last executing test programs:

2.702939659s ago: executing program 0 (id=971):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2f1d, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x6, 0x3, 0x3, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000240)=""/194, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x4, 0x5, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x1, 0x10, 0x4}, {0x4, 0x2, 0x3, 0x8}, {0x1, 0x4, 0xb, 0x8}, {0x4, 0x2, 0x9, 0xf0af3fca4dc729a1}, {0x3, 0x1, 0x5, 0xb}, {0x1, 0x4, 0x4, 0xa}], 0x10, 0x9}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r0, 0x4f58e000) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000007112bf000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x6b, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (rerun: 32)

2.64275474s ago: executing program 0 (id=973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="100027bd028000"/18], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x10000, '\x00', 0x0, r3, 0x5, 0x1, 0x1}, 0x50)
splice(r1, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @loopback, 0x8000}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd7000000000005c00000008000300", @ANYRES32=r4, @ANYBLOB="7a08907801087d3c6f7663b3cb24479290a6af80cd33ebfd0517e4024aa7b9af042a2fd63d1ccf7b03903d93637ec8279977b0ae6cce9500eb7f40e320e1d4f95699595db9b4658d84f157faec39979302aa31e502aaef471672"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048050)

1.569925083s ago: executing program 0 (id=988):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0x3}}}, 0x24}}, 0x40)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.491458077s ago: executing program 0 (id=989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000b, 0x8010, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x13c8, 0x0, 0x1250, 0x11b0, 0x11b0, 0xc0, 0x1420, 0x1420, 0x1420, 0x1420, 0x1420, 0x6, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'bridge0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'ip6gre0\x00', 'veth1_macvtap\x00'}, 0x0, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'wg2\x00', 'lo\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1428) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000e4c0)={&(0x7f000000ea40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000011050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042cbd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="830004000000000020001280080001008005000300"/33], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (rerun: 64)

1.489661245s ago: executing program 2 (id=992):
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x1, 0x2, 0x1}, [@offload={0xc, 0x1c, {0x0, 0x3}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x144}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r1, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x9c}}, 0xc004)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffeffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x51de0c38}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x244c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffdf}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2044802}, 0x14008890)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x5)
connect$caif(r4, &(0x7f0000000e00)=@dgm={0x25, 0x2, 0x9}, 0x18)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x2c, 0x79, &(0x7f0000000480)="610b998014cea60789df00733325a9a54ec21c32e1447c038e7a0a3f5904c4202a0a0993304dfc6f796776f0", &(0x7f00000005c0)=""/121, 0x2, 0x0, 0x57, 0x1e, &(0x7f0000000640)="a880855d8ebdc569b9a02ab34bcee5b7023f4b2f433a78dee2e2d5df1c0bf9b5399630b28bdcc4f89ae45183aeffb8236c08644dce33826099bd1357464647e9f4314cb031defd57bbb5f8d10cc05c210906088a589f85", &(0x7f00000004c0)="bf32305513a076bb37c620d29cda6775d72ea950ceb84a454aed299265a8", 0x1, 0x0, 0x2}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x25, 0x148, 0x320, 0x60, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x8001, 0x1ccb, 0x5, 0x40000007}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x2, 0x4}, {0xffffffffffffffff, 0x5}}}}, {{@ip={@remote, @private=0xa010100, 0xff, 0xff000000, 'veth0_virt_wifi\x00', 'pimreg\x00', {}, {0xff}, 0x8, 0x2, 0x1a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000440), &(0x7f0000000540)=0xe)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800100000000000000f8a18aa14000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000900020073797a300000000014000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24048081}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r8 = socket(0x15, 0x5, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x80000001, 0x0, {0xa, 0x4e20, 0x2, @mcast2, 0x8}}}, 0x3a)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe0, 0x0, &(0x7f00000003c0)="59eced8ec6dc3f0adf33c9f7b9860aca16f8218973a135c75ceb5670033efef00b3c0b3e33c1056026e9b9e78d105043d3c15b710d96f8e16cb1b121c8d49168371a6d9833701e340498e7e5006b485ca5834a18e4dea2c72823400a956a8a8ec1631a08e4c4ae2fcd544de0bc07cc82fa223839e596703f93920ae11f46c5ba54b479da8b96d4f944c31df24c2d76810371e9227266aafc881a5f6cc71f2f6529599bd26069109d0ded2eec3fd835a9eecdd10cfce2ce69541e3b3d912bc2e84bb3c46bed3f0213f4e101dad925466ed6d3e4ce8a6579a87722b6af664621c2", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe97)
setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)

721.481483ms ago: executing program 1 (id=1003):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000d40)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @broadcast}, 0x1b0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d00)='vlan1\x00', 0x4, 0x2, 0x100})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0xfffffffffffffede, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x3c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtaction={0x10c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0xf8, 0x1, [@m_sample={0xf4, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x9d, 0x6, "e2b8d86b0c000000130ccb60c2dbd489c5347a302ed2b7c3da0bbbce4ae9cb4e44e50dac39900820ac904c378dd79f3ba565d04fcf72a5b8b82d41811a7cfe9151aa6255fd1ac218fa66c9c12c9dd3d5c789e2a1367c19c1fa0e35d2fc3005a45cc8b7cf7f00d076773ca0383148214b628ced98f4dd654f0975859c5d2f822472fd4319cf89b38ab574ce234a33e826fd4c1ed6335be20a46"}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x10c}}, 0x20040000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x20000000, 0xffff}}]}, 0xc4}}, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010600000000000000000a000000000300000100020008000400010000001400070000000000000000000000000000000001"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={<r8=>0x0, 0x40, 0x4, 0xc4f}, &(0x7f0000000200)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={r8, 0x2b93648a}, 0x8)

633.437866ms ago: executing program 0 (id=1004):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={&(0x7f00000001c0)="ca8a611320fab20ff6b25a8318818aa0165e9f62631366613a58f101e045cc48d1703908da74295d9f68569eb230ebc2878d741e2335442e2f6647baded3c756bbb0055f20e8af6483acc1900d6be2", 0x4f}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x21, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000080)={&(0x7f00000001c0)="ca8a611320fab20ff6b25a8318818aa0165e9f62631366613a58f101e045cc48d1703908da74295d9f68569eb230ebc2878d741e2335442e2f6647baded3c756bbb0055f20e8af6483acc1900d6be2", 0x4f}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async)

632.878337ms ago: executing program 0 (id=1005):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
socket$nl_route(0x10, 0x3, 0x0)
listen(r0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r2, 0x5421, 0x0)
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r2, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f00000000c0)=""/181, 0x32, 0xb5, 0x1, 0x10}, 0x28)

620.448722ms ago: executing program 1 (id=1010):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801020000000000004070000000000000000000195"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0xc0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000004c0))
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000980060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}], 0x2c)

563.209135ms ago: executing program 2 (id=1006):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@private, @empty, <r3=>0x0}, &(0x7f0000000300)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', <r4=>0x0, 0x29, 0x4, 0x9, 0xf797, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7, 0x700, 0xe, 0xfb}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'netpci0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe4, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x24040840)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x22044800)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r8, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x59}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7ff, 0x8, 0x0, 0xfffffffa]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffff6c3}]}, 0x70}, 0x1, 0x0, 0x0, 0x40085}, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)={0x24, 0x18, 0x1, 0x0, 0xfffffffe, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x3b}]}]}, 0x24}}, 0x0)

561.660584ms ago: executing program 1 (id=1007):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x170, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x5b, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47b"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0)
r2 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x49, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48)
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

471.144455ms ago: executing program 1 (id=1008):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c4}, 0x40801)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x308)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_macvtap\x00', 0x400})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71017000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000380)="0200000000000000b473fec988ca", 0xe}], 0x1)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xbad689febb22c699, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x3000c849)

420.120513ms ago: executing program 2 (id=1009):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000040)=0x8000, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@multicast, @empty, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @local}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00', r2}, 0x5a) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, &(0x7f0000000040)) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
shutdown(0xffffffffffffffff, 0x0) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000002c0)) (async, rerun: 32)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x20000080) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
unshare(0x62040200) (rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000f743ca657dc036f12e2d28f33284f656edd8bf3d", @ANYRES16=r8, @ANYBLOB="0d000000000000000030959d03ff27089b005c1e020200000000000000680b1a1cbce9debaf919289381e1f7", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000851bd36770eb00000206050000000000000000000000000105000100070000000900020073797a3000000000140007800800060000000000080013400000000005000500020000000500040000003f0011000300686173683a69702c706f"], 0x60}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

303.148406ms ago: executing program 2 (id=1011):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0)
close(0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="00082abd7000fddbdf250100000000000000014100000018001700000015000000026574683a6970766c616e3100"], 0x34}}, 0x2000484c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fbdbdf25050000001c00038008000100010000000800010001000000060004002d9600002c00028006000e004e240000060002004e24000006000e004e23000008000300fd53075b06000e004e220000080006000800000008000500ff0f000014000180060004004e23000008000b007369700008000600ff0f000518a37a1687fdaa6700"], 0x88}, 0x1, 0x0, 0x0, 0x8005}, 0x880)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

253.332197ms ago: executing program 1 (id=1012):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x4e1d, 0x8, 0x4e22, 0xfffc, 0x2, 0xa0, 0x20, 0x0, r3, r4}, {0x7bdd, 0x80, 0x96, 0x3, 0x7, 0x8000000000000004, 0x9, 0x8}, {0x6, 0x47, 0x9, 0x4994}, 0x0, 0x0, 0x2, 0x2, 0x1, 0x2}, {{@in=@remote, 0x4d4, 0x2b}, 0xa, @in=@empty, 0x0, 0x0, 0x3, 0x5b, 0x3023, 0x1, 0xfffffffe}}, 0xe8)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xf6}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0)
getuid()

163.193021ms ago: executing program 1 (id=1013):
r0 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000020000120000002400000700000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r4, 0x0, 0x2}, 0x18)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000009c0)=0xffffffffffffffff, 0x4)
r6 = bpf$ITER_CREATE(0xb, &(0x7f000000b080)={r5}, 0x60)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000af00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000230c0001400000000000000101500000000c0a010100000000000000000700fffc0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e7465720004000280140000001000010000000000000000000084000a5fce705f0b7cc452aea664bd4a55c269ce6177540a9857b5341909046588e123bf518c1d0f139b32877de98c6cd4c2d07d2a8de8267f4d75104f4aa36643d06a790ba192"], 0x100}, 0x1, 0x0, 0x0, 0x4040854}, 0x0)
write$cgroup_int(r6, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000b080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4004084)
recvmmsg(r0, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, &(0x7f0000000140)=""/150, 0x96}, 0x3}, {{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f00000002c0)=""/192, 0xc0}, {&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/26, 0x1a}], 0x7, &(0x7f00000005c0)=""/211, 0xd3}, 0x3}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/114, 0x72}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/42, 0x2a}, {&(0x7f0000000840)=""/172, 0xac}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001a00)=""/150, 0x96}, 0x3}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001ac0)=""/154, 0x9a}, {&(0x7f0000001b80)=""/154, 0x9a}], 0x2, &(0x7f0000001c40)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002c40)=""/32, 0x20}, {&(0x7f0000002c80)=""/135, 0x87}], 0x2, &(0x7f0000002d80)=""/184, 0xb8}, 0x7}, {{&(0x7f0000002e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002ec0)=""/214, 0xd6}, {&(0x7f0000002fc0)=""/5, 0x5}], 0x2, &(0x7f0000003040)=""/220, 0xdc}, 0x1000}, {{&(0x7f0000003140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000008540)=[{&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/172, 0xac}, {&(0x7f0000006280)=""/209, 0xd1}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/128, 0x80}, {&(0x7f0000007400)=""/218, 0xda}, {&(0x7f0000007500)=""/58, 0x3a}, {&(0x7f0000007540)=""/4096, 0x1000}], 0xa}, 0x5}, {{&(0x7f0000008600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f000000ab00)=[{&(0x7f0000008680)=""/164, 0xa4}, {&(0x7f0000008740)=""/85, 0x55}, {&(0x7f00000087c0)=""/4096, 0x1000}, {&(0x7f00000097c0)=""/77, 0x4d}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/107, 0x6b}, {&(0x7f000000a8c0)=""/57, 0x39}, {&(0x7f000000a900)=""/178, 0xb2}, {&(0x7f000000a9c0)=""/50, 0x32}, {&(0x7f000000aa00)=""/247, 0xf7}], 0xa, &(0x7f000000abc0)=""/206, 0xce}, 0x8}], 0x8, 0x10000, &(0x7f000000aec0))

