last executing test programs:

1.369205272s ago: executing program 2 (id=258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x13, 0x0, &(0x7f0000000900))
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10080801}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x2b}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x480d1}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r6}]}}}]}, 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'macvlan1\x00'})
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xac, r8, 0x50f, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xaac}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x78}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x2000c010}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000000010073797a30000000005c000000090a0104000000000000000f0700000008000a40000000000900020073797a3100000000090001001e6a7a3000000000080005400000000d08000640ffffff00080003400000000810001180090001"], 0xe4}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000900000000"], 0x4c}}, 0x0)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x98, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'virt_wifi0\x00', {}, 0x0, 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x0, 0x0, 0x6], 0x0, 0x5}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x1}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x66}}, @common=@socket0={{0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008"], 0xa0}}, 0x14b6deac033214c2)

1.246461961s ago: executing program 0 (id=260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x880)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000014000100fcffffff000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff02000000000000000000000000e90008000800020400001400060005000000070000008a48eb7705000000"], 0x48}}, 0xc0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="75b70a362932b36ab680056a121cb8f0c946339992e2db76d0271ba05b7413ca10d139f9483c3c3b44340487684edba93fdfb1373c58b58cca581d3116dce03e12903ad1c46c24949faa55bb956fb334f125f3b94e8d3fffd329dc224443aea461c3109e8caf6e120de6f5dc58d52991359feebc4facf326cdbd8df35e186f06f6924324f8b33cd6ce3d49b6998684ee304d31c113d7293944dbcf201158f818872d49029be50ff7222fcee51d002ba917eb4e1a6529"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2}, 0x94)
socketpair(0x10, 0x2, 0x4, &(0x7f0000000a00)={<r5=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)={0xac, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x44080}, 0x30000000)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)

1.237111196s ago: executing program 2 (id=261):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4091, 0xffb}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r2=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @loopback, r2}, 0xc)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a000a01010200000000000000000000000000020000000000000000ffffe00000020a0066fa"], 0x38}}, 0x20040810)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800800064000008801080005400000000814000000110001"], 0x78}}, 0x0)
close(0x3)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r3, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="64442ef61ffc00000000002000000600000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000044001280080001006774700038000280050006000300000014000800ff010000000000000000000000000001050005000100000005000500010000000800040000000000"], 0x64}}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4)

1.152941287s ago: executing program 2 (id=262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x3ffb, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

1.152076399s ago: executing program 2 (id=263):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r2, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040) (async, rerun: 32)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (rerun: 32)
r3 = socket(0x840000000002, 0x3, 0xfa) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xd0, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000004}, 0x801)
r9 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) (rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x5, 0x4, 0x1, 0x0, r11}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r12}, 0x38) (async)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce0414d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0xffffffffffffff3f}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0xdc, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x8c, 0xd, 0x1, 0x0, "a6271fdcc4910a87f52aa64ed34f5550163367492947088376329ca3419da14e9e53fec25c78c9cfc5e0af6a03240c98ea1a32559858743dff6723a3a00e0c5825874765acc1d3dc67b6b954c756f51ba50c16030117f4ddb6c46a28f59909dd8c9b0699a4eae53824ba2cbe2e47f70db6679a29a8216362830e4b06dbdf536fb487fbe89ca5a6bf"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x13}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40) (rerun: 64)

1.102940998s ago: executing program 0 (id=264):
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000004010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)

1.012467809s ago: executing program 0 (id=265):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x804)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000028000701000000080000090005"], 0x20}}, 0x40080c0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x28, 0xd, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004094}, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x11000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r9 = openat$cgroup_type(r7, &(0x7f00000020c0), 0x2, 0x0)
sendfile(r8, r9, 0x0, 0x27e)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r10, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r10, 0x1000)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r11=>0x0, 0x4, 0xe, 0x8, 0x2, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7, 0x1, 0x2, 0x800}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', r11, 0x10, 0x40, 0x10000, 0x6, {{0x16, 0x4, 0x2, 0x2c, 0x58, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0x38, [@multicast1, @empty, @multicast1]}, @cipso={0x86, 0xb, 0x0, [{0x1, 0x5, "f349c1"}]}, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0x9, [{@remote, 0x8}, {@loopback, 0x5}, {@private=0xa010101, 0xf9e}, {@remote, 0x7f}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.008297833s ago: executing program 2 (id=266):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x10000000})
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001})
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r7, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r8, @ANYBLOB="35871922bd0a413328459cd00496c8f15412"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r8, {0xfff3, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
listen(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10)
ppoll(&(0x7f0000000500)=[{r11, 0x8}], 0x1, 0x0, 0x0, 0x0)

211.458163ms ago: executing program 1 (id=274):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085002200bb000000180101002020702500000000002020207b1af8ff00000000bfa100020000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008095}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x4, 0x4, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', <r8=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x1f, 0x0, 0x0, r8}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}]}, 0x34}}, 0x0)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x5, [@var={0xd, 0x0, 0x0, 0xe, 0x3, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x2}}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @float={0xb, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x7}}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x7c60}, {0x1, 0x7}, {0x6, 0x6}, {0xc, 0xa0ee}]}]}, {0x0, [0x5f, 0x2e, 0x30]}}, &(0x7f00000003c0)=""/105, 0xa1, 0x69, 0x1, 0xc, 0x10000}, 0x28)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000680)='%pI4   \x00'}, 0x20)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x94c, 0x7, 0xfffff001, 0x10050, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50)
r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x20}, 0x18)
r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0xf591, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r18 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2002}, 0x94)
r19 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1e, 0xc, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit, @generic={0x7, 0xf, 0xf, 0x2, 0xfacd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @generic={0x5d, 0x7, 0x1, 0x0, 0xc}], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r8, @fallback=0x20, r10, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x4, &(0x7f0000000900)=[r11, r12, r13, r14, r15, r16, r17, r18], &(0x7f0000000940)=[{0x0, 0x2, 0x9, 0x4}, {0x3, 0x1, 0x5, 0x7}, {0x3, 0x4, 0xb, 0x7}, {0x0, 0x5, 0x4, 0x9}], 0x10, 0x6}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100f6000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000f8000000090003f672797a300000000014000480080002400000000008000140000000000900010073797a30000000005c000000060a01040000000000000000010000003400048010000180090001006d61737100000000200001800700010063740000140002800800014000000012940002400000000608000b40000000000900010073797a3000000000140000001100010000000000000000008000000a"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r20 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
ppoll(&(0x7f0000000a40)=[{r12, 0x5528}, {r17, 0xc514}, {r19, 0xc1}, {r20, 0x8762}], 0x200000000000009e, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000ac0), 0x8)

122.033574ms ago: executing program 0 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000080))
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x138, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

