last executing test programs:

2.025702067s ago: executing program 1 (id=1261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x144, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'virt_wifi0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000000}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x32}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x5c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xff}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc4}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x144}, 0x1, 0x0, 0x0, 0x44040}, 0x840)

1.908721772s ago: executing program 1 (id=1266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)={0xb8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x88, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4884}, 0x20008040)

1.847693886s ago: executing program 1 (id=1270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xf, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0xff, 0x2}, 0x20)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c)
r3 = socket(0x1e, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="3b9be5e32737", 0x6, 0x4000000, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)

976.288618ms ago: executing program 1 (id=1289):
socketpair(0x6, 0x2, 0x7, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x5, 0x5, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x5, 0xdb, 0x3}]}, 0x28}}, 0xc884)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'veth0\x00', 0x7308})
clock_gettime(0x0, &(0x7f0000001fc0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r1, &(0x7f0000001f00)=[{{&(0x7f0000000280)=@qipcrtr, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000380)=""/241, 0xf1}], 0x2, &(0x7f00000004c0)=""/84, 0x54}, 0x8}, {{&(0x7f0000000540)=@in, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/197, 0xc5}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000001a40)=""/110, 0x6e}, {&(0x7f0000001ac0)=""/113, 0x71}, {&(0x7f0000001b40)=""/65, 0x41}], 0x9}, 0x1}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c80)=""/238, 0xee}, {&(0x7f0000001d80)=""/218, 0xda}], 0x2, &(0x7f0000001ec0)=""/47, 0x2f}, 0xff}], 0x3, 0x0, &(0x7f0000002000)={r3, r4+60000000})
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r5, &(0x7f00000043c0)={&(0x7f0000002040)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000004340)=[{&(0x7f00000020c0)=""/7, 0x7}, {&(0x7f0000002100)=""/53, 0x35}, {&(0x7f0000002140)=""/56, 0x38}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/72, 0x48}, {&(0x7f0000003200)=""/46, 0x2e}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/252, 0xfc}], 0x8}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000004400), &(0x7f0000004440)=0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000004480), 0x480, 0x0)
r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000004700)={0x0, r1}, 0x8)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000046c0)={&(0x7f00000044c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x6, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x7}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x2}, @enum={0x5, 0x3, 0x0, 0x6, 0x4, [{0xc, 0xe}, {0xb, 0xfff}, {0xc, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @datasec={0xb, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x2}, {0x3, 0xa7, 0x9}, {0x1, 0x7}, {0x2, 0x4, 0x8}, {0x5, 0x401, 0x8}, {0x1, 0x0, 0x200}, {0x1, 0x2, 0x1}, {0x5, 0x80, 0x8}], '_'}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x0, 0x2e, 0x30]}}, &(0x7f0000004600)=""/178, 0x106, 0xb2, 0x1, 0x4, 0x10000, @value=r7}, 0x28)
getpeername$packet(r0, &(0x7f0000004740)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004780)=0x14)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000047c0)={{{@in=@local, @in6=@private2, 0x4e22, 0x0, 0x4e24, 0x80, 0xa, 0x80, 0x0, 0x62, r9, 0xee01}, {0xfffffffffffffff8, 0x1ffc000, 0x0, 0x5, 0x306c, 0xa, 0x985, 0x1}, {0x1, 0x9, 0x1, 0x8001}, 0x3, 0x6e6bba, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d5, 0x32}, 0x2, @in=@remote, 0x34ff, 0x4, 0x3, 0x9, 0x3, 0x3, 0x40000000}}, 0xe8)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000048c0)=0x400, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000004a00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004940)={0x70, 0x2, 0x6, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xbb}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xcd}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40080)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004ac0)={0xffffffffffffffff, 0x58, &(0x7f0000004a40)}, 0x10)
sendto$inet(r6, &(0x7f0000004b00)="b6797b83555df1168b85fedaa3e6222e9722eef0e489affb1bb680e86d7026c16d9a22d991bad17c2f212593627764e347587f64e579d1eb", 0x38, 0x810, &(0x7f0000004b40)={0x2, 0x4e22, @empty}, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000004bc0), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000004cc0)={&(0x7f0000004b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x80, r10, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x54)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000004d00)={<r11=>0x0, 0x0, 0x10, 0xe23d000, 0x9}, &(0x7f0000004d40)=0x18)
setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000004d80)=@assoc_value={r11, 0x9}, 0x8)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004e00), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000004ec0)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000004e80)={&(0x7f0000004e40)={0x24, r12, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000004f80)={'tunl0\x00', &(0x7f0000004f00)={'syztnl1\x00', <r13=>r9, 0x8000, 0x8, 0x3, 0x1, {{0xb, 0x4, 0x0, 0x24, 0x2c, 0x64, 0x0, 0xce, 0x29, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop, @generic={0x94, 0x2}, @end, @timestamp_addr={0x44, 0x14, 0x49, 0x1, 0x7, [{@loopback, 0x1}, {@broadcast, 0x9}]}]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000004fc0)={0x1b, 0x0, 0x0, 0x7, 0x0, r7, 0x8, '\x00', r13, r8, 0x1, 0x0, 0xfffffff9}, 0x50)
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000005040)={r11, 0x3, 0x57, 0x1}, 0x10)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000005080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

696.257364ms ago: executing program 2 (id=1303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x18}}, 0x4000000)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e24, 0x0, @remote}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9, 0x6]}}, 0x5c)
sendmsg$xdp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="7aefd2a11576ca7092afb41ea08548e252ee8ebe947e681ef6045d69b919deb5aa25949719e74e5006571efe6aaca463ff5681e199001caf3acb49794d12701fd65b0f53d993dda1b3d3c3b53e419703ec7c9ebb471f34bbca418aa3edd9c076fc0e7bb9e2ec6e31986a24972f848bca13a8bd0b752741d4dfae249e776b128f6788d419a34a924a84c4820b", 0x8c}, {&(0x7f00000000c0)="f60a72dd548c4633e3028791d8cfd982b15ccb37a8251acae10b7b5c2b40238af3e9a8019ae91862b9b58b96c574cd7e705ca71ffa2cae3e3e869790817f3351008bb9854bec42", 0x47}, {&(0x7f0000000140)="a6d237960d9e1076d6beb99c43983f53d5f709d6f230527922416b8f7c3d09da28225b52b46a552e85007f8d4bc2", 0x2e}, {&(0x7f00000002c0)="a433d050f98a5581c5d77a31124e2f4a225884bbf7759aa6a0cc85202dab177b9b40a35d71849df2e1099562449f640e01b3696497f0475c04e53737646073c15f1e3296749f9ebdb158308ad204ca9b1d12367d695d8a66fdaa726e5edd6463d6040119a022174ad72cbb372f53a3af8b3e653f3b6907c20e030604dbbae6e311f56cf16ee6c362416c33530ad608566c113e0f18e031bb4724c1a67021422cc279f1bc1d5d8f0db9c46d641a2ab6b068f19478435ce5346eb173f704509904de3e6766c9bfddfdd5dc868a437c706fe6c24cda47d79b0c860f45f8cc4d5e8c583a4ad483211edd1a31b391cf3dde0606b66a5df1be0fcb", 0xf8}, {&(0x7f00000001c0)="65f54d5e03ce80abd7", 0x9}], 0x5, 0x0, 0x0, 0x4040080}, 0x865)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x18}}, 0x4000000) (async)
socket(0xa, 0x3, 0x3a) (async)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0x62ea450d}, {0xa, 0x4e24, 0x0, @remote}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9, 0x6]}}, 0x5c) (async)
sendmsg$xdp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="7aefd2a11576ca7092afb41ea08548e252ee8ebe947e681ef6045d69b919deb5aa25949719e74e5006571efe6aaca463ff5681e199001caf3acb49794d12701fd65b0f53d993dda1b3d3c3b53e419703ec7c9ebb471f34bbca418aa3edd9c076fc0e7bb9e2ec6e31986a24972f848bca13a8bd0b752741d4dfae249e776b128f6788d419a34a924a84c4820b", 0x8c}, {&(0x7f00000000c0)="f60a72dd548c4633e3028791d8cfd982b15ccb37a8251acae10b7b5c2b40238af3e9a8019ae91862b9b58b96c574cd7e705ca71ffa2cae3e3e869790817f3351008bb9854bec42", 0x47}, {&(0x7f0000000140)="a6d237960d9e1076d6beb99c43983f53d5f709d6f230527922416b8f7c3d09da28225b52b46a552e85007f8d4bc2", 0x2e}, {&(0x7f00000002c0)="a433d050f98a5581c5d77a31124e2f4a225884bbf7759aa6a0cc85202dab177b9b40a35d71849df2e1099562449f640e01b3696497f0475c04e53737646073c15f1e3296749f9ebdb158308ad204ca9b1d12367d695d8a66fdaa726e5edd6463d6040119a022174ad72cbb372f53a3af8b3e653f3b6907c20e030604dbbae6e311f56cf16ee6c362416c33530ad608566c113e0f18e031bb4724c1a67021422cc279f1bc1d5d8f0db9c46d641a2ab6b068f19478435ce5346eb173f704509904de3e6766c9bfddfdd5dc868a437c706fe6c24cda47d79b0c860f45f8cc4d5e8c583a4ad483211edd1a31b391cf3dde0606b66a5df1be0fcb", 0xf8}, {&(0x7f00000001c0)="65f54d5e03ce80abd7", 0x9}], 0x5, 0x0, 0x0, 0x4040080}, 0x865) (async)

