last executing test programs:

1.812360754s ago: executing program 2 (id=564):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xf2ff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

1.682834017s ago: executing program 2 (id=566):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000005c0)=""/129, &(0x7f0000000500)=0x81)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xfffe}}}]}, 0x38}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.060785103s ago: executing program 0 (id=581):
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r0, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x6d5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
socket$kcm(0xa, 0x3, 0x87)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
close(0x3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000340)="07000000010000", 0x7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=ANY=[@ANYBLOB="800100001000010028bd7000ffdbdf25ac1414aa0000000000000000000000007f0000010000000000000000000000004e230000200080000a0020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/312], 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4004810)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB="0000000000000000000000000000000000000000000000000000ba3d", @ANYBLOB="b751ae16517413f6f165b46db88995b976eae5c7bd3ecac6e19996c244aa5467249294a9a311cc7dccb003277230ddba89c126785abb8ee51c3964402aa2a24520f13352fa43b66721f980a8a60f50ec965fdfa7896decdbcff1c144db47cb713de68554b00cde19f2f48e2e42ad92e5f510e624cdcc9be891129c0b092a83b738b66a01fe3ab3e77b347942bffedfb1de81320a24e9d8", @ANYBLOB="063b52f8d7920a2fed613cfc464bdcd0732a7fcddeea1c7bfc9ee3c282a1d8bc3856690829958b5e7d6ab2099cf740ef66df60f34677ca5a5ee3aeff606b320bb4260e91c7f47e827f22dcd272805e2ee18740201e1c1647ff1d76eb6f05cb59cd3898786bcdb6aebb1afc184624d48be89daa4c0b390b16e7489595b6d8722bd411b41a2aab01d6197405c13398bd4886af0ef8fcdd67ca"], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0d8a0000", @ANYRES16=0x0, @ANYBLOB="010000000000000000f80100000008000100030000002c0004880500030001000000050003000100000005000300", @ANYRES8=r0, @ANYRESHEX=r0], 0x50}}, 0x4000820)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)

1.001620018s ago: executing program 0 (id=582):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, &(0x7f0000000480)="666e6f2563f610d129b23c74e2e0cbd276fcae4848e1cd29026b0cf649846252b003e2405fc47cacf58a17f901e05e22f43bf4bb1662fa58f2ec", 0x0, 0xc, 0x0, 0x0, 0xfedf, 0x0, 0x0, 0x6, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009b4506000a0018a1ca840addf4720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r2 = socket(0x840000000002, 0x3, 0xfa)
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58)
r4 = socket(0xa, 0x3, 0x2)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, &(0x7f0000000480)={r7, 0x2}, 0x8)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r8, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf251a00000054002e80050005000100000008000600020000000c0004000203aaaaaaaaaaaa0c00040000000000000000000c0004000201aaaaaaaaaaaa05000500010000000c0004000202aaaaaaaaaaaa06000100390c000008000300ffcb0e7e148ff27b4a6c4148e30d4452043f0a20c01150de796a7d2c975c9528f4c6a5bc279cbdd335fb5e4540bad3165af935678adba7b916a3e12d34f7e98861d143c353c7175919908969a03ef46aa75b39e6b7bf3db407bbf34a98c4737756ecb89b483957638b55a9", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x7c}}, 0x8000)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0))

772.995618ms ago: executing program 0 (id=585):
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/11, 0xb}}], 0x1, 0x0, 0x0)

770.255429ms ago: executing program 2 (id=587):
r0 = socket(0x10, 0x80002, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r2, 0x1) (async, rerun: 64)
listen(r2, 0xfff) (async, rerun: 64)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000240), &(0x7f0000000440)=0x14) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x21) (async, rerun: 64)
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) (async, rerun: 64)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x34}}, 0x40000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x44) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

650.091056ms ago: executing program 2 (id=589):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20040810) (async, rerun: 64)
r0 = socket(0x10, 0x3, 0x0) (rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x3}, 0x10) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000032c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3c00}}, 0x1c}}, 0x0) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @multicast1, 0xff, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {0xff}, {0xff}, 0x1d, 0x1, 0x21}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'macsec0\x00', {0x374000000000000}}}}, {{@ip={@empty, @private=0xa010100, 0xff000000, 0xffffffff, 'macvlan1\x00', 'veth1_to_hsr\x00', {}, {}, 0x33, 0x2, 0x4d}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x1, 0x2, 0x5, 0x3, 0x1], 0x0, 0x7}, {0x3, [0x2, 0x4, 0x4, 0x4, 0x4, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

573.104278ms ago: executing program 2 (id=590):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{0x0}], 0x1, 0x0, 0x0, 0x4000000}}], 0x2, 0x24000045)

512.901806ms ago: executing program 2 (id=591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000033f705abb67e3a814aad2a7ff54e050600c43e26eebeda83e3227d8774bc2a26ba51f277d1c8ed2fdae2ad8d2f44cbaa60998af9ad102f91b5db20b4d748120cede0adc8b1cd2aa4af92465127aa97509d8d0728a0621c7df2", @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf2505000000080009000200000008000c00a50a000008000b00000000000600010005000000"], 0x34}}, 0x20)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x9)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r11, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x802, @multicast, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd70000003000000000000", @ANYRES32=0x0, @ANYBLOB="000100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884)

512.128691ms ago: executing program 1 (id=592):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000193c0)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x4c004}, 0x8800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r6, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0xffffffffffffff69)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r10, &(0x7f0000000780)}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={<r11=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7, @loopback}]}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000080)={r11, 0x7f}, &(0x7f0000000180)=0x8)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f0008ac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r12, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x121}, 0x4000010)

342.043923ms ago: executing program 1 (id=593):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000005c0)=""/129, &(0x7f0000000500)=0x81)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0xfffe}}}]}, 0x38}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

242.913123ms ago: executing program 1 (id=594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000206010300000000000000000000000005000400000000000900020073797a31000000001400078008000840000000200500140005000000050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000706010100000100000000000700000105000100070000fe"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x400c000)

192.335044ms ago: executing program 1 (id=595):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700010000000000000000000c000080080023"], 0x1c}], 0x1}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

132.378907ms ago: executing program 1 (id=596):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1b}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000063c0)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000002)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x10, 0x12, 0x2, 0x4, {0x0, 0xcecc, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x5, [@datasec={0x9, 0x4, 0x0, 0xf, 0x2, [{0x4, 0xe0c, 0x1}, {0x3, 0x15e, 0xffff}, {0x4, 0x4, 0x3}, {0x1, 0x7, 0xff}], "2bb7"}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x1, 0x7, 0x401}, {0x2, 0x3ff, 0x7}], "ec8c"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5aa6967f}}, @volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @const={0xa, 0x0, 0x0, 0xa, 0x4}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x10, [{0xe, 0x1ff, 0x8}, {0x4, 0x7, 0xfffffff3}]}, @enum64={0x1, 0x6, 0x0, 0x13, 0x1, 0x6, [{0xa, 0x8, 0x8392}, {0xf5d, 0xfc, 0x6}, {0x1, 0x787, 0x100}, {0xe, 0xfca, 0xff}, {0x9, 0x4, 0xeb6}, {0x1, 0xc045, 0xe1}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000600)=""/80, 0x135, 0x50, 0x1, 0x0, 0x10000}, 0x28) (async, rerun: 64)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x1, 0x1, 0x1}, 0x50) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000780), 0xcff5, r7}, 0x38) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x6, &(0x7f0000000180)=@raw=[@alu={0x4, 0x1, 0x1, 0xa, 0x1, 0x0, 0x10}, @alu={0x4, 0x1, 0x2eddfca01f6ef659, 0x6, 0x9, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @generic={0x5, 0x4, 0xe, 0x3, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x69000000, 0x98, &(0x7f0000000400)=""/152, 0x41100, 0x20, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xe, 0x7, 0xffff0f17}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r7], &(0x7f0000000740)=[{0x5, 0x2, 0x7, 0x2}, {0x1, 0x2, 0xb, 0x4}, {0x4, 0x5, 0x5}], 0x10, 0x1ff}, 0x94) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff}}]}}]}, 0x38}}, 0x4000) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000000)) (async, rerun: 32)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32)