162.68557ms ago: executing program 2 (id=1014):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000300)="b7bb3857e6d683a14df73d55400cc1bc7f2a4fed6d6d16eaa9478c15f10551fe4880a4d2c2ee72f1e7973a1511deac33891f2dade317f96a4d4619bc2f8ba626759b4e9aa68944b9ffe4d904d0062be54fc34cab414bcc1179947cbfbe86b6917b9e0907c50e704e8304f53f328e8cc6aa2086fcaec1903b51638a0790d2c3bd60c304a607720acf999d2d82b709b1496742167567fd6d1e3794dbabdc8fbbb7aab453d2f6f300151f967ddb9a324e426eaf8fcaaa135a50ff200430a175c0a097ba69e092c59c81e3dbb3e4ba48954b7d7df773a5144e94c15596a8fa05b89d65f976939bf4770d3bbd17db6b820aac7d44112bd69a2e3e1c21264c5f93e6ca05271bb732425a8fb141c52766cb0b51b3af41825c945cfe05d53a09d84a8a260d0437eb6abf400bf5ea8fc733ee42a112ee32acd691c1a3a7e7b739460413b1aea502f76d7ecacf9ea3d471cc04d8bf5d7eb2363458804b1737475b9bfaa64a7ccfb23c5c765f754a098e2c9efba63372197e10b2bd2cf3f8911a83fcfc85ac51a923daf0eae39d6d489e99538238aac30d8e3a0752037411a88669b820f25f554970299fd7aa31faa2b0fc2b46bd98edbf3c8b9bdc10b3a85f03ea78cb27d3ba6f0e84fa7078fc018ddba007003c948d5d4b0cefd6db4e17cfa5228be56c73c81215d17f9ca4772e345b1531bed4f5362e5913fbe9671d10e370e64f9f1aebd2a11aca90aedab0a2ce031638cab5cf426b3ff4e7019f47b696454c9c84a6e718257861f552f86be15023a6922189ec478b308ad3461423cfee0a6aa2b45b02f18132b6d2bf07463ccba7717843aaa6e2e1d746c637a756ec4211b93eb1698f7a96d6980cb7f9ce43558d87685cb62674cbbc1faa726108bdd61f7f31eff9eeb317eb41ff25ae148b32a72b62a8300ecc7f5607f1ea5531e48705cd24f9a8ad4612a735c44c0c0259ebad576fe3054122a1f4b1756ce924c676626f83e2d83836f6c7029a0c2b94b89d9e35790591d1f4406bbc458aacca608c946b72cbbe9d589104537efaa675eb44525d2c3c2ed3b5de877dceecbbdb0b09df38a4ed757fa98a005006fcfe86b38ebe0a199de2899a626cc5ddebfedad1a6ffa58cf96a4c89ac4bd2b9848383226a7a009532cf246410991e7644e7b9c178f91dac4abfefe5be1fcb7f4a544fe0e6c976edac61d84703ad085101fd2367631706055f0db0cdfd99098920c65997b26977844a021c3fbc18322d69b6ffa47d5e66d2f283c42aabb727deea7d57f34d9e526e74910cdde6c4c1d2c0c855fc436cee30755adeb4cf77c385bcb9f3d4b9f9d2d2fcb9052cf948dc8d4598243aa0474851152e8111d4dd5128d4e1332e54a2006a29154b51b4077abfc6002325d2219a32ffb2e37a171b5ca729271a12fe25e7eeaa7582aae7cc0ca6816fb71e72ae0b7d1f9b831d26072755791eb67ebc050b7e6185623fe5169c2c17b0a6e5b67937d640719cf8a9e7663556e80067ac4606a5c88df8aad5b93ba995d39a52c88d05e502a597367ae118ba1abb15ed1d8d2bdb813ff51d3fd21bb4e667653251cd18150898347961cd3eb72cb2a0f26b7950d0ba2e501b0df1810b28677defddff05fb2a311b42b81e0e8525d49750c724f0875bdfcb505a358b6ef20d4c45fdb74007c977828d0f9d9680d9060521a3b4e531da1b3cc08b153dfb2d12a635e67237833c8c349c029255938714db79c728afa5083ba24dcef487c389dd9f0a4dd4d4ef6317c9623df5069f6ddb8b56ccfd8343620d7e63d11f0d46fc5b0ba117cb49e19758bc94521c9058b284c9a3cbc91dee8361be2512d77d933e9de42ce02b89ee579abb5907e7b0a858ab684484ecf33d681265dd64662df0e220488cfc18b9d16466e68aae2837364f0abedfa525ba4213d65b76bef8af0476f6c71ecd5531185000e97f1d8fd917b26c1bf4f05be6b6f8913397e627ab29b5068347f11006493b07b8fd67dfab058fac8ae869de9437cb4f962bdbd694536cde950f4ae4d03a464ac58a6f25b4d5c342ee330e74a5ed68a2be853b17ee977efd6e6839a9b9443e8be93a59959f5dc286a9599f5df6828559cbf0b535bfbe4a87b858d72dfaa229cd654d05f5d27141e0d0eca89f4348806ff4b026fec8c768c3d7cec3ba2ef89d41c24eda94a4c900f02fc49aea9e469a9c85b5dd2eaad6f1d6bf69ea141b331c0572920263ff517472cb39cfe095b204a2eb706181a777a87cd13b651e1ef2ef4b8c7df8c00d5618fc3346b1e4066447e610cd56bacfb9a50728308eb0a3d9de97f3817ee54d28232c748324d9d4939eb340ce95b9bcf0c75952d26e27312728948adc7e4c5d0211b66e2f8df8b5cfd733b18eb6a28940d92afe52756fc396dd6286110df491af0e82ccb29d75bf517a3c67055c8ada9a3d29743f002789ad869c1c205379ce1b491eefd9e2897a74738fa6f62bdaa1c8c53f768758a55921b3a19b830ec3bbe493e2d87f7cc8b55681f51dc0839064c57f8e25cea4e9a60cbf02fd044dbd7fa1ce6de47b82a8eb0914da014e64178fd2dba6261637d26ddad3ce38884732c232eacc50869299ba236fbf5240868a27892f147c190ea4cff9cace0428666721155233d39d39e86181ff6eaf5d9c050609b2249d4b12fbc59dbc037b63eae713813e6faaf3faab9f263b9cbc0658fb788bc6085955aeadc82b2d5a0c47b64561159c309dd7bf616499398d72ee43ac3d3f225a436b4847c91935bdbd5fb6eed8d84b9809a4782fb1d76d38d84409bdf907a6d5a19a08ce8e105263bb849435a28d07591d659ae7dd823fba330247fea38421cd65e1e9e8d2b67b2b8c0ed6d7e030745028e065eddd24704acc775aa31728c328f122644d03fca0477f8de6386627076dc1344249d70fae7e88391c3c55fd9e3cd51d253cec2a94fe145ae30375515985ffc5732d54f3349ebfeebd06f00cb9a32527b38c3be3f1d50d583659fc6969000124b851ec5069bf7e2b272f2e89d82a01965867e1ffc2c2bc89f241ce07f9e2e93835b142603a42b8589194bd0458fdd8940715debc2bad2fbf6a584cedfd924129354460cccd19ca6dc95ebc09916d6b03f5dd5354e5c60b6aaf5003553b56a1f54f4fab1100468b141a86a87ee073c898541c098f6e60b9562956e61c341b59c574dc622cc39232513e512669e65a2b8b8dcc0e0516c997b24ea400b53b90fcf3d99eb7a9ea2cb942b06018b95a73a29d4f2884ba86f75bda6ceb5225aa90db8e97239f7d38084cdc17c0d3a4517cacc25bccf65dabca9edbb3ea589f1c8e15b8a6a0b05fb93bf4403584cc3b91cf0c586bcd4e0894cf22ceb179eb83ee9223a1f068e3bdd90e9590e89b1f7bf78fcea50e5f5eac5367c3cce8a6d0fdf7bda6843f4370f6d9c31020a18214a9ad1ff8200aa28c152f73caff8b53c6a8d1a8846b2dc2384e7b7eeeb64991e17c017aab50cd053d2a9bd24231d5ea730f3d640ba4ec575f53c29424a86fb659b579d8a1b4f015ed68147ba975fb2e07e7ed8a67c343f342442c2b671251a2e1ac248d7007733c079086d0dae9969f66c3998431eaecf165479388b7da5e8ce423107efb453ba3b8ec66a88c70318938635164171bcd0100f1f35f3b649765f3f9fb4b2ae45d2633f1e1f48de112ba4edbfd6ee147aa394e3618dfcde6da576f7a6c826ffea079562c8b4649cb1715b5408bb9b0714548f1bf5361477c71c9a1aeace0b487eff3648304589c7bc84ec327e9b8c411eee56e0c2adba0df093ea46f39cddacbc02b6e04f4ee1ef42416d46d2eade56c4d5f96c0b4ef6188067c60804bf6d037f869a5292388d6251045fa4b7c029f64a1b956a7ea19fd6a6004744c3a3ffb630bcd5721157f1e16ea3ebd53976211d665337628aacdd43b09b93260e4c61f6fd822af6ef25bead16a9e8fdf3f66b6a64cd409d4aa513ea34753a9f831058827c840464b0e9ff3672a61e11f7ab1734b94e6b4b933f2bca6f6d90819d71afc6b37d6916e52acb565bb7d81271454119fc0c052f7841445cb323823343529fa6e13b83e65ffaf911b8adb0caa0a6876499d572240584489f92b2fcf10b42e57009ac90378b7ae3bb368c4ee4c3e886f4caa8e719d8c5035b33c9bf214a3967b20dee5431ad7c8b754ca61ddc1fd4e85816c718b273fe92e5379f052663d3b0550399c682a90d6bd1301f1004e126e98c1a0db267e38b818bec02fc1f2db4ba8adc4ff66a90eade6e61131016c09e0c33aa77bc331e5269fbf99fee86b738f831c79f149a59c74cd5f8ed062030968314c3110702aece11233634c1a9159ebb683ac89fea4a6ec83138ebb63e75c3ca9747f289309df3247631d84165bf81b656460824ec834dd67b8d4fec0f5a33fdd405f7a1bbd9ab9be07089c29a5b5845c85dbc750d9c75efedc6b99fcbdb96714e7607900d2eeb789efa86fff1c2906aeb1ec564489e8e5b5ba8364932075cb4924019abaf6d8f213d2195bbdea98696dcc72de7f53911932476e8a76f08284dd25592d1b5bf9a4ae91ab3adb49446d4c25fac29e166e88b445692e31dd20edac4b992b5cbb8bd7522edca39fac2fc6f687b4055f2bd7d434e10d8356aaaba05c9793330c9084af8df024b5a03a3ae4ab8466157fb81f041ac4d66e6b161858fbd07b0fb1fd95fefdd3dbef50adfadaa029b6d73a94b3c20622795e989794f950573d0230e9bea456e31803079d2658a0b441d64aa988fe4831a1dad7adbe09f2ca97d7aaf99609187171075ea5bcc3aeb5630ee80d19848a29a6987c690b6b2ba859e49cfa2a0502463015912dc2418edd27a6c50e71e21eb450898e79ce9c514398a10f777ba58bab948b7d6b3b713781fb92090ca28e58ce4f9a83d13eaa082d8dc5d50367d6e5658091bfac1a7cf2f1de98921b0a8ac0396db8e5e6b2bbb6e97d1d03f75bf782df75383fe60b78ed46149ca4136ac78bbaf2cbefde359e12a01526a2eb7c0c88717d0097f94126c03b7cd64ee4593c03575101779e89bf6617f5f13dbfa14d5794b428d5a9521ea8356de43941d35212fec4db3e631c929b4105dd56734ccb81c7523b5073e23da61457a3ab3f96a58a67151a6f117de992472f05072fd028bde23089454b3c41256bbce17d466e6368a742d30b680eed10e0c6d439d4ee2bb8ee75c029d654c2efd732588943e7ad19900193fcee6a6bb50d05bbb0a440b9453b3866e586953300b2c5e76a4454e35d5faa548021aa19b296fb1650a3c66195606b794038569b2fe4f5dd9e9d6265b350fe7c4f78142e63526bdf6a81d2947a68a86cd50eec606ca340c1a6ecdc10b205440959b4b1559cefe1cf927c067e9aa416b0b58748a26b857f95793405ae54f6fbf4f01a7e1f4c19689832478907cdae922d4bbc0bd5e561da9408ab475593c1c3e606f597fe6a4160ca9fc5192680efa164886d2a121a4f4664082d4881ad8e4aa8e6fb133fd43948643430ee2495af1db654a9f5296df85dafbd2734eaec94519ca05ea33712a17a6dde12446b36449693810542ae17c6b70168ec97f54e314c0e57becfa51a2dd9634148e73e913293093022460a20f7e44f6438a389eae7151014a49087fd98896fe0004d6d54cf6709f93de459cf15a5e3236927508b3bf8e8e34ca4814489c992d8c8a364ace36590aa12baa20c8bf930eedc63f049cbf237e5a3aa3ea305444f39229167bc4690c1749526e9d69781ebdc350a5e4de93f9981f43151d0f84a5599e00aea13d488bba10a9771102ab2fbb33cd24941", 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800040000bc00000000c700000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800040000bc00000000c700000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x8004) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14000000}, 0x8004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), r5)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r6, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d080000711212000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000008d080000711212000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