120.658504ms ago: executing program 1 (id=276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xd2, 0x7, 0x1, 0x0, "74305a25ef6d65440b909740dfa6c079ca1d68513a2485dd4f2c639cf463a2f83acb34a196a89678316caee042db9d9fe658a195edcb98da5b187358e388d12bce15f597a6fcf890693d172cce64e1c35331c99e3ad77aedb47c6dbfc7b1df5f6da6890db50266caa9466e9bbe454c8bee0b52022245777ee00f7fcc4094777a186ba0be58c23df4ad8c4c1f34f64b9da57f3b954c46a4c4af2930226b1cb37f3e3f1a8626e1e7e0bf4bae0851e4ea6ea7b1e2969057b19f1333ab46315a70135115d4c4e4358945a1e5f82ca6f1"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0)

67.32359ms ago: executing program 1 (id=277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x401, 0x0, 0x0, {0xe, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c804)

64.747049ms ago: executing program 1 (id=278):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269"], 0xd0060)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000604000000000000000000000f0500"], 0x0, 0x5a}, 0x28)

62.733397ms ago: executing program 0 (id=279):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10)

62.356291ms ago: executing program 2 (id=280):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={r5, @in={{0x2, 0x4e21, @empty}}, 0x7, 0xfe00, 0x2, 0x6, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e21, 0x7fffffff, @local, 0x8}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff6}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff1a}], 0x74)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