60.51815ms ago: executing program 0 (id=597):
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000500)="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", 0x164}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000500)="445804070528d0b78ef0b393889d19f493eeae0e63849a580d4d1f3e92a2aec9f687f2600e78f426b8118862e381be87ef1e533bc6dee8b35b95b369b14f15c52e123a617171a66fccbc2fa7507f02466b560d4424068ae974ac6a9e8a58d0a045b75b2c3566c4480857cb2cfecc35b58e66c0a8b49024996fcc32ea62e311785b9cfb2f52c3369e5d911c71660ac249bfd895aa0698decdcbce3e93418379a386a1fc3d7ad626708dc34838d07d7d7920330b227df9020eab5c18b1124d6e103b059f3f91a6a6c706884dd649295d6594f5b7f81bacf89e93947bc2846520c406489e76b240d41ba9bf106a2ceba7800689943d5e8fab5a2fd19644c26fdaa1495011a11d28583282a775b6309388a8746e909170a368faff1e35d17a97b5932a82e05a7757e6213e464d3eca4af82f56dedd220c77e9a8eb6c834d2b7a523d753a759887361b0a66ef70770cab83db780d3bca037cf8b9c56edb9119c9b02ad6d5d426", 0x164}], 0x1, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async)
syz_emit_ethernet(0x16f, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045de016100660000802f"], 0x0) (async)

2.915937ms ago: executing program 0 (id=598):
socket(0x10, 0x803, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0xffffffffffffc0fe}, 0x10)

