002006272696467653000000000000000000008000100", @ANYRES32=r10, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES64=r4], 0x18c}, 0x1, 0x0, 0x0, 0x4048}, 0x8000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
sendmmsg(r9, &(0x7f00000058c0), 0x0, 0x40000)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd28, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00001000000000000000001080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x18, &(0x7f0000000680)=ANY=[@ANYRESOCT=r7, @ANYRES16=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000218110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000003c0)=0xf, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r10, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

2.401777058s ago: executing program 2 (id=615):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x114, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_IE={0xe2, 0x2a, [@random={0x0, 0xb, "fc61f698419b3081a7c836"}, @random={0x1, 0xa8, "332ed81d38cf1cd60a86c97e57626446101cece37fb1454d6c0ca4c750b53cbdb571b40830b0b429b3fce785ed0141850474fcd336b0bf9335da12d4bb202e6d40bd6d4818e3a7bd418e1adc220834a38107d88e30a15603c71ad33368fd3d77fa048a1a98e0fddbc9917feaf14d6d27ddef8497f90596dfa44bde0449f0a6e9f96401bf7c244fc0b33fe6d3fc87650081a701703357dee78f37fea48db46b5854a5a7aea9f9922b"}, @challenge={0x10, 0x1, 0x14}, @perr={0x84, 0x22, {0x6, 0x2, [{{}, @device_a, 0x6, @void, 0x37}, {{0x0, 0x1}, @broadcast, 0x1, @value=@device_b, 0x7}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x776}]}, 0x114}, 0x1, 0x0, 0x0, 0x4801}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x3c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24040004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000008c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001d80)={{r5}, r6, 0x4, @unused=[0x2, 0x6f, 0x4, 0x2], @devid})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x84)
r8 = socket(0x200000000000011, 0x2, 0x0)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d2d28732c5fbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000300)={0x81})
bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
bind$can_raw(r8, &(0x7f0000000040), 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffe8b, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10)

2.342121165s ago: executing program 2 (id=616):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r1=>0x0})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', <r10=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

2.243896556s ago: executing program 2 (id=618):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000002c0), 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}, {0x0}], 0x2)
sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=r3], 0x80}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r6, 0x0, 0x0, 0x10000, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e33, @multicast1}, 0x10)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r8)
socket$pppoe(0x18, 0x1, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

1.861756273s ago: executing program 1 (id=622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffc, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x40040c0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280040012000500160002000000060018"], 0x54}}, 0x20000000)
r6 = socket(0x2a, 0x80000, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
accept4(r2, &(0x7f0000000300)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80800)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = socket(0x10, 0x3, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0xc], 0x1, [0x8, 0x4, 0xc000, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x202b, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_delvlan={0x94, 0x71, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x34, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x1e, 0x1}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x51}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000048841)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r6, 0x6a4d1000)

1.761364475s ago: executing program 1 (id=623):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x74bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x3c}}, 0x84000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x20004000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', <r1=>0x0, 0x29, 0x80, 0x4, 0x5, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}, @private2, 0x8, 0x80, 0x5, 0x80}})
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00001700000000001c0037800b0001"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r7=>0x0, &(0x7f00000002c0)=0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0xba01}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r11=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r12=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x99, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000580), 0x8, 0x27, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000004700)={'team0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r16, @ANYBLOB="4800028044000100240001006d6f6465000008000000000000000000000000000000000000000000000000000500030005020000110004"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@rand_addr, @rand_addr, <r17=>0x0}, &(0x7f0000000780)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b8, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ab5e2f72a35ee0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1b8}}, 0x0)
r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r18, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

1.700223221s ago: executing program 1 (id=624):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'gretap0\x00', <r3=>0x0, 0x8000, 0x80, 0xa, 0x80000001, {{0x7, 0x4, 0x2, 0x12, 0x1c, 0x66, 0x0, 0x8, 0x4, 0x0, @multicast2, @private=0xa010102, {[@timestamp={0x44, 0x8, 0xf2, 0x0, 0x7, [0x2]}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@delchain={0x2c, 0x65, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xb}, {0x0, 0x4}, {0xe, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x80)
close(r1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvfrom(r4, 0x0, 0x0, 0x40002023, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7) (async)
r8 = socket$unix(0x1, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0}) (async)
r11 = socket$unix(0x1, 0x2, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) (async)
bind$inet(r13, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) (async)
close(0x3)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x4001) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xe5ecbac3ac1e1e91, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffed}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4a1, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0xc, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x3, 0x3, 0x101, 0x0, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.641127344s ago: executing program 0 (id=625):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000004c0)={'\x00', @local})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00020000000000000000000006000000040100000000afe274d9da000000000000000000004c8a"], 0xfc}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="0200"/18], 0x50)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', 0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0)
recvmmsg$unix(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001a80)=""/4102, 0x1006}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0)
unshare(0x400)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELCHAIN={0x19c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x69, 0xc, "3751b18d1edcc9fe4e8805bd3490006a720c3dc9cf02462d5f72cd9aac6f4d30b6ef4885e5b4847b2d8a00fcfd1d7012be77c606a1dfb08a3eb479567e4cf35ac12f98be47d95dd8e32a37800d71f6b42de35331ec0e18afd71705be6d4e6d8a2fd6ac4e99"}, @NFTA_CHAIN_USERDATA={0xdb, 0xc, "f85fed87e497418d14de3bfbe460563b6c76d8373b48cee9400721ac9ffc4fe288578078acc5ccafb8aa9d6bbcff80ab44fde6bca4c05a10c84a91572b66432c69eb7014c3b7b2ceba81a12a871c97f14e91bd1aa5e4c663795bccd205120dd57ece992916eec56c1cab34412182ace06561cc884444b0df756e195b589c64ad5a47b56fb90331f79f1657b76b23717afc3719034d191a575131993316283fc7dc0ef04b0344d646a19b976c51ce13a25ecc664e4c29653e601f5e662e017cea6738f6df6fd6d57beea5d4d53e1bb3b54e6929b6a42899"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x800)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x41000)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.638867726s ago: executing program 1 (id=626):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x408006}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x64, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000050}, 0x20040045)
getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)
socket(0x2b, 0x80801, 0x1) (async)
r7 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) (async)
connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c)
listen(r7, 0x8000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRESDEC=r3], 0x20}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x3c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x800) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x3c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x800)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x40000, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0xa9, 0x0, 0x0, 0x7, 0x12}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x40)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.531545029s ago: executing program 0 (id=627):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x204000, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000001050500000000000000000a000005440002802c00018014000300ffad004d870901000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000060003"], 0x58}}, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r5, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001540)=""/4097, 0x1001}], 0x1}}], 0x1, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x490267a0}, 0x1c)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
bind$isdn_base(0xffffffffffffffff, &(0x7f0000001200)={0x22, 0xe, 0x27, 0x7, 0x73}, 0x6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='scalable\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r0, 0x1)

1.530026491s ago: executing program 1 (id=628):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25e000000100000000000000000000000000020000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d3854faa140db9a200000000c538c7cb7a1c0004"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
close(0x3)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, &(0x7f0000000140))
close(0x4)

637.710918ms ago: executing program 0 (id=629):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xc, 0x0, 0x4, 0x0, 0xa46}, 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0xccd4ddef28b9e90e}, 0x24040084)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a", 0x4}], 0x1}, 0x448e4)
socket$packet(0x11, 0x3, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r5, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}})

1.010171ms ago: executing program 0 (id=630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYBLOB="00000000000000002500000001000000180000000000000000000000000000009500000000000d00a7030000000000009500000000000000dc82182e3cb2264bf9f514d6e01e30a68728a60bdaea2d1a6e882f49402cf36236933bb8839dc4ddd2b98d1b67a932f1dc1775da43977cdbc6302a0cdafa2bdb7303db513b6cb3238f"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async, rerun: 32)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82)
close(r7) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) (async, rerun: 64)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x8, 0x1, 0x0, r4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}]}, &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) (async, rerun: 64)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8) (async, rerun: 32)
r14 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async, rerun: 32)
r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

0s ago: executing program 1 (id=631):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x884) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r0 = socket(0xa, 0x4, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24040004) (async)
r2 = epoll_create(0x1) (async)
r3 = epoll_create1(0x80000) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, 0x0, 0x0)
close(r4) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x3c, 0x1, 0x10000, &(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
r5 = accept(r1, 0x0, &(0x7f0000000480))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x54}, @in6={0xa, 0x4e24, 0x6, @empty, 0x5}], 0x38) (async)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'erspan0\x00'})
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r7], 0x0, 0x56}, 0x28) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x1dc}}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') (async)
socket$inet6_udp(0xa, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52795' (ED25519) to the list of known hosts.