2.780908ms ago: executing program 1 (id=281):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2370, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2340, 0x2, [@TCA_CGROUP_ACT={0x233c, 0x1, [@m_pedit={0xfcc, 0x0, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x9, 0x7, 0x2, 0x0, 0x4}, 0x5, 0x6, [{0x7, 0x6, 0xf7d, 0x9, 0x8000, 0x6}, {0x2, 0x0, 0x7b6, 0x24, 0x8, 0x4}, {0xfffffffe, 0xfffffffa, 0x3f98e69, 0xff, 0x2, 0x80000001}, {0x0, 0x5, 0xb85, 0x2, 0x7, 0x4}, {0xe, 0x8, 0x5, 0x6, 0x7, 0x5}, {0x1, 0x3, 0xffffffff, 0x1ff, 0x401, 0x7}, {0x6, 0x1000, 0xcb0, 0x8, 0xd, 0x6}]}, [{0x200, 0x1ff, 0x5, 0x52, 0x5, 0x200}, {0xffffff01, 0x80000001, 0x9, 0x8, 0x1, 0x8}, {0x9, 0x9, 0x681b7725, 0x5, 0x7, 0xf4b4}, {0x10001, 0xedaf, 0x1, 0xfffffff9, 0x1, 0x8}, {0x80000001, 0x3, 0xffffff00, 0x0, 0x9, 0x5946}, {0x1, 0x8, 0x6, 0x6, 0x3, 0xbfe4}, {0x6, 0xd, 0x1000, 0x9, 0x1, 0x2}, {0x1, 0x3379, 0x8, 0x1, 0x7, 0x7}, {0x6db5, 0x9, 0xad18, 0x3, 0x2, 0x8}, {0xfffffffe, 0xa, 0xff, 0x0, 0x80, 0x9}, {0xc, 0x6, 0xc14c, 0x6, 0x1, 0x8}, {0x80, 0xfffffffa, 0x3, 0x2, 0x9, 0x7}, {0xfa7, 0xc0d, 0x5, 0x7, 0xd}, {0x7, 0x4, 0x1, 0x80000001, 0x5, 0x7ff}, {0x3, 0x8, 0xc73c, 0x2, 0x140, 0x6}, {0x5, 0x7, 0x7, 0x0, 0x8000, 0x8}, {0x7, 0x2, 0x4, 0x4, 0x4, 0x1000}, {0x5, 0x3, 0x5, 0xf, 0x454, 0x3}, {0xffffffff, 0x80000001, 0x237, 0x4, 0xffff, 0x8000}, {0x3, 0x800, 0x100, 0x5, 0x47b, 0xb7}, {0xc080, 0xa, 0x4932, 0x3, 0x3, 0x4}, {0x2, 0x10001, 0x6, 0x100, 0x400, 0x6}, {0x6, 0x7ff, 0x9, 0x200, 0x1, 0x100}, {0x143, 0x8, 0x80, 0x3, 0x0, 0x3}, {0x4d9e13c9, 0x1, 0x1, 0x3aa, 0x80000001, 0x1}, {0x10000, 0x0, 0x101, 0x1, 0x3, 0x2}, {0x3, 0x1, 0x7fffffff, 0x7, 0x9, 0xb31}, {0x5e0, 0x7, 0x2, 0xf4, 0x4, 0x200}, {0x4, 0xffff8001, 0x2, 0x1a5, 0xcc0, 0x6}, {0xa, 0x7e64, 0x5, 0x3, 0x4, 0xdf9e}, {0x0, 0x1, 0x8, 0x0, 0x8, 0x5}, {0x7f, 0xffffffff, 0x4, 0x481, 0x3, 0x8}, {0x80000000, 0x1, 0x8, 0x0, 0x24}, {0x4a7f, 0x1d, 0x2, 0x2e7f, 0x7, 0x100}, {0x9, 0x180, 0x9, 0x100, 0x6, 0x8}, {0x6, 0x10000, 0x80000000, 0x1ff, 0x9c, 0x3}, {0xb, 0x56c, 0x1, 0x1, 0x10, 0x9}, {0x9, 0x3, 0x3916, 0x80000000, 0x8, 0x68}, {0x4, 0xb, 0x6, 0xd67d, 0x2, 0x91}, {0x6, 0xfffffff8, 0xfffff4e1, 0x3, 0x9, 0x8}, {0xffff, 0x4, 0xfffffff9, 0xfffffff8, 0x7f13, 0x7}, {0x29, 0x80000001, 0x3, 0xfffffff6, 0x6, 0x3}, {0x0, 0x800000, 0xff, 0x6, 0x3, 0xa4f}, {0x36eb19cf, 0x9, 0x2000000, 0x1ff, 0x0, 0x2}, {0x0, 0xa, 0x7fffffff, 0x0, 0x3}, {0x4, 0x9, 0x100, 0x2, 0x9, 0x1000}, {0x6, 0xb551, 0xc5a, 0x80000000, 0x1, 0xd}, {0x2, 0x6800, 0x7fa8, 0xb6, 0x5, 0x80000001}, {0x7, 0xffffffff, 0x8, 0x0, 0x245b, 0x5}, {0x8, 0x8, 0x20000000, 0x3, 0xfffffffd, 0xbe9}, {0x100, 0xffff, 0xffffff32, 0xfffffffb, 0x7ff, 0x4}, {0xb333, 0x4, 0x6, 0xfff, 0x1ff, 0x7}, {0x4, 0x9e, 0xffff, 0x9, 0x2, 0x7e}, {0xffffffde, 0x0, 0x3, 0x0, 0x4, 0x7}, {0xd2f, 0x3, 0x0, 0x20008, 0x6, 0x8}, {0x9, 0xffffffff, 0x400, 0x1, 0x9, 0x2}, {0x10, 0x4, 0x42b, 0xfffffff9, 0x8, 0x2}, {0xca8, 0xd, 0xe963, 0x80, 0x1, 0xfaec}, {0x7cc9, 0x1, 0x0, 0x748a, 0xa, 0xff}, {0x8001, 0x481, 0x10000, 0x40, 0x5, 0x9}, {0x8, 0x1, 0x245, 0x3, 0x4, 0x4000}, {0x6, 0x7068ea2, 0xffff, 0x9, 0x3ff, 0x1}, {0x6, 0x2, 0x9, 0x81, 0x7, 0xffffffff}, {0x100000, 0x7, 0x52981a39, 0x35c, 0x101, 0x2}, {0x0, 0x4, 0x6, 0x6, 0x5131d5d7}, {0x5, 0x7, 0x10000, 0x4, 0x8}, {0xc71, 0x1301483, 0x8, 0x2, 0x7, 0x100}, {0xaab0, 0x2, 0x0, 0xd77, 0x9, 0x8}, {0x8, 0xecb, 0x0, 0x8001, 0x8000, 0x6d}, {0x95, 0x10000, 0x81, 0x3, 0x4, 0x9}, {0xc353, 0x6, 0x3, 0x0, 0xffffffff, 0xfffffff9}, {0xf4, 0x81, 0x3, 0x5, 0x8}, {0x6, 0x3, 0x8000, 0x10001, 0xa070, 0x3f803912}, {0xfffffff1, 0xbe, 0x6, 0x1, 0xcfe3, 0xfffffffa}, {0x8000, 0x7, 0xd74, 0x3, 0x2, 0x5}, {0x50000000, 0x3, 0x25d7, 0xc313, 0x6, 0x1}, {0x3, 0x400, 0x9, 0x5, 0xfffffff1, 0xa}, {0x5, 0xfffffff8, 0x1, 0x2, 0xf9, 0x3}, {0x8000, 0x0, 0x6, 0x9, 0x2, 0xa}, {0x1aa, 0x8, 0x3, 0x9, 0x6, 0x8}, {0x3, 0x7, 0x7, 0x421, 0x40, 0x5}, {0x40, 0xd, 0x9, 0x7, 0x5, 0xa06}, {0xfffffffd, 0x10, 0x3, 0x80000000, 0x26f, 0x3ff}, {0x8a, 0x236, 0x1, 0x73, 0xffffffff, 0x1}, {0x0, 0x7, 0xaf, 0x910, 0x6, 0x7}, {0x9, 0x80, 0xffff0551, 0x0, 0x1, 0x9}, {0xe8, 0xb, 0x7, 0x23a, 0xfffffffe, 0x10000}, {0x5, 0x59ea, 0x80000001, 0x8, 