1.094168ms ago: executing program 1 (id=599):
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000a8d497be914306100a004e200002050002000a230000140009000000009483be6816692c00000000000068e7c06830ef393aa4b09446ae0c6c8d86e301432ff1bab6ec54c71024de1b286fbd723867b53b5f3bc6a44b793ae9119c7bb5592a3a2729246670e26dc514632d0bc10dd88197616ee372ddb61ff168be7b99b7d59bf7d07ae540013e5af255"], 0x38}}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x173, 0x80, 0x10001, 0x4000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x366d, 0x0, r4, 0x81, '\x00', r6, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0x6, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b0000000000011017864010101ac14142100004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584d1d4fbe40a27424d38fd56f1373669caaa2f19935e699647096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 0 (id=600):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000ff1287b8a895288914c0b818b70c0000140000000000000000000000048dcfc25f6ff61c6052f47d99c0a7cd470001"], 0x44}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000"], 0x33fe0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0}) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xce80, &(0x7f00000002c0)=ANY=[], 0x0)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x18) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000100)) (async)
syz_genetlink_get_family_id$ethtool(0x0, r5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2035' (ED25519) to the list of known hosts.
syzkaller login: [   49.823321][ T5775] cgroup: Unknown subsys name 'net'
[   49.972478][ T5775] cgroup: Unknown subsys name 'cpuset'
[   49.977295][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.876511][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.328552][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.332074][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.335305][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.338044][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.340870][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.386877][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.391158][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.394801][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.397762][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.401615][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.461794][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.464963][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.467592][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.470993][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.473561][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.584545][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.684035][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.731891][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.734570][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.737461][ T5842] bridge_slave_0: entered allmulticast mode
[   56.741856][ T5842] bridge_slave_0: entered promiscuous mode
[   56.746787][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.750045][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.752489][ T5842] bridge_slave_1: entered allmulticast mode
[   56.755905][ T5842] bridge_slave_1: entered promiscuous mode
[   56.820389][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.833906][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.844024][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   56.920547][ T5842] team0: Port device team_slave_0 added
[   56.922837][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.926010][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.930566][ T5846] bridge_slave_0: entered allmulticast mode
[   56.934744][ T5846] bridge_slave_0: entered promiscuous mode
[   56.940941][ T5842] team0: Port device team_slave_1 added
[   56.956788][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.959943][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.963065][ T5846] bridge_slave_1: entered allmulticast mode
[   56.966942][ T5846] bridge_slave_1: entered promiscuous mode
[   56.996212][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.998869][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.007113][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.027534][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.030606][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.039897][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.056633][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.087014][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.132817][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.135581][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.144517][ T5852] bridge_slave_0: entered allmulticast mode
[   57.147621][ T5852] bridge_slave_0: entered promiscuous mode
[   57.161306][ T5846] team0: Port device team_slave_0 added
[   57.165316][ T5846] team0: Port device team_slave_1 added
[   57.180490][ T5842] hsr_slave_0: entered promiscuous mode
[   57.182933][ T5842] hsr_slave_1: entered promiscuous mode
[   57.186522][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.191612][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.193906][ T5852] bridge_slave_1: entered allmulticast mode
[   57.196930][ T5852] bridge_slave_1: entered promiscuous mode
[   57.209955][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.212201][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.221056][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.244768][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.246978][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.255364][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.288728][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.311978][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.319805][ T5846] hsr_slave_0: entered promiscuous mode
[   57.322668][ T5846] hsr_slave_1: entered promiscuous mode
[   57.325357][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   57.327428][ T5846] Cannot create hsr debugfs directory
[   57.363204][ T5852] team0: Port device team_slave_0 added
[   57.379747][ T5852] team0: Port device team_slave_1 added
[   57.424690][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.426976][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.436273][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.460882][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.463163][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.471729][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.579253][ T5852] hsr_slave_0: entered promiscuous mode
[   57.581708][ T5852] hsr_slave_1: entered promiscuous mode
[   57.583970][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   57.585862][ T5852] Cannot create hsr debugfs directory
[   57.661722][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.674980][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.686155][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.704729][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.785129][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.792317][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.815022][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.821203][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.881791][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.886768][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.900433][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.905520][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.965463][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.997896][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   58.012420][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.014819][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.021507][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.030813][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.033168][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.072763][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   58.083485][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.086021][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.116692][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.119113][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.143380][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.181809][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   58.192937][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.203378][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.205835][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.222322][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.224547][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.285205][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.327261][ T5842] veth0_vlan: entered promiscuous mode
[   58.342007][ T5842] veth1_vlan: entered promiscuous mode
[   58.362896][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.385788][ T5842] veth0_macvtap: entered promiscuous mode
[   58.388760][   T54] Bluetooth: hci0: command tx timeout
[   58.403255][ T5842] veth1_macvtap: entered promiscuous mode
[   58.426730][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.432682][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.439582][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.456257][ T5846] veth0_vlan: entered promiscuous mode
[   58.470090][   T54] Bluetooth: hci1: command tx timeout
[   58.475921][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.480446][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.483119][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.485693][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.495437][ T5846] veth1_vlan: entered promiscuous mode