syzkaller login: [   48.964408][ T5778] cgroup: Unknown subsys name 'net'
[   49.114357][ T5778] cgroup: Unknown subsys name 'cpuset'
[   49.128343][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.123906][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.445671][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.446262][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.449020][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.454993][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.460770][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.464918][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.467879][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.470739][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.487025][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.490234][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.491328][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.493521][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.495808][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.498313][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.501450][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.860475][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.895544][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.912786][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   57.013041][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.016673][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.019283][ T5841] bridge_slave_0: entered allmulticast mode
[   57.023898][ T5841] bridge_slave_0: entered promiscuous mode
[   57.041406][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.044421][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.047421][ T5841] bridge_slave_1: entered allmulticast mode
[   57.052145][ T5841] bridge_slave_1: entered promiscuous mode
[   57.134070][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.137083][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.139543][ T5840] bridge_slave_0: entered allmulticast mode
[   57.144861][ T5840] bridge_slave_0: entered promiscuous mode
[   57.153098][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.173081][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.176054][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.178906][ T5842] bridge_slave_0: entered allmulticast mode
[   57.185819][ T5842] bridge_slave_0: entered promiscuous mode
[   57.190892][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.193696][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.196785][ T5840] bridge_slave_1: entered allmulticast mode
[   57.200981][ T5840] bridge_slave_1: entered promiscuous mode
[   57.220387][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.224496][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.227488][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.230205][ T5842] bridge_slave_1: entered allmulticast mode
[   57.232958][ T5842] bridge_slave_1: entered promiscuous mode
[   57.254501][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.297450][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.312756][ T5841] team0: Port device team_slave_0 added
[   57.316668][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.331223][ T5841] team0: Port device team_slave_1 added
[   57.334751][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.339498][ T5840] team0: Port device team_slave_0 added
[   57.362898][ T5840] team0: Port device team_slave_1 added
[   57.376611][ T5842] team0: Port device team_slave_0 added
[   57.380605][ T5842] team0: Port device team_slave_1 added
[   57.414260][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.416543][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.426376][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.432031][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.434311][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.443387][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.481327][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.484069][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.494633][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.499798][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.503238][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.513926][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.520494][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.523185][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.533677][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.545989][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.548202][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.557372][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.615434][ T5841] hsr_slave_0: entered promiscuous mode
[   57.618621][ T5841] hsr_slave_1: entered promiscuous mode
[   57.667804][ T5840] hsr_slave_0: entered promiscuous mode
[   57.671828][ T5840] hsr_slave_1: entered promiscuous mode
[   57.674624][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   57.676959][ T5840] Cannot create hsr debugfs directory
[   57.712480][ T5842] hsr_slave_0: entered promiscuous mode
[   57.714733][ T5842] hsr_slave_1: entered promiscuous mode
[   57.717482][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   57.720476][ T5842] Cannot create hsr debugfs directory
[   57.989818][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.998575][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.007367][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.013907][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.077169][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.113720][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.138637][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.161963][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.168124][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.174635][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.182031][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.188060][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.286654][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.335029][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   58.349027][  T793] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.351935][  T793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.372570][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.377170][  T793] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.379838][  T793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.418049][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   58.427684][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.438934][  T793] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.442128][  T793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.454168][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.456462][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.496216][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.519511][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.522036][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.536401][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.538703][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.542140][   T53] Bluetooth: hci1: command tx timeout
[   58.544009][   T53] Bluetooth: hci2: command tx timeout
[   58.545782][   T53] Bluetooth: hci0: command tx timeout
[   58.637797][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.696604][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.700660][ T5841] veth0_vlan: entered promiscuous mode
[   58.713465][ T5841] veth1_vlan: entered promiscuous mode
[   58.767102][ T5841] veth0_macvtap: entered promiscuous mode
[   58.779784][ T5841] veth1_macvtap: entered promiscuous mode
[   58.786452][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.788826][ T5840] veth0_vlan: entered promiscuous mode
[   58.803438][ T5840] veth1_vlan: entered promiscuous mode
[   58.813474][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.829622][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.843127][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.857896][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.862665][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.874725][ T5842] veth0_vlan: entered promiscuous mode
[   58.876973][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.894076][ T5840] veth0_macvtap: entered promiscuous mode
[   58.899828][ T5842] veth1_vlan: entered promiscuous mode
[   58.906661][ T5840] veth1_macvtap: entered promiscuous mode
[   58.962047][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.978493][ T5842] veth0_macvtap: entered promiscuous mode
[   58.978491][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.984785][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.988034][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.991017][ T5842] veth1_macvtap: entered promiscuous mode
[   59.016530][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.026075][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.029860][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.036436][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.043143][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.054102][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.056853][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.067774][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.084790][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.112489][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.115730][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.128824][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.142333][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.165112][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.172731][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.229717][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.232178][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.233555][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.236304][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.268948][  T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.272717][  T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.376185][ T5922] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.422425][ T5928] netlink: 'syz.0.4': attribute type 2 has an invalid length.
[   59.464854][ T5931] netlink: 'syz.0.5': attribute type 23 has an invalid length.
[   59.574861][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'.
[   59.649099][ T5941] netlink: 'syz.0.7': attribute type 13 has an invalid length.
[   59.653773][ T5941] netlink: 'syz.0.7': attribute type 17 has an invalid length.
[   59.698293][ T5941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.793002][ T5944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.832110][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   60.071114][ T2210] IPVS: starting estimator thread 0...
[   60.117701][ T5947] Zero length message leads to an empty skb
[   60.161042][ T5950] IPVS: using max 64 ests per chain, 153600 per kthread
[   60.221750][ T5958] pim6reg: entered allmulticast mode
[   60.230612][ T5958] pim6reg: left allmulticast mode
[   60.262673][ T5957] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET)
[   60.353386][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[   60.354140][ T5963] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12'.