673.142684ms ago: executing program 2 (id=1305):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}, 0x1, 0x0, 0x0, 0x48004}, 0x0)

618.602095ms ago: executing program 2 (id=1307):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x94)

616.248996ms ago: executing program 2 (id=1308):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r0, @ANYBLOB="f0ff03010000000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x600000000000000)

518.863826ms ago: executing program 2 (id=1310):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x100, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x2044080)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)

468.909594ms ago: executing program 2 (id=1312):
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xa, 0x401}, 0x90)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1}, 0x24}}, 0x0)

136.859215ms ago: executing program 0 (id=1323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xfff}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x1000006}]}}]}, 0x54}}, 0x0)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x4a0, 0x1398, 0x1398, 0x4a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x230, 0x278, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4e20], [0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, @common=@rt={{0x138}, {0x6, [0xc, 0xa8035e60], 0x1, 0x1, 0x5, [@local, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @remote, @local, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @private2], 0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x100000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

136.625793ms ago: executing program 1 (id=1324):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffc00000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)

87.394676ms ago: executing program 0 (id=1325):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x24004080)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0})
socket$kcm(0xa, 0x5, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f00000000c0)=0x42)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x65df4872}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, 0x0, 0x0)
accept4(r7, 0x0, 0x0, 0x800)
pipe(&(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

84.702006ms ago: executing program 0 (id=1326):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0)

84.475719ms ago: executing program 1 (id=1327):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x5}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}]}, 0xa8}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r4}, [@IFA_FLAGS={0x8, 0x8, 0x534}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}, 0x28}}, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82187201, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000380)=ANY=[], 0x36)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r9], 0xfc}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a30000000000800044000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r10], 0x44}}, 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100))
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x300, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x3fff, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x32e4, 0x0, 0x8}, {0x0, 0x3}, {0x6, 0x0, 0x0, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

79.807464ms ago: executing program 0 (id=1328):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000000b000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0x2, 0x10, 0x10, 0x9, 0x5, 0x0, 0x0, 0x8, 0xf}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x82d92b8cfe1c32b5}, 0x4000080)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="61202a3a2a2072770037f88572852c2924287f89e215ac4e759531cb694bbfd716b1a9f386b9b14b6ae5a52307021f4cdfaa13e99d6867ea090db8ee298694e48e7d23e20188153feba5139f9ef57e7b22d5b63f7f3b7f0253a9d59f00009506cb99f566cba0918df8432462a73801ae60e266de097ddba670"], 0x9)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000206030000000000000000000000000a050001000700000011000300686173683a69702c6d61726b000000000c00078008001200000004c305000500020000000900020073797a3100000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0xff05, 0x0)

9.050445ms ago: executing program 0 (id=1329):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x301}, 0x94)