[   58.548779][   T54] Bluetooth: hci2: command tx timeout
[   58.551665][ T5852] veth0_vlan: entered promiscuous mode
[   58.584742][ T5852] veth1_vlan: entered promiscuous mode
[   58.593099][ T5846] veth0_macvtap: entered promiscuous mode
[   58.598569][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.601522][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.613428][ T5846] veth1_macvtap: entered promiscuous mode
[   58.640957][ T5852] veth0_macvtap: entered promiscuous mode
[   58.652483][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.652822][ T5852] veth1_macvtap: entered promiscuous mode
[   58.655183][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.662371][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.677296][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.691746][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.701649][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.716750][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.722171][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.727622][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.737555][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.748722][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.751581][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.777461][ T5870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.782078][ T5870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.784923][ T5870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.802806][ T5909] tipc: Started in network mode
[   58.804940][ T5909] tipc: Node identity ffff, cluster identity 4711
[   58.806915][ T5909] tipc: Node number set to 65535
[   58.811041][ T5909] tipc: Cannot configure node identity twice
[   58.887998][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.893085][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.927570][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.939092][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.976776][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.981078][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.006257][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.011025][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.097129][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.111010][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.128844][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   59.285848][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.289020][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.378266][ T5939] Zero length message leads to an empty skb
[   59.414632][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.433006][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.573154][ T5870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.579680][ T5870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.605053][ T5870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.621037][ T5870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.890932][ T5953] tipc: Started in network mode
[   59.892816][ T5953] tipc: Node identity ffff, cluster identity 4711
[   59.894957][ T5953] tipc: Node number set to 65535
[   59.897437][ T5953] tipc: Cannot configure node identity twice
[   59.924483][ T5951] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   59.984663][ T5951] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET)
[   60.328968][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17'.
[   60.469058][   T54] Bluetooth: hci0: command tx timeout
[   60.521086][ T5976] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   60.527718][ T5976] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.558432][   T54] Bluetooth: hci1: command tx timeout
[   60.604522][ T5981] bridge0: entered promiscuous mode
[   60.606936][ T5981] vlan2: entered promiscuous mode
[   60.610036][ T5981] bridge0: port 3(vlan2) entered blocking state
[   60.612264][ T5981] bridge0: port 3(vlan2) entered disabled state
[   60.614737][ T5981] vlan2: entered allmulticast mode
[   60.616456][ T5981] bridge0: entered allmulticast mode
[   60.625391][ T5981] vlan2: left allmulticast mode
[   60.627371][ T5981] bridge0: left allmulticast mode
[   60.640451][   T54] Bluetooth: hci2: command tx timeout
[   60.724949][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   60.759082][ T5985] netlink: 328 bytes leftover after parsing attributes in process `syz.0.25'.
[   60.815083][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'.
[   60.917633][ T6001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.31'.
[   60.925874][ T6001] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   61.039141][ T6010] netlink: 'syz.0.33': attribute type 29 has an invalid length.
[   61.475927][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'.
[   61.494204][ T6041] syz.1.45: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   61.501959][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(full) 
[   61.501973][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.501979][ T6041] Call Trace:
[   61.501983][ T6041]  <TASK>
[   61.501988][ T6041]  dump_stack_lvl+0x189/0x250
[   61.502029][ T6041]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.502040][ T6041]  ? __pfx__printk+0x10/0x10
[   61.502053][ T6041]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   61.502064][ T6041]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   61.502074][ T6041]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   61.502083][ T6041]  warn_alloc+0x214/0x310
[   61.502101][ T6041]  ? __pfx_warn_alloc+0x10/0x10
[   61.502116][ T6041]  ? __get_vm_area_node+0x28f/0x300
[   61.502128][ T6041]  ? xskq_create+0xbf/0x170
[   61.502138][ T6041]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   61.502162][ T6041]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   61.502176][ T6041]  ? __kasan_kmalloc+0x93/0xb0
[   61.502190][ T6041]  vmalloc_user_noprof+0xad/0xf0
[   61.502202][ T6041]  ? xskq_create+0xbf/0x170
[   61.502210][ T6041]  xskq_create+0xbf/0x170
[   61.502218][ T6041]  xsk_init_queue+0xb0/0x110
[   61.502226][ T6041]  xsk_setsockopt+0x57b/0x8d0
[   61.502240][ T6041]  ? __pfx_xsk_setsockopt+0x10/0x10
[   61.502252][ T6041]  ? __pfx_aa_sk_perm+0x10/0x10
[   61.502267][ T6041]  ? __fget_files+0x2a/0x420
[   61.502273][ T6041]  ? aa_sock_opt_perm+0xff/0x1b0
[   61.502282][ T6041]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   61.502292][ T6041]  ? __pfx_xsk_setsockopt+0x10/0x10
[   61.502304][ T6041]  do_sock_setsockopt+0x17c/0x1b0
[   61.502316][ T6041]  __x64_sys_setsockopt+0x13f/0x1b0
[   61.502327][ T6041]  do_syscall_64+0xfa/0x3b0
[   61.502337][ T6041]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.502346][ T6041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.502354][ T6041]  ? exc_page_fault+0x9f/0xf0
[   61.502362][ T6041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.502369][ T6041] RIP: 0033:0x7facb3b8ebe9
[   61.502378][ T6041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.502385][ T6041] RSP: 002b:00007facb49f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   61.502394][ T6041] RAX: ffffffffffffffda RBX: 00007facb3dc5fa0 RCX: 00007facb3b8ebe9
[   61.502400][ T6041] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[   61.502405][ T6041] RBP: 00007facb3c11e19 R08: 0000000000000004 R09: 0000000000000000
[   61.502409][ T6041] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   61.502414][ T6041] R13: 00007facb3dc6038 R14: 00007facb3dc5fa0 R15: 00007fff9644f638
[   61.502426][ T6041]  </TASK>
[   61.502572][ T6041] Mem-Info:
[   61.514889][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.46'.
[   61.519498][ T6041] active_anon:5085 inactive_anon:0 isolated_anon:0
[   61.519498][ T6041]  active_file:1257 inactive_file:38221 isolated_file:0
[   61.519498][ T6041]  unevictable:1768 dirty:1535 writeback:0
[   61.519498][ T6041]  slab_reclaimable:9564 slab_unreclaimable:50722
[   61.519498][ T6041]  mapped:18177 shmem:2429 pagetables:903
[   61.519498][ T6041]  sec_pagetables:0 bounce:0
[   61.519498][ T6041]  kernel_misc_reclaimable:0
[   61.519498][ T6041]  free:302076 free_pcp:20774 free_cma:0
[   61.653523][ T6041] Node 0 active_anon:9148kB inactive_anon:0kB active_file:4640kB inactive_file:9864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43676kB dirty:6044kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5316kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.664225][ T6041] Node 1 active_anon:11132kB inactive_anon:0kB active_file:388kB inactive_file:143028kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29108kB dirty:124kB writeback:0kB shmem:4808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6092kB pagetables:1520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   61.684671][ T6041] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   61.741964][ T6041] lowmem_reserve[]: 0 811 811 811 811
[   61.744169][ T6041] Node 0 DMA32 free:448864kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9148kB inactive_anon:0kB active_file:4640kB inactive_file:9864kB unevictable:3536kB writepending:6044kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:23024kB local_pcp:20768kB free_cma:0kB
[   61.759513][ T6041] lowmem_reserve[]: 0 0 0 0 0
[   61.761510][ T6041] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   61.776970][ T6057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.786542][ T6041] lowmem_reserve[]: 0 0 854 854 854