[   60.591444][ T5944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.624253][ T5850] Bluetooth: hci0: command tx timeout
[   60.626235][ T5850] Bluetooth: hci2: command tx timeout
[   60.627718][   T53] Bluetooth: hci1: command tx timeout
[   60.643035][ T5974] netlink: 92 bytes leftover after parsing attributes in process `syz.1.17'.
[   60.647576][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.706336][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'.
[   60.709398][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'.
[   60.747825][ T5983] netlink: 'syz.1.21': attribute type 9 has an invalid length.
[   60.874274][ T5989] tipc: Started in network mode
[   60.876191][ T5989] tipc: Node identity ac14140f, cluster identity 4711
[   60.879010][ T5989] tipc: New replicast peer: 255.255.255.255
[   60.882635][ T5989] tipc: Enabled bearer <udp:syz2>, priority 10
[   60.947351][ T5991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25'.
[   61.019281][ T5995] netlink: 'syz.2.24': attribute type 10 has an invalid length.
[   61.033630][ T5995] 8021q: adding VLAN 0 to HW filter on device team0
[   61.037577][ T5995] bond0: (slave team0): Enslaving as an active interface with an up link
[   61.164933][ T6002] netlink: 'syz.2.26': attribute type 6 has an invalid length.
[   61.182684][ T6002] netlink: 'syz.2.26': attribute type 12 has an invalid length.
[   61.185434][ T6002] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.26'.
[   61.713063][ T5944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.000868][ T5847] tipc: Node number set to 2886997007
[   62.025605][ T5944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.173927][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.184694][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.196891][   T24] cfg80211: failed to load regulatory.db
[   62.199829][ T6017] team0: Device ipip0 is of different type
[   62.239365][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.254787][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.323624][ T6026] tipc: Started in network mode
[   62.325906][ T6026] tipc: Node identity ac14140f, cluster identity 4711
[   62.328817][ T6026] tipc: New replicast peer: 255.255.255.255
[   62.334288][ T6026] tipc: Enabled bearer <udp:syz2>, priority 10
[   62.426958][ T6025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.448398][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'.
[   62.610743][ T6040] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   62.613668][ T6040] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[   62.673933][ T6042] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   62.679236][ T6046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.700746][   T53] Bluetooth: hci2: command tx timeout
[   62.701106][ T5854] Bluetooth: hci0: command tx timeout
[   62.710233][ T5854] Bluetooth: hci1: command tx timeout
[   62.796992][ T6051] bridge_slave_0: left allmulticast mode
[   62.799061][ T6051] bridge_slave_0: left promiscuous mode
[   62.806421][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.815978][ T6051] bridge_slave_1: left allmulticast mode
[   62.817807][ T6051] bridge_slave_1: left promiscuous mode
[   62.820212][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.827029][ T6051] bond0: (slave bond_slave_0): Releasing backup interface
[   62.837641][ T6052] netlink: 'syz.0.41': attribute type 10 has an invalid length.
[   62.842064][ T6051] bond0: (slave bond_slave_1): Releasing backup interface
[   62.861016][ T6051] team0: Port device team_slave_0 removed
[   62.867154][ T6051] team0: Port device team_slave_1 removed
[   62.869822][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.875076][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.881138][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.884104][ T6051] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.926128][ T6052] batman_adv: batadv0: Adding interface: virt_wifi0
[   62.929109][ T6052] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.947799][ T6052] batman_adv: batadv0: Interface activated: virt_wifi0
[   62.959104][ T6058] delete_channel: no stack
[   62.963161][ T6058] delete_channel: no stack
[   62.964836][ T6058] delete_channel: no stack
[   62.966711][ T6058] delete_channel: no stack
[   62.968425][ T6058] delete_channel: no stack
[   62.975119][ T6058] delete_channel: no stack
[   63.342737][  T972] tipc: Node number set to 2886997007
[   64.200585][ T6094] veth1_macvtap: left promiscuous mode
[   64.209518][ T6092] nbd: must specify an index to disconnect
[   64.235444][ T6092] batadv0: entered promiscuous mode
[   64.237455][ T6092] macsec1: entered promiscuous mode
[   64.243958][ T6092] batadv0: left promiscuous mode
[   64.353739][ T6101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.633388][ T6114] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   64.683984][ T6116] __nla_validate_parse: 11 callbacks suppressed
[   64.684001][ T6116] netlink: 256 bytes leftover after parsing attributes in process `syz.1.56'.
[   64.690717][ T6116] netlink: 48 bytes leftover after parsing attributes in process `syz.1.56'.
[   64.725527][ T6116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.780252][ T5854] Bluetooth: hci1: command tx timeout
[   64.780814][   T53] Bluetooth: hci0: command tx timeout
[   64.782791][ T5850] Bluetooth: hci2: command tx timeout
[   64.815596][ T6118] syzkaller1: tun_chr_ioctl cmd 1074025677
[   64.818455][ T6118] syzkaller1: linktype set to 6
[   64.826934][ T6118] netlink: 260 bytes leftover after parsing attributes in process `syz.1.57'.
[   64.832470][ T6118] netlink: 260 bytes leftover after parsing attributes in process `syz.1.57'.
[   64.926526][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   64.988172][ T6122] validate_nla: 2 callbacks suppressed
[   64.988199][ T6122] netlink: 'syz.1.59': attribute type 10 has an invalid length.
[   64.997254][ T6122] 8021q: adding VLAN 0 to HW filter on device team0
[   65.002393][ T6122] bond0: (slave team0): Enslaving as an active interface with an up link
[   65.326964][ T6144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.66'.
[   65.360327][ T6148] IPVS: set_ctl: invalid protocol: 51 172.30.0.2:20000
[   65.489605][ T6154] netlink: 76 bytes leftover after parsing attributes in process `syz.0.69'.
[   65.505223][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'.
[   65.508633][ T6154] netlink: 'syz.0.69': attribute type 15 has an invalid length.
[   65.526144][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.526188][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'.
[   65.532699][ T6154] netlink: 'syz.0.69': attribute type 15 has an invalid length.
[   65.534547][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.538800][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.542390][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   65.548521][ T6154] netlink: 'syz.0.69': attribute type 83 has an invalid length.
[   65.771979][ T6165] syzkaller1: tun_chr_ioctl cmd 1074025677
[   65.774117][ T6165] syzkaller1: linktype set to 6
[   65.775866][ T6166] syzkaller1: tun_chr_ioctl cmd 1074025677
[   65.778494][ T6166] syzkaller1: linktype set to 6
[   65.845042][ T6168] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   65.848875][ T6168] netlink: 14 bytes leftover after parsing attributes in process `syz.0.75'.
[   65.909543][ T6168] bond0 (unregistering): Released all slaves
[   66.482863][ T6176] netlink: 'syz.2.79': attribute type 6 has an invalid length.
[   66.567585][ T6181] netlink: 'syz.1.80': attribute type 8 has an invalid length.
[   66.587114][ T6186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.592980][ T6186] syzkaller0: entered promiscuous mode
[   66.595388][ T6186] syzkaller0: entered allmulticast mode
[   66.635936][ T6184] tipc: Resetting bearer <eth:syzkaller0>
[   66.655329][ T6184] tipc: Disabling bearer <eth:syzkaller0>
[   71.109081][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.111969][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   82.094127][ T6206] netlink: 'syz.1.86': attribute type 21 has an invalid length.