0s ago: executing program 0 (id=1330):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x100, r1, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084880}, 0x24040801)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14416' (ED25519) to the list of known hosts.
syzkaller login: [   41.063693][ T5775] cgroup: Unknown subsys name 'net'
[   41.155160][ T5775] cgroup: Unknown subsys name 'cpuset'
[   41.159138][ T5775] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.450927][ T5775] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.594498][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.597558][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.600083][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.602908][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.605498][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.626601][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.629365][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.631826][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.635099][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.638610][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.683760][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.686508][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.689102][ T5204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.691775][ T5204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.694671][ T5204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.802540][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   45.852021][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   45.916528][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.918893][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.921423][ T5815] bridge_slave_0: entered allmulticast mode
[   45.924739][ T5815] bridge_slave_0: entered promiscuous mode
[   45.928265][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.930577][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.932958][ T5815] bridge_slave_1: entered allmulticast mode
[   45.935696][ T5815] bridge_slave_1: entered promiscuous mode
[   45.996672][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.016161][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.038074][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.042908][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.045323][ T5819] bridge_slave_0: entered allmulticast mode
[   46.048025][ T5819] bridge_slave_0: entered promiscuous mode
[   46.061755][ T5815] team0: Port device team_slave_0 added
[   46.064761][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.067116][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.069463][ T5819] bridge_slave_1: entered allmulticast mode
[   46.072128][ T5819] bridge_slave_1: entered promiscuous mode
[   46.081319][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   46.094893][ T5815] team0: Port device team_slave_1 added
[   46.109711][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.114724][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.136882][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.139207][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.148107][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.166380][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.168721][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.177951][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.183529][ T5819] team0: Port device team_slave_0 added
[   46.194419][ T5819] team0: Port device team_slave_1 added
[   46.232167][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.234944][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.243271][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.254648][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.256938][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.259282][ T5821] bridge_slave_0: entered allmulticast mode
[   46.261981][ T5821] bridge_slave_0: entered promiscuous mode
[   46.265842][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.268165][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.270428][ T5821] bridge_slave_1: entered allmulticast mode
[   46.273634][ T5821] bridge_slave_1: entered promiscuous mode
[   46.276324][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.278581][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.287031][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.314776][ T5815] hsr_slave_0: entered promiscuous mode
[   46.317312][ T5815] hsr_slave_1: entered promiscuous mode
[   46.329379][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.348204][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.366227][ T5819] hsr_slave_0: entered promiscuous mode
[   46.368546][ T5819] hsr_slave_1: entered promiscuous mode
[   46.370684][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.373721][ T5819] Cannot create hsr debugfs directory
[   46.407903][ T5821] team0: Port device team_slave_0 added
[   46.411250][ T5821] team0: Port device team_slave_1 added
[   46.461481][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.464105][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.472366][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.489745][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.492045][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.500964][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.569210][ T5821] hsr_slave_0: entered promiscuous mode
[   46.571462][ T5821] hsr_slave_1: entered promiscuous mode
[   46.573913][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.576406][ T5821] Cannot create hsr debugfs directory
[   46.636181][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.655248][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.665378][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.669791][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.710053][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.717640][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.726093][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.732617][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.754044][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.756467][ T5815] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.759145][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.761519][ T5815] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.778198][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.780835][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.784066][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.787011][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.809994][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.817883][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.822610][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.835419][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.840650][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.846591][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.850706][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.854739][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.906747][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.912468][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.935843][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   46.940779][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   46.951778][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.954184][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.958058][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.960368][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.975085][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.977489][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.980963][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.983962][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.034483][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.061267][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   47.069860][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.072808][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.093392][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.096350][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.191086][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.220557][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.238094][ T5815] veth0_vlan: entered promiscuous mode
[   47.248569][ T5815] veth1_vlan: entered promiscuous mode
[   47.261722][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.279475][ T5815] veth0_macvtap: entered promiscuous mode
[   47.293778][ T5819] veth0_vlan: entered promiscuous mode
[   47.296260][ T5815] veth1_macvtap: entered promiscuous mode
[   47.308449][ T5819] veth1_vlan: entered promiscuous mode
[   47.314716][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.327187][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.336655][ T5821] veth0_vlan: entered promiscuous mode
[   47.340093][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.344934][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.347800][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.350531][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.361518][ T5819] veth0_macvtap: entered promiscuous mode
[   47.365642][ T5821] veth1_vlan: entered promiscuous mode
[   47.375710][ T5819] veth1_macvtap: entered promiscuous mode
[   47.405701][ T5821] veth0_macvtap: entered promiscuous mode
[   47.409456][ T5821] veth1_macvtap: entered promiscuous mode
[   47.422501][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.434554][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.435143][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.437107][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.441597][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.459741][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.462600][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.467625][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.470471][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.479827][ T3060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.482469][ T3060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.486635][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.502418][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.509625][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.512456][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.516480][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.541286][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.575733][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.578209][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.610776][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.615662][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.623550][ T5204] Bluetooth: hci0: command tx timeout