[   61.789982][ T6041] Node 1 Normal free:284840kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11064kB inactive_anon:0kB active_file:388kB inactive_file:143028kB unevictable:3536kB writepending:124kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:61180kB local_pcp:20404kB free_cma:0kB
[   61.808471][ T6041] lowmem_reserve[]: 0 0 0 0 0
[   61.810337][ T6041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   61.846094][ T6041] Node 0 DMA32: 60*4kB (UME) 26*8kB (UME) 10*16kB (ME) 20*32kB (UM) 8*64kB (UM) 4*128kB (UME) 3*256kB (UE) 2*512kB (UM) 5*1024kB (UME) 1*2048kB (U) 107*4096kB (M) = 449504kB
[   61.879553][ T6041] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   61.888822][ T6041] Node 1 Normal: 224*4kB (UME) 95*8kB (M) 433*16kB (UME) 181*32kB (UME) 42*64kB (UM) 8*128kB (UM) 6*256kB (UM) 6*512kB (ME) 4*1024kB (UME) 6*2048kB (UME) 60*4096kB (M) = 284840kB
[   61.910996][ T6041] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.913864][ T6041] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   61.916695][ T6041] 41909 total pagecache pages
[   61.919468][ T6041] 0 pages in swap cache
[   61.920812][ T6041] Free swap  = 124996kB
[   61.922110][ T6041] Total swap = 124996kB
[   61.923633][ T6041] 786301 pages RAM
[   61.924831][ T6041] 0 pages HighMem/MovableOnly
[   61.926276][ T6041] 241348 pages reserved
[   61.930537][ T6041] 0 pages cma reserved
[   62.147453][ T6086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.163594][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.166127][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.325587][ T6099] netlink: 'syz.1.65': attribute type 2 has an invalid length.
[   62.335515][ T6099] k*]: entered promiscuous mode
[   62.370051][ T6096] hsr_slave_1 (unregistering): left promiscuous mode
[   62.391156][ T6099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.411024][ T6099] veth0_to_team: entered promiscuous mode
[   62.413423][ T6099] veth0_to_team: entered allmulticast mode
[   62.422093][ T6099] Illegal XDP return value 16128 on prog  (id 10) dev syz_tun, expect packet loss!
[   62.548568][   T54] Bluetooth: hci0: command tx timeout
[   62.617635][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.630232][   T54] Bluetooth: hci1: command tx timeout
[   62.708943][   T54] Bluetooth: hci2: command tx timeout
[   62.901125][ T6129] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   62.903783][ T6129] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   62.987388][ T6131] : entered promiscuous mode
[   63.006361][ T6133] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   63.437951][ T6178] tipc: Started in network mode
[   63.441676][ T6178] tipc: Node identity ffff, cluster identity 4711
[   63.443705][ T6178] tipc: Node number set to 65535
[   63.445405][ T6178] tipc: Cannot configure node identity twice
[   63.619999][ T6194] netlink: 'syz.1.94': attribute type 12 has an invalid length.
[   63.964962][ T6218] bridge_slave_1: left allmulticast mode
[   63.967407][ T6218] bridge_slave_1: left promiscuous mode
[   63.976139][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.986432][ T6218] bridge_slave_0: left allmulticast mode
[   64.003358][ T6218] bridge_slave_0: left promiscuous mode
[   64.005962][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.629077][ T5845] Bluetooth: hci0: command tx timeout
[   64.710017][ T5845] Bluetooth: hci1: command tx timeout
[   64.798422][ T5845] Bluetooth: hci2: command tx timeout
[   64.974748][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.197838][ T6287] __nla_validate_parse: 8 callbacks suppressed
[   65.197851][ T6287] netlink: 96 bytes leftover after parsing attributes in process `syz.0.129'.
[   65.301544][ T6298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.133'.
[   65.305911][ T6298] 8021q: VLANs not supported on ipvlan1
[   65.316305][ T6298] macsec1: entered promiscuous mode
[   65.321186][ T6298] macsec1: entered allmulticast mode
[   65.344254][ T6299] netlink: 104 bytes leftover after parsing attributes in process `syz.1.130'.
[   65.404676][ T6301] syzkaller0: entered promiscuous mode
[   65.407128][ T6301] syzkaller0: entered allmulticast mode
[   66.400419][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[   66.490965][ T6314] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   66.715530][    T9] IPVS: starting estimator thread 0...
[   66.720683][ T6337] IPVS: rr: FWM 3 0x00000003 - no destination available
[   66.733857][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.777706][ T6339] 8021q: adding VLAN 0 to HW filter on device team0
[   66.785711][ T6339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.801294][ T6335] veth0_to_team: entered promiscuous mode
[   66.803571][ T6335] veth0_to_team: entered allmulticast mode
[   66.808958][ T6338] IPVS: using max 64 ests per chain, 153600 per kthread
[   66.821551][ T6339] syz.2.144 (6339) used greatest stack depth: 19832 bytes left
[   66.843077][ T6344] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   66.869084][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[   66.895208][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'.
[   66.946806][ T6362] netlink: 64 bytes leftover after parsing attributes in process `syz.0.153'.
[   66.996823][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.156'.
[   67.071728][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'.
[   67.181987][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'.
[   67.886191][ T6423] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   67.911302][ T6423] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   68.036440][ T6429] hsr_slave_0: left promiscuous mode
[   68.040310][ T6429] hsr_slave_1: left promiscuous mode
[   68.100375][ T6431] ip6tnl1: entered promiscuous mode
[   68.102538][ T6431] ip6tnl1: entered allmulticast mode
[   68.106552][ T6431] team0: Device ip6tnl1 is of different type
[   68.130027][ T6430] ip6tnl1: entered promiscuous mode
[   68.132261][ T6430] ip6tnl1: entered allmulticast mode
[   68.135891][ T6430] team0: Device ip6tnl1 is of different type
[   68.328500][ T6448] warning: `syz.2.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.343325][ T6448] netlink: 'syz.2.185': attribute type 3 has an invalid length.
[   68.463405][ T6466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.472342][ T6466] IPVS: length: 141 != 8
[   68.671017][ T6480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.681726][ T6480] syzkaller0: entered promiscuous mode
[   68.683578][ T6480] syzkaller0: entered allmulticast mode
[   68.695188][ T6480] tipc: Resetting bearer <eth:syzkaller0>
[   68.703676][ T6479] tipc: Resetting bearer <eth:syzkaller0>
[   68.711801][ T6479] tipc: Disabling bearer <eth:syzkaller0>
[   68.939617][ T6500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.942636][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.946431][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.954259][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.957998][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.962641][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.966489][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.970820][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.974655][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.984571][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.987980][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   68.992551][ T6499] syzkaller0: entered promiscuous mode
[   68.994469][ T6499] syzkaller0: entered allmulticast mode
[   68.997185][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   69.003409][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   69.006690][ T6500] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   69.029613][ T6506] tipc: Resetting bearer <eth:syzkaller0>
[   69.031447][ T6506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   69.063250][ T6498] tipc: Resetting bearer <eth:syzkaller0>
[   69.071467][ T6498] tipc: Disabling bearer <eth:syzkaller0>
[   69.144445][ T6509] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   69.202113][ T6513] openvswitch: netlink: EtherType 0 is less than min 600
[   69.312881][ T6528] dvmrp0: entered allmulticast mode
[   69.334069][ T6532] Bluetooth: MGMT ver 1.23
[   69.854660][ T6572] netlink: 'syz.0.219': attribute type 2 has an invalid length.
[   69.861855][ T6572] : entered promiscuous mode
[   69.877815][ T6572] netlink: 'syz.0.219': attribute type 4 has an invalid length.
[   70.098618][ T6596] netlink: 'syz.1.224': attribute type 5 has an invalid length.
[   70.390876][ T6602] netlink: 'syz.1.225': attribute type 2 has an invalid length.
[   70.426032][ T6602] __nla_validate_parse: 13 callbacks suppressed
[   70.426044][ T6602] netlink: 64 bytes leftover after parsing attributes in process `syz.1.225'.
[   70.449497][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.228'.
[   70.455391][ T6643] xfrm1: entered promiscuous mode
[   70.457771][ T6602] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   70.458111][ T6643] xfrm1: entered allmulticast mode
[   70.891592][ T6680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[   70.909067][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   70.925262][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   70.932096][ T5881] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   71.033376][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.035901][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.244026][ T6705] netlink: 'syz.1.241': attribute type 2 has an invalid length.
[   71.255361][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.260307][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.301153][    T9] IPVS: starting estimator thread 0...