[   82.109318][ T6208] __nla_validate_parse: 2 callbacks suppressed
[   82.109336][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'.
[   82.312793][ T6219] can: request_module (can-proto-0) failed.
[   82.317389][ T6219] openvswitch: netlink: IP tunnel dst address not specified
[   82.344514][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.85'.
[   82.513840][ T6231] netlink: 'syz.2.91': attribute type 29 has an invalid length.
[   82.518545][ T6231] netlink: 'syz.2.91': attribute type 29 has an invalid length.
[   82.525387][ T6231] netlink: 500 bytes leftover after parsing attributes in process `syz.2.91'.
[   82.529256][ T6231] unsupported nla_type 58
[   83.123444][ T6241] syz.2.94 (6241) used greatest stack depth: 19384 bytes left
[   83.149604][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   83.304043][ T6266] netlink: 'syz.0.100': attribute type 1 has an invalid length.
[   83.350988][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.101'.
[   83.379183][ T6269] veth3: entered promiscuous mode
[   83.426577][ T6266] erspan0: entered allmulticast mode
[   83.775406][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   84.103385][ T6305] openvswitch: netlink: Actions may not be safe on all matching packets
[   84.206309][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   84.217987][ T6308] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   84.224060][ T6312] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002
[   84.226500][ T6310] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002
[   84.464901][ T6328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.117'.
[   84.494441][ T6332] Bluetooth: MGMT ver 1.23
[   84.636709][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.121'.
[   84.664463][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'.
[   84.674704][ T6343] bond0: (slave rose0): Error: Device can not be enslaved while up
[   84.691439][ T6340] can: request_module (can-proto-0) failed.
[   84.694748][ T6340] openvswitch: netlink: IP tunnel dst address not specified
[   84.708797][ T5912] IPVS: starting estimator thread 0...
[   84.800508][ T6346] IPVS: using max 64 ests per chain, 153600 per kthread
[   85.034063][ T6366] xt_policy: neither incoming nor outgoing policy selected
[   85.503088][ T6394] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   85.736150][ T6409] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   85.954071][ T6423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.957403][ T6425] trusted_key: syz.2.147 sent an empty control message without MSG_MORE.
[   85.971770][ T6425] bridge2: entered promiscuous mode
[   85.973435][ T6425] bridge2: entered allmulticast mode
[   85.976913][ T6425] team0: Port device bridge2 added
[   86.001167][ T6423] syzkaller0: entered promiscuous mode
[   86.003515][ T6423] syzkaller0: entered allmulticast mode
[   86.023767][ T6423] tipc: Resetting bearer <eth:syzkaller0>
[   86.030333][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   86.034570][ T6422] tipc: Resetting bearer <eth:syzkaller0>
[   86.059337][ T6422] tipc: Disabling bearer <eth:syzkaller0>
[   86.574083][ T6463] openvswitch: netlink: IPv4 tun info is not correct
[   86.774708][ T6470] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.778573][ T6470] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.835859][ T6470] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.839225][ T6470] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.887695][ T6470] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.891914][ T6470] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.959164][ T6470] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.962866][ T6470] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.019835][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.023846][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.034200][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.037917][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.048105][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.051921][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.063451][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.068068][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.278365][ T6484] __nla_validate_parse: 11 callbacks suppressed
[   87.278381][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'.
[   87.284936][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'.
[   87.292456][ T6484] team0: entered promiscuous mode
[   87.294687][ T6484] team_slave_0: entered promiscuous mode
[   87.297243][ T6484] team_slave_1: entered promiscuous mode
[   87.300925][ T6484] team0: left promiscuous mode
[   87.302685][ T6484] team_slave_0: left promiscuous mode
[   87.305056][ T6484] team_slave_1: left promiscuous mode
[   87.434236][ T6487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.437462][ T6487] syzkaller0: entered promiscuous mode
[   87.439674][ T6487] syzkaller0: entered allmulticast mode
[   87.446626][ T6487] tipc: Resetting bearer <eth:syzkaller0>
[   87.449714][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[   87.455522][ T6487] bridge_slave_1: left allmulticast mode
[   87.457909][ T6487] bridge_slave_1: left promiscuous mode
[   87.460603][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.465848][ T6487] bridge_slave_0: left allmulticast mode
[   87.468054][ T6487] bridge_slave_0: left promiscuous mode
[   87.471707][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.553480][ T6486] tipc: Resetting bearer <eth:syzkaller0>
[   87.562397][ T6486] tipc: Disabling bearer <eth:syzkaller0>
[   87.628987][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'.
[   87.697145][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'.
[   87.715426][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'.
[   88.093355][ T6508] netlink: 100 bytes leftover after parsing attributes in process `syz.2.173'.
[   88.153331][ T6513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.156965][ T6513] syzkaller0: entered promiscuous mode
[   88.159245][ T6513] syzkaller0: entered allmulticast mode
[   88.167943][ T6513] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   88.469667][ T6531] ieee802154 phy0 wpan0: encryption failed: -22
[   88.752426][ T6539] tipc: Resetting bearer <eth:syzkaller0>
[   88.794452][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'.
[   88.991692][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[   89.007768][ T6512] tipc: Disabling bearer <eth:syzkaller0>
[   89.209437][ T6549] netlink: 132 bytes leftover after parsing attributes in process `syz.2.186'.
[   89.357659][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'.
[   89.433488][ T6557] bond1: entered promiscuous mode
[   89.663908][ T6582] bridge0: port 1(syz_tun) entered blocking state
[   89.667631][ T6582] bridge0: port 1(syz_tun) entered disabled state
[   89.681908][ T6582] syz_tun: entered allmulticast mode
[   89.690364][ T6582] syz_tun: entered promiscuous mode
[   89.726783][ T6582] netlink: 'syz.0.197': attribute type 10 has an invalid length.
[   89.777355][ T6579] can: request_module (can-proto-0) failed.
[   89.794622][ T6590] netlink: 'syz.0.199': attribute type 11 has an invalid length.
[   90.019713][ T6600] xt_l2tp: missing protocol rule (udp|l2tpip)
[   90.175069][ T6598] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   90.288187][ T6617] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[   90.464803][ T6633] netlink: 'syz.2.208': attribute type 1 has an invalid length.
[   90.473386][ T6633] netlink: 'syz.2.208': attribute type 2 has an invalid length.
[   90.493229][ T6637] syz_tun: entered allmulticast mode
[   90.535648][ T6637] syz_tun (unregistering): left allmulticast mode
[   90.689220][ T6646] netlink: 'syz.2.211': attribute type 10 has an invalid length.
[   90.701904][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.708579][ T6646] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   90.933456][ T6648] netlink: 'syz.2.212': attribute type 1 has an invalid length.
[   90.968556][ T6648] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.998172][ T6648] bond2: (slave ip6gretap1): making interface the new active one
[   91.003308][ T6648] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   91.014456][ T6651] netlink: 'syz.0.213': attribute type 12 has an invalid length.
[   91.035323][ T6648] veth3: entered promiscuous mode
[   91.041895][ T6648] bond2: (slave veth3): Enslaving as an active interface with a down link
[   91.283928][ T6667] netlink: 'syz.2.216': attribute type 13 has an invalid length.