[   47.646013][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.648991][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.658658][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.661266][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.690289][ T5886] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.703595][ T5204] Bluetooth: hci2: command tx timeout
[   47.705756][   T54] Bluetooth: hci1: command tx timeout
[   47.712019][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.715046][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.717522][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.728730][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.731401][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.734491][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.737079][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.739856][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.745743][ T5887] netlink: 'syz.1.4': attribute type 29 has an invalid length.
[   47.764742][ T5892] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.833916][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   47.836708][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   47.869130][ T5900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.872351][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.904098][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.906979][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.911269][ T5900] sctp: [Deprecated]: syz.2.7 (pid 5900) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.911269][ T5900] Use struct sctp_sack_info instead
[   47.991479][ T5908] C: renamed from lo (while UP)
[   47.998383][ T5908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   48.100402][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   48.207270][ T5927] warning: `syz.2.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.216550][ T5924] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.271120][ T5929] netlink: 232 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.275449][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.372564][ T5939] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   48.390392][ T5940] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   48.406668][ T5940] bridge_slave_0: left allmulticast mode
[   48.408573][ T5940] bridge_slave_0: left promiscuous mode
[   48.410778][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.418485][ T5940] bridge_slave_1: left allmulticast mode
[   48.420692][ T5940] bridge_slave_1: left promiscuous mode
[   48.425193][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.431201][ T5940] bond0: (slave bond_slave_0): Releasing backup interface
[   48.447227][ T5940] bond0: (slave bond_slave_1): Releasing backup interface
[   48.460542][ T5940] team0: Port device team_slave_0 removed
[   48.468397][ T5940] team0: Port device team_slave_1 removed
[   48.470681][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.474038][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0
[   48.478266][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.480604][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.492344][ T5943] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   48.499942][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.504758][ T5943] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   48.664438][ T5951] openvswitch: netlink: IP tunnel dst address not specified
[   48.837738][ T5969] sctp: [Deprecated]: syz.2.28 (pid 5969) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.837738][ T5969] Use struct sctp_sack_info instead
[   48.843711][ T5968] sctp: [Deprecated]: syz.2.28 (pid 5968) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.843711][ T5968] Use struct sctp_sack_info instead
[   48.901931][ T5976] x_tables: duplicate underflow at hook 1
[   49.298408][ T6018] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET)
[   49.471717][ T6031] bridge1: entered promiscuous mode
[   49.474078][ T6031] bridge1: entered allmulticast mode
[   49.598611][ T6036] bond1 (unregistering): Released all slaves
[   49.695621][ T6044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.713653][   T54] Bluetooth: hci0: command tx timeout
[   49.783410][ T5204] Bluetooth: hci2: command tx timeout
[   49.785269][   T54] Bluetooth: hci1: command tx timeout
[   49.874994][ T6063] Zero length message leads to an empty skb
[   50.074421][ T6071] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   50.100647][ T6094] bond1 (unregistering): Released all slaves
[   50.150741][ T6100] ipt_REJECT: ECHOREPLY no longer supported.
[   50.195675][ T6103] TCP: TCP_TX_DELAY enabled
[   50.298587][ T6118] xt_connbytes: Forcing CT accounting to be enabled
[   50.300844][ T6118] Cannot find set identified by id 0 to match
[   50.351202][ T6121] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.369862][ T6128] 8021q: adding VLAN 0 to HW filter on device bond2
[   50.375204][ T6128] bond0: (slave bond2): Enslaving as an active interface with an up link
[   50.701723][ T6153] tipc: Started in network mode
[   50.704744][ T6153] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711
[   50.707921][ T6153] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   50.781819][ T6165] tipc: Enabled bearer <eth:wg1>, priority 10
[   50.794650][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.798078][ T6165] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   50.801649][ T6165] batadv0: entered promiscuous mode
[   50.803955][ T6165] batadv0: entered allmulticast mode
[   50.807152][ T6165] bond0: (slave batadv0): Releasing backup interface
[   50.815896][ T6165] bridge0: port 3(batadv0) entered blocking state
[   50.820384][ T6165] bridge0: port 3(batadv0) entered disabled state
[   50.994105][ T5682] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   50.997117][ T5682] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   51.039804][ T6184] 8021q: adding VLAN 0 to HW filter on device bond3
[   51.047601][ T6184] bond0: (slave bond3): Enslaving as an active interface with an up link
[   51.116959][ T6192] bond0: (slave bond2): Error -95 calling ndo_bpf
[   51.130848][ T6192] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   51.229926][    C0] Illegal XDP return value 16128 on prog  (id 25) dev C, expect packet loss!
[   51.557093][ T6240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.625959][ T6248] veth1_macvtap: left promiscuous mode
[   51.630789][ T6248] macsec0: entered allmulticast mode
[   51.783111][   T54] Bluetooth: hci0: command tx timeout
[   51.814675][  T792] tipc: Node number set to 1241530493
[   51.862892][   T54] Bluetooth: hci1: command tx timeout
[   51.864093][ T5204] Bluetooth: hci2: command tx timeout
[   51.921774][ T6280] bond_slave_0: entered allmulticast mode
[   51.974740][ T6285] tipc: Started in network mode
[   51.976804][ T6285] tipc: Node identity 080211000001, cluster identity 4711
[   51.979404][ T6285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.993437][ T6285] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   51.996405][ T6285] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   52.001798][ T6285] tipc: Resetting bearer <eth:syzkaller0>
[   52.071510][ T6298] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[   52.080825][ T6299] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[   52.159157][ T6307] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.200965][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.842965][ T6343] validate_nla: 38 callbacks suppressed
[   52.842975][ T6343] netlink: 'syz.1.140': attribute type 2 has an invalid length.
[   52.938454][ T6348] lo speed is unknown, defaulting to 1000
[   52.940404][ T6348] lo speed is unknown, defaulting to 1000
[   52.948739][ T6348] lo speed is unknown, defaulting to 1000
[   52.953060][ T6348] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   52.959344][ T6348] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   52.980978][ T6348] lo speed is unknown, defaulting to 1000
[   52.985861][ T6348] lo speed is unknown, defaulting to 1000
[   52.988580][ T6348] lo speed is unknown, defaulting to 1000
[   53.003768][   T10] tipc: Node number set to 134418688
[   53.047549][ T6354] __nla_validate_parse: 50 callbacks suppressed
[   53.047558][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   53.053058][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   53.056009][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   53.060486][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   53.063947][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   53.191899][ T6364] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   53.195162][   T24] IPVS: starting estimator thread 0...
[   53.197612][ T6364] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000
[   53.201093][ T6367] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   53.204811][ T6364] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000
[   53.267559][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[   53.293696][ T6365] IPVS: using max 80 ests per chain, 192000 per kthread
[   53.540382][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'.
[   53.555335][ T6383] lo speed is unknown, defaulting to 1000
[   53.742505][ T6396] syzkaller1: entered promiscuous mode
[   53.744461][ T6396] syzkaller1: entered allmulticast mode
[   53.872783][ T5204] Bluetooth: hci0: command tx timeout
[   53.943324][ T5204] Bluetooth: hci2: command tx timeout
[   53.953399][ T5204] Bluetooth: hci1: command tx timeout
[   53.995744][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'.
[   54.021072][ T6428] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   54.027702][ T6428] bond1: (slave vcan1): Error -95 calling set_mac_address
[   54.063892][ T6435] netlink: 27 bytes leftover after parsing attributes in process `syz.0.173'.
[   54.098005][ T6442] netlink: 44 bytes leftover after parsing attributes in process `syz.1.175'.
[   54.108475][ T6439] 8021q: adding VLAN 0 to HW filter on device bond4
[   54.111965][ T6439] bond0: (slave bond4): Enslaving as an active interface with an up link
[   54.139512][ T6444] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   54.238153][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.328599][ T6462] x_tables: unsorted entry at hook 1
[   54.363931][ T6469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.445952][ T6485] ieee802154 phy0 wpan0: encryption failed: -90
[   54.579641][ T6506] netlink: 'syz.0.198': attribute type 12 has an invalid length.
[   54.750340][ T6522] netlink: 'syz.2.204': attribute type 4 has an invalid length.