0x7, 0x5}, {0x82, 0x1, 0x0, 0x9a3a, 0x8d63, 0xcfcf}, {0x9, 0x3, 0xfffff732, 0x2, 0x4}, {0x1, 0x5, 0x0, 0xb, 0x7, 0xa}, {0xdda, 0xfffffffb, 0x8f6, 0x5, 0x5, 0x8}, {0x1, 0xc, 0x65, 0x1e, 0xff, 0x8}, {0x1, 0x8, 0xfffffffa, 0x0, 0x1cf3, 0x7}, {0x7, 0x6, 0xfffffffe, 0x69d, 0xff, 0x5}, {0x1, 0xede3, 0x1800000, 0x2, 0x8, 0x8}, {0x11, 0x8, 0x9, 0xfffffffc, 0x8, 0xdc87}, {0x7, 0x2, 0xc7, 0x73, 0x6, 0x5}, {0xb9df, 0x7c01, 0x7, 0x3, 0xd99, 0x1}, {0x40, 0x0, 0x5, 0xf298, 0x8, 0x800}, {0x7, 0x9, 0x6, 0x39af, 0x1, 0x400}, {0x5, 0x8, 0xf, 0x1, 0x1ff}, {0x911, 0x7, 0x34f, 0x9, 0x3, 0x635}, {0x8001, 0xfffffff7, 0x1, 0x1ff, 0x80000000, 0x2d7}, {0x5, 0x5, 0xf8a, 0x4, 0xffffffff, 0x3}, {0x2, 0xffffffff, 0x6, 0x8, 0x5, 0x40}, {0xbf5, 0x4, 0xeeca, 0x9, 0x7, 0x51d}, {0x10000, 0x1, 0x1, 0xe, 0x1, 0xff}, {0x7, 0xfff, 0x80000000, 0xf, 0x1, 0x4}, {0x4, 0x1, 0x1, 0x4800, 0x3, 0x5}, {0x5, 0x1ff, 0xfffff30b, 0x3, 0x89b, 0x80000001}, {0x23a, 0x0, 0x3a243a0b, 0xff, 0x6, 0x5}, {0x60000, 0xfffffffb, 0x7, 0x3, 0xfffffff7, 0x8c1}, {0x0, 0x0, 0x69d, 0x8, 0x7f8000, 0x7dfa}, {0x3, 0x0, 0xfffffffc, 0x2, 0x45, 0x5}, {0x83ae3f5, 0xfffffff8, 0x10000, 0x4, 0x3, 0x4b4}, {0x6, 0x1, 0xffffa7f8, 0x9, 0x7, 0x1}, {0x8, 0x10, 0x401, 0xd, 0xa7b, 0x2}, {0x2, 0x6, 0x4, 0xfffffff9, 0x3ff, 0x21}, {0x7f, 0x2, 0x80, 0x9, 0x1, 0x4}, {0x3, 0x5, 0x4, 0x7, 0x10001, 0xae}, {0xd, 0x3, 0x8001, 0x7f, 0x5, 0xfff}, {0x7fff, 0x3, 0x4, 0xf2d9, 0x6, 0xfffff0b6}, {0x8, 0x9, 0x5dc4, 0x40, 0x80000000, 0x9}, {0x7f, 0x7, 0x6, 0x5, 0x7}, {0x9, 0x0, 0x5, 0xfffff001, 0x45, 0x4}, {0x0, 0x3, 0xc000, 0xc0b, 0x5d, 0x26}, {0x8, 0xd1, 0x7, 0xd920, 0x8, 0x7}], [{0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x6}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x4}, {0x5}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x52273687dfe5d087}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x1}, {0x2, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}], 0x1}}]}, {0xd6, 0x6, "8cf591360c20638e9be0f66444e1db9d0ee9714fd84248610d0be704332cff2f03093addf6bbe006aa02b2c98e509f3e56a126bb041f495044709ec3c18de4af5b92685369775cd390fc6f2ccc5cfccea396759fd5c45ef1bc773c99456d941f57327fbd8237e4b0cdb112f2b9037932afc98975f68acb137eed4aa6556a6270c558e4ade14bc3727183629e4c4de047cbde1da7bccb953b332395f0c5b2572092d23489e2964cd31a76f34afe5b6aff6afe8711fc0ef807d686bba4bf50d79c0486d9cf66ec471d5863f07d87460308ab55"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x31, 0x6, "a05ecf0b260b9fdf678f1f877a9f9655102e4a9842e65ed2e45cfd9ec6939e794ff5d93b4b4b6528fcb39d4a9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2ffbb2a3cce42a15}}}}, @m_bpf={0x1034, 0x1f, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x1ac, 0x1e, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x6, 0xfffffff7, 0x9}, 0x5}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xb, 0x4, 0x10000000, 0xabb, 0x2}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x0, 0x4, 0x1}, 0x1}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @random="2801a28670c3"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0x3, 0x9}, 0x1}}]}, {0xd9, 0x6, "0d88054fcfd894eb460bee6e4d5428fe0c8ad3a32c218e514ab78be9d9eeb007d0da01941e4dbb72166fe34a03cef781a9c8a50846bb4515a7f880686e610f11d70e7260f5d42e5ce96681c4f02e9b24b8a160bfb56f99929b49597730acc78d2059df2a716debc8898ac4b135057161a275eb449417d9836521983516d50749dbd0b5ecaf1b10282463614fc0706cd56b8dc36ca6723f8785d8f811ed90e9a86a41a1134f43a04c0559f7a3ca3f28dde641ad0f84ba7ab9efb2c55093dc1b243c7fb06f65d514cb7cd46b9037db97ae8cf3da1b4e"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0x11c, 0xb, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0xa8, 0x6, "662c4799f3c6bfd4ba8f831054821fad1cf1bb3317513f229df78565a0047c934d0ad8a4447418973a3c0f8d742700452b539119b10c9c1d65875e18163a246e9476c3eb3e373bb0e933fb7896f8ee9969e19fd81e6422595d5d33390b8496c5b4654cdaab8fb0e58ff0d578c67b56122a68f10c889fab7f8800d40c12fd03b9a71082cbcfaea04f14d32774e7dfc2baddb1de8a48b776aa9ee0b4f7f27a7f82384cb267"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2370}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101006000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)