[   91.322355][ T6667] gretap0: refused to change device tx_queue_len
[   91.324778][ T6667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   91.346514][ T6665] dvmrp1: tun_chr_ioctl cmd 1074025677
[   91.348441][ T6665] dvmrp1: linktype set to 805
[   91.354182][ T6674] dvmrp1: tun_chr_ioctl cmd 1074025677
[   91.356528][ T6674] dvmrp1: linktype set to 805
[   91.390894][ T6666] netlink: 'syz.1.218': attribute type 10 has an invalid length.
[   91.421013][ T6666] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.431797][ T6666] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   91.441572][ T6666] netlink: 'syz.1.218': attribute type 10 has an invalid length.
[   91.444732][ T6666] batadv0: entered promiscuous mode
[   91.446809][ T6666] batadv0: entered allmulticast mode
[   91.454097][ T6666] bond0: (slave batadv0): Releasing backup interface
[   91.466250][ T6666] bridge0: port 3(batadv0) entered blocking state
[   91.469517][ T6666] bridge0: port 3(batadv0) entered disabled state
[   91.721845][ T6690] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.725779][ T6690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.840880][ T5877] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   91.844033][ T5877] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   91.864898][ T6690] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.871695][ T6690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.982684][ T6690] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.988969][ T6690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.039338][ T6703] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   92.073505][ T6690] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.077388][ T6690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.179285][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.185349][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.206747][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.215889][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.229800][ T6716] openvswitch: netlink: Message has 5 unknown bytes.
[   92.259639][ T6714] vlan2: entered promiscuous mode
[   92.262532][ T6714] vlan2: entered allmulticast mode
[   92.265095][ T6714] hsr_slave_1: entered allmulticast mode
[   92.383691][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.388160][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.418394][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.426447][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.719689][ T6728] __nla_validate_parse: 88 callbacks suppressed
[   92.719709][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'.
[   92.726687][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'.
[   92.798243][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[   92.803611][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[   92.807305][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   92.817330][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'.
[   93.056306][ T6747] openvswitch: netlink: Actions may not be safe on all matching packets
[   93.081584][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'.
[   93.147534][ T6751] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   93.157242][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'.
[   93.171297][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'.
[   93.264927][ T6753] pim6reg1: entered promiscuous mode
[   93.267097][ T6753] pim6reg1: entered allmulticast mode
[   93.798369][ T6791] netlink: 56 bytes leftover after parsing attributes in process `syz.0.253'.
[   93.799492][ T6792] Set syz0 is full, maxelem 0 reached
[   93.805119][ T6792] Set syz0 is full, maxelem 0 reached
[   93.811700][ T6792] Set syz0 is full, maxelem 0 reached
[   94.186391][ T6818] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   94.994145][ T6855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.084586][ T6855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.148887][ T6855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.167782][ T6861] syzkaller0: entered promiscuous mode
[   95.170046][ T6861] syzkaller0: entered allmulticast mode
[   95.209463][ T6855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.297857][ T6863] validate_nla: 5 callbacks suppressed
[   95.297868][ T6863] netlink: 'syz.1.274': attribute type 8 has an invalid length.
[   95.307519][ T6863] bond0: entered promiscuous mode
[   95.309625][ T6863] bond_slave_0: entered promiscuous mode
[   95.312891][ T6863] bond_slave_1: entered promiscuous mode
[   95.315585][ T6863] team0: entered promiscuous mode
[   95.317812][ T6863] team_slave_0: entered promiscuous mode
[   95.324023][ T6863] team_slave_1: entered promiscuous mode
[   95.329796][ T6863] bond0: left promiscuous mode
[   95.331999][ T6863] bond_slave_0: left promiscuous mode
[   95.334401][ T6863] bond_slave_1: left promiscuous mode
[   95.336736][ T6863] team0: left promiscuous mode
[   95.338825][ T6863] team_slave_0: left promiscuous mode
[   95.341473][ T6863] team_slave_1: left promiscuous mode
[   95.373107][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.385859][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.402018][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.414573][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.622055][ T6879] netlink: 'syz.1.279': attribute type 1 has an invalid length.
[   96.597825][ T6913] netlink: 'syz.2.289': attribute type 4 has an invalid length.
[   96.655396][ T6917] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   96.699581][ T6917] bond3 (unregistering): Released all slaves
[   96.817052][ T6923] syzkaller0: entered promiscuous mode
[   96.819198][ T6923] syzkaller0: entered allmulticast mode
[   96.826830][ T6923] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   98.067452][ T6936] __nla_validate_parse: 21 callbacks suppressed
[   98.067468][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'.
[   98.243420][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[   98.410318][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.413576][ T5876] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.430387][ T5314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.760308][ T5314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.916256][ T6954] sit0: entered promiscuous mode
[   98.927154][ T6954] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[   98.936742][ T6954] netlink: 1 bytes leftover after parsing attributes in process `syz.2.301'.
[   99.017285][ T6959] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   99.021356][ T6959] syzkaller0: entered promiscuous mode
[   99.023738][ T6959] syzkaller0: entered allmulticast mode
[   99.260334][ T5314] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   99.387495][ T6967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'.
[   99.427103][ T6967] Bluetooth: MGMT ver 1.23
[   99.562076][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.565140][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.568120][ T6972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.568168][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.571378][ T6972] netlink: 'syz.2.308': attribute type 7 has an invalid length.
[   99.575292][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   99.579236][ T6971] netlink: 'syz.2.308': attribute type 7 has an invalid length.
[  100.502933][ T6976] sit0: left promiscuous mode
[  100.725600][ T6943] Set syz1 is full, maxelem 65536 reached
[  100.769724][ T6978] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.873027][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'.
[  100.876859][ T6981] bridge0: port 3(batadv0) entered disabled state
[  100.883518][ T6981] bridge_slave_1: left allmulticast mode
[  100.885801][ T6981] bridge_slave_1: left promiscuous mode
[  100.888392][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.894889][ T6981] bridge_slave_0: left allmulticast mode
[  100.897291][ T6981] bridge_slave_0: left promiscuous mode
[  100.899797][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.767166][ T6999] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  101.843549][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.847182][ T6999] batadv_slave_0: entered promiscuous mode
[  101.882961][ T7004] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  101.887865][ T7004] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  102.070166][ T7014] netlink: 'syz.1.320': attribute type 4 has an invalid length.
[  102.418567][ T7036] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.434080][ T7036] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.780166][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  102.875415][ T7012] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  103.136416][ T7062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.139312][ T7062] syzkaller0: entered promiscuous mode
[  103.144674][ T7062] syzkaller0: entered allmulticast mode
[  103.154805][ T7062] tipc: Resetting bearer <eth:syzkaller0>
[  103.177939][ T7061] tipc: Resetting bearer <eth:syzkaller0>
[  103.202215][ T7061] tipc: Disabling bearer <eth:syzkaller0>
[  103.356729][ T7081] __nla_validate_parse: 9 callbacks suppressed
[  103.356740][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.339'.
[  103.397966][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'.
[  103.511286][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'.
[  103.637901][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'.
[  103.773882][ T7114] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  103.777051][ T7114] netlink: 'syz.2.344': attribute type 2 has an invalid length.