[   54.758516][ T6522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.789644][ T6529] sctp: [Deprecated]: syz.2.206 (pid 6529) Use of struct sctp_assoc_value in delayed_ack socket option.
[   54.789644][ T6529] Use struct sctp_sack_info instead
[   54.864802][ T6541] netlink: 'syz.0.208': attribute type 8 has an invalid length.
[   54.866375][ T6543] netlink: 'syz.2.209': attribute type 5 has an invalid length.
[   54.873871][ T6543] netlink: 'syz.2.209': attribute type 5 has an invalid length.
[   54.953945][ T6552] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   54.965324][ T6555] bond3 (unregistering): Released all slaves
[   55.069080][ T6562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.204276][ T6576] netlink: 'syz.0.222': attribute type 83 has an invalid length.
[   55.271500][ T6592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.450567][ T6605] 8021q: adding VLAN 0 to HW filter on device bond5
[   55.464295][ T6605] bond0: (slave bond5): Enslaving as an active interface with an up link
[   55.639387][ T6641] xt_socket: unknown flags 0xd0
[   55.665670][ T6643] Bluetooth: MGMT ver 1.23
[   55.668929][ T6643] netlink: 'syz.0.246': attribute type 6 has an invalid length.
[   55.671553][ T6643] netlink: 'syz.0.246': attribute type 5 has an invalid length.
[   55.769061][ T6651] x_tables: duplicate underflow at hook 2
[   55.816877][ T6657] xt_hashlimit: size too large, truncated to 1048576
[   55.819447][ T6657] xt_hashlimit: max too large, truncated to 1048576
[   55.880392][ T6663] syzkaller1: entered promiscuous mode
[   55.882291][ T6663] syzkaller1: entered allmulticast mode
[   55.886556][ T6663] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   56.491245][ T6686] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[   56.503815][ T5204] Bluetooth: hci2: command tx timeout
[   56.682319][ T6703] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   57.151364][ T6756] team0: Device dummy0 is up. Set it down before adding it as a team port
[   57.666478][ T6767] bond0: (slave bond2): Error -95 calling ndo_bpf
[   57.682756][ T6767] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   57.770357][   T24] IPVS: starting estimator thread 0...
[   57.873096][ T6772] IPVS: using max 80 ests per chain, 192000 per kthread
[   57.967747][ T6783] validate_nla: 7 callbacks suppressed
[   57.967756][ T6783] netlink: 'syz.0.295': attribute type 280 has an invalid length.
[   58.031792][ T6791] xt_TCPMSS: Only works on TCP SYN packets
[   58.039218][ T6789] bond0: (slave bond2): Error -95 calling ndo_bpf
[   58.043212][ T6789] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   58.142576][ T6807] ieee802154 phy0 wpan0: encryption failed: -22
[   58.199637][ T6814] 8021q: adding VLAN 0 to HW filter on device bond6
[   58.202999][ T6814] bond0: (slave bond6): Enslaving as an active interface with an up link
[   58.264850][ T6818] __nla_validate_parse: 106 callbacks suppressed
[   58.264859][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'.
[   58.401986][ T6844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.314'.
[   59.246821][ T6872] netlink: 404 bytes leftover after parsing attributes in process `syz.1.322'.
[   59.249954][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'.
[   59.253775][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'.
[   59.256823][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'.
[   59.260970][ T6879] netlink: 348 bytes leftover after parsing attributes in process `syz.0.325'.
[   59.300874][ T6881] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.400931][ T6881] bond2 (unregistering): Released all slaves
[   59.693830][ T6913] bond3 (unregistering): Released all slaves
[   59.749255][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'.
[   59.752185][ T6925] nbd: must specify a size in bytes for the device
[   59.800874][ T6934] netlink: 320 bytes leftover after parsing attributes in process `syz.2.341'.
[   59.861317][ T6944] batadv_slave_1: entered promiscuous mode
[   59.875763][ T6944] batadv_slave_1: left promiscuous mode
[   59.887614][ T6945] netlink: 'syz.1.344': attribute type 4 has an invalid length.
[   59.949931][ T6952] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   59.952350][ T6952] team0: Device macvtap1 is already an upper device of the team interface
[   60.034250][ T6965] netlink: 'syz.1.350': attribute type 30 has an invalid length.
[   60.050768][ T6965] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.350'.
[   60.171710][ T6979] syz.0.355 (6979) used greatest stack depth: 20040 bytes left
[   60.345474][ T7014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.353090][ T7014] syzkaller0: entered promiscuous mode
[   60.354968][ T7014] syzkaller0: entered allmulticast mode
[   60.361201][ T7015] tipc: Resetting bearer <eth:syzkaller0>
[   60.364717][ T7013] tipc: Resetting bearer <eth:syzkaller0>
[   60.371355][ T7013] tipc: Disabling bearer <eth:syzkaller0>
[   60.385769][ T7017] bond3 (unregistering): Released all slaves
[   60.553650][ T7038] netlink: 'syz.0.373': attribute type 8 has an invalid length.
[   60.694957][ T7062] : renamed from batadv_slave_1 (while UP)
[   60.752326][ T7070] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   60.920818][ T7083] bridge0: port 3(batadv0) entered disabled state
[   60.925794][ T7083] bridge_slave_0: left allmulticast mode
[   60.927744][ T7083] bridge_slave_0: left promiscuous mode
[   60.929768][ T7083] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.935262][ T7083] bridge_slave_1: left allmulticast mode
[   60.937239][ T7083] bridge_slave_1: left promiscuous mode
[   60.939290][ T7083] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.947448][ T7083] bond0: (slave bond_slave_0): Releasing backup interface
[   60.952024][ T7083] bond0: (slave bond_slave_1): Releasing backup interface
[   60.964385][ T7083] team0: Port device team_slave_0 removed
[   60.971329][ T7083] team0: Port device team_slave_1 removed
[   60.974096][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.976569][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.979618][ T7083] batman_adv: batadv0: Interface deactivated: 26
[   60.981861][ T7083] batman_adv: batadv0: Removing interface: 26
[   60.992410][ T7083] bond0: (slave bond2): Releasing backup interface
[   60.997407][ T7083] bond0: (slave bond3): Releasing backup interface
[   61.001661][ T7083] bond0: (slave bond4): Releasing backup interface
[   61.006553][ T7083] bond0: (slave bond5): Releasing backup interface
[   61.010810][ T7083] bond0: (slave bond6): Releasing backup interface
[   61.303016][ T7120] netlink: 'syz.0.397': attribute type 14 has an invalid length.
[   61.305518][ T7120] netlink: 'syz.0.397': attribute type 13 has an invalid length.
[   61.349940][ T7123] netlink: 'syz.1.398': attribute type 21 has an invalid length.
[   61.391184][ T7130] unknown channel width for channel at 909000KHz?
[   61.396718][ T7130] unknown channel width for channel at 909000KHz?
[   61.503648][ T7149] netlink: 'syz.0.406': attribute type 2 has an invalid length.
[   61.524082][ T7152] syzkaller1: entered promiscuous mode
[   61.525894][ T7152] syzkaller1: entered allmulticast mode
[   61.730044][ T7172] tipc: Can't bind to reserved service type 0
[   61.754058][ T7181] openvswitch: netlink: IP tunnel dst address not specified
[   61.754466][ T7182] openvswitch: netlink: IP tunnel dst address not specified
[   61.803262][ T7191] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   61.804608][ T7192] netlink: 'syz.1.419': attribute type 1 has an invalid length.
[   61.873912][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   62.110237][ T7209] netlink: 'syz.2.430': attribute type 12 has an invalid length.
[   62.224502][ T7216] bridge0: entered allmulticast mode
[   62.477417][ T7238] x_tables: duplicate underflow at hook 2
[   62.661942][ T5865] tipc: Subscription rejected, illegal request
[   62.718598][ T7255] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   63.089602][ T7292] geneve3: entered promiscuous mode
[   63.162054][ T7298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.183678][ T7302] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   63.207218][ T7298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.235140][ T7304] xt_CT: No such helper "snmp"
[   63.258690][ T7298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.323800][ T7298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.391571][ T7320] syzkaller0: entered promiscuous mode
[   63.395505][ T7320] syzkaller0: entered allmulticast mode
[   63.404325][ T7298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.408678][ T7320] __nla_validate_parse: 40 callbacks suppressed
[   63.408686][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[   63.414249][ T7298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.661947][ T7323] xt_cgroup: invalid path, errno=-2
[   64.070993][ T7298] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.079564][ T7298] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.124348][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'.
[   64.136036][    T9] IPVS: starting estimator thread 0...
[   64.243325][ T7335] IPVS: using max 80 ests per chain, 192000 per kthread
[   64.264153][ T7350] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   64.267809][ T7349] batadv_slave_1: entered promiscuous mode
[   64.275615][ T7348] batadv_slave_1: left promiscuous mode
[   64.334596][ T7362] validate_nla: 2 callbacks suppressed
[   64.334605][ T7362] netlink: 'syz.2.479': attribute type 83 has an invalid length.
[   64.376550][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'.
[   64.429703][ T7373] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.483'.
[   64.564832][ T7394] netlink: 4832 bytes leftover after parsing attributes in process `syz.1.490'.
[   65.526585][ T7430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.536324][ T7438] netlink: 'syz.0.505': attribute type 3 has an invalid length.
[   65.589751][ T7430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.595396][ T7443] netlink: 'syz.1.503': attribute type 5 has an invalid length.
[   65.620207][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'.
[   65.658495][ T7430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.659159][ T7461] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   65.665029][ T7459] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   65.719471][ T7463] lo speed is unknown, defaulting to 1000
[   65.778703][ T7430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.787533][ T7430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.798695][ T7430] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.811385][ T7430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.925192][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   65.953502][ T7480] block nbd0: server does not support multiple connections per device.