2.355659ms ago: executing program 0 (id=282):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x28, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)

0s ago: executing program 1 (id=283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x78}}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x9, 0xfffffffa, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x80, 0x700, 0x8001}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x20, 0x70bd25, 0x25dfdbff, {0x2, 0x14, 0x10, 0x83, 0xff, 0x3, 0x0, 0x6, 0x2c00}, [@RTA_FLOW={0x8, 0xb, 0x31}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}]}, 0x2c}}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e31, 0x3c9c0150, @mcast1}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf4e}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xafc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x52df647b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x60}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008880}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x1404, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001)
getsockopt$inet6_tcp_buf(r6, 0x6, 0x21, 0x0, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
socket$inet6(0xa, 0x1, 0x5)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x1, 0x1, 0x1, 0x8, 0x8, 0xf}, &(0x7f0000000180)=0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22570' (ED25519) to the list of known hosts.
syzkaller login: [   48.227470][ T5818] cgroup: Unknown subsys name 'net'
[   48.375440][ T5818] cgroup: Unknown subsys name 'cpuset'
[   48.381854][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.993550][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.063885][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.068355][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.073249][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.077616][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.080134][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.083223][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.112733][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.113385][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.118007][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.121135][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.123949][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.124827][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.129357][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.133320][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.135986][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.357540][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.365681][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   54.452925][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.486953][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.489216][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.491708][ T5828] bridge_slave_0: entered allmulticast mode
[   54.494362][ T5828] bridge_slave_0: entered promiscuous mode
[   54.510224][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.513628][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.515788][ T5828] bridge_slave_1: entered allmulticast mode
[   54.518372][ T5828] bridge_slave_1: entered promiscuous mode
[   54.541367][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.543662][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.545902][ T5837] bridge_slave_0: entered allmulticast mode
[   54.548550][ T5837] bridge_slave_0: entered promiscuous mode
[   54.572642][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.574892][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.577065][ T5837] bridge_slave_1: entered allmulticast mode
[   54.579716][ T5837] bridge_slave_1: entered promiscuous mode
[   54.592496][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.600185][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.629286][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.649778][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.654997][ T5828] team0: Port device team_slave_0 added
[   54.657017][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.659161][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.661888][ T5832] bridge_slave_0: entered allmulticast mode
[   54.664585][ T5832] bridge_slave_0: entered promiscuous mode
[   54.676827][ T5828] team0: Port device team_slave_1 added
[   54.687806][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.690100][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.693728][ T5832] bridge_slave_1: entered allmulticast mode
[   54.696324][ T5832] bridge_slave_1: entered promiscuous mode
[   54.708411][ T5837] team0: Port device team_slave_0 added
[   54.727429][ T5837] team0: Port device team_slave_1 added
[   54.737842][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.739951][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.747631][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.770295][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.774789][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.776886][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.784762][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.788677][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.791300][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.799286][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.804308][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.806778][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.814638][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.819560][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.849708][ T5832] team0: Port device team_slave_0 added
[   54.853263][ T5832] team0: Port device team_slave_1 added
[   54.901322][ T5837] hsr_slave_0: entered promiscuous mode
[   54.903781][ T5837] hsr_slave_1: entered promiscuous mode
[   54.917104][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.919182][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.927202][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.934034][ T5828] hsr_slave_0: entered promiscuous mode
[   54.936348][ T5828] hsr_slave_1: entered promiscuous mode
[   54.938478][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.941946][ T5828] Cannot create hsr debugfs directory
[   54.944884][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.946932][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.954830][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.050019][ T5832] hsr_slave_0: entered promiscuous mode
[   55.053597][ T5832] hsr_slave_1: entered promiscuous mode
[   55.056051][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.058630][ T5832] Cannot create hsr debugfs directory
[   55.208169][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.215519][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.226978][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.240222][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.269795][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.276073][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.281039][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.286563][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.313971][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.316214][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.318763][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.321018][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.337341][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.341227][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.384050][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.389815][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.394635][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.409311][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.458315][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.467937][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.486775][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   55.498076][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.506649][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.508882][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.516370][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.518625][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.527915][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.530590][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.535067][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.537547][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.579273][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.611232][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.624234][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.626528][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.641563][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.643763][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.795909][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.804182][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.829465][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.877463][ T5828] veth0_vlan: entered promiscuous mode
[   55.881116][ T5837] veth0_vlan: entered promiscuous mode
[   55.898619][ T5828] veth1_vlan: entered promiscuous mode
[   55.905556][ T5832] veth0_vlan: entered promiscuous mode
[   55.908545][ T5837] veth1_vlan: entered promiscuous mode
[   55.917724][ T5832] veth1_vlan: entered promiscuous mode
[   55.938213][ T5828] veth0_macvtap: entered promiscuous mode
[   55.953677][ T5828] veth1_macvtap: entered promiscuous mode
[   55.964151][ T5837] veth0_macvtap: entered promiscuous mode
[   55.969763][ T5832] veth0_macvtap: entered promiscuous mode
[   55.979925][ T5832] veth1_macvtap: entered promiscuous mode
[   55.985482][ T5837] veth1_macvtap: entered promiscuous mode