0s ago: executing program 2 (id=1015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r2, 0x1}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2d, 0x4, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fb0003000000000000000000", @ANYRES32=r5, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e24, @multicast1}}}, 0x88)
getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_rxfh={0x46, 0xfffffffc, 0x2, 0xfff, 0x8, "e4b657", 0xc1dc, [0x10001, 0x7, 0x4, 0xf, 0x0, 0x8, 0x0]}})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x2f8, r10, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c4, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x29c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x4, 0x34, 0x6, 0xfffb, 0x4, 0x7fff, 0xfff3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x8}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x6}, {0x3, 0x8}, {0x5, 0xa}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x3, 0x7}, {0x1, 0x8}, {0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x4}, {0x7, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x2}, {}, {0x5, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x4, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x9, 0xfff7, 0x1, 0x3, 0xe, 0xb]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf0b9, 0x10, 0x3, 0x5, 0xfff7, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x6, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x6, 0xa}, {0x0, 0x1}, {0x3, 0x1}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0x1}, {0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x4}, {0x2, 0x9}, {0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x7}, {}, {0x4, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1779, 0x400, 0x3, 0x9, 0x6, 0x401, 0xc, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x0, 0x2, 0xfad8, 0x3, 0x5, 0x8, 0x21d]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x7}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x1}, {0x7}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x65, 0x7, 0x731, 0x9, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0x5, 0x3, 0x9, 0x6, 0x9, 0xc, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x5, 0x18, 0x4, 0x6c, 0xc, 0x3, 0x1, 0x16, 0x4, 0x30, 0x0, 0x60, 0x24, 0x1, 0x30, 0x48, 0x1b]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0xc, 0x16, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xf26, 0x348, 0x6, 0x1, 0x81, 0xfff6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x6, 0x6, 0xb, 0x2, 0x6c, 0x2b, 0x24, 0xc, 0x5, 0x2, 0xb, 0x0, 0x5, 0x36, 0x1, 0x5, 0xc, 0x21, 0x16, 0x6, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x4, 0xff, 0x6, 0x6000, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x5, 0xb, 0x18, 0x36, 0x5, 0x4, 0x1, 0x6, 0x5, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x24, 0xb, 0xb, 0x24, 0x4, 0x30, 0x1, 0x7e, 0x16, 0xc, 0x30, 0x24, 0xc, 0x16, 0x2, 0x6d, 0x6c, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x5, 0x48, 0x5, 0x4, 0x30, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x4, 0x60, 0xb, 0x24, 0x60, 0x60, 0x18, 0x4, 0x6c, 0x60, 0x36, 0x18, 0x6, 0x1b, 0x6, 0x5, 0x0, 0x2, 0x60, 0x3]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x58, 0x48, 0x51, 0x36, 0x24, 0x6, 0x48, 0x0, 0x6c, 0x2, 0x36, 0x36, 0x16, 0xb28cafaa7ae5dc58, 0x2, 0x5, 0x1b, 0x6, 0x36, 0x1b, 0x24, 0x36, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x7, 0x81, 0x4, 0x3, 0xfff4, 0x8]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x6}, {0x5, 0x5}, {0x5}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x9}, {0x3, 0xa}, {0x7, 0x6}, {0x2, 0x2}, {0x4, 0x5}, {0x4, 0x7}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x6}, {0x2, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}]}]}]}, 0x2f8}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:5666' (ED25519) to the list of known hosts.
syzkaller login: [   48.569676][ T5779] cgroup: Unknown subsys name 'net'
[   48.680363][ T5779] cgroup: Unknown subsys name 'cpuset'
[   48.686107][ T5779] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.340250][ T5779] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.028412][ T5204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.035998][ T5204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.039288][ T5204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.042829][ T5204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.046798][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.073601][ T5204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.078297][ T5204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.081953][ T5204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.087038][ T5204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.091059][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.120389][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.124046][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.134177][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.138830][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.143155][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.306290][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.440253][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.443899][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.447956][ T5815] bridge_slave_0: entered allmulticast mode
[   55.450696][ T5815] bridge_slave_0: entered promiscuous mode
[   55.454588][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.457126][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.459963][ T5815] bridge_slave_1: entered allmulticast mode
[   55.463494][ T5815] bridge_slave_1: entered promiscuous mode
[   55.467324][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   55.527057][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.536293][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.547689][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.616385][ T5815] team0: Port device team_slave_0 added
[   55.618883][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.621997][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.624977][ T5811] bridge_slave_0: entered allmulticast mode
[   55.629020][ T5811] bridge_slave_0: entered promiscuous mode
[   55.632584][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.634952][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.637609][ T5811] bridge_slave_1: entered allmulticast mode
[   55.640313][ T5811] bridge_slave_1: entered promiscuous mode
[   55.645116][ T5815] team0: Port device team_slave_1 added
[   55.711682][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.714550][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.725028][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.731551][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.734445][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.743709][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.748043][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.750410][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.752752][ T5818] bridge_slave_0: entered allmulticast mode
[   55.755810][ T5818] bridge_slave_0: entered promiscuous mode
[   55.759134][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.761434][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.763828][ T5818] bridge_slave_1: entered allmulticast mode
[   55.767704][ T5818] bridge_slave_1: entered promiscuous mode
[   55.772031][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.780806][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.819348][ T5811] team0: Port device team_slave_0 added
[   55.824885][ T5811] team0: Port device team_slave_1 added
[   55.838851][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.884235][ T5815] hsr_slave_0: entered promiscuous mode
[   55.887070][ T5815] hsr_slave_1: entered promiscuous mode
[   55.891750][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.894966][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.897765][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.905880][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.921114][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.923965][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.934344][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.977031][ T5818] team0: Port device team_slave_0 added
[   55.994146][ T5818] team0: Port device team_slave_1 added
[   56.042576][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.044996][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.054599][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.063547][ T5811] hsr_slave_0: entered promiscuous mode
[   56.067006][ T5811] hsr_slave_1: entered promiscuous mode
[   56.069967][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.073238][ T5811] Cannot create hsr debugfs directory
[   56.080941][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.083261][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.091993][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.187648][ T5818] hsr_slave_0: entered promiscuous mode
[   56.190305][ T5818] hsr_slave_1: entered promiscuous mode
[   56.192978][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.196666][ T5818] Cannot create hsr debugfs directory
[   56.379155][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.387410][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.408993][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.419350][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.480263][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.491437][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.515011][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.525191][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.587040][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.594734][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.608562][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.617188][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.674538][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.697798][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.708325][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.710791][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.714787][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.717125][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.780840][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.789866][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.819824][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   56.827615][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.830227][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.856331][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.858675][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.866012][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.884832][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.887277][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.901769][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.904633][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.939846][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.040200][ T5815] veth0_vlan: entered promiscuous mode
[   57.054794][ T5815] veth1_vlan: entered promiscuous mode
[   57.084148][ T5815] veth0_macvtap: entered promiscuous mode
[   57.096623][ T5815] veth1_macvtap: entered promiscuous mode
[   57.107283][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.116509][   T55] Bluetooth: hci1: command tx timeout
[   57.116513][ T5204] Bluetooth: hci0: command tx timeout
[   57.137993][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.149633][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.154421][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.158398][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.161556][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.165159][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.195908][   T55] Bluetooth: hci2: command tx timeout
[   57.212629][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.216435][ T5811] veth0_vlan: entered promiscuous mode
[   57.241145][ T5811] veth1_vlan: entered promiscuous mode
[   57.283053][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.288735][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.321993][ T5811] veth0_macvtap: entered promiscuous mode
[   57.330575][ T5818] veth0_vlan: entered promiscuous mode
[   57.338690][ T5811] veth1_macvtap: entered promiscuous mode
[   57.345820][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.348965][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.350335][ T5818] veth1_vlan: entered promiscuous mode
[   57.375136][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.406299][ T5818] veth0_macvtap: entered promiscuous mode
[   57.409831][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.416512][ T5818] veth1_macvtap: entered promiscuous mode