[  103.784765][ T7114] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[  103.787324][ T7114] netlink: 'syz.2.344': attribute type 2 has an invalid length.
[  103.924823][ T7121] netlink: 664 bytes leftover after parsing attributes in process `syz.1.347'.
[  103.928978][ T7121] netlink: 664 bytes leftover after parsing attributes in process `syz.1.347'.
[  104.054981][ T7131] IPv6: sit2: Disabled Multicast RS
[  104.058215][ T7131] sit2: entered allmulticast mode
[  104.060656][ T5854] Bluetooth: hci0: command 0x0401 tx timeout
[  104.163659][ T7131] IPv6: sit2: Disabled Multicast RS
[  104.166934][ T7131] sit2: entered allmulticast mode
[  105.469462][ T7162] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[  105.523479][ T7162] bond3: (slave bridge0): making interface the new active one
[  105.526701][ T7162] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  105.561199][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'.
[  105.644926][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'.
[  105.747543][ T7180] gre1: entered allmulticast mode
[  105.787604][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'.
[  105.952321][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[  105.967076][ T7193] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  106.054139][ T7196] netlink: 'syz.2.359': attribute type 4 has an invalid length.
[  106.062071][ T7196] netlink: 'syz.2.359': attribute type 4 has an invalid length.
[  106.184824][ T7207] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  106.393329][ T7213] netlink: 'syz.2.365': attribute type 4 has an invalid length.
[  106.468052][ T7220] syzkaller0: entered promiscuous mode
[  106.473632][ T7220] syzkaller0: entered allmulticast mode
[  106.749190][ T7242] netlink: 'syz.1.372': attribute type 21 has an invalid length.
[  106.789830][ T7245] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.794387][ T7245] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.004234][ T7245] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.008032][ T7245] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.111917][ T7245] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.121639][ T7245] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.186701][ T7245] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.192519][ T7245] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.346274][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.351648][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.368336][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.372011][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.393366][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.396830][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.416995][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.433806][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.438423][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.979490][ T7317] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  108.053370][ T7325] tipc: Started in network mode
[  108.055099][ T7325] tipc: Node identity da919bc64199, cluster identity 4711
[  108.058166][ T7325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.198408][ T7324] tipc: Disabling bearer <eth:syzkaller0>
[  108.255362][ T7348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.263322][ T7348] syzkaller0: entered promiscuous mode
[  108.265743][ T7348] syzkaller0: entered allmulticast mode
[  108.367702][ T7351] tipc: Resetting bearer <eth:syzkaller0>
[  108.386115][ T7346] tipc: Resetting bearer <eth:syzkaller0>
[  108.398812][ T7346] tipc: Disabling bearer <eth:syzkaller0>
[  108.449398][ T7353] validate_nla: 2 callbacks suppressed
[  108.449420][ T7353] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  109.028986][ T7388] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  109.067786][ T7395] nbd: device at index 1 is going down
[  109.151814][ T7387] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  109.243492][ T7395] __nla_validate_parse: 12 callbacks suppressed
[  109.243513][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[  109.251102][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.254473][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.258719][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.263686][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.270794][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.278230][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.282558][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.285565][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.373783][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.377524][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.406063][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.417108][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.427467][ T7404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.434711][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.412'.
[  109.711793][ T7426] netlink: 128 bytes leftover after parsing attributes in process `syz.2.418'.
[  109.717228][ T7426] netlink: 128 bytes leftover after parsing attributes in process `syz.2.418'.
[  109.777757][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[  110.268425][ T7432] syz_tun: left allmulticast mode
[  110.271052][ T7432] syz_tun: left promiscuous mode
[  110.273447][ T7432] bridge0: port 1(syz_tun) entered disabled state
[  110.278625][ T7432] batman_adv: batadv0: Removing interface: virt_wifi0
[  110.305979][ T7432] netlink: 'syz.0.420': attribute type 10 has an invalid length.
[  110.311051][ T7432] batman_adv: batadv0: Adding interface: virt_wifi0
[  110.313302][ T7432] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.322819][ T7432] batman_adv: batadv0: Interface activated: virt_wifi0
[  110.388633][ T7439] syzkaller0: entered promiscuous mode
[  110.396331][ T7439] syzkaller0: entered allmulticast mode
[  111.420101][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  111.549632][ T7514] openvswitch: netlink: Flow actions attr not present in new flow.
[  111.605976][ T7519] netlink: 'syz.1.445': attribute type 14 has an invalid length.
[  111.611794][ T7519] netlink: 'syz.1.445': attribute type 14 has an invalid length.
[  111.893797][ T7540] netlink: 'syz.2.450': attribute type 1 has an invalid length.
[  111.897080][ T7540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.044665][ T7550] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[  112.717319][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.720388][ T7587] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  112.725305][ T7587] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  112.772814][ T7584] netlink: 'syz.1.460': attribute type 10 has an invalid length.
[  112.780599][ T7584] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  112.795220][ T7584] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  112.796326][ T7590] netlink: 'syz.2.462': attribute type 1 has an invalid length.
[  112.821795][ T7590] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.837456][ T7590] bond4: (slave wlan0): Enslaving as an active interface with a down link
[  112.842765][ T7590] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  112.845604][ T7590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.909183][ T7594] vlan2: entered allmulticast mode
[  112.911743][ T7594] veth1: entered allmulticast mode
[  112.913837][ T7594] veth1: entered promiscuous mode
[  112.916054][ T7594] veth1: left promiscuous mode
[  112.919645][ T7594] bond4: (slave vlan2): making interface the new active one
[  112.924180][ T7596] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  112.925611][ T7594] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  112.933705][ T7594] veth1: entered promiscuous mode
[  112.936004][ T7594] vlan2: entered promiscuous mode
[  112.937913][ T7594] bond4: (slave vlan2): Enslaving as an active interface with an up link
[  112.983961][ T7600] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  112.987111][ T7600] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  113.134431][ T7614] siw: device registration error -23
[  113.305885][ T7628] vxcan1: entered allmulticast mode
[  113.308312][ T7628] vxcan1: left allmulticast mode
[  113.373099][ T7628] raw_sendmsg: syz.1.473 forgot to set AF_INET. Fix it!
[  113.467552][ T7632] netlink: 'syz.1.475': attribute type 30 has an invalid length.
[  113.473766][ T7632] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  113.476726][ T7632] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  113.483605][ T7642] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.642857][ T7653] : entered promiscuous mode
[  113.688681][ T7643] openvswitch: : Dropping previously announced user features
[  115.411740][ T7712] netlink: 'syz.0.486': attribute type 10 has an invalid length.
[  115.423440][ T7712] team0: Port device  added
[  115.429689][ T7714] netlink: 'syz.1.487': attribute type 5 has an invalid length.
[  115.433359][ T7714] __nla_validate_parse: 99 callbacks suppressed
[  115.433370][ T7714] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.487'.
[  115.446901][ T7714] bridge2: entered promiscuous mode
[  115.545917][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'.
[  115.611931][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'.
[  115.728660][ T7741] nicvf0: entered promiscuous mode
[  115.733282][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  115.741539][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  115.751013][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  115.754288][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  115.845693][ T7752] pim6reg: entered allmulticast mode
[  115.884561][ T7756] netlink: 'syz.1.496': attribute type 13 has an invalid length.