[   55.998799][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.008318][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.014827][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.017940][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.022283][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.025001][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.034941][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.041821][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.048800][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.061490][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.065010][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.067731][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.070445][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.074550][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.082286][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.084895][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.087445][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.089969][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.131429][ T5219] Bluetooth: hci0: command tx timeout
[   56.193509][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.195920][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.210861][ T5219] Bluetooth: hci1: command tx timeout
[   56.210933][ T5833] Bluetooth: hci2: command tx timeout
[   56.212819][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.216897][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.236905][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.239353][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.266817][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.269688][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.287590][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.296585][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.332358][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.335397][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.362857][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.456048][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.459468][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.502760][ T5906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.510322][ T5907] syz_tun: entered promiscuous mode
[   56.515591][ T5907] batadv_slave_0: entered promiscuous mode
[   56.518553][ T5907] hsr1: entered allmulticast mode
[   56.520228][ T5907] syz_tun: entered allmulticast mode
[   56.522580][ T5907] batadv_slave_0: entered allmulticast mode
[   56.583685][ T5917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'.
[   56.598700][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.719723][ T5919] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.723890][ T5919] bond0: (slave bond1): Enslaving as an active interface with an up link
[   56.907480][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.978228][ T5951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   57.180165][ T5964] syzkaller0: entered allmulticast mode
[   57.283985][ T5966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.286359][ T5966] IPv6: NLM_F_CREATE should be set when creating new route
[   57.288637][ T5966] IPv6: NLM_F_CREATE should be set when creating new route
[   57.338815][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   57.347628][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.353693][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.380307][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'.
[   57.384592][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'.
[   57.387575][ T5972] netlink: 'syz.0.22': attribute type 5 has an invalid length.
[   57.414561][ T5973] netlink: 'syz.2.21': attribute type 4 has an invalid length.
[   57.427912][ T5973] netlink: 'syz.2.21': attribute type 4 has an invalid length.
[   57.427918][ T5975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   57.432715][ T5975] IPv6: NLM_F_CREATE should be set when creating new route
[   57.434953][ T5975] IPv6: NLM_F_CREATE should be set when creating new route
[   57.435124][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.727359][ T5982] openvswitch: netlink: Missing valid actions attribute.
[   57.729972][ T5982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.743717][ T5982] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET)
[   57.817495][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   57.849086][ T5986] xt_CT: No such helper "syz0"
[   58.065810][ T6005] netlink: 'syz.1.29': attribute type 39 has an invalid length.
[   58.211105][ T5833] Bluetooth: hci0: command tx timeout
[   58.290937][ T5833] Bluetooth: hci1: command tx timeout
[   58.291089][ T5219] Bluetooth: hci2: command tx timeout
[   58.369240][ T6024] Zero length message leads to an empty skb
[   59.162993][ T6036] tipc: Started in network mode
[   59.164796][ T6036] tipc: Node identity 76b181ee0e02, cluster identity 4711
[   59.167452][ T6036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.182229][ T6036] tipc: Disabling bearer <eth:syzkaller0>
[   59.485540][ T6052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   59.487869][ T6052] IPv6: NLM_F_CREATE should be set when creating new route
[   59.490096][ T6052] IPv6: NLM_F_CREATE should be set when creating new route
[   60.187265][ T6089] unsupported nlmsg_type 40
[   60.239621][ T6093] raw_sendmsg: syz.0.53 forgot to set AF_INET. Fix it!
[   60.292421][ T5219] Bluetooth: hci0: command tx timeout
[   60.329073][ T6099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.331381][ T6099] IPv6: NLM_F_CREATE should be set when creating new route
[   60.333541][ T6099] IPv6: NLM_F_CREATE should be set when creating new route
[   60.371977][ T5219] Bluetooth: hci1: command tx timeout
[   60.372364][ T5833] Bluetooth: hci2: command tx timeout
[   60.419920][ T6105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.499082][   T33] audit: type=1107 audit(1753036856.651:2): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*=	;<.F=.WɥBn+R휪9L;j/C'
[   60.550296][ T6120] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[   60.554741][ T6120] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[   60.569583][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.572889][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.638106][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.645296][ T6108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.697442][ T6108] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.700327][ T6108] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.707053][ T6108] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.709872][ T6108] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.747123][ T6120] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   60.799111][ T6127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.801478][ T6127] IPv6: NLM_F_CREATE should be set when creating new route
[   60.966572][ T6153] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.973872][ T6154] vlan2: entered allmulticast mode
[   60.976137][ T6154] macvlan0: entered allmulticast mode
[   61.049470][ T6160] openvswitch: netlink: Missing valid actions attribute.
[   61.053102][ T6160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.190062][ T6169] xt_CT: No such helper "syz0"
[   61.218811][ T6174] netlink: 'syz.1.77': attribute type 4 has an invalid length.
[   61.303818][ T6178] wireguard0: entered promiscuous mode
[   61.305975][ T6178] wireguard0: entered allmulticast mode
[   61.378074][ T6187] netlink: 'syz.0.82': attribute type 3 has an invalid length.
[   61.381649][ T6187] netlink: 'syz.0.82': attribute type 1 has an invalid length.
[   61.389046][ T6187] netlink: 'syz.0.82': attribute type 3 has an invalid length.
[   61.463049][ T6192] __nla_validate_parse: 83 callbacks suppressed
[   61.463067][ T6192] netlink: 204 bytes leftover after parsing attributes in process `syz.0.83'.
[   61.546239][ T6198] veth2: entered allmulticast mode
[   62.233546][ T6213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.236460][ T6213] syzkaller0: entered promiscuous mode
[   62.238247][ T6213] syzkaller0: entered allmulticast mode
[   62.249894][ T6213] tipc: Resetting bearer <eth:syzkaller0>
[   62.254205][ T6212] tipc: Resetting bearer <eth:syzkaller0>
[   62.261909][ T6212] tipc: Disabling bearer <eth:syzkaller0>
[   62.334301][ T6216] vlan3: entered promiscuous mode
[   62.336019][ T6216] vlan3: entered allmulticast mode
[   62.337592][ T6216] hsr_slave_1: entered allmulticast mode
[   62.359005][ T6216] netlink: 404 bytes leftover after parsing attributes in process `syz.1.91'.
[   62.363332][ T6216] netlink: 88 bytes leftover after parsing attributes in process `syz.1.91'.
[   62.366774][ T6216] netlink: 88 bytes leftover after parsing attributes in process `syz.1.91'.
[   62.370796][ T5833] Bluetooth: hci0: command tx timeout
[   62.422667][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   62.450785][ T5833] Bluetooth: hci1: command tx timeout
[   62.460770][ T5833] Bluetooth: hci2: command tx timeout
[   62.572202][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.574247][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.576224][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.577875][ T6225] validate_nla: 130 callbacks suppressed
[   62.577909][ T6225] netlink: 'syz.1.92': attribute type 13 has an invalid length.
[   62.578221][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.584858][ T6225] netlink: 'syz.1.92': attribute type 17 has an invalid length.
[   62.585699][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.590038][ T6222] xt_TCPMSS: Only works on TCP SYN packets
[   62.648598][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.652193][ T6225] 8021q: adding VLAN 0 to HW filter on device team0