[   65.956768][ T7480] block nbd0: shutting down sockets
[   65.957541][ T7484] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   65.999275][ T7488] x_tables: ip_tables: osf match: only valid for protocol 6
[   66.099450][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'.
[   66.102470][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'.
[   66.752253][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.533'.
[   66.876859][ T7535] No such timeout policy "syz0"
[   67.035964][ T7545] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[   67.187893][ T7563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.376785][ T7590] sctp: [Deprecated]: syz.1.556 (pid 7590) Use of int in max_burst socket option deprecated.
[   67.376785][ T7590] Use struct sctp_assoc_value instead
[   67.484097][ T7602] Cannot find del_set index 2 as target
[   67.957567][ T7635] netlink: 'syz.2.569': attribute type 58 has an invalid length.
[   67.962242][ T7635] netlink: 'syz.2.569': attribute type 1 has an invalid length.
[   68.078267][ T7643] netlink: 'syz.2.571': attribute type 2 has an invalid length.
[   68.413785][ T7670] syzkaller1: entered promiscuous mode
[   68.415810][ T7670] syzkaller1: entered allmulticast mode
[   68.467795][ T7679] __nla_validate_parse: 6 callbacks suppressed
[   68.467804][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[   68.713347][ T7691] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   68.713348][ T7690] netlink: 'syz.0.586': attribute type 1 has an invalid length.
[   68.731564][ T7690] bond7: (slave gretap1): making interface the new active one
[   68.734933][ T7690] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   69.004605][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'.
[   69.055325][ T7720] @: renamed from vlan0 (while UP)
[   69.089855][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.094523][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.097711][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.100731][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.104446][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.107531][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.110652][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.113932][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   69.119671][ T7723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.421323][ T7750] nbd: must specify a device to reconfigure
[   69.628113][ T7783] IPVS: length: 8 != 1776
[   69.658564][ T7787] netlink: 'syz.2.616': attribute type 4 has an invalid length.
[   69.783548][ T7804] lo speed is unknown, defaulting to 1000
[   70.633919][ T7859] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   70.664173][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   70.755218][ T7868] netlink: 'syz.0.644': attribute type 3 has an invalid length.
[   70.837744][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.842528][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.469374][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   71.570517][ T7893] syzkaller1: entered promiscuous mode
[   71.572351][ T7893] syzkaller1: entered allmulticast mode
[   72.579852][ T7905] tipc: Resetting bearer <eth:syzkaller0>
[   72.589110][ T7905] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.591707][ T7905] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.595181][ T7905] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.597775][ T7905] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.674586][ T7919] netlink: 'syz.0.660': attribute type 4 has an invalid length.
[   72.700373][ T7921] syzkaller1: entered promiscuous mode
[   72.710140][ T7921] syzkaller1: entered allmulticast mode
[   72.715945][ T7923] gretap1: entered promiscuous mode
[   72.808408][ T7940] IPv6: NLM_F_CREATE should be specified when creating new route
[   72.831943][ T7944] xt_hashlimit: invalid rate
[   73.346403][ T8008] openvswitch: netlink: Missing key (keys=40, expected=100)
[   73.347894][ T8006] lo speed is unknown, defaulting to 1000
[   73.349454][ T8008] netlink: 'syz.1.694': attribute type 2 has an invalid length.
[   73.353882][ T8008] netlink: 'syz.1.694': attribute type 2 has an invalid length.
[   73.485070][ T8015] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   74.239711][ T8020] __nla_validate_parse: 56 callbacks suppressed
[   74.239721][ T8020] netlink: 104 bytes leftover after parsing attributes in process `syz.0.696'.
[   74.284325][   T33] audit: type=1107 audit(1751974594.862:2): pid=8023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   74.457744][ T8043] sctp: [Deprecated]: syz.1.705 (pid 8043) Use of int in maxseg socket option.
[   74.457744][ T8043] Use struct sctp_assoc_value instead
[   74.496877][ T8041] delete_channel: no stack
[   74.884937][ T8089] netlink: 'syz.0.723': attribute type 6 has an invalid length.
[   75.065450][ T8109] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.069052][ T8109] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   75.371614][ T8136] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   75.378049][ T8136] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   75.396971][ T8136] lo speed is unknown, defaulting to 1000
[   75.839338][ T8192] syzkaller0: entered promiscuous mode
[   75.841195][ T8192] syzkaller0: entered allmulticast mode
[   76.835679][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'.
[   76.840115][ T8255] netlink: 'syz.1.784': attribute type 7 has an invalid length.
[   76.845213][ T8255] netlink: 'syz.1.784': attribute type 8 has an invalid length.
[   76.848916][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'.
[   76.865037][ T8255] erspan0: entered promiscuous mode
[   76.868384][ T8255] gretap0: entered promiscuous mode
[   76.870799][ T8255] erspan0: left promiscuous mode
[   76.873212][ T8255] gretap0: left promiscuous mode
[   77.173536][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.176294][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.211249][ T8295] bond_slave_0: left allmulticast mode
[   77.226766][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.234484][ T8295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.274770][ T8295] macsec0: left allmulticast mode
[   77.288754][ T8295] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.291755][ T8295] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.294751][ T8295] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.297711][ T8295] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.305135][ T8295] gretap1: left promiscuous mode
[   77.310051][ T8297] pim6reg: entered allmulticast mode
[   77.481400][ T8321] netlink: 'syz.0.808': attribute type 1 has an invalid length.
[   77.485777][ T8311] IPVS: set_ctl: invalid protocol: 30768 48.48.48.48:12336
[   77.516415][ T8321] bond10: (slave bridge1): making interface the new active one
[   77.519665][ T8321] bond10: (slave bridge1): Enslaving as an active interface with an up link
[   77.526568][ T8314] lo speed is unknown, defaulting to 1000
[   77.539409][ T8313] lo speed is unknown, defaulting to 1000
[   78.502942][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   78.588507][ T8339] x_tables: duplicate underflow at hook 1
[   78.714769][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'.
[   78.717765][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'.
[   78.772239][ T8380] netlink: 'syz.0.829': attribute type 6 has an invalid length.
[   78.776389][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'.
[   78.781634][ T8380] netlink: 'syz.0.829': attribute type 11 has an invalid length.
[   78.784338][ T8380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.829'.
[   78.787468][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'.
[   78.831750][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'.
[   78.837965][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'.
[   79.229551][ T8413] netlink: 'syz.1.841': attribute type 3 has an invalid length.
[   79.340503][ T8421] nbd: couldn't find a device at index -1158470127
[   79.661112][ T8449] pim6reg1: entered promiscuous mode
[   79.664289][ T8449] pim6reg1: entered allmulticast mode
[   79.766908][ T8456] sctp: [Deprecated]: syz.2.857 (pid 8456) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.766908][ T8456] Use struct sctp_sack_info instead
[   79.946501][ T8481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   79.990256][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[   80.005915][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[   80.009150][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[   80.012244][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'.
[   80.035651][ T8496] xt_hashlimit: size too large, truncated to 1048576
[   80.037926][ T8495] xt_hashlimit: size too large, truncated to 1048576
[   80.098175][ T8495] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.200097][ T8514] netlink: 'syz.0.877': attribute type 10 has an invalid length.
[   80.203017][ T8514] bridge0: port 1(netdevsim0) entered blocking state
[   80.205270][ T8514] bridge0: port 1(netdevsim0) entered disabled state
[   80.207573][ T8514] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   80.211007][ T8514] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   80.217068][ T8514] bridge0: port 1(netdevsim0) entered blocking state
[   80.219245][ T8514] bridge0: port 1(netdevsim0) entered forwarding state
[   80.304153][ T8514] syz.0.877 (8514) used greatest stack depth: 19864 bytes left
[   80.754817][ T8560] lo speed is unknown, defaulting to 1000
[   80.976013][ T8562] netlink: 508 bytes leftover after parsing attributes in process `syz.2.893'.
[   81.079570][  T791] cfg80211: failed to load regulatory.db
[   81.336432][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'.
[   81.340618][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'.
[   81.501406][ T8587] netlink: 'syz.0.901': attribute type 11 has an invalid length.
[   81.582098][ T8596] syzkaller1: tun_chr_ioctl cmd 1074025677
[   81.585842][ T8596] syzkaller1: linktype set to 270
[   81.619011][ T8606] netlink: 'syz.0.907': attribute type 6 has an invalid length.
[   81.621505][ T8606] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.907'.
[   81.667013][ T8612] netlink: 'syz.0.909': attribute type 4 has an invalid length.
[   81.761221][   T33] audit: type=1804 audit(1751974602.332:3): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.913" name="/newroot/347/cgroup.controllers" dev="tmpfs" ino=1783 res=1 errno=0
[   81.769065][   T33] audit: type=1800 audit(1751974602.332:4): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.913" name="cgroup.controllers" dev="tmpfs" ino=1783 res=0 errno=0