[   57.421558][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.424459][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.428454][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.432035][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.441461][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.448024][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.463530][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.471591][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.476767][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.480566][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.484164][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.568516][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.571210][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.604463][ T5878] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.649061][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.652181][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.674257][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.694776][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.784464][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.788226][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.021061][ T5891] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   58.031401][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.051384][ T5892] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[   58.111697][ T5889] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5'.
[   58.280460][ T5898] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   58.412430][ T5902] xt_hashlimit: size too large, truncated to 1048576
[   58.421541][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   58.463112][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.572173][ T5908] bridge_slave_0: left allmulticast mode
[   58.575221][ T5908] bridge_slave_0: left promiscuous mode
[   58.578597][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.589414][ T5908] bridge_slave_1: left allmulticast mode
[   58.591591][ T5908] bridge_slave_1: left promiscuous mode
[   58.593656][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.615213][ T5908] bond0: (slave bond_slave_0): Releasing backup interface
[   58.622271][ T5908] bond0: (slave bond_slave_1): Releasing backup interface
[   58.635178][ T5908] team0: Port device team_slave_0 removed
[   58.641906][ T5908] team0: Port device team_slave_1 removed
[   58.653875][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.659303][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.669466][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.672241][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.692614][ T5925] Zero length message leads to an empty skb
[   58.879685][ T5937] netlink: 'syz.2.17': attribute type 3 has an invalid length.
[   59.001572][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.054510][ T5948] netlink: 'syz.0.21': attribute type 5 has an invalid length.
[   59.058121][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   59.195970][   T55] Bluetooth: hci1: command tx timeout
[   59.205846][   T55] Bluetooth: hci0: command tx timeout
[   59.250228][ T5966] netlink: 'syz.1.26': attribute type 5 has an invalid length.
[   59.253117][ T5966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.259546][ T5965] netlink: 'syz.1.26': attribute type 5 has an invalid length.
[   59.262695][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.279232][   T55] Bluetooth: hci2: command tx timeout
[   59.310688][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.354843][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.360806][ T5970] xt_hashlimit: size too large, truncated to 1048576
[   59.431404][ T5974] : renamed from veth1_to_bond (while UP)
[   59.434951][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   59.451776][ T5977] team_slave_0: entered promiscuous mode
[   59.454351][ T5977] team_slave_1: entered promiscuous mode
[   59.459957][ T5977] macsec1: entered allmulticast mode
[   59.462373][ T5977] team0: entered allmulticast mode
[   59.464688][ T5977] team_slave_0: entered allmulticast mode
[   59.468436][ T5977] team_slave_1: entered allmulticast mode
[   59.474541][ T5977] team0: left allmulticast mode
[   59.480291][ T5977] team_slave_0: left allmulticast mode
[   59.482578][ T5977] team_slave_1: left allmulticast mode
[   59.486068][ T5977] team_slave_0: left promiscuous mode
[   59.488287][ T5977] team_slave_1: left promiscuous mode
[   59.654547][ T5985] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET)
[   59.681697][ T5985] ipvlan2: entered promiscuous mode
[   59.685894][ T5985] ipvlan2: entered allmulticast mode
[   59.688634][ T5985] macvlan0: entered allmulticast mode
[   59.690817][ T5985] veth1_vlan: entered allmulticast mode
[   59.759526][ T5986] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   59.763296][ T5989] netlink: 'syz.0.33': attribute type 4 has an invalid length.
[   59.767055][ T5875] IPVS: starting estimator thread 0...
[   59.782623][ T5986] netlink: 'syz.0.33': attribute type 4 has an invalid length.
[   59.787991][ T5986] netlink: zone id is out of range
[   59.790081][ T5986] netlink: zone id is out of range
[   59.792095][ T5986] netlink: set zone limit has 4 unknown bytes
[   59.886461][ T5990] IPVS: using max 44 ests per chain, 105600 per kthread
[   60.091033][ T6000] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   60.157416][ T6000] xt_socket: unknown flags 0xfc
[   60.202414][ T6005] sctp: [Deprecated]: syz.0.39 (pid 6005) Use of int in max_burst socket option.
[   60.202414][ T6005] Use struct sctp_assoc_value instead
[   60.209747][ T6005] Cannot find map_set index 0 as target
[   60.589868][ T6031] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   60.746654][ T6036] netlink: 'syz.1.48': attribute type 9 has an invalid length.
[   60.764830][ T6036] netlink: 'syz.1.48': attribute type 9 has an invalid length.
[   61.051606][ T6065] syzkaller0: entered promiscuous mode
[   61.053425][ T6065] syzkaller0: entered allmulticast mode
[   61.140516][ T6074] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.236746][ T6080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.278217][   T55] Bluetooth: hci0: command tx timeout
[   61.278233][ T5204] Bluetooth: hci1: command tx timeout
[   61.302026][ T6085] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   61.356619][ T5204] Bluetooth: hci2: command tx timeout
[   61.723060][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.509048][ T6111] sctp: [Deprecated]: syz.2.75 (pid 6111) Use of int in maxseg socket option.
[   62.509048][ T6111] Use struct sctp_assoc_value instead
[   62.990737][ T6150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   63.001553][ T6150] bridge0: entered promiscuous mode
[   63.003548][ T6150] macsec1: entered promiscuous mode
[   63.007660][ T6150] bridge0: port 3(macsec1) entered blocking state
[   63.010523][ T6150] bridge0: port 3(macsec1) entered disabled state
[   63.012871][ T6150] macsec1: entered allmulticast mode
[   63.014752][ T6150] bridge0: entered allmulticast mode
[   63.018711][ T6150] macsec1: left allmulticast mode
[   63.020842][ T6150] bridge0: left allmulticast mode
[   63.024484][ T6150] bridge0: left promiscuous mode
[   63.124111][ T6153] __nla_validate_parse: 56 callbacks suppressed
[   63.124122][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   63.233791][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'.
[   63.263713][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'.
[   63.357448][ T5204] Bluetooth: hci1: command tx timeout
[   63.357545][   T55] Bluetooth: hci0: command tx timeout
[   63.419690][ T6167] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   63.435829][   T55] Bluetooth: hci2: command tx timeout
[   63.552028][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.707612][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[   63.774584][ T6182] syz_tun: entered promiscuous mode
[   63.791219][ T6182] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   63.979766][ T6190] net veth1_virt_wifi : renamed from virt_wifi0
[   64.019605][ T6197] validate_nla: 7 callbacks suppressed
[   64.019616][ T6197] netlink: 'syz.1.108': attribute type 1 has an invalid length.
[   64.041020][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.110660][ T6203] xt_bpf: check failed: parse error
[   64.127364][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'.
[   64.131536][ T6207] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   64.133800][ T6207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.265106][ T6214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.266303][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'.
[   64.278283][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.281651][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.350097][ T6214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.378461][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   64.430145][ T6214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.437664][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'.
[   64.442295][ T6228] sch_tbf: burst 5 is lower than device macvtap0 mtu (1514) !
[   64.489812][ T6214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.526991][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.529507][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.532674][ T6226] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.540671][ T6226] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.581693][ T6214] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.588505][ T6233] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   64.590758][ T6214] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.601478][ T6214] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.610557][ T6214] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.723498][ T6244] netlink: 'syz.1.125': attribute type 1 has an invalid length.
[   64.784548][ T6248] sock: sock_timestamping_bind_phc: sock not bind to device
[   64.907060][  T790] IPVS: starting estimator thread 0...
[   64.912173][ T6259] xt_hashlimit: overflow, rate too high: 1125899906842624
[   64.995474][ T6258] IPVS: using max 79 ests per chain, 189600 per kthread
[   66.318979][ T6337] netlink: 'syz.1.152': attribute type 12 has an invalid length.
[   66.335640][ T6337] netlink: 'syz.1.152': attribute type 29 has an invalid length.
[   66.431244][ T6348] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   66.491869][ T6352] netlink: 'syz.0.157': attribute type 32 has an invalid length.
[   66.499466][ T6352] veth1_macvtap: left promiscuous mode
[   66.501876][ T6352] macsec0: entered allmulticast mode
[   66.918878][ T6383] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   66.975362][   T33] audit: type=1804 audit(1751556341.824:2): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.169" name="/newroot/41/cgroup.controllers" dev="tmpfs" ino=226 res=1 errno=0
[   66.983995][   T33] audit: type=1800 audit(1751556341.834:3): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.169" name="cgroup.controllers" dev="tmpfs" ino=226 res=0 errno=0
[   67.470277][ T6407] : entered promiscuous mode
[   67.477129][ T6407] trusted_key: syz.1.177 sent an empty control message without MSG_MORE.
[   67.926142][ T6407] block nbd0: server does not support multiple connections per device.
[   67.931583][ T6407] block nbd0: shutting down sockets
[   68.018985][ T6414] netlink: 'syz.1.180': attribute type 9 has an invalid length.
[   68.134165][ T6422] __nla_validate_parse: 22 callbacks suppressed
[   68.134183][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[   68.408249][ T6450] IPVS: persistence engine module ip_vs_pe_ not found
[   68.458893][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'.
[   68.720109][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.197'.
[   68.756746][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'.
[   68.775365][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   68.863036][ T6496] xt_CT: You must specify a L4 protocol and not use inversions on it
[   68.863747][ T6496] netlink: 'syz.1.203': attribute type 2 has an invalid length.
[   68.865848][ T6498] netlink: 132 bytes leftover after parsing attributes in process `syz.2.204'.
[   68.902222][ T6496] : entered promiscuous mode
[   68.918032][ T6496] xt_CT: You must specify a L4 protocol and not use inversions on it
[   68.937292][ T6503] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   69.087555][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'.
[   69.843553][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   69.927036][ T6546] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.984514][ T6551] validate_nla: 2 callbacks suppressed
[   69.984531][ T6551] netlink: 'syz.0.221': attribute type 10 has an invalid length.
[   69.992156][ T6546] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.005897][ T6551] bridge0: port 3(netdevsim0) entered blocking state