[   62.658288][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.707186][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.92'.
[   62.718787][ T6232] macvlan2: entered promiscuous mode
[   62.721409][ T6232] macvlan2: entered allmulticast mode
[   62.743283][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.780508][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.806494][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.861358][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.109592][ T6255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.102'.
[   63.206609][ T6263] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[   63.251367][ T6268] netlink: 56 bytes leftover after parsing attributes in process `syz.0.105'.
[   63.254405][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   63.262859][ T6268] syzkaller1: entered promiscuous mode
[   63.264541][ T6268] syzkaller1: entered allmulticast mode
[   63.366538][ T6225] syz.1.92 (6225) used greatest stack depth: 20008 bytes left
[   63.414105][ T6274] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.108'.
[   63.600248][ T6290] TCP: TCP_TX_DELAY enabled
[   63.615957][ T6290] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   63.619055][ T6290] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.621932][ T6290] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.624614][ T6290] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.832217][ T6310] bridge0: port 3(ipvlan2) entered blocking state
[   63.834431][ T6310] bridge0: port 3(ipvlan2) entered disabled state
[   63.836591][ T6310] ipvlan2: entered allmulticast mode
[   63.838279][ T6310] bridge0: entered allmulticast mode
[   63.843877][ T6310] ipvlan2: left allmulticast mode
[   63.845502][ T6310] bridge0: left allmulticast mode
[   63.917757][ T6318] openvswitch: netlink: Missing valid actions attribute.
[   63.925026][ T6318] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.941278][ T6320] bridge1: entered allmulticast mode
[   64.009572][ T6323] xt_CT: No such helper "syz0"
[   64.086927][ T6322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.352761][ T6339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   64.355124][ T6339] IPv6: NLM_F_CREATE should be set when creating new route
[   64.357356][ T6339] IPv6: NLM_F_CREATE should be set when creating new route
[   64.590092][ T6363] netlink: 'syz.1.135': attribute type 8 has an invalid length.
[   64.594655][ T6364] netlink: 'syz.1.135': attribute type 8 has an invalid length.
[   64.686143][ T6372] openvswitch: netlink: Unknown nsh attribute 0
[   64.688142][ T6372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.827883][ T6386] netlink: 'syz.2.140': attribute type 25 has an invalid length.
[   64.830379][ T6386] netlink: 'syz.2.140': attribute type 8 has an invalid length.
[   65.121482][ T6412] C: renamed from lo (while UP)
[   65.124607][ T6412] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.343476][ T6429] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   65.602873][ T6444] ieee802154 phy0 wpan0: encryption failed: -22
[   65.743486][ T6461] delete_channel: no stack
[   65.837177][ T6469] warning: `syz.0.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.129320][ T6494] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   66.244423][ T6499] 8021q: VLANs not supported on xfrm0
[   66.330998][ T6502] netlink: 'syz.2.173': attribute type 9 has an invalid length.
[   66.474932][   T33] audit: type=1800 audit(1753036862.631:3): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="memory.events" dev="tmpfs" ino=291 res=0 errno=0
[   66.485598][ T6509] netlink: 'syz.1.176': attribute type 13 has an invalid length.
[   66.488014][ T6509] __nla_validate_parse: 17 callbacks suppressed
[   66.488021][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'.
[   66.492978][ T6509] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   66.595363][ T6523] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   66.673559][ T6526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.181'.
[   66.914685][ T6545] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   66.987903][ T6554] syz.2.187 uses old SIOCAX25GETINFO
[   67.007168][ T6558] netlink: 'syz.0.189': attribute type 2 has an invalid length.
[   67.033599][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.188'.
[   67.058307][ T6552] syz.1.188 (6552) used greatest stack depth: 19864 bytes left
[   67.069082][ T6566] batadv0: mtu less than device minimum
[   67.120028][ T6568] netlink: 412 bytes leftover after parsing attributes in process `syz.1.192'.
[   67.196776][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'.
[   67.383827][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'.
[   67.475592][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'.
[   67.649730][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   67.679905][ T6631] pim6reg1: entered promiscuous mode
[   67.684081][ T6631] pim6reg1: entered allmulticast mode
[   67.693170][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'.
[   67.958841][ T6661] tipc: Started in network mode
[   67.960497][ T6661] tipc: Node identity 52d7df4dfdd9, cluster identity 4711
[   67.962826][ T6661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.985337][ T6661] syzkaller0: entered promiscuous mode
[   67.987015][ T6661] syzkaller0: entered allmulticast mode
[   67.989772][ T6661] tipc: Resetting bearer <eth:syzkaller0>
[   68.007495][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[   68.729430][ T6660] tipc: Disabling bearer <eth:syzkaller0>
[   68.954650][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[   69.174180][ T5858] nci: nci_ntf_packet: unknown ntf opcode 0xa
[   69.176192][ T6714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.212882][ T6718] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   69.221607][ T6716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.264079][ T6722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.424199][ T6729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.429095][ T6729] netlink: 'syz.2.243': attribute type 10 has an invalid length.
[   69.437862][ T6729] batman_adv: batadv0: Adding interface: netdevsim0
[   69.440440][ T6729] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.450905][ T6729] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   70.082295][ T6740] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   70.090627][ T6740] netlink: 'syz.0.248': attribute type 2 has an invalid length.
[   70.093619][ T6740] netlink: 'syz.0.248': attribute type 6 has an invalid length.
[   70.446665][ T6767] Cannot find add_set index 0 as target
[   70.866281][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.868330][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.424665][ T6828] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   71.473463][ T6830] Cannot find add_set index 2 as target
[   71.508621][ T6832] __nla_validate_parse: 13 callbacks suppressed
[   71.508632][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[   71.611780][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'.
[   71.621994][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.679510][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[   71.684252][ T6846] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.730124][ T6849] ------------[ cut here ]------------
[   71.732890][ T6849] WARNING: CPU: 1 PID: 6849 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[   71.734744][ T6851] bond0: entered promiscuous mode
[   71.735787][ T6849] Modules linked in:
[   71.737393][ T6851] bond_slave_0: entered promiscuous mode
[   71.737524][ T6851] bond_slave_1: entered promiscuous mode
[   71.739021][ T6851] macvlan1: entered promiscuous mode
[   71.740132][ T6849] 
[   71.743275][ T6851] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   71.743910][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.0.282 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   71.745145][ T6851] Cannot create hsr debugfs directory
[   71.745856][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.748260][ T6851] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[   71.751925][ T6849] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   71.753768][ T6851] hsr1: entered promiscuous mode
[   71.756461][ T6849] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 e8 db f6 90 0f 0b 90 eb e1 e8 f7 e7 db f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   71.765804][ T6851] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   71.768865][ T6849] RSP: 0018:ffffc900081beff0 EFLAGS: 00010283
[   71.773055][ T6849] RAX: ffffffff8ae44449 RBX: ffff88803a360000 RCX: 0000000000080000
[   71.775360][ T6849] RDX: ffffc9000879a000 RSI: 0000000000000367 RDI: 0000000000000368
[   71.777771][ T6849] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae43f63
[   71.780291][ T6849] R10: dffffc0000000000 R11: ffffed100746c031 R12: 1ffff1100746c00a
[   71.783512][ T6849] R13: ffff888031000e40 R14: 0000000000000001 R15: ffffffff8ae43f63
[   71.786571][ T6849] FS:  00007fa0a69a56c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[   71.789651][ T6849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   71.792015][ T6849] CR2: 0000555560a58808 CR3: 000000012145a000 CR4: 00000000000006f0
[   71.794921][ T6849] Call Trace:
[   71.796231][ T6849]  <TASK>
[   71.797299][ T6849]  rate_control_rate_init_all_links+0x109/0x1a0
[   71.799427][ T6849]  sta_apply_auth_flags+0x1c2/0x400
[   71.801329][ T6849]  sta_apply_parameters+0xe4b/0x15b0
[   71.803214][ T6849]  ieee80211_add_station+0x424/0x6a0
[   71.804944][ T6849]  rdev_add_station+0x108/0x290
[   71.806494][ T6849]  nl80211_new_station+0x1723/0x1b40
[   71.808381][ T6849]  ? __pfx_nl80211_new_station+0x10/0x10
[   71.810316][ T6849]  ? netdev_run_todo+0xe1d/0xea0
[   71.812219][ T6849]  ? nl80211_pre_doit+0x4f1/0x930