[   71.410848][ T6711] IPVS: using max 45 ests per chain, 108000 per kthread
[   71.533063][ T6727] syzkaller1: entered promiscuous mode
[   71.534933][ T6727] syzkaller1: entered allmulticast mode
[   71.655477][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[   71.920412][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.933144][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.127293][ T5870] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.130778][ T5870] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.139257][ T5870] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.142142][ T5870] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.186875][ T6756] netlink: 'syz.2.256': attribute type 1 has an invalid length.
[   72.192771][ T6756] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.256'.
[   72.269720][ T6758] dvmrp8: entered allmulticast mode
[   72.373373][ T6764] netlink: 184 bytes leftover after parsing attributes in process `syz.1.258'.
[   72.474544][ T6757] dvmrp8: left allmulticast mode
[   72.495943][ T6773] IPVS: Scheduler module ip_vs_sip not found
[   73.595288][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'.
[   73.596239][ T6805] syzkaller1: entered promiscuous mode
[   73.602969][ T6805] syzkaller1: entered allmulticast mode
[   73.728070][ T6825] validate_nla: 2 callbacks suppressed
[   73.728102][ T6825] netlink: 'syz.1.272': attribute type 4 has an invalid length.
[   73.930367][ T6847] netlink: 'syz.1.275': attribute type 13 has an invalid length.
[   73.933724][ T6847] netlink: 'syz.1.275': attribute type 17 has an invalid length.
[   74.050172][ T6847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.104950][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'.
[   74.116636][ T6838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.136560][ T6838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.229387][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.371456][ T6875] IPv6: sit1: Disabled Multicast RS
[   74.373717][ T6875] sit1: entered allmulticast mode
[   74.384972][ T6879] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.694905][ T6901] netlink: 'syz.2.295': attribute type 7 has an invalid length.
[   74.697485][ T6901] netlink: 'syz.2.295': attribute type 8 has an invalid length.
[   74.956745][ T6925] syzkaller1: tun_chr_ioctl cmd 1074025677
[   74.970709][ T6925] syzkaller1: linktype set to 778
[   75.052248][ T6935] veth0: entered promiscuous mode
[   75.085588][ T6926] veth0: left promiscuous mode
[   75.376068][ T6953] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.387104][ T6953] bridge0: port 3(bond1) entered blocking state
[   75.400244][ T6953] bridge0: port 3(bond1) entered disabled state
[   75.402673][ T6953] bond1: entered allmulticast mode
[   75.405976][ T6953] bond1: entered promiscuous mode
[   75.419088][ T6953] bridge0: port 3(bond1) entered blocking state
[   75.421553][ T6953] bridge0: port 3(bond1) entered forwarding state
[   75.436518][ T3053] bridge0: port 3(bond1) entered disabled state
[   75.450011][ T6964] __nla_validate_parse: 12 callbacks suppressed
[   75.450023][ T6964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.312'.
[   75.481044][ T6977] IPv6: Can't replace route, no match found
[   75.494696][ T6977] bridge_slave_0: left allmulticast mode
[   75.503657][ T6977] bridge_slave_0: left promiscuous mode
[   75.506023][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.513527][ T6977] bridge_slave_1: left allmulticast mode
[   75.515648][ T6977] bridge_slave_1: left promiscuous mode
[   75.517932][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.533528][ T6977] bond0: (slave bond_slave_0): Releasing backup interface
[   75.545355][ T6977] bond0: (slave bond_slave_1): Releasing backup interface
[   75.564690][ T6977] team0: Port device team_slave_0 removed
[   75.576961][ T6977] team0: Port device team_slave_1 removed
[   75.579755][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.582401][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.587247][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.590464][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.601269][ T6977] bond0: (slave wlan1): Releasing backup interface
[   75.666579][ T6992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.670389][ T6992] syzkaller0: entered promiscuous mode
[   75.672086][ T6992] syzkaller0: entered allmulticast mode
[   75.732814][ T6992] tipc: Resetting bearer <eth:syzkaller0>
[   75.745194][ T6992] tipc: Disabling bearer <eth:syzkaller0>
[   75.748421][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.750598][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.828060][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'.
[   75.844688][ T7002] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   76.093195][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   76.101739][ T7007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'.
[   76.224389][ T7012] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'.
[   76.227191][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'.
[   76.649159][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.652344][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.663897][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'.
[   76.800039][ T7027] netlink: 'syz.1.330': attribute type 1 has an invalid length.
[   76.831304][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'.
[   76.834734][ T7029] netlink: 'syz.0.331': attribute type 2 has an invalid length.
[   76.837741][ T7029] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[   76.841552][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[   76.844053][ T7031] netlink: 'syz.1.332': attribute type 1 has an invalid length.
[   76.847808][ T7031] netlink: 'syz.1.332': attribute type 2 has an invalid length.
[   76.857007][ T7031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.886680][ T7029] nbd: device at index 0 is going down
[   77.053885][ T7043] netlink: 52 bytes leftover after parsing attributes in process `syz.0.337'.
[   77.202035][ T7052] bridge_slave_0: left allmulticast mode
[   77.203891][ T7052] bridge_slave_0: left promiscuous mode
[   77.206210][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.211747][ T7052] bridge_slave_1: left allmulticast mode
[   77.213976][ T7052] bridge_slave_1: left promiscuous mode
[   77.216312][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.224102][ T7052] bond0: (slave bond_slave_0): Releasing backup interface
[   77.235242][ T7052] bond0: (slave bond_slave_1): Releasing backup interface
[   77.247276][ T7052] team0: Port device team_slave_0 removed
[   77.254400][ T7052] team0: Port device team_slave_1 removed
[   77.257526][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.261024][ T7052] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.264633][ T7052] bond1: left allmulticast mode
[   77.266226][ T7052] bond1: left promiscuous mode
[   77.269012][ T7052] bridge0: port 3(bond1) entered disabled state
[   77.746872][ T7097] syzkaller1: entered promiscuous mode
[   77.749398][ T7097] syzkaller1: entered allmulticast mode
[   77.766335][ T7102] _Z`Ԁ@: entered promiscuous mode
[   77.780999][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.840675][ T7108] team0: No ports can be present during mode change
[   77.843521][ T7108] tipc: Enabled bearer <eth:team0>, priority 0
[   78.505232][ T7131] sctp: [Deprecated]: syz.2.369 (pid 7131) Use of int in max_burst socket option deprecated.
[   78.505232][ T7131] Use struct sctp_assoc_value instead
[   78.628296][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.630694][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   78.739180][ T7144] validate_nla: 67 callbacks suppressed
[   78.739196][ T7144] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   78.769392][ T7144] bond1: entered promiscuous mode
[   78.772015][ T7144] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.787272][ T7144] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   78.792798][ T7144] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   78.797435][ T7144] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[   78.852548][ T7142] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[   78.861071][ T7142] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[   79.070237][ T7154] netlink: 'syz.1.377': attribute type 4 has an invalid length.
[   80.389314][ T7228] ieee802154 phy0 wpan0: encryption failed: -22
[   80.401774][ T7225] team0: Mode changed to "loadbalance"
[   80.442529][ T7230] bond0: (slave rose0): Error: Device can not be enslaved while up
[   80.571121][ T7234] vlan2: entered allmulticast mode
[   80.573221][ T7234] bridge_slave_0: entered allmulticast mode
[   80.905587][ T7262] __nla_validate_parse: 21 callbacks suppressed
[   80.905603][ T7262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.409'.
[   81.147466][ T7274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'.
[   81.158990][ T7274] netlink: 'syz.2.412': attribute type 7 has an invalid length.
[   81.162039][ T7274] netlink: 'syz.2.412': attribute type 8 has an invalid length.
[   81.164822][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'.
[   81.271191][   T10] cfg80211: failed to load regulatory.db
[   81.473949][ T7282] tun0: tun_chr_ioctl cmd 1074025675
[   81.475963][ T7282] tun0: persist enabled
[   81.477762][ T7282] tun0: tun_chr_ioctl cmd 1074025675
[   81.482486][ T7282] tun0: persist enabled
[   81.484677][ T7282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.414'.
[   81.711895][ T7291] netlink: 'syz.2.417': attribute type 2 has an invalid length.