[   70.008986][ T6551] bridge0: port 3(netdevsim0) entered disabled state
[   70.012073][ T6551] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   70.023073][ T6551] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   70.028215][ T6551] bridge0: port 3(netdevsim0) entered blocking state
[   70.031177][ T6551] bridge0: port 3(netdevsim0) entered forwarding state
[   70.039180][ T6546] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.042811][ T6553] netlink: 'syz.0.221': attribute type 10 has an invalid length.
[   70.097207][ T6546] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.186512][ T6560] IPVS: set_ctl: invalid protocol: 98 172.20.20.34:20004
[   70.203040][ T6559] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002
[   70.208426][ T6559] netlink: 'syz.0.222': attribute type 21 has an invalid length.
[   70.216989][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.222'.
[   70.229874][ T6546] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.249111][ T6546] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.257185][ T6546] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.264772][ T6546] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.442071][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[   70.492452][ T6569] netlink: 'syz.0.225': attribute type 15 has an invalid length.
[   70.566714][ T6576] pim6reg: entered allmulticast mode
[   70.741098][ T6582] xt_bpf: check failed: parse error
[   70.745851][ T6583] xt_bpf: check failed: parse error
[   71.043607][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.081665][ T6595] bridge_slave_0: left allmulticast mode
[   71.083842][ T6595] bridge_slave_0: left promiscuous mode
[   71.087477][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.092455][ T6595] bridge_slave_1: left allmulticast mode
[   71.094246][ T6595] bridge_slave_1: left promiscuous mode
[   71.097806][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.102151][ T6595] bond0: (slave bond_slave_0): Releasing backup interface
[   71.107025][ T6595] bond0: (slave bond_slave_1): Releasing backup interface
[   71.122136][ T6595] team0: Port device team_slave_0 removed
[   71.128583][ T6595] team0: Port device team_slave_1 removed
[   71.131731][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.135057][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.140068][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.142813][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.250029][ T6611] tipc: Invalid UDP bearer configuration
[   71.250066][ T6611] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   71.264581][ T6611] sit0: entered promiscuous mode
[   71.293274][ T6611] netlink: 'syz.2.240': attribute type 1 has an invalid length.
[   71.500337][ T6620] tap0: tun_chr_ioctl cmd 1074025677
[   71.506045][ T6620] tap0: linktype set to 1
[   71.508134][ T6622] netlink: 'syz.2.243': attribute type 1 has an invalid length.
[   71.531788][ T6626] syzkaller1: entered promiscuous mode
[   71.534092][ T6626] syzkaller1: entered allmulticast mode
[   72.084238][ T6665] netlink: 'syz.0.256': attribute type 2 has an invalid length.
[   72.415756][ T6673] nbd0: detected capacity change from 0 to 63
[   72.447722][   T57] block nbd0: Receive control failed (result -104)
[   72.680136][ T6684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.172949][ T6696] __nla_validate_parse: 9 callbacks suppressed
[   73.172960][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.266'.
[   73.294505][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[   73.341811][ T6708] netlink: 'syz.1.269': attribute type 11 has an invalid length.
[   73.460481][ T6721] netlink: 'syz.1.271': attribute type 8 has an invalid length.
[   73.566139][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'.
[   73.569818][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'.
[   73.572601][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'.
[   73.717479][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'.
[   73.722497][ T6739] netlink: 'syz.1.279': attribute type 1 has an invalid length.
[   73.727401][ T6739] netlink: 172 bytes leftover after parsing attributes in process `syz.1.279'.
[   73.783703][ T6741] bond1: entered promiscuous mode
[   73.783886][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.281'.
[   73.787078][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.820371][ T6741] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.823570][ T6741] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   73.828885][ T6741] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   73.837809][ T6741] bond1: (slave ip6gre1): making interface the new active one
[   73.841109][ T6741] ip6gre1: entered promiscuous mode
[   73.844538][ T6741] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   73.949447][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[   73.988750][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[   74.858012][ T6803] sctp: [Deprecated]: syz.2.297 (pid 6803) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.858012][ T6803] Use struct sctp_sack_info instead
[   75.629213][ T6863] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   75.635740][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8881072de000: rx timeout, send abort
[   75.775113][ T6882] validate_nla: 2 callbacks suppressed
[   75.775124][ T6882] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[   75.989065][ T6903] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   75.992183][ T6903] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   76.023365][ T6906] netlink: 'syz.1.329': attribute type 58 has an invalid length.
[   76.094329][ T6919] netlink: 'syz.1.331': attribute type 1 has an invalid length.
[   76.108310][    C1] IPv4: Oversized IP packet from 127.0.0.1
[   76.111432][ T6915] netem: incorrect ge model size
[   76.113141][ T6915] netem: change failed
[   76.136819][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8881053fe000: rx timeout, send abort
[   76.140148][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8881072de000: abort rx timeout. Force session deactivation
[   76.207803][ T6926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.293584][ T6926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.327852][ T6936] netlink: 'syz.2.338': attribute type 11 has an invalid length.
[   76.364629][ T6926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.415440][ T6926] bridge0: port 3(netdevsim0) entered disabled state
[   76.434979][ T6926] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[   76.440387][ T6926] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[   76.445115][ T6926] bridge0: port 3(netdevsim0) entered disabled state
[   76.452837][ T6926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.484199][ T6940] pim6reg: entered allmulticast mode
[   76.487034][ T6940] pim6reg: left allmulticast mode
[   76.547422][ T6926] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.562732][ T6926] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.582801][ T6926] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.600813][ T6926] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.639745][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8881053fe000: abort rx timeout. Force session deactivation
[   76.729362][ T5847] hid-generic 0005:04F3:000E.0001: collection stack underflow
[   76.732827][ T5847] hid-generic 0005:04F3:000E.0001: item 0 0 0 12 parsing failed
[   76.750665][ T5847] hid-generic 0005:04F3:000E.0001: probe with driver hid-generic failed with error -22
[   76.854212][ T6959] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   77.246335][ T7000] x_tables: duplicate underflow at hook 2
[   77.331896][ T7007] dvmrp8: entered allmulticast mode
[   77.334032][ T7011] xfrm0: mtu less than device minimum
[   77.443546][ T7006] dvmrp8: left allmulticast mode
[   77.519098][ T7033] @: renamed from vlan0 (while UP)
[   77.920141][ T7062] tap0: tun_chr_ioctl cmd 1074025677
[   77.922647][ T7062] tap0: linktype set to 823
[   78.183649][ T7092] block nbd2: not configured, cannot reconfigure
[   78.232884][ T7097] __nla_validate_parse: 76 callbacks suppressed
[   78.232901][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   78.248834][ T7100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.388'.
[   78.416165][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'.
[   78.470001][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   78.505267][ T7126] ipt_ECN: cannot use operation on non-tcp rule
[   78.568359][ T7130] pimreg: entered allmulticast mode
[   78.711878][ T7136] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   78.766973][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.770514][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.777729][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'.
[   79.006983][ T7165] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[   79.009566][ T7165] netlink: 204 bytes leftover after parsing attributes in process `syz.2.409'.
[   79.012613][ T7165] netlink: 'syz.2.409': attribute type 1 has an invalid length.
[   79.078229][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[   79.169521][ T7186] netlink: 'syz.2.416': attribute type 1 has an invalid length.
[   79.172220][ T7186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.416'.
[   79.177771][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'.
[   79.180684][ T7186] netlink: 'syz.2.416': attribute type 20 has an invalid length.
[   79.183151][ T7186] netlink: 'syz.2.416': attribute type 21 has an invalid length.
[   79.191181][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.414'.
[   79.318007][ T7201] netlink: 'syz.1.418': attribute type 4 has an invalid length.
[   79.322160][ T7201] netlink: 'syz.1.418': attribute type 4 has an invalid length.
[   79.326746][ T7198] xt_CT: No such helper "snmp"
[   79.711554][ T7225] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   79.734091][ T7227] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   79.775280][ T5847] IPVS: starting estimator thread 0...
[   79.867028][ T7237] IPVS: using max 51 ests per chain, 122400 per kthread
[   79.915058][ T7257] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002
[   79.924374][ T7263] unsupported nla_type 65024
[   80.250853][ T7261] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.253853][ T7261] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.257387][ T7261] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.260351][ T7261] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.742084][ T7305] veth1_macvtap: entered promiscuous mode
[   80.750061][ T7305] veth1_macvtap: entered allmulticast mode
[   80.756617][ T7305] macsec0: left allmulticast mode
[   80.759564][ T7305] veth1_macvtap: left allmulticast mode
[   80.986421][ T7323] tipc: Started in network mode
[   80.988542][ T7323] tipc: Node identity 7f000001, cluster identity 4711
[   80.999097][ T7323] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.208350][ T7351] tipc: Enabling <ib:lo> not permitted
[   81.210513][ T7351] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   81.279887][   T96] cfg80211: failed to load regulatory.db
[   81.440193][ T7369] No such timeout policy "syz0"
[   81.559024][ T7378] openvswitch: netlink: Duplicate or invalid key (type 0).
[   81.570154][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.573345][ T7378] openvswitch: netlink: Duplicate or invalid key (type 0).
[   81.619721][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.656836][ T7387] validate_nla: 3 callbacks suppressed
[   81.656853][ T7387] netlink: 'syz.2.472': attribute type 10 has an invalid length.
[   81.662782][ T7387] bridge0: port 1(team0) entered blocking state
[   81.676261][ T7387] bridge0: port 1(team0) entered disabled state
[   81.678960][ T7387] team0: entered allmulticast mode
[   81.681948][ T7387] team0: entered promiscuous mode
[   81.731758][ T7390] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[   81.738491][ T7390] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[   81.988049][   T96] tipc: Node number set to 2130706433
[   82.013172][ T7418] netlink: 'syz.1.480': attribute type 39 has an invalid length.
[   82.094673][ T7425] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.021745][ T7469] netlink: 'syz.2.497': attribute type 1 has an invalid length.
[   83.027195][ T7469] netlink: 'syz.2.497': attribute type 4 has an invalid length.
[   83.031174][ T7470] syz_tun: entered allmulticast mode
[   83.033573][ T7469] netlink: 'syz.2.497': attribute type 1 has an invalid length.
[   83.043401][ T7469] netlink: 'syz.2.497': attribute type 4 has an invalid length.
[   83.242478][ T7480] xt_hashlimit: size too large, truncated to 1048576
[   83.347788][ T7492] __nla_validate_parse: 36 callbacks suppressed