[   71.814012][ T6849]  genl_family_rcv_msg_doit+0x215/0x300
[   71.815831][ T6849]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   71.817659][ T6849]  ? bpf_lsm_capable+0x9/0x20
[   71.819087][ T6849]  ? security_capable+0x7e/0x2e0
[   71.820667][ T6849]  genl_rcv_msg+0x60e/0x790
[   71.822215][ T6849]  ? __pfx_genl_rcv_msg+0x10/0x10
[   71.823958][ T6849]  ? ref_tracker_free+0x63a/0x7d0
[   71.825800][ T6849]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   71.827736][ T6849]  ? __pfx_nl80211_new_station+0x10/0x10
[   71.829688][ T6849]  ? __pfx_nl80211_post_doit+0x10/0x10
[   71.831620][ T6849]  ? __pfx_ref_tracker_free+0x10/0x10
[   71.833238][ T6849]  netlink_rcv_skb+0x208/0x470
[   71.834654][ T6849]  ? __pfx_genl_rcv_msg+0x10/0x10
[   71.836140][ T6849]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   71.837724][ T6849]  ? down_read+0x1ad/0x2e0
[   71.839068][ T6849]  genl_rcv+0x28/0x40
[   71.840293][ T6849]  netlink_unicast+0x75c/0x8e0
[   71.841828][ T6849]  netlink_sendmsg+0x805/0xb30
[   71.843274][ T6849]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.844846][ T6849]  ? aa_sock_msg_perm+0x94/0x160
[   71.846328][ T6849]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   71.847863][ T6849]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.849420][ T6849]  __sock_sendmsg+0x21c/0x270
[   71.850957][ T6849]  ____sys_sendmsg+0x505/0x830
[   71.852448][ T6849]  ? __pfx_____sys_sendmsg+0x10/0x10
[   71.854001][ T6849]  ? import_iovec+0x74/0xa0
[   71.855356][ T6849]  ___sys_sendmsg+0x21f/0x2a0
[   71.856742][ T6849]  ? __pfx____sys_sendmsg+0x10/0x10
[   71.858310][ T6849]  ? __fget_files+0x2a/0x420
[   71.859670][ T6849]  ? __fget_files+0x3a0/0x420
[   71.861172][ T6849]  __x64_sys_sendmsg+0x19b/0x260
[   71.862632][ T6849]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   71.864240][ T6849]  ? do_syscall_64+0xbe/0x3b0
[   71.865634][ T6849]  do_syscall_64+0xfa/0x3b0
[   71.866966][ T6849]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.868488][ T6849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.870275][ T6849]  ? exc_page_fault+0x9f/0xf0
[   71.871732][ T6849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.873494][ T6849] RIP: 0033:0x7fa0a5b8e9a9
[   71.874830][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.880459][ T6849] RSP: 002b:00007fa0a69a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   71.882953][ T6849] RAX: ffffffffffffffda RBX: 00007fa0a5db5fa0 RCX: 00007fa0a5b8e9a9
[   71.885257][ T6849] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[   71.887598][ T6849] RBP: 00007fa0a5c10ca1 R08: 0000000000000000 R09: 0000000000000000
[   71.889900][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   71.892450][ T6849] R13: 0000000000000000 R14: 00007fa0a5db5fa0 R15: 00007ffca35d5688
[   71.894838][ T6849]  </TASK>
[   71.895814][ T6849] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   71.897940][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.0.282 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[   71.901728][ T6849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.904675][ T6849] Call Trace:
[   71.905674][ T6849]  <TASK>
[   71.906545][ T6849]  dump_stack_lvl+0x99/0x250
[   71.907929][ T6849]  ? __asan_memcpy+0x40/0x70
[   71.909321][ T6849]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.910865][ T6849]  ? __pfx__printk+0x10/0x10
[   71.912268][ T6849]  panic+0x2db/0x790
[   71.913445][ T6849]  ? __pfx_panic+0x10/0x10
[   71.914781][ T6849]  __warn+0x31b/0x4b0
[   71.915974][ T6849]  ? rate_control_rate_init+0x64a/0x6e0
[   71.917664][ T6849]  ? rate_control_rate_init+0x64a/0x6e0
[   71.919286][ T6849]  report_bug+0x2be/0x4f0
[   71.920563][ T6849]  ? rate_control_rate_init+0x64a/0x6e0
[   71.922247][ T6849]  ? rate_control_rate_init+0x64a/0x6e0
[   71.923828][ T6849]  ? rate_control_rate_init+0x64c/0x6e0
[   71.925453][ T6849]  handle_bug+0x84/0x160
[   71.926694][ T6849]  exc_invalid_op+0x1a/0x50
[   71.928051][ T6849]  asm_exc_invalid_op+0x1a/0x20
[   71.929537][ T6849] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[   71.931361][ T6849] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 02 e8 db f6 90 0f 0b 90 eb e1 e8 f7 e7 db f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[   71.936945][ T6849] RSP: 0018:ffffc900081beff0 EFLAGS: 00010283
[   71.938760][ T6849] RAX: ffffffff8ae44449 RBX: ffff88803a360000 RCX: 0000000000080000
[   71.941053][ T6849] RDX: ffffc9000879a000 RSI: 0000000000000367 RDI: 0000000000000368
[   71.943381][ T6849] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae43f63
[   71.945711][ T6849] R10: dffffc0000000000 R11: ffffed100746c031 R12: 1ffff1100746c00a
[   71.948008][ T6849] R13: ffff888031000e40 R14: 0000000000000001 R15: ffffffff8ae43f63
[   71.950341][ T6849]  ? rate_control_rate_init+0x163/0x6e0
[   71.951968][ T6849]  ? rate_control_rate_init+0x163/0x6e0
[   71.953599][ T6849]  ? rate_control_rate_init+0x649/0x6e0
[   71.955244][ T6849]  rate_control_rate_init_all_links+0x109/0x1a0
[   71.957108][ T6849]  sta_apply_auth_flags+0x1c2/0x400
[   71.958653][ T6849]  sta_apply_parameters+0xe4b/0x15b0
[   71.960211][ T6849]  ieee80211_add_station+0x424/0x6a0
[   71.961761][ T6849]  rdev_add_station+0x108/0x290
[   71.963212][ T6849]  nl80211_new_station+0x1723/0x1b40
[   71.964750][ T6849]  ? __pfx_nl80211_new_station+0x10/0x10
[   71.966438][ T6849]  ? netdev_run_todo+0xe1d/0xea0
[   71.967925][ T6849]  ? nl80211_pre_doit+0x4f1/0x930
[   71.969415][ T6849]  genl_family_rcv_msg_doit+0x215/0x300
[   71.971051][ T6849]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   71.972856][ T6849]  ? bpf_lsm_capable+0x9/0x20
[   71.974253][ T6849]  ? security_capable+0x7e/0x2e0
[   71.975709][ T6849]  genl_rcv_msg+0x60e/0x790
[   71.977062][ T6849]  ? __pfx_genl_rcv_msg+0x10/0x10
[   71.978551][ T6849]  ? ref_tracker_free+0x63a/0x7d0
[   71.980017][ T6849]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   71.981576][ T6849]  ? __pfx_nl80211_new_station+0x10/0x10
[   71.983192][ T6849]  ? __pfx_nl80211_post_doit+0x10/0x10
[   71.984768][ T6849]  ? __pfx_ref_tracker_free+0x10/0x10
[   71.986346][ T6849]  netlink_rcv_skb+0x208/0x470
[   71.987752][ T6849]  ? __pfx_genl_rcv_msg+0x10/0x10
[   71.989235][ T6849]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   71.990756][ T6849]  ? down_read+0x1ad/0x2e0
[   71.992103][ T6849]  genl_rcv+0x28/0x40
[   71.993284][ T6849]  netlink_unicast+0x75c/0x8e0
[   71.994693][ T6849]  netlink_sendmsg+0x805/0xb30
[   71.996113][ T6849]  ? __pfx_netlink_sendmsg+0x10/0x10
[   71.997714][ T6849]  ? aa_sock_msg_perm+0x94/0x160
[   71.999179][ T6849]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   72.000726][ T6849]  ? __pfx_netlink_sendmsg+0x10/0x10
[   72.002292][ T6849]  __sock_sendmsg+0x21c/0x270
[   72.003675][ T6849]  ____sys_sendmsg+0x505/0x830
[   72.005184][ T6849]  ? __pfx_____sys_sendmsg+0x10/0x10
[   72.006820][ T6849]  ? import_iovec+0x74/0xa0
[   72.008195][ T6849]  ___sys_sendmsg+0x21f/0x2a0
[   72.009593][ T6849]  ? __pfx____sys_sendmsg+0x10/0x10
[   72.011159][ T6849]  ? __fget_files+0x2a/0x420
[   72.012512][ T6849]  ? __fget_files+0x3a0/0x420
[   72.013872][ T6849]  __x64_sys_sendmsg+0x19b/0x260
[   72.015338][ T6849]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   72.016965][ T6849]  ? do_syscall_64+0xbe/0x3b0
[   72.018341][ T6849]  do_syscall_64+0xfa/0x3b0
[   72.019661][ T6849]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.021202][ T6849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.022958][ T6849]  ? exc_page_fault+0x9f/0xf0
[   72.024361][ T6849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.026109][ T6849] RIP: 0033:0x7fa0a5b8e9a9
[   72.027428][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.032938][ T6849] RSP: 002b:00007fa0a69a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   72.035359][ T6849] RAX: ffffffffffffffda RBX: 00007fa0a5db5fa0 RCX: 00007fa0a5b8e9a9
[   72.037671][ T6849] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[   72.040019][ T6849] RBP: 00007fa0a5c10ca1 R08: 0000000000000000 R09: 0000000000000000
[   72.042381][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.044680][ T6849] R13: 0000000000000000 R14: 00007fa0a5db5fa0 R15: 00007ffca35d5688
[   72.047018][ T6849]  </TASK>
[   72.048664][ T6849] Kernel Offset: disabled
[   72.049948][ T6849] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:41:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=dffffc0000000001 RCX=ffffffff81c7b918 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa1d5f0 RBP=ffffc90007dfe8c0 RSP=ffffc90007dfe7f0
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abe
R12=fffffbfff1f43abf R13=ffff88810a4a5000 R14=fffffbfff1f43abf R15=1ffffffff1f43abe
RIP=ffffffff82222840 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f30d9de26c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c321bf6 CR3=000000001ee76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f30d9186478 00007f30d9186450 XMM03=00007f30d9186488 00007f30d9186480
XMM04=00007f30d9ced100 00007f30d9186440 XMM05=00007f30d9186458 00007f30d91864a0
XMM06=00007f30d9186498 00007f30d9186490 XMM07=00007f30d9186488 00007f30d9186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f30d9011df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000227ff RDI=0000000000022800 RBP=00000000000003f8 RSP=ffffc900081be750
R8 =ffff888108db0237 R9 =1ffff110211b6046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8a8 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa0a69a56c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555560a58808 CR3=000000012145a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fa0a68ed100 00007fa0a5d86440 XMM05=00007fa0a5d86458 00007fa0a5d864a0
XMM06=00007fa0a5d86498 00007fa0a5d86490 XMM07=00007fa0a5d86488 00007fa0a5d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa0a5c11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