[   81.714922][ T7291] netlink: 244 bytes leftover after parsing attributes in process `syz.2.417'.
[   81.729045][ T7291] netlink: 'syz.2.417': attribute type 58 has an invalid length.
[   81.731759][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.417'.
[   81.848825][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'.
[   81.972226][ T7308] netlink: 124 bytes leftover after parsing attributes in process `syz.1.421'.
[   82.096849][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'.
[   82.128539][ T7323] syzkaller1: entered promiscuous mode
[   82.130839][ T7323] syzkaller1: entered allmulticast mode
[   83.237763][ T7343] netlink: 100 bytes leftover after parsing attributes in process `syz.2.428'.
[   83.535167][ T7374] netlink: 'syz.1.435': attribute type 12 has an invalid length.
[   83.559919][ T7374] dvmrp8: entered allmulticast mode
[   83.574475][ T7373] dvmrp8: left allmulticast mode
[   83.902044][ T7408] netlink: 'syz.0.448': attribute type 21 has an invalid length.
[   83.917828][ T7408] netlink: 'syz.0.448': attribute type 21 has an invalid length.
[   83.917887][ T5870] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.923945][ T5870] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.929584][ T5870] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.934668][ T5870] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.077351][ T7423] netlink: 'syz.0.453': attribute type 4 has an invalid length.
[   84.326630][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.917806][ T7484] nftables ruleset with unbound chain
[   84.975407][ T7486] bond0: (slave bond_slave_0): Releasing backup interface
[   84.981961][ T7486] bond0: (slave bond_slave_1): Releasing backup interface
[   84.987828][ T7486] team0: Port device team_slave_0 removed
[   84.993244][ T7486] team0: Port device team_slave_1 removed
[   84.995817][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.257597][ T7499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   85.755172][ T7532] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   85.757491][ T7532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.031760][ T7545] __nla_validate_parse: 11 callbacks suppressed
[   86.031774][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.486'.
[   86.080126][ T7545] bond2: entered promiscuous mode
[   86.083205][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.150911][ T7545] bond2 (unregistering): Released all slaves
[   86.260105][ T7563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.491'.
[   87.308817][ T7590] netlink: 'syz.1.498': attribute type 13 has an invalid length.
[   87.312184][ T7590] netlink: 'syz.1.498': attribute type 17 has an invalid length.
[   87.325563][ T7590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.569713][ T7602] netlink: 'syz.2.502': attribute type 9 has an invalid length.
[   87.751727][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'.
[   87.845591][ T7614] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[   87.902795][ T7622] tap0: tun_chr_ioctl cmd 1074025678
[   87.904951][ T7622] tap0: group set to 0
[   88.075241][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.515'.
[   88.276994][ T7640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.287262][ T7640] tipc: Resetting bearer <eth:syzkaller0>
[   88.292280][ T7639] tipc: Disabling bearer <eth:syzkaller0>
[   88.919790][ T7648] netlink: 'syz.2.519': attribute type 11 has an invalid length.
[   88.951239][ T7650] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   89.043277][ T7650] batadv_slave_0: entered promiscuous mode
[   89.047632][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'.
[   89.054849][ T7650] netlink: 428 bytes leftover after parsing attributes in process `syz.0.521'.
[   89.057877][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'.
[   89.152920][ T7658] macvlan2: entered allmulticast mode
[   89.154698][ T7658] veth1_vlan: entered allmulticast mode
[   89.157763][ T7658] veth1_vlan: left allmulticast mode
[   89.306574][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[   89.354998][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[   89.451623][ T7683] netlink: 208 bytes leftover after parsing attributes in process `syz.0.533'.
[   89.455002][ T7683] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.525224][ T7691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.529165][ T7691] syzkaller0: entered promiscuous mode
[   89.531190][ T7691] syzkaller0: entered allmulticast mode
[   89.544535][ T7691] tipc: Resetting bearer <eth:syzkaller0>
[   89.553659][ T7690] tipc: Resetting bearer <eth:syzkaller0>
[   89.576072][ T7690] tipc: Disabling bearer <eth:syzkaller0>
[   89.961916][ T7717] delete_channel: no stack
[   89.964964][ T7732] bond0: (slave rose0): Error: Device can not be enslaved while up
[   90.045342][ T7736] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.121717][ T7750] netlink: 'syz.1.554': attribute type 3 has an invalid length.
[   90.186264][ T7754] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[   90.194418][ T7756] syz.1.557 (7756) used greatest stack depth: 17720 bytes left
[   90.351000][ T7765] batadv1: entered promiscuous mode
[   90.352829][ T7765] batadv1: entered allmulticast mode
[   90.589759][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   90.595846][ T7776] sctp: [Deprecated]: syz.1.565 (pid 7776) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.595846][ T7776] Use struct sctp_sack_info instead
[   91.138546][ T5707] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   91.158565][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   91.220250][ T7813] __nla_validate_parse: 13 callbacks suppressed
[   91.220267][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'.
[   91.272132][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'.
[   91.274353][ T7820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.580'.
[   91.275824][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'.
[   91.343491][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'.
[   91.464236][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'.
[   91.900226][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.903851][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.907415][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.911897][ T7867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[   91.934943][ T7866] tipc: New replicast peer: 255.255.255.255
[   91.940759][ T7866] tipc: Enabled bearer <udp:s>, priority 10
[   92.150090][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   92.151374][ T7874] xt_l2tp: v2 tid > 0xffff: 37482740
[   92.153547][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   92.218565][ T7876] macvlan3: entered promiscuous mode
[   92.220767][ T7876] vlan0: entered promiscuous mode
[   92.397373][ T7893] ------------[ cut here ]------------
[   92.399817][ T7893] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[   92.408999][ T7893] WARNING: CPU: 1 PID: 7893 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.412412][ T7893] Modules linked in:
[   92.414776][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) 
[   92.420143][ T7893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.424141][ T7893] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.426642][ T7893] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 3f b0 8c e8 46 9a 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 fe d6 f6 90 0f 0b 90 42 80 7c 3d
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   92.434899][ T7893] RSP: 0018:ffffc900040ff050 EFLAGS: 00010246
[   92.437086][ T7893] RAX: dbfd17950c4c1c00 RBX: 0000000000000000 RCX: 0000000000080000
[   92.440422][ T7893] RDX: ffffc90003b79000 RSI: 0000000000005331 RDI: 0000000000005332
[   92.443008][ T7893] RBP: ffff888122ba9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[   92.445418][ T7893] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff888122baa9d0
[   92.448717][ T7893] R13: ffff888122ba8d80 R14: 1ffff110245752e5 R15: dffffc0000000000
[   92.452712][ T7893] FS:  00007facb49f26c0(0000) GS:ffff8881a3c14000(0000) knlGS:0000000000000000
[   92.456320][ T7893] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.459441][ T7893] CR2: ffffffff80000000 CR3: 00000001144b8000 CR4: 00000000000006f0
[   92.462644][ T7893] Call Trace:
[   92.465087][ T7893]  <TASK>
[   92.466662][ T7893]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[   92.469646][ T7893]  __ieee80211_link_release_channel+0x33b/0x4a0
[   92.472166][ T7893]  ieee80211_if_change_type+0x14c/0x990
[   92.474387][ T7893]  ieee80211_change_iface+0xd5/0x510
[   92.476537][ T7893]  cfg80211_change_iface+0x795/0xef0
[   92.479084][ T7893]  nl80211_set_interface+0x773/0xaa0
[   92.481226][ T7893]  ? __pfx_nl80211_set_interface+0x10/0x10
[   92.483554][ T7893]  ? nl80211_pre_doit+0x4fb/0x930
[   92.485515][ T7893]  genl_family_rcv_msg_doit+0x215/0x300
[   92.487738][ T7893]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   92.490577][ T7893]  ? bpf_lsm_capable+0x9/0x20
[   92.492476][ T7893]  ? security_capable+0x7e/0x2e0
[   92.494500][ T7893]  genl_rcv_msg+0x60e/0x790
[   92.496349][ T7893]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.498782][ T7893]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   92.500984][ T7893]  ? __pfx_nl80211_set_interface+0x10/0x10
[   92.503205][ T7893]  ? __pfx_nl80211_post_doit+0x10/0x10
[   92.505423][ T7893]  ? __asan_memcpy+0x40/0x70
[   92.507319][ T7893]  ? __pfx_ref_tracker_free+0x10/0x10
[   92.509927][ T7893]  netlink_rcv_skb+0x208/0x470
[   92.511889][ T7893]  ? __lock_acquire+0xab9/0xd20