[  115.887644][ T7756] netlink: 'syz.1.496': attribute type 17 has an invalid length.
[  115.966974][ T7756] 8021q: adding VLAN 0 to HW filter on device team0
[  115.975519][ T7756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.985837][ T7758] pim6reg: left allmulticast mode
[  116.181104][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.502'.
[  116.184787][ T7771] netlink: 1 bytes leftover after parsing attributes in process `syz.0.502'.
[  116.229264][ T7756] syz.1.496 (7756) used greatest stack depth: 18848 bytes left
[  116.566293][ T7791] ieee802154 phy0 wpan0: encryption failed: -22
[  116.638434][ T7794] netlink: 604 bytes leftover after parsing attributes in process `syz.0.508'.
[  116.646908][ T7794] netlink: 'syz.0.508': attribute type 9 has an invalid length.
[  116.651112][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  116.982695][ T7807] netlink: 3 bytes leftover after parsing attributes in process `syz.2.513'.
[  116.985530][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'.
[  116.988297][ T7807] netlink: 3 bytes leftover after parsing attributes in process `syz.2.513'.
[  117.328287][ T7827] syzkaller0: mtu less than device minimum
[  117.519606][ T7838] Bluetooth: MGMT ver 1.23
[  117.526931][ T7838] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  117.601493][ T7843] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  117.618653][ T7843] 8021q: adding VLAN 0 to HW filter on device bond5
[  117.631364][ T7843] bond5: (slave ip6gretap2): making interface the new active one
[  117.634596][ T7843] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[  117.649147][ T7843] veth5: entered promiscuous mode
[  117.654835][ T7843] bond5: (slave veth5): Enslaving as an active interface with a down link
[  117.660836][ T7843] erspan0: entered allmulticast mode
[  117.669858][ T7843] bond5: (slave erspan0): Enslaving as an active interface with an up link
[  117.711798][ T7847] openvswitch: netlink: Flow key attr not present in new flow.
[  118.426785][ T7874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  118.433338][ T7874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  118.962834][ T7891] net veth1_virt_wifi : renamed from virt_wifi0
[  119.012829][ T7893] netlink: 'syz.1.539': attribute type 10 has an invalid length.
[  119.580329][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  119.583052][ T5854] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  120.272351][ T7920] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[  120.645195][ T7960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  120.972675][ T7985] erspan0: left allmulticast mode
[  120.984099][ T7985] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  121.736129][ T7985] nicvf0: left promiscuous mode
[  121.769278][ T5876] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  121.772583][ T5876] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  121.775515][ T5876] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  121.778625][ T5876] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  121.791884][ T7991] __nla_validate_parse: 14 callbacks suppressed
[  121.791903][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'.
[  121.804862][ T7991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'.
[  121.829613][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'.
[  121.843220][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.568'.
[  121.852217][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'.
[  121.913465][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.570'.
[  121.914788][ T8002] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.571'.
[  121.976131][ T8009] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.571'.
[  122.007746][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'.
[  122.012223][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'.
[  122.153431][ T8023] tc_dump_action: action bad kind
[  122.182484][ T8027] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[  122.365193][ T8049] netlink: 'syz.2.581': attribute type 6 has an invalid length.
[  122.418693][ T8053] openvswitch: netlink: Key type 251 is out of range max 32
[  122.555980][ T5876] bond4: (slave wlan0): failed to get link speed/duplex
[  122.732920][ T8066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.738364][ T8066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.744857][ T8066] bond0 (unregistering): (slave team0): Releasing backup interface
[  122.750980][ T8066] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  122.757276][ T8066] bond0 (unregistering): Released all slaves
[  122.774332][ T8076] netlink: 'syz.1.589': attribute type 3 has an invalid length.
[  122.780513][ T5876] bond4: (slave wlan0): failed to get link speed/duplex
[  122.872405][ T8082] delete_channel: no stack
[  122.893143][ T5876] bond4: (slave wlan0): failed to get link speed/duplex
[  122.946157][ T8090] netlink: 'syz.1.592': attribute type 32 has an invalid length.
[  122.949728][ T8090] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  123.000589][ T5877] bond4: (slave wlan0): failed to get link speed/duplex
[  123.093976][ T8105] pim6reg1: entered promiscuous mode
[  123.098783][ T8105] pim6reg1: entered allmulticast mode
[  123.129330][ T8109] openvswitch: netlink: Unknown nsh attribute 0
[  123.137424][ T8109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.161276][ T5876] bond4: (slave wlan0): failed to get link speed/duplex
[  123.270881][ T5877] bond4: (slave wlan0): failed to get link speed/duplex
[  123.381028][ T5877] bond4: (slave wlan0): failed to get link speed/duplex
[  123.530481][ T8125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.536901][ T8125] syzkaller0: entered promiscuous mode
[  123.538784][ T8125] syzkaller0: entered allmulticast mode
[  123.543147][ T8125] tipc: Resetting bearer <eth:syzkaller0>
[  123.548424][ T8124] tipc: Resetting bearer <eth:syzkaller0>
[  123.559331][ T8124] tipc: Disabling bearer <eth:syzkaller0>
[  123.717275][ T8136] syzkaller1: entered promiscuous mode
[  123.719480][ T8136] syzkaller1: entered allmulticast mode
[  123.920515][ T8153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.929181][ T8150] tipc: Disabling bearer <eth:syzkaller0>
[  124.093326][ T8170] batadv_slave_0: left promiscuous mode
[  124.095136][ T8170] batadv_slave_0: entered allmulticast mode
[  124.111108][ T5876] vlan2: left promiscuous mode
[  124.229831][ T8181] netlink: 'syz.2.613': attribute type 58 has an invalid length.
[  124.313948][ T8184] netlink: 'syz.0.614': attribute type 16 has an invalid length.
[  124.317195][ T8184] netlink: 'syz.0.614': attribute type 17 has an invalid length.
[  124.367682][ T8184] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.438297][ T8188] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  124.468562][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.490833][ T8188] bond4: (slave wlan0): Releasing active interface
[  124.493531][ T8188] bond4: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  124.508590][ T8188] vlan2: entered promiscuous mode
[  124.517085][ T8188] bond0: (slave wlan0): Enslaving as an active interface with a down link
[  125.022432][ T8239] netlink: 'syz.1.623': attribute type 1 has an invalid length.
[  125.033747][ T8239] team0: No ports can be present during mode change
[  125.072900][ T8242] syzkaller0: entered promiscuous mode
[  125.076077][ T8242] syzkaller0: entered allmulticast mode
[  125.082071][ T8241] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.103668][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  125.108051][ T8243] tipc: Resetting bearer <eth:syzkaller0>
[  125.127364][ T8243] tipc: Disabling bearer <eth:syzkaller0>
[  125.147054][ T8246] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[  125.153934][ T8246] netlink: 'syz.0.625': attribute type 1 has an invalid length.
[  125.188068][ T8248] netlink: 'syz.1.626': attribute type 1 has an invalid length.