[   83.347812][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[   83.387985][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'.
[   83.523954][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'.
[   83.552997][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.613103][ T7506] raw_sendmsg: syz.2.508 forgot to set AF_INET. Fix it!
[   83.783102][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[   83.874538][ T7524] ipt_rpfilter: unknown options
[   84.868546][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   84.891297][ T7529] syz.2.514 (7529) used greatest stack depth: 18408 bytes left
[   85.014241][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'.
[   85.078903][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.525'.
[   85.102612][ T7571] netlink: 76 bytes leftover after parsing attributes in process `syz.0.527'.
[   85.121747][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'.
[   85.138022][ T7576] netlink: 196 bytes leftover after parsing attributes in process `syz.0.529'.
[   85.288252][ T7594] netlink: 'syz.1.535': attribute type 21 has an invalid length.
[   85.290823][ T7594] netlink: 'syz.1.535': attribute type 5 has an invalid length.
[   85.817630][ T7633] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.822124][ T7633] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.825965][ T7633] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.829349][ T7633] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.834695][ T7633] vxlan0: entered promiscuous mode
[   85.840085][ T7633] vxlan0: entered allmulticast mode
[   86.302499][ T7649] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   86.302572][ T7650] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   86.374001][ T7655] netem: incorrect gi model size
[   86.376602][ T7655] netem: change failed
[   86.608042][ T7675] tipc: Started in network mode
[   86.610000][ T7675] tipc: Node identity ac14140f, cluster identity 4711
[   86.616645][ T7675] tipc: New replicast peer: 255.255.255.255
[   86.621881][ T7675] tipc: Enabled bearer <udp:syz2>, priority 10
[   86.959797][ T7702] Bluetooth: MGMT ver 1.23
[   87.735578][   T51] tipc: Node number set to 2886997007
[   88.080849][ T7725] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   88.327368][ T7788] netlink: 'syz.1.599': attribute type 4 has an invalid length.
[   88.335593][ T7788] netlink: 'syz.1.599': attribute type 2 has an invalid length.
[   88.543550][ T7796] __nla_validate_parse: 19 callbacks suppressed
[   88.543562][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[   88.594375][ T7798] netlink: 'syz.1.603': attribute type 5 has an invalid length.
[   88.601263][ T7798] netlink: 'syz.1.603': attribute type 1 has an invalid length.
[   88.604618][ T7798] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.603'.
[   88.848605][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   88.865095][ T7810] syz.2.607: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   88.895218][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.2.607 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   88.895240][ T7810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.895247][ T7810] Call Trace:
[   88.895253][ T7810]  <TASK>
[   88.895259][ T7810]  dump_stack_lvl+0x189/0x250
[   88.895287][ T7810]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.895306][ T7810]  ? __pfx__printk+0x10/0x10
[   88.895320][ T7810]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.895335][ T7810]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   88.895349][ T7810]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   88.895364][ T7810]  warn_alloc+0x214/0x310
[   88.895404][ T7810]  ? __pfx_warn_alloc+0x10/0x10
[   88.895424][ T7810]  ? __get_vm_area_node+0x28f/0x300
[   88.895437][ T7810]  ? translate_table+0x198/0x2000
[   88.895454][ T7810]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   88.895487][ T7810]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   88.895503][ T7810]  ? rcu_is_watching+0x15/0xb0
[   88.895522][ T7810]  ? translate_table+0x198/0x2000
[   88.895534][ T7810]  ? translate_table+0x198/0x2000
[   88.895545][ T7810]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   88.895558][ T7810]  ? translate_table+0x198/0x2000
[   88.895568][ T7810]  ? xt_alloc_table_info+0x3b/0xa0
[   88.895590][ T7810]  translate_table+0x198/0x2000
[   88.895613][ T7810]  ? __lock_acquire+0xab9/0xd20
[   88.895633][ T7810]  ? __pfx_translate_table+0x10/0x10
[   88.895647][ T7810]  ? __might_fault+0xb0/0x130
[   88.895672][ T7810]  ? _copy_from_user+0x94/0xb0
[   88.895687][ T7810]  do_ipt_set_ctl+0x967/0xcd0
[   88.895705][ T7810]  ? rcu_is_watching+0x15/0xb0
[   88.895721][ T7810]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[   88.895746][ T7810]  ? __pfx___mutex_lock+0x10/0x10
[   88.895764][ T7810]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   88.895781][ T7810]  ? aa_sk_perm+0x81e/0x950
[   88.895799][ T7810]  ? __pfx_aa_sk_perm+0x10/0x10
[   88.895816][ T7810]  nf_setsockopt+0x26f/0x290
[   88.895832][ T7810]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   88.895854][ T7810]  do_sock_setsockopt+0x25a/0x3e0
[   88.895870][ T7810]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   88.895886][ T7810]  ? __fget_files+0x2a/0x420
[   88.895904][ T7810]  __x64_sys_setsockopt+0x18b/0x220
[   88.895951][ T7810]  do_syscall_64+0xfa/0x3b0
[   88.895962][ T7810]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.895979][ T7810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.895991][ T7810]  ? exc_page_fault+0x9f/0xf0
[   88.896008][ T7810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.896020][ T7810] RIP: 0033:0x7f742418e929
[   88.896033][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.896043][ T7810] RSP: 002b:00007f7421fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   88.896063][ T7810] RAX: ffffffffffffffda RBX: 00007f74243b6080 RCX: 00007f742418e929
[   88.896072][ T7810] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000046
[   88.896079][ T7810] RBP: 00007f7424210b39 R08: 0000000000000268 R09: 0000000000000000
[   88.896087][ T7810] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.896094][ T7810] R13: 0000000000000000 R14: 00007f74243b6080 R15: 00007ffd7382d798
[   88.896111][ T7810]  </TASK>
[   89.060965][ T7810] Mem-Info:
[   89.062285][ T7810] active_anon:8768 inactive_anon:0 isolated_anon:0
[   89.062285][ T7810]  active_file:1042 inactive_file:38218 isolated_file:0
[   89.062285][ T7810]  unevictable:1768 dirty:81 writeback:0
[   89.062285][ T7810]  slab_reclaimable:9168 slab_unreclaimable:75622
[   89.062285][ T7810]  mapped:18142 shmem:5722 pagetables:944
[   89.062285][ T7810]  sec_pagetables:0 bounce:0
[   89.062285][ T7810]  kernel_misc_reclaimable:0
[   89.062285][ T7810]  free:276615 free_pcp:17377 free_cma:0
[   89.082324][ T7810] Node 0 active_anon:23660kB inactive_anon:0kB active_file:2616kB inactive_file:147856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36492kB dirty:164kB writeback:0kB shmem:17316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4944kB pagetables:2016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.125095][ T7810] Node 1 active_anon:11412kB inactive_anon:0kB active_file:1552kB inactive_file:5016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36076kB dirty:160kB writeback:0kB shmem:5572kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6520kB pagetables:1556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   89.141789][ T7810] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   89.160631][ T7810] lowmem_reserve[]: 0 815 815 815 815
[   89.163123][ T7810] Node 0 DMA32 free:225608kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23728kB inactive_anon:0kB active_file:2616kB inactive_file:147856kB unevictable:3536kB writepending:164kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:26416kB local_pcp:18332kB free_cma:0kB
[   89.176995][ T7810] lowmem_reserve[]: 0 0 0 0 0
[   89.177504][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[   89.178964][ T7810] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   89.194777][ T7810] lowmem_reserve[]: 0 0 854 854 854
[   89.206856][ T7810] Node 1 Normal free:406136kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11412kB inactive_anon:0kB active_file:1552kB inactive_file:5016kB unevictable:3536kB writepending:160kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42540kB local_pcp:16600kB free_cma:0kB
[   89.237321][ T7810] lowmem_reserve[]: 0 0 0 0 0
[   89.240386][ T7810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   89.256174][ T7810] Node 0 DMA32: 687*4kB (U) 663*8kB (UE) 275*16kB (UE) 6*32kB (UME) 22*64kB (UE) 3*128kB (UME) 1*256kB (E) 6*512kB (UM) 1*1024kB (M) 6*2048kB (ME) 47*4096kB (M) = 223588kB
[   89.263524][ T7810] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   89.280796][   T55] Bluetooth: hci1: command 0x0401 tx timeout
[   89.281878][ T7810] Node 1 Normal: 232*4kB (ME) 172*8kB (ME) 125*16kB (UME) 630*32kB (UME) 243*64kB (UME) 84*128kB (UME) 38*256kB (UM) 13*512kB (UME) 9*1024kB (UME) 3*2048kB (UME) 79*4096kB (UM) = 406096kB
[   89.289461][ T7810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.292455][ T7810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   89.295573][ T7810] 44982 total pagecache pages
[   89.297085][ T7810] 0 pages in swap cache
[   89.298463][ T7810] Free swap  = 124996kB
[   89.299883][ T7810] Total swap = 124996kB
[   89.301335][ T7810] 786301 pages RAM
[   89.302615][ T7810] 0 pages HighMem/MovableOnly
[   89.311018][ T7810] 240368 pages reserved
[   89.312416][ T7810] 0 pages cma reserved
[   89.430795][ T7873] Driver unsupported XDP return value 0 on prog  (id 190) dev N/A, expect packet loss!
[   89.487625][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   89.563967][ T7891] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[   89.797737][ T7908] netlink: 'syz.2.635': attribute type 29 has an invalid length.
[   89.802643][ T7909] netlink: 'syz.2.635': attribute type 29 has an invalid length.
[   89.856025][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'.
[   89.959109][ T7924] netlink: 68 bytes leftover after parsing attributes in process `syz.0.640'.
[   90.060074][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'.
[   90.079632][ T7929] xt_HMARK: spi-set and port-set can't be combined
[   90.610947][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'.
[   90.621208][ T7932] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   90.793083][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[   90.963320][ T7952] @: renamed from veth0_vlan (while UP)
[   90.989577][ T7958] netlink: 'syz.1.651': attribute type 1 has an invalid length.
[   91.051790][ T7966] tipc: Can't bind to reserved service type 0
[   91.104243][ T7972] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   91.313045][ T7976] bridge0: port 2(macvlan2) entered blocking state
[   91.316725][ T7976] bridge0: port 2(macvlan2) entered disabled state
[   91.319653][ T7976] macvlan2: entered allmulticast mode
[   91.321967][ T7976] bridge0: entered allmulticast mode
[   91.325181][ T7976] macvlan2: left allmulticast mode
[   91.327613][ T7976] bridge0: left allmulticast mode
[   91.358003][ T7980] netlink: 'syz.0.657': attribute type 15 has an invalid length.
[   91.374136][ T7980] netlink: 'syz.0.657': attribute type 7 has an invalid length.
[   91.866129][ T7962] delete_channel: no stack
[   92.000398][ T8031] : renamed from bond0
[   92.060628][ T8031] "syz.1.673" (8031) uses obsolete ecb(arc4) skcipher
[   93.125455][   T55] Bluetooth: hci0: command tx timeout
[   93.339604][ T8139] validate_nla: 3 callbacks suppressed
[   93.339615][ T8139] netlink: 'syz.2.707': attribute type 10 has an invalid length.
[   93.709416][ T8168] __nla_validate_parse: 27 callbacks suppressed
[   93.709428][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'.
[   93.715093][ T8168] netlink: 87 bytes leftover after parsing attributes in process `syz.1.718'.
[   93.754477][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'.
[   93.801310][ T8177] netlink: 84 bytes leftover after parsing attributes in process `syz.2.721'.
[   93.805094][ T8177] netem: invalid attributes len -16
[   93.808283][ T8177] netem: change failed
[   93.812483][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.721'.
[   93.946145][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[   93.954735][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'.
[   93.997743][ T8187] netlink: 348 bytes leftover after parsing attributes in process `syz.2.724'.
[   94.024368][ T8191] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   94.028935][ T8191] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   94.107950][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[   94.150562][ T8206] ip_vti0: entered promiscuous mode
[   94.152828][ T8206] ip_vti0: entered allmulticast mode
[   94.187401][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.731'.