[   92.514713][ T7893]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.516795][ T7893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   92.519358][ T7893]  ? down_read+0x1ad/0x2e0
[   92.521478][ T7893]  genl_rcv+0x28/0x40
[   92.523062][ T7893]  netlink_unicast+0x82f/0x9e0
[   92.525285][ T7893]  ? __pfx_netlink_unicast+0x10/0x10
[   92.527430][ T7893]  ? netlink_sendmsg+0x642/0xb30
[   92.529932][ T7893]  ? skb_put+0x11b/0x210
[   92.531698][ T7893]  netlink_sendmsg+0x805/0xb30
[   92.533641][ T7893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.535765][ T7893]  ? aa_sock_msg_perm+0xf1/0x1d0
[   92.537831][ T7893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.540191][ T7893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.542301][ T7893]  __sock_sendmsg+0x21c/0x270
[   92.544213][ T7893]  ____sys_sendmsg+0x505/0x830
[   92.546159][ T7893]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.548399][ T7893]  ? import_iovec+0x74/0xa0
[   92.550268][ T7893]  ___sys_sendmsg+0x21f/0x2a0
[   92.552419][ T7893]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.554614][ T7893]  ? __fget_files+0x2a/0x420
[   92.556485][ T7893]  ? __fget_files+0x3a0/0x420
[   92.558865][ T7893]  __x64_sys_sendmsg+0x19b/0x260
[   92.560897][ T7893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.563175][ T7893]  ? rcu_is_watching+0x15/0xb0
[   92.565127][ T7893]  ? do_syscall_64+0xbe/0x3b0
[   92.567131][ T7893]  do_syscall_64+0xfa/0x3b0
[   92.570157][ T7893]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.572498][ T7893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.574863][ T7893]  ? exc_page_fault+0x9f/0xf0
[   92.576747][ T7893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.579115][ T7893] RIP: 0033:0x7facb3b8ebe9
[   92.580843][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.587753][ T7893] RSP: 002b:00007facb49f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.590904][ T7893] RAX: ffffffffffffffda RBX: 00007facb3dc5fa0 RCX: 00007facb3b8ebe9
[   92.593766][ T7893] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   92.596828][ T7893] RBP: 00007facb3c11e19 R08: 0000000000000000 R09: 0000000000000000
[   92.599627][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.602657][ T7893] R13: 00007facb3dc6038 R14: 00007facb3dc5fa0 R15: 00007fff9644f638
[   92.605843][ T7893]  </TASK>
[   92.606945][ T7893] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   92.609509][ T7893] CPU: 1 UID: 0 PID: 7893 Comm: syz.1.601 Not tainted syzkaller #0 PREEMPT(full) 
[   92.613077][ T7893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.617009][ T7893] Call Trace:
[   92.618352][ T7893]  <TASK>
[   92.619603][ T7893]  dump_stack_lvl+0x99/0x250
[   92.621426][ T7893]  ? __asan_memcpy+0x40/0x70
[   92.623210][ T7893]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.625193][ T7893]  ? __pfx__printk+0x10/0x10
[   92.627031][ T7893]  vpanic+0x281/0x750
[   92.628658][ T7893]  ? __pfx__printk+0x10/0x10
[   92.630510][ T7893]  ? __pfx_vpanic+0x10/0x10
[   92.632361][ T7893]  ? is_bpf_text_address+0x292/0x2b0
[   92.634515][ T7893]  panic+0xb9/0xc0
[   92.636072][ T7893]  ? __pfx_panic+0x10/0x10
[   92.637880][ T7893]  __warn+0x31b/0x4b0
[   92.639502][ T7893]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.641878][ T7893]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.644208][ T7893]  report_bug+0x2be/0x4f0
[   92.645999][ T7893]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.648279][ T7893]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.650568][ T7893]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[   92.652689][ T7893]  handle_bug+0x84/0x160
[   92.654094][ T7893]  exc_invalid_op+0x1a/0x50
[   92.655882][ T7893]  asm_exc_invalid_op+0x1a/0x20
[   92.657887][ T7893] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[   92.660412][ T7893] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 e0 3f b0 8c e8 46 9a 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 27 fe d6 f6 90 0f 0b 90 42 80 7c 3d
[   92.667974][ T7893] RSP: 0018:ffffc900040ff050 EFLAGS: 00010246
[   92.670423][ T7893] RAX: dbfd17950c4c1c00 RBX: 0000000000000000 RCX: 0000000000080000
[   92.673664][ T7893] RDX: ffffc90003b79000 RSI: 0000000000005331 RDI: 0000000000005332
[   92.676863][ T7893] RBP: ffff888122ba9728 R08: ffff888136624253 R09: 1ffff11026cc484a
[   92.679992][ T7893] R10: dffffc0000000000 R11: ffffed1026cc484b R12: ffff888122baa9d0
[   92.683070][ T7893] R13: ffff888122ba8d80 R14: 1ffff110245752e5 R15: dffffc0000000000
[   92.686197][ T7893]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[   92.688609][ T7893]  __ieee80211_link_release_channel+0x33b/0x4a0
[   92.691096][ T7893]  ieee80211_if_change_type+0x14c/0x990
[   92.693301][ T7893]  ieee80211_change_iface+0xd5/0x510
[   92.695430][ T7893]  cfg80211_change_iface+0x795/0xef0
[   92.697500][ T7893]  nl80211_set_interface+0x773/0xaa0
[   92.699689][ T7893]  ? __pfx_nl80211_set_interface+0x10/0x10
[   92.702050][ T7893]  ? nl80211_pre_doit+0x4fb/0x930
[   92.704041][ T7893]  genl_family_rcv_msg_doit+0x215/0x300
[   92.706374][ T7893]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   92.708840][ T7893]  ? bpf_lsm_capable+0x9/0x20
[   92.710760][ T7893]  ? security_capable+0x7e/0x2e0
[   92.712704][ T7893]  genl_rcv_msg+0x60e/0x790
[   92.714543][ T7893]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.716520][ T7893]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   92.718678][ T7893]  ? __pfx_nl80211_set_interface+0x10/0x10
[   92.721034][ T7893]  ? __pfx_nl80211_post_doit+0x10/0x10
[   92.723306][ T7893]  ? __asan_memcpy+0x40/0x70
[   92.725190][ T7893]  ? __pfx_ref_tracker_free+0x10/0x10
[   92.727359][ T7893]  netlink_rcv_skb+0x208/0x470
[   92.729374][ T7893]  ? __lock_acquire+0xab9/0xd20
[   92.731363][ T7893]  ? __pfx_genl_rcv_msg+0x10/0x10
[   92.733366][ T7893]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   92.735668][ T7893]  ? down_read+0x1ad/0x2e0
[   92.737509][ T7893]  genl_rcv+0x28/0x40
[   92.739174][ T7893]  netlink_unicast+0x82f/0x9e0
[   92.741199][ T7893]  ? __pfx_netlink_unicast+0x10/0x10
[   92.743345][ T7893]  ? netlink_sendmsg+0x642/0xb30
[   92.745322][ T7893]  ? skb_put+0x11b/0x210
[   92.747048][ T7893]  netlink_sendmsg+0x805/0xb30
[   92.749039][ T7893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.751155][ T7893]  ? aa_sock_msg_perm+0xf1/0x1d0
[   92.753037][ T7893]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   92.755099][ T7893]  ? __pfx_netlink_sendmsg+0x10/0x10
[   92.757215][ T7893]  __sock_sendmsg+0x21c/0x270
[   92.759076][ T7893]  ____sys_sendmsg+0x505/0x830
[   92.760959][ T7893]  ? __pfx_____sys_sendmsg+0x10/0x10
[   92.762999][ T7893]  ? import_iovec+0x74/0xa0
[   92.764813][ T7893]  ___sys_sendmsg+0x21f/0x2a0
[   92.766726][ T7893]  ? __pfx____sys_sendmsg+0x10/0x10
[   92.768872][ T7893]  ? __fget_files+0x2a/0x420
[   92.770746][ T7893]  ? __fget_files+0x3a0/0x420
[   92.772657][ T7893]  __x64_sys_sendmsg+0x19b/0x260
[   92.774674][ T7893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   92.776881][ T7893]  ? rcu_is_watching+0x15/0xb0
[   92.778833][ T7893]  ? do_syscall_64+0xbe/0x3b0
[   92.780768][ T7893]  do_syscall_64+0xfa/0x3b0
[   92.782598][ T7893]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.784603][ T7893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.787043][ T7893]  ? exc_page_fault+0x9f/0xf0
[   92.788980][ T7893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.791305][ T7893] RIP: 0033:0x7facb3b8ebe9
[   92.792991][ T7893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.800515][ T7893] RSP: 002b:00007facb49f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   92.803799][ T7893] RAX: ffffffffffffffda RBX: 00007facb3dc5fa0 RCX: 00007facb3b8ebe9
[   92.807030][ T7893] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[   92.810223][ T7893] RBP: 00007facb3c11e19 R08: 0000000000000000 R09: 0000000000000000
[   92.813385][ T7893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.816457][ T7893] R13: 00007facb3dc6038 R14: 00007facb3dc5fa0 R15: 00007fff9644f638
[   92.819636][ T7893]  </TASK>
[   92.821511][ T7893] Kernel Offset: disabled
[   92.823282][ T7893] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:40:59  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44fbb RBX=1ffff11026cc7f69 RCX=ffff888108d31cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000307f700 RSP=ffffc9000307f580
R8 =ffffffff8fa39237 R9 =1ffffffff1f47246 R10=dffffc0000000000 R11=fffffbfff1f47247
R12=ffff88813663fb48 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44fa3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbe9cef7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fbe9c3976c3 00007fbe9c3976c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0104808081801000 1080040100000008
XMM06=0606015a8e000800 10e00300100010d0 XMM07=0300100010c00302 100010b003781000
XMM08=0f90030000000000 8e00080000306d69 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000152d2 RDI=00000000000152d3 RBP=00000000000003f8 RSP=ffffc900040fe7f0
R8 =ffff8880206c0237 R9 =1ffff110040d8046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018eb R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007facb49f26c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffffffff80000000 CR3=00000001144b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000300 0070bd2908010010
XMM02=0020000200058001 0048000000010003 XMM03=0003000600080000 0002000100060000
XMM04=0300080000000300 0600080000000200 XMM05=0100060000002000 0200058001004800
XMM06=0000010003000800 0000000005000500 XMM07=0000000002000800 00000125dfdbfb00
XMM08=0000000000000000 00007f2353212ee7 XMM09=0000000000000000 00007f2353212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