[  125.342033][   T12] syzkaller0: tun_net_xmit 76
[  125.345935][   T12] syzkaller0: tun_net_xmit 48
[  125.348158][ T8255] syzkaller0: create flow: hash 367926440 index 1
[  125.372035][ T8221] syzkaller0: tun_net_xmit 76
[  125.384704][ T8255] syzkaller0: delete flow: hash 367926440 index 1
[  126.777712][ T8264] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  126.804209][ T8208] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  126.807866][ T8208] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  126.825977][ T8208] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  126.827912][ T8208] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  126.836399][ T8208] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  126.838302][ T8208] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  126.863429][ T8208] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  126.867319][ T8208] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  126.871680][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.2.618 Not tainted syzkaller #0 PREEMPT(full) 
[  126.875223][ T8208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.878360][ T8208] RIP: 0010:klist_remove+0x14a/0x340
[  126.880146][ T8208] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 89 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 89 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  126.886702][ T8208] RSP: 0018:ffffc90009a37800 EFLAGS: 00010202
[  126.888622][ T8208] RAX: 000000000000000b RBX: ffff88810ea38000 RCX: 0000000000000000
[  126.891910][ T8208] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  126.895045][ T8208] RBP: ffffc90009a37900 R08: ffffffff8f8a0d23 R09: 1ffffffff1f141a4
[  126.898255][ T8208] R10: dffffc0000000000 R11: fffffbfff1f141a5 R12: 0000000000000000
[  126.901449][ T8208] R13: 1ffff1100508e78c R14: ffff888028473c60 R15: dffffc0000000000
[  126.904633][ T8208] FS:  00007f66af5f46c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  126.907779][ T8208] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.909868][ T8208] CR2: 00007f269765f4b8 CR3: 00000001077e6000 CR4: 00000000000006f0
[  126.912291][ T8208] Call Trace:
[  126.913357][ T8208]  <TASK>
[  126.914273][ T8208]  ? __pfx_klist_remove+0x10/0x10
[  126.915933][ T8208]  ? __pfx_kobject_move+0x10/0x10
[  126.917703][ T8208]  ? do_raw_spin_unlock+0x4d/0x240
[  126.919781][ T8208]  ? get_device_parent+0x366/0x3a0
[  126.921857][ T8208]  device_move+0x193/0x700
[  126.923336][ T8208]  hci_conn_del_sysfs+0xb8/0x170
[  126.924861][ T8208]  hci_conn_del+0xc33/0x11b0
[  126.926316][ T8208]  hci_conn_hash_flush+0x191/0x230
[  126.928103][ T8208]  hci_dev_close_sync+0xaef/0x1330
[  126.930006][ T8208]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  126.932137][ T8208]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.934576][ T8208]  hci_dev_do_close+0x2f/0x90
[  126.936104][ T8208]  hci_rfkill_set_block+0x21d/0x2e0
[  126.938382][ T8208]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  126.940759][ T8208]  rfkill_set_block+0x1d2/0x440
[  126.942621][ T8208]  rfkill_fop_write+0x44b/0x570
[  126.944374][ T8208]  ? __pfx_rfkill_fop_write+0x10/0x10
[  126.946144][ T8208]  ? security_kernfs_init_security+0x240/0x290
[  126.948230][ T8208]  ? rw_verify_area+0x255/0x4d0
[  126.949760][ T8208]  ? __lock_acquire+0xab9/0xd20
[  126.951710][ T8208]  ? __pfx_rfkill_fop_write+0x10/0x10
[  126.953793][ T8208]  vfs_write+0x27e/0xb30
[  126.955453][ T8208]  ? __pfx_vfs_write+0x10/0x10
[  126.957346][ T8208]  ? __fget_files+0x2a/0x420
[  126.959146][ T8208]  ? __fget_files+0x2a/0x420
[  126.960912][ T8208]  ? __fget_files+0x3a0/0x420
[  126.962701][ T8208]  ? __fget_files+0x2a/0x420
[  126.964475][ T8208]  ksys_write+0x145/0x250
[  126.966100][ T8208]  ? __pfx_ksys_write+0x10/0x10
[  126.967902][ T8208]  ? rcu_is_watching+0x15/0xb0
[  126.969820][ T8208]  ? do_syscall_64+0xbe/0x3b0
[  126.971773][ T8208]  do_syscall_64+0xfa/0x3b0
[  126.973649][ T8208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.976098][ T8208]  ? asm_sysvec_call_function_single+0x1a/0x20
[  126.978500][ T8208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.980754][ T8208] RIP: 0033:0x7f66b178ebe9
[  126.982473][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.989237][ T8208] RSP: 002b:00007f66af5f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  126.992698][ T8208] RAX: ffffffffffffffda RBX: 00007f66b19c6270 RCX: 00007f66b178ebe9
[  126.995198][ T8208] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  126.997654][ T8208] RBP: 00007f66b1811e19 R08: 0000000000000000 R09: 0000000000000000
[  127.000575][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.003611][ T8208] R13: 00007f66b19c6308 R14: 00007f66b19c6270 R15: 00007ffe85ea3a98
[  127.006221][ T8208]  </TASK>
[  127.007349][ T8208] Modules linked in:
[  127.009536][ T8208] ---[ end trace 0000000000000000 ]---
[  127.024652][ T8208] RIP: 0010:klist_remove+0x14a/0x340
[  127.026609][ T8208] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 89 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a 89 b2 f6 49 8b 44 24 58 48 89 44 24 08
[  127.034691][ T8208] RSP: 0018:ffffc90009a37800 EFLAGS: 00010202
[  127.036798][ T8208] RAX: 000000000000000b RBX: ffff88810ea38000 RCX: 0000000000000000
[  127.039560][ T8208] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  127.042723][ T8208] RBP: ffffc90009a37900 R08: ffffffff8f8a0d23 R09: 1ffffffff1f141a4
[  127.045408][ T8208] R10: dffffc0000000000 R11: fffffbfff1f141a5 R12: 0000000000000000
[  127.048182][ T8208] R13: 1ffff1100508e78c R14: ffff888028473c60 R15: dffffc0000000000
[  127.051632][ T8208] FS:  00007f66af5f46c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  127.054548][ T8208] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  127.056585][ T8208] CR2: 0000557a8bebccc0 CR3: 00000001077e6000 CR4: 00000000000006f0
[  127.059253][ T8208] Kernel panic - not syncing: Fatal exception
[  127.062430][ T8208] Kernel Offset: disabled
[  127.064178][ T8208] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:51:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000103f4 RDI=00000000000103f5 RBP=00000000000003f8 RSP=ffffc90009a37030
R8 =ffff888106918237 R9 =1ffff11020d23046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01918 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f66af5f46c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f269765f4b8 CR3=00000001077e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f67db012e53
XMM06=0000000000000000 00007f67db012e4d XMM07=0000000000000000 00007f67db012e61
XMM08=0000000000000000 00007f67db012ee7 XMM09=0000000000000000 00007f67db012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bf4d6c RBX=ffffffff8dfa6b60 RCX=ffff888021a3b980 RDX=0000000000010000
RSI=0000000000000000 RDI=ffffffff8dfa6b60 RBP=0000000000005f64 RSP=ffffc900001e0e20
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81724e10
R12=0000001d7d943e7d R13=dffffc0000000000 R14=0000001d83f10994 R15=dffffc0000000000
RIP=ffffffff81724e10 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f748500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f67dbd4ffc8 CR3=000000002815c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0000000000000121 0000000000000030
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffff00 XMM09=6c6c696b66722f30 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