[   94.223452][ T8212] batman_adv: batadv0: Adding interface: dummy0
[   94.226208][ T8212] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.236881][ T8212] batman_adv: batadv0: Interface activated: dummy0
[   94.454391][ T8237] netlink: 'syz.1.737': attribute type 1 has an invalid length.
[   94.550885][ T8241] netlink: 'syz.1.740': attribute type 1 has an invalid length.
[   94.731646][ T8268] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   94.850230][ T8274] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   94.855051][ T8274] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   94.956897][ T8288] xt_recent: Unsupported userspace flags (00000048)
[   95.586751][ T8348] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   95.670294][ T8357] netlink: 'syz.0.775': attribute type 21 has an invalid length.
[   95.740581][ T8361] netlink: 'syz.0.777': attribute type 12 has an invalid length.
[   95.747819][ T8361] tipc: Enabling <ib:lo> not permitted
[   95.750375][ T8361] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   95.873034][ T8367] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   95.881038][ T8367] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   95.940599][ T8373] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[   95.978655][ T8378] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[   95.987158][ T8378] ipvlan3: entered promiscuous mode
[   95.989175][ T8378] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   96.237044][ T8393] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   96.822946][ T8443] IPv6: sit1: Disabled Multicast RS
[   96.940340][ T8460] batadv_slave_1: entered promiscuous mode
[   97.013420][ T8466] netlink: 'syz.2.808': attribute type 39 has an invalid length.
[   97.018808][ T8466] veth0_macvtap: left promiscuous mode
[   97.187462][ T8473] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[   97.190435][ T8472] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[   97.343286][ T8489] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   97.360057][ T8489] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   97.774006][ T8458] batadv_slave_1: left promiscuous mode
[   97.902148][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.912217][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.917742][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.922785][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.930885][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.956230][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.962688][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   97.995068][ T8533] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.002665][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.008637][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.014414][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.021589][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.029033][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.051779][ T8533] bond0: (slave veth3): Enslaving as an active interface with a down link
[   98.056056][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.086099][ T8533] 8021q: adding VLAN 0 to HW filter on device batadv1
[   98.089326][ T8533] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   98.110523][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.117454][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.127505][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.133262][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.140089][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.146353][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.152843][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.163973][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.170599][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.176958][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.191742][   T33] audit: type=1107 audit(1751556373.044:4): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='FF=a:F mǍ
[   98.191742][   T33] B,V\))-Eb\-/uU`u"\=U잇o&K]?Ty%	fQ$il|'
[   98.201712][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.207748][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.214996][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.221549][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.226585][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.232124][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.238440][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.242850][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.248973][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.270012][ T8528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   98.630179][ T8587] validate_nla: 4 callbacks suppressed
[   98.630196][ T8587] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[   98.634785][ T8587] netlink: 'syz.0.845': attribute type 2 has an invalid length.
[   98.639021][ T8587] netlink: 'syz.0.845': attribute type 1 has an invalid length.
[   98.641902][ T8587] netlink: 'syz.0.845': attribute type 2 has an invalid length.
[   98.807261][ T8603] __nla_validate_parse: 109 callbacks suppressed
[   98.807274][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'.
[   98.813996][ T8603] netlink: 32 bytes leftover after parsing attributes in process `syz.1.850'.
[   99.473530][ T8614] ipvlan2: entered promiscuous mode
[   99.477363][ T8614] bridge0: port 3(ipvlan2) entered blocking state
[   99.479863][ T8614] bridge0: port 3(ipvlan2) entered disabled state
[   99.482290][ T8614] ipvlan2: entered allmulticast mode
[   99.484110][ T8614] bridge0: entered allmulticast mode
[   99.490073][ T8614] ipvlan2: left allmulticast mode
[   99.491966][ T8614] bridge0: left allmulticast mode
[   99.586660][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.854'.
[   99.716125][ T8622] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   99.879068][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[   99.882900][ T8637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[   99.888447][ T8637] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[   99.892973][ T8637] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   99.937581][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'.
[  100.027872][ T8650] bridge6: entered promiscuous mode
[  100.030207][ T8650] bridge6: entered allmulticast mode
[  100.073294][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'.
[  100.077818][ T8655] netlink: 'syz.1.867': attribute type 3 has an invalid length.
[  100.080907][ T8655] netlink: 666 bytes leftover after parsing attributes in process `syz.1.867'.
[  100.221327][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  100.267477][ T8669] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  100.391154][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.394663][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.573278][ T8686] pim6reg: entered allmulticast mode
[  100.578101][ T8686] pim6reg: left allmulticast mode
[  100.631187][ T8687] netlink: 'syz.1.878': attribute type 12 has an invalid length.
[  100.634093][ T8687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.878'.
[  100.980882][ T8703] batadv_slave_0: entered promiscuous mode
[  100.993397][ T8703] batadv_slave_0: left promiscuous mode
[  101.042699][ T8711] netlink: 'syz.1.887': attribute type 9 has an invalid length.
[  101.053279][ T8711] macvlan3: entered promiscuous mode
[  101.056883][ T8711] hsr0: entered promiscuous mode
[  101.063021][ T8711] macvlan3: entered allmulticast mode
[  101.065693][ T8711] hsr0: entered allmulticast mode
[  101.068305][ T8711] hsr_slave_0: entered allmulticast mode
[  101.071006][ T8711] hsr_slave_1: entered allmulticast mode
[  101.074560][ T8711] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  101.149427][ T8716] netlink: 'syz.0.889': attribute type 2 has an invalid length.
[  101.211031][ T8722] netlink: 'syz.1.891': attribute type 4 has an invalid length.
[  102.916230][ T8782] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  103.045525][   T61] block nbd0: Possible stuck request ffff888020ed8000: control (read@0,1024B). Runtime 30 seconds
[  103.049960][   T61] block nbd0: Possible stuck request ffff888020ed8200: control (read@1024,1024B). Runtime 30 seconds
[  103.054480][   T61] block nbd0: Possible stuck request ffff888020ed8400: control (read@2048,1024B). Runtime 30 seconds
[  103.059616][   T61] block nbd0: Possible stuck request ffff888020ed8600: control (read@3072,1024B). Runtime 30 seconds
[  103.070279][ T8805] 8021q: VLANs not supported on wg2
[  103.853447][ T8837] __nla_validate_parse: 20 callbacks suppressed
[  103.853465][ T8837] netlink: 56 bytes leftover after parsing attributes in process `syz.2.930'.
[  103.964191][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'.
[  103.984379][ T8846] netlink: 'syz.2.933': attribute type 1 has an invalid length.
[  104.015856][ T8849] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[  104.018688][ T8849] netlink: 'syz.1.934': attribute type 2 has an invalid length.
[  104.032626][ T8849] Unsupported ieee802154 address type: 0
[  104.054441][ T8852] netlink: 'syz.1.934': attribute type 1 has an invalid length.
[  104.062882][ T8852] netlink: 'syz.1.934': attribute type 2 has an invalid length.
[  104.100997][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.938'.
[  104.104007][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'.
[  104.353672][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.941'.
[  104.359415][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'.
[  104.362646][ T8873] openvswitch: netlink: IP tunnel dst address not specified
[  104.544571][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  104.583338][ T8877] netlink: 'syz.1.938': attribute type 4 has an invalid length.
[  104.659124][ T8899] netlink: 'syz.2.946': attribute type 13 has an invalid length.
[  104.662383][ T8899] netlink: 'syz.2.946': attribute type 17 has an invalid length.
[  104.691584][ T8899] sit0: left promiscuous mode
[  104.768979][ T8899] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.801318][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'.
[  105.004417][ T8902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.947'.
[  105.129963][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'.
[  105.293555][ T8913] pim6reg: entered allmulticast mode
[  105.480413][ T8925] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  105.499501][ T8925] bond2: entered promiscuous mode
[  105.501510][ T8925] 8021q: adding VLAN 0 to HW filter on device bond2
[  105.529362][ T8925] bond2: (slave bridge6): making interface the new active one
[  105.532100][ T8925] bridge6: entered promiscuous mode
[  105.534587][ T8925] bond2: (slave bridge6): Enslaving as an active interface with an up link
[  105.553870][ T8939] ip_vti0: left promiscuous mode
[  105.558714][ T8939] ip_vti0: left allmulticast mode
[  105.561263][ T8939] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  105.579175][ T8938] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  105.586219][ T8925] blkio.reset_stats is deprecated
[  106.154565][ T8990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.361339][   T33] audit: type=1804 audit(1751556381.214:5): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.977" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1525 res=1 errno=0
[  106.373405][ T8997] netlink: 'syz.2.977': attribute type 2 has an invalid length.
[  106.377985][   T33] audit: type=1800 audit(1751556381.234:6): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.977" name="cgroup.controllers" dev="tmpfs" ino=1525 res=0 errno=0
[  106.945958][ T9025] xt_CONNSECMARK: invalid mode: 254
[  107.195989][ T9048] Cannot find add_set index 2 as target
[  107.491762][ T5860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  107.494595][ T5860] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  107.516330][ T5875] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  107.751746][ T9096] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  107.760809][ T9096] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  107.767517][ T2305] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.132699][ T9129] syzkaller0: entered promiscuous mode
[  108.134660][ T9129] syzkaller0: entered allmulticast mode
[  108.315845][ T2305] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  108.602225][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.605021][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.635788][ T2305] ------------[ cut here ]------------
[  108.638605][ T2305] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  108.642023][ T2305] WARNING: CPU: 1 PID: 2305 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  108.645591][ T2305] Modules linked in:
[  108.647255][ T2305] CPU: 1 UID: 0 PID: 2305 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  108.653415][ T2305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.657642][ T2305] Workqueue: mld mld_ifc_work
[  108.659641][ T2305] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  108.662217][ T2305] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  108.670230][ T2305] RSP: 0018:ffffc9000af96498 EFLAGS: 00010246
[  108.672848][ T2305] RAX: e9e70541bac75e00 RBX: 000000000000000c RCX: ffff888106308000
[  108.676232][ T2305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  108.679473][ T2305] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  108.682632][ T2305] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff8881127b7e28
[  108.686029][ T2305] R13: 0000000000000000 R14: ffff8881197f8e40 R15: ffff8881197fb0d8
[  108.689313][ T2305] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  108.693066][ T2305] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  108.695593][ T2305] CR2: 00007f7424174980 CR3: 000000000df38000 CR4: 00000000000006f0
[  108.698272][ T2305] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  108.700852][ T2305] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  108.703756][ T2305] Call Trace:
[  108.705237][ T2305]  <TASK>
[  108.706477][ T2305]  rate_control_send_low+0x194/0x7a0
[  108.708275][ T2305]  rate_control_get_rate+0x20b/0x5d0
[  108.710122][ T2305]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  108.712265][ T2305]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  108.714486][ T2305]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  108.717221][ T2305]  invoke_tx_handlers_late+0xb6/0x1820
[  108.719642][ T2305]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  108.722227][ T2305]  ieee80211_tx_dequeue+0x3068/0x4340
[  108.724622][ T2305]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  108.726677][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.728474][ T2305]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  108.730633][ T2305]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  108.733174][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.735162][ T2305]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  108.737136][ T2305]  ? do_raw_spin_unlock+0x4d/0x240
[  108.738809][ T2305]  ieee80211_queue_skb+0x19e8/0x2180
[  108.740536][ T2305]  ieee80211_tx+0x297/0x420
[  108.742016][ T2305]  ? __pfx_ieee80211_tx+0x10/0x10
[  108.743684][ T2305]  ? ieee80211_xmit+0x315/0x400
[  108.745304][ T2305]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  108.747350][ T2305]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  108.749382][ T2305]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  108.751435][ T2305]  ? skb_network_protocol+0x508/0x760
[  108.753220][ T2305]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  108.755321][ T2305]  ieee80211_subif_start_xmit+0xe0/0x510
[  108.757228][ T2305]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  108.759279][ T2305]  ? __lock_acquire+0xab9/0xd20
[  108.760871][ T2305]  dev_hard_start_xmit+0x2d7/0x830
[  108.762538][ T2305]  __dev_queue_xmit+0x1adf/0x3a70
[  108.764386][ T2305]  ? register_lock_class+0x51/0x320
[  108.766142][ T2305]  ? __dev_queue_xmit+0x27e/0x3a70
[  108.767856][ T2305]  ? __pfx___dev_queue_xmit+0x10/0x10
[  108.769883][ T2305]  ? read_seqbegin+0x122/0x250
[  108.771498][ T2305]  ? neigh_resolve_output+0x438/0x750
[  108.773267][ T2305]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.775009][ T2305]  ? read_seqbegin+0x1ac/0x250
[  108.776626][ T2305]  ? __pfx_read_seqbegin+0x10/0x10
[  108.778226][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.779966][ T2305]  ? eth_header+0x11b/0x200
[  108.781467][ T2305]  ? __asan_memcpy+0x40/0x70
[  108.783034][ T2305]  ip6_finish_output2+0x11fe/0x16a0
[  108.784715][ T2305]  ? ip6_finish_output2+0x701/0x16a0
[  108.786455][ T2305]  ? __pfx_ip6_finish_output2+0x10/0x10
[  108.788218][ T2305]  ? ip6_mtu+0x7d/0x3f0
[  108.789604][ T2305]  ? ip6_mtu+0x7d/0x3f0
[  108.790930][ T2305]  ip6_finish_output+0x234/0x7d0
[  108.792518][ T2305]  NF_HOOK+0x9e/0x380
[  108.793797][ T2305]  ? NF_HOOK+0x101/0x380
[  108.795165][ T2305]  ? __pfx_NF_HOOK+0x10/0x10
[  108.796724][ T2305]  ? __pfx_dst_output+0x10/0x10
[  108.798411][ T2305]  ? icmp6_dst_alloc+0x3a5/0x420
[  108.800297][ T2305]  ? icmp6_dst_alloc+0x3a5/0x420
[  108.802012][ T2305]  mld_sendpack+0x800/0xd80
[  108.803441][ T2305]  ? mld_sendpack+0x1de/0xd80
[  108.804940][ T2305]  ? __pfx_mld_sendpack+0x10/0x10
[  108.806643][ T2305]  mld_ifc_work+0x835/0xde0
[  108.808155][ T2305]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.809810][ T2305]  ? process_scheduled_works+0x9ef/0x17b0
[  108.811745][ T2305]  process_scheduled_works+0xae1/0x17b0
[  108.813523][ T2305]  ? __pfx_process_scheduled_works+0x10/0x10
[  108.815628][ T2305]  worker_thread+0x8a0/0xda0
[  108.817387][ T2305]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.819938][ T2305]  ? __kthread_parkme+0x7b/0x200
[  108.822038][ T2305]  kthread+0x711/0x8a0
[  108.823416][ T2305]  ? __pfx_worker_thread+0x10/0x10
[  108.825071][ T2305]  ? __pfx_kthread+0x10/0x10
[  108.826702][ T2305]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.828486][ T2305]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.830224][ T2305]  ? __pfx_kthread+0x10/0x10
[  108.832172][ T2305]  ret_from_fork+0x3fc/0x770
[  108.834090][ T2305]  ? __pfx_ret_from_fork+0x10/0x10
[  108.836350][ T2305]  ? __switch_to_asm+0x39/0x70
[  108.838447][ T2305]  ? __switch_to_asm+0x33/0x70
[  108.840401][ T2305]  ? __pfx_kthread+0x10/0x10
[  108.842272][ T2305]  ret_from_fork_asm+0x1a/0x30
[  108.844223][ T2305]  </TASK>
[  108.845597][ T2305] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  108.848494][ T2305] CPU: 1 UID: 0 PID: 2305 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  108.853586][ T2305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.857529][ T2305] Workqueue: mld mld_ifc_work
[  108.859415][ T2305] Call Trace:
[  108.860775][ T2305]  <TASK>
[  108.862034][ T2305]  dump_stack_lvl+0x99/0x250
[  108.863876][ T2305]  ? __asan_memcpy+0x40/0x70
[  108.865756][ T2305]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.867876][ T2305]  ? __pfx__printk+0x10/0x10
[  108.869808][ T2305]  panic+0x2db/0x790
[  108.871437][ T2305]  ? __pfx_panic+0x10/0x10
[  108.873263][ T2305]  ? ret_from_fork_asm+0x1a/0x30
[  108.875245][ T2305]  __warn+0x31b/0x4b0
[  108.876721][ T2305]  ? __rate_control_send_low+0x5df/0x820
[  108.878557][ T2305]  ? __rate_control_send_low+0x5df/0x820
[  108.880337][ T2305]  report_bug+0x2be/0x4f0
[  108.881958][ T2305]  ? __rate_control_send_low+0x5df/0x820
[  108.884229][ T2305]  ? __rate_control_send_low+0x5df/0x820
[  108.886679][ T2305]  ? __rate_control_send_low+0x5e1/0x820
[  108.888820][ T2305]  handle_bug+0x84/0x160
[  108.890258][ T2305]  exc_invalid_op+0x1a/0x50
[  108.891930][ T2305]  asm_exc_invalid_op+0x1a/0x20
[  108.894059][ T2305] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  108.896535][ T2305] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  108.904080][ T2305] RSP: 0018:ffffc9000af96498 EFLAGS: 00010246
[  108.906505][ T2305] RAX: e9e70541bac75e00 RBX: 000000000000000c RCX: ffff888106308000
[  108.909746][ T2305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  108.912950][ T2305] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[  108.916199][ T2305] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff8881127b7e28
[  108.919386][ T2305] R13: 0000000000000000 R14: ffff8881197f8e40 R15: ffff8881197fb0d8
[  108.922720][ T2305]  ? __rate_control_send_low+0x5de/0x820
[  108.925089][ T2305]  rate_control_send_low+0x194/0x7a0
[  108.927339][ T2305]  rate_control_get_rate+0x20b/0x5d0
[  108.929599][ T2305]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  108.931942][ T2305]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  108.934479][ T2305]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  108.937068][ T2305]  invoke_tx_handlers_late+0xb6/0x1820
[  108.939410][ T2305]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  108.941944][ T2305]  ieee80211_tx_dequeue+0x3068/0x4340
[  108.943830][ T2305]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  108.945782][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.947571][ T2305]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  108.949661][ T2305]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  108.952286][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  108.954029][ T2305]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  108.955861][ T2305]  ? do_raw_spin_unlock+0x4d/0x240
[  108.957742][ T2305]  ieee80211_queue_skb+0x19e8/0x2180
[  108.959575][ T2305]  ieee80211_tx+0x297/0x420
[  108.961333][ T2305]  ? __pfx_ieee80211_tx+0x10/0x10
[  108.963450][ T2305]  ? ieee80211_xmit+0x315/0x400
[  108.965516][ T2305]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  108.968062][ T2305]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  108.970518][ T2305]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  108.973111][ T2305]  ? skb_network_protocol+0x508/0x760
[  108.975360][ T2305]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  108.977956][ T2305]  ieee80211_subif_start_xmit+0xe0/0x510
[  108.980225][ T2305]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  108.982704][ T2305]  ? __lock_acquire+0xab9/0xd20
[  108.984719][ T2305]  dev_hard_start_xmit+0x2d7/0x830
[  108.986839][ T2305]  __dev_queue_xmit+0x1adf/0x3a70
[  108.988759][ T2305]  ? register_lock_class+0x51/0x320
[  108.990955][ T2305]  ? __dev_queue_xmit+0x27e/0x3a70
[  108.993077][ T2305]  ? __pfx___dev_queue_xmit+0x10/0x10
[  108.995261][ T2305]  ? read_seqbegin+0x122/0x250
[  108.997173][ T2305]  ? neigh_resolve_output+0x438/0x750
[  108.998946][ T2305]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.000668][ T2305]  ? read_seqbegin+0x1ac/0x250
[  109.002497][ T2305]  ? __pfx_read_seqbegin+0x10/0x10
[  109.004597][ T2305]  ? __local_bh_enable_ip+0x12d/0x1c0
[  109.006811][ T2305]  ? eth_header+0x11b/0x200
[  109.008721][ T2305]  ? __asan_memcpy+0x40/0x70
[  109.010638][ T2305]  ip6_finish_output2+0x11fe/0x16a0
[  109.012655][ T2305]  ? ip6_finish_output2+0x701/0x16a0
[  109.014746][ T2305]  ? __pfx_ip6_finish_output2+0x10/0x10
[  109.017093][ T2305]  ? ip6_mtu+0x7d/0x3f0
[  109.018856][ T2305]  ? ip6_mtu+0x7d/0x3f0
[  109.020623][ T2305]  ip6_finish_output+0x234/0x7d0
[  109.022691][ T2305]  NF_HOOK+0x9e/0x380
[  109.024342][ T2305]  ? NF_HOOK+0x101/0x380
[  109.026092][ T2305]  ? __pfx_NF_HOOK+0x10/0x10
[  109.028001][ T2305]  ? __pfx_dst_output+0x10/0x10
[  109.029975][ T2305]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.032023][ T2305]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.034038][ T2305]  mld_sendpack+0x800/0xd80
[  109.035948][ T2305]  ? mld_sendpack+0x1de/0xd80
[  109.037945][ T2305]  ? __pfx_mld_sendpack+0x10/0x10
[  109.040048][ T2305]  mld_ifc_work+0x835/0xde0
[  109.041984][ T2305]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.043990][ T2305]  ? process_scheduled_works+0x9ef/0x17b0
[  109.045837][ T2305]  process_scheduled_works+0xae1/0x17b0
[  109.047646][ T2305]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.049682][ T2305]  worker_thread+0x8a0/0xda0
[  109.051299][ T2305]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.053809][ T2305]  ? __kthread_parkme+0x7b/0x200
[  109.055414][ T2305]  kthread+0x711/0x8a0
[  109.056730][ T2305]  ? __pfx_worker_thread+0x10/0x10
[  109.058389][ T2305]  ? __pfx_kthread+0x10/0x10
[  109.059942][ T2305]  ? _raw_spin_unlock_irq+0x23/0x50
[  109.061905][ T2305]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.064000][ T2305]  ? __pfx_kthread+0x10/0x10
[  109.065950][ T2305]  ret_from_fork+0x3fc/0x770
[  109.067845][ T2305]  ? __pfx_ret_from_fork+0x10/0x10
[  109.070011][ T2305]  ? __switch_to_asm+0x39/0x70
[  109.072034][ T2305]  ? __switch_to_asm+0x33/0x70
[  109.074000][ T2305]  ? __pfx_kthread+0x10/0x10
[  109.075492][ T2305]  ret_from_fork_asm+0x1a/0x30
[  109.077027][ T2305]  </TASK>
[  109.078754][ T2305] Kernel Offset: disabled
[  109.080466][ T2305] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:26:23  Registers:
info registers vcpu 0

CPU#0
RAX=73ad9c58bde59900 RBX=ffffffff81974d58 RCX=73ad9c58bde59900 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000012c0 CR3=000000010791c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd972211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000af95c30
R8 =ffff888107da8237 R9 =1ffff11020fb5046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e9 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7424174980 CR3=000000010e602000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=ffffffffffffffff ffffff0000000000 XMM05=00007f7424384458 00007f74243844a0
XMM06=00007f7424384498 00007f7424384490 XMM07=00007f7424384488 00007f7424384480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7424211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