[   81.772498][ T8627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'.
[   81.777155][   T33] audit: type=1800 audit(1751974602.352:5): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.913" name="cgroup.controllers" dev="tmpfs" ino=1783 res=0 errno=0
[   81.787934][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[   82.257274][ T8671] 8021q: VLANs not supported on ip_vti0
[   82.762028][ T8705] xt_hashlimit: max too large, truncated to 1048576
[   82.994203][ T8725] lo speed is unknown, defaulting to 1000
[   83.133361][ T8749] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   83.135601][ T8749] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[   83.148668][ T8749] xt_socket: unknown flags 0xd0
[   83.216096][ T8747] netlink: 'syz.0.959': attribute type 12 has an invalid length.
[   83.373953][ T8774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.386253][ T8778] netlink: 'syz.2.971': attribute type 1 has an invalid length.
[   83.397954][ T8784] dvmrp0: entered allmulticast mode
[   83.840484][ T8851] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   83.845479][ T8851] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   83.848871][ T8851] netlink: 'syz.2.993': attribute type 30 has an invalid length.
[   83.856151][ T8851] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.858941][ T8851] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.861491][ T8851] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.864630][ T8851] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.868812][ T8851] netlink: 'syz.2.993': attribute type 30 has an invalid length.
[   83.930683][ T8867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.969112][ T8871] 8021q: VLANs not supported on wg0
[   84.041730][ T8885] lo speed is unknown, defaulting to 1000
[   84.048608][ T8887] netlink: 'syz.2.1008': attribute type 9 has an invalid length.
[   84.257042][ T8917] batadv_slave_0: entered promiscuous mode
[   84.398303][ T8931] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[   84.939896][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.942426][ T8996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   84.959566][  T791] lo speed is unknown, defaulting to 1000
[   84.961507][  T791] syz2: Port: 1 Link ACTIVE
[   85.061344][ T9022] __nla_validate_parse: 70 callbacks suppressed
[   85.061355][ T9022] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1057'.
[   85.118422][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.126218][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.129179][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.132130][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.136765][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.140913][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.145174][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.148009][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.150875][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[   85.155648][ T9031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   85.176499][ T9028] xt_hashlimit: size too large, truncated to 1048576
[   85.178916][ T9028] xt_hashlimit: overflow, try lower: 3/0
[   85.248419][ T9041] set match dimension is over the limit!
[   85.250849][ T9040] tipc: New replicast peer: 255.255.255.255
[   85.256579][ T9040] tipc: Enabled bearer <udp:syz2>, priority 10
[   85.291179][ T9050] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[   85.305331][ T9045] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20004
[   85.306285][ T9050] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.446333][ T9063] netlink: 'syz.0.1071': attribute type 9 has an invalid length.
[   85.531225][ T9077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.537050][ T9076] x_tables: duplicate underflow at hook 1
[   85.556688][ T5858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   85.593083][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   85.718385][ T9107] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.721681][ T9107] 8021q: adding VLAN 0 to HW filter on device team0
[   85.729686][ T9110] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   85.750008][ T9107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.633469][ T9136] ip6t_srh: unknown srh invflags 4449
[   86.776767][ T9153] syzkaller1: entered allmulticast mode
[   86.786974][ T9155] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   87.395265][ T9235] lo speed is unknown, defaulting to 1000
[   87.565954][ T9254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.300147][ T9268] SET target dimension over the limit!
[   88.375491][ T9274] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[   88.499100][ T9290] netlink: 'syz.0.1158': attribute type 7 has an invalid length.
[   88.659028][ T9307] netlink: 'syz.2.1165': attribute type 1 has an invalid length.
[   88.689993][ T9307] bond4: entered promiscuous mode
[   88.691911][ T9307] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.713446][ T9307] bond4: (slave bridge3): making interface the new active one
[   88.719596][ T9307] bridge3: entered promiscuous mode
[   88.724325][ T9307] bond4: (slave bridge3): Enslaving as an active interface with an up link
[   88.808504][ T9326] lo speed is unknown, defaulting to 1000
[   88.880092][ T9332] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[   88.884078][ T9332] tipc: Resetting bearer <eth:syzkaller0>
[   88.886895][ T9332] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[   88.889287][ T9332] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[   88.895233][ T9332] bridge1: left promiscuous mode
[   88.897011][ T9332] bridge1: left allmulticast mode
[   88.899435][ T9332] geneve3: left promiscuous mode
[   88.908858][ T9332] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.911818][ T9332] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.914908][ T9332] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.917518][ T9332] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   88.925820][ T9332] bond4: left promiscuous mode
[   88.927517][ T9332] bridge3: left promiscuous mode
[   88.936938][   T52] lo speed is unknown, defaulting to 1000
[   88.940627][   T52] syz2: Port: 1 Link DOWN
[   89.054058][ T9354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.190572][ T9370] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.215986][ T9370] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.218320][ T9370] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[   89.221929][ T9370] bond4: (slave vti0): Error -95 calling set_mac_address
[   89.421935][ T9387] x_tables: duplicate underflow at hook 1
[   89.460706][ T9407] netlink: 'syz.2.1193': attribute type 3 has an invalid length.
[   89.509285][ T9412] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.511891][ T9412] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   89.519634][  T791] lo speed is unknown, defaulting to 1000
[   89.529393][  T791] syz1: Port: 1 Link ACTIVE
[   89.859835][ T9443] xt_hashlimit: size too large, truncated to 1048576
[   90.645582][ T9466] __nla_validate_parse: 94 callbacks suppressed
[   90.645598][ T9466] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1210'.
[   90.715300][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.727580][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.733055][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.736175][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.739180][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.748332][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.751559][ T9479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1214'.
[   90.751726][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.758401][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'.
[   90.765976][ T9476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.793066][ T5879] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   90.891478][ T9495] netlink: 'syz.0.1218': attribute type 1 has an invalid length.
[   90.910394][ T9495] bond11: (slave bridge3): making interface the new active one
[   90.913933][ T9495] bond11: (slave bridge3): Enslaving as an active interface with an up link
[   90.924142][ T9496] bond11: (slave bridge4): Enslaving as an active interface with a down link
[   91.156975][ T9503] lo speed is unknown, defaulting to 1000
[   91.283881][  T791] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   91.779832][ T9568] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.816193][ T9573] dvmrp1: entered allmulticast mode
[   91.840066][ T9575] trusted_key: syz.2.1248 sent an empty control message without MSG_MORE.
[   91.962215][ T9594] syzkaller0: entered promiscuous mode
[   91.966945][ T9594] syzkaller0: entered allmulticast mode
[   93.047844][ T9643] Cannot find add_set index 3 as target
[   93.159310][ T5204] Bluetooth: hci2: link tx timeout
[   93.163108][ T5204] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   93.327973][ T9667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   93.396545][ T9669] lo speed is unknown, defaulting to 1000
[   93.663227][ T9682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   93.745442][  T791] lo speed is unknown, defaulting to 1000
[   93.747424][  T791] syz1: Port: 1 Link DOWN
[   93.895761][ T9710] netlink: 'syz.2.1292': attribute type 15 has an invalid length.
[   93.898336][ T9710] bond0: option resend_igmp: invalid value (196616)
[   93.900399][ T9710] bond0: option resend_igmp: allowed values 0 - 255
[   93.996870][ T9722] xt_limit: Overflow, try lower: 0/0
[   94.002627][ T9720] netlink: 'syz.0.1296': attribute type 7 has an invalid length.
[   94.189855][ T9750] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.240851][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.245614][ T9756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.251573][  T791] lo speed is unknown, defaulting to 1000
[   94.254310][ T5865] bond0: (slave wlan1): link status definitely down, disabling slave
[   94.257450][  T791] syz1: Port: 1 Link ACTIVE
[   94.263969][ T5865] bond0: now running without any active interface!
[   94.425790][ T9776] tun0: tun_chr_ioctl cmd 2147767521
[   94.546758][ T9783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.573323][ T5858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   94.688021][ T9798] xt_CT: You must specify a L4 protocol and not use inversions on it
[   94.796146][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.799603][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.806609][ T9806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.834715][  T791] ------------[ cut here ]------------
[   94.836642][  T791] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[   94.840060][  T791] WARNING: CPU: 1 PID: 791 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[   94.843621][  T791] Modules linked in:
[   94.845254][  T791] CPU: 1 UID: 0 PID: 791 Comm: kworker/1:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   94.850928][  T791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.855230][  T791] Workqueue: mld mld_ifc_work
[   94.857043][  T791] RIP: 0010:__rate_control_send_low+0x5df/0x820
[   94.859105][  T791] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[   94.865723][  T791] RSP: 0018:ffffc9000473e498 EFLAGS: 00010246
[   94.867731][  T791] RAX: 1fa8c35dba11cd00 RBX: 000000000000000c RCX: ffff888107ec8000
[   94.870344][  T791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   94.873012][  T791] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[   94.875627][  T791] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff888035336028
[   94.878385][  T791] R13: 0000000000000000 R14: ffff8881221c8e40 R15: ffff8881221cb0d8
[   94.881102][  T791] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[   94.884040][  T791] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   94.886147][  T791] CR2: 000000110c2b7c3d CR3: 0000000023762000 CR4: 00000000000006f0
[   94.888773][  T791] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   94.891355][  T791] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   94.894061][  T791] Call Trace:
[   94.895203][  T791]  <TASK>
[   94.896214][  T791]  rate_control_send_low+0x194/0x7a0
[   94.897941][  T791]  rate_control_get_rate+0x20b/0x5d0
[   94.899665][  T791]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[   94.901518][  T791]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[   94.903522][  T791]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   94.905567][  T791]  invoke_tx_handlers_late+0xb6/0x1820
[   94.907397][  T791]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[   94.909418][  T791]  ieee80211_tx_dequeue+0x3068/0x4340
[   94.911219][  T791]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[   94.913189][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   94.914985][  T791]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[   94.917015][  T791]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[   94.919188][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   94.920973][  T791]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   94.922934][  T791]  ? do_raw_spin_unlock+0x4d/0x240
[   94.924560][  T791]  ieee80211_queue_skb+0x19e8/0x2180
[   94.926286][  T791]  ieee80211_tx+0x297/0x420
[   94.927804][  T791]  ? __pfx_ieee80211_tx+0x10/0x10
[   94.929472][  T791]  ? ieee80211_xmit+0x315/0x400
[   94.931106][  T791]  __ieee80211_subif_start_xmit+0xc49/0x1500
[   94.933170][  T791]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[   94.935211][  T791]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[   94.937318][  T791]  ? skb_network_protocol+0x508/0x760
[   94.939127][  T791]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[   94.941183][  T791]  ieee80211_subif_start_xmit+0xe0/0x510
[   94.943049][  T791]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[   94.945017][  T791]  ? __lock_acquire+0xab9/0xd20
[   94.946621][  T791]  dev_hard_start_xmit+0x2d7/0x830
[   94.948323][  T791]  __dev_queue_xmit+0x1adf/0x3a70
[   94.950015][  T791]  ? register_lock_class+0x51/0x320
[   94.951733][  T791]  ? __dev_queue_xmit+0x27e/0x3a70
[   94.953489][  T791]  ? __pfx___dev_queue_xmit+0x10/0x10
[   94.955284][  T791]  ? read_seqbegin+0x122/0x250
[   94.956900][  T791]  ? neigh_resolve_output+0x438/0x750
[   94.958672][  T791]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.960415][  T791]  ? read_seqbegin+0x1ac/0x250
[   94.962023][  T791]  ? __pfx_read_seqbegin+0x10/0x10
[   94.963787][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   94.965557][  T791]  ? eth_header+0x11b/0x200
[   94.967008][  T791]  ? __asan_memcpy+0x40/0x70
[   94.968501][  T791]  ip6_finish_output2+0x11fe/0x16a0
[   94.970171][  T791]  ? ip6_finish_output2+0x701/0x16a0
[   94.971827][  T791]  ? __pfx_ip6_finish_output2+0x10/0x10
[   94.973618][  T791]  ? ip6_mtu+0x7d/0x3f0
[   94.974998][  T791]  ? ip6_mtu+0x7d/0x3f0
[   94.976348][  T791]  ip6_finish_output+0x234/0x7d0
[   94.977975][  T791]  NF_HOOK+0x9e/0x380
[   94.979321][  T791]  ? NF_HOOK+0x101/0x380
[   94.980755][  T791]  ? __pfx_NF_HOOK+0x10/0x10
[   94.982286][  T791]  ? __pfx_dst_output+0x10/0x10
[   94.983989][  T791]  ? icmp6_dst_alloc+0x3a5/0x420
[   94.985642][  T791]  ? icmp6_dst_alloc+0x3a5/0x420
[   94.987291][  T791]  mld_sendpack+0x800/0xd80
[   94.988828][  T791]  ? mld_sendpack+0x1de/0xd80
[   94.990394][  T791]  ? __pfx_mld_sendpack+0x10/0x10
[   94.992084][  T791]  mld_ifc_work+0x835/0xde0
[   94.993627][  T791]  ? _raw_spin_unlock_irq+0x23/0x50
[   94.995333][  T791]  ? process_scheduled_works+0x9ef/0x17b0
[   94.997156][  T791]  process_scheduled_works+0xae1/0x17b0
[   94.998994][  T791]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.000985][  T791]  worker_thread+0x8a0/0xda0
[   95.002535][  T791]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.004796][  T791]  ? __kthread_parkme+0x7b/0x200
[   95.006469][  T791]  kthread+0x711/0x8a0
[   95.007841][  T791]  ? __pfx_worker_thread+0x10/0x10
[   95.009540][  T791]  ? __pfx_kthread+0x10/0x10
[   95.011063][  T791]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.012820][  T791]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.014535][  T791]  ? __pfx_kthread+0x10/0x10
[   95.016098][  T791]  ret_from_fork+0x3fc/0x770
[   95.017613][  T791]  ? __pfx_ret_from_fork+0x10/0x10
[   95.019288][  T791]  ? __switch_to_asm+0x39/0x70
[   95.020899][  T791]  ? __switch_to_asm+0x33/0x70
[   95.022472][  T791]  ? __pfx_kthread+0x10/0x10
[   95.024132][  T791]  ret_from_fork_asm+0x1a/0x30
[   95.025759][  T791]  </TASK>
[   95.026821][  T791] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   95.029120][  T791] CPU: 1 UID: 0 PID: 791 Comm: kworker/1:2 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   95.033108][  T791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.036421][  T791] Workqueue: mld mld_ifc_work
[   95.037991][  T791] Call Trace:
[   95.039090][  T791]  <TASK>
[   95.040086][  T791]  dump_stack_lvl+0x99/0x250
[   95.041619][  T791]  ? __asan_memcpy+0x40/0x70
[   95.043178][  T791]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.044956][  T791]  ? __pfx__printk+0x10/0x10
[   95.046496][  T791]  panic+0x2db/0x790
[   95.047836][  T791]  ? __pfx_panic+0x10/0x10
[   95.049324][  T791]  ? ret_from_fork_asm+0x1a/0x30
[   95.050974][  T791]  __warn+0x31b/0x4b0
[   95.052312][  T791]  ? __rate_control_send_low+0x5df/0x820
[   95.054163][  T791]  ? __rate_control_send_low+0x5df/0x820
[   95.056012][  T791]  report_bug+0x2be/0x4f0
[   95.057462][  T791]  ? __rate_control_send_low+0x5df/0x820
[   95.059318][  T791]  ? __rate_control_send_low+0x5df/0x820
[   95.061119][  T791]  ? __rate_control_send_low+0x5e1/0x820
[   95.062865][  T791]  handle_bug+0x84/0x160
[   95.064198][  T791]  exc_invalid_op+0x1a/0x50
[   95.065707][  T791]  asm_exc_invalid_op+0x1a/0x20
[   95.067294][  T791] RIP: 0010:__rate_control_send_low+0x5df/0x820
[   95.069335][  T791] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[   95.075370][  T791] RSP: 0018:ffffc9000473e498 EFLAGS: 00010246
[   95.077312][  T791] RAX: 1fa8c35dba11cd00 RBX: 000000000000000c RCX: ffff888107ec8000
[   95.079835][  T791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[   95.082308][  T791] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[   95.084786][  T791] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff888035336028
[   95.087274][  T791] R13: 0000000000000000 R14: ffff8881221c8e40 R15: ffff8881221cb0d8
[   95.089808][  T791]  ? __rate_control_send_low+0x5de/0x820
[   95.091635][  T791]  rate_control_send_low+0x194/0x7a0
[   95.093308][  T791]  rate_control_get_rate+0x20b/0x5d0
[   95.095052][  T791]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[   95.096903][  T791]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[   95.098903][  T791]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[   95.100971][  T791]  invoke_tx_handlers_late+0xb6/0x1820
[   95.102793][  T791]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[   95.104658][  T791]  ieee80211_tx_dequeue+0x3068/0x4340
[   95.106375][  T791]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[   95.108145][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   95.109835][  T791]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[   95.111712][  T791]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[   95.113803][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   95.115590][  T791]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   95.117503][  T791]  ? do_raw_spin_unlock+0x4d/0x240
[   95.119227][  T791]  ieee80211_queue_skb+0x19e8/0x2180
[   95.120994][  T791]  ieee80211_tx+0x297/0x420
[   95.122435][  T791]  ? __pfx_ieee80211_tx+0x10/0x10
[   95.124051][  T791]  ? ieee80211_xmit+0x315/0x400
[   95.125668][  T791]  __ieee80211_subif_start_xmit+0xc49/0x1500
[   95.127594][  T791]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[   95.129532][  T791]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[   95.131546][  T791]  ? skb_network_protocol+0x508/0x760
[   95.133222][  T791]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[   95.135205][  T791]  ieee80211_subif_start_xmit+0xe0/0x510
[   95.137063][  T791]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[   95.139126][  T791]  ? __lock_acquire+0xab9/0xd20
[   95.140768][  T791]  dev_hard_start_xmit+0x2d7/0x830
[   95.142469][  T791]  __dev_queue_xmit+0x1adf/0x3a70
[   95.144159][  T791]  ? register_lock_class+0x51/0x320
[   95.145900][  T791]  ? __dev_queue_xmit+0x27e/0x3a70
[   95.147600][  T791]  ? __pfx___dev_queue_xmit+0x10/0x10
[   95.149385][  T791]  ? read_seqbegin+0x122/0x250
[   95.150981][  T791]  ? neigh_resolve_output+0x438/0x750
[   95.152764][  T791]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.154483][  T791]  ? read_seqbegin+0x1ac/0x250
[   95.156082][  T791]  ? __pfx_read_seqbegin+0x10/0x10
[   95.157800][  T791]  ? __local_bh_enable_ip+0x12d/0x1c0
[   95.159584][  T791]  ? eth_header+0x11b/0x200
[   95.161032][  T791]  ? __asan_memcpy+0x40/0x70
[   95.162546][  T791]  ip6_finish_output2+0x11fe/0x16a0
[   95.164273][  T791]  ? ip6_finish_output2+0x701/0x16a0
[   95.165962][  T791]  ? __pfx_ip6_finish_output2+0x10/0x10
[   95.167826][  T791]  ? ip6_mtu+0x7d/0x3f0
[   95.169234][  T791]  ? ip6_mtu+0x7d/0x3f0
[   95.170617][  T791]  ip6_finish_output+0x234/0x7d0
[   95.172259][  T791]  NF_HOOK+0x9e/0x380
[   95.173593][  T791]  ? NF_HOOK+0x101/0x380
[   95.175012][  T791]  ? __pfx_NF_HOOK+0x10/0x10
[   95.176543][  T791]  ? __pfx_dst_output+0x10/0x10
[   95.178153][  T791]  ? icmp6_dst_alloc+0x3a5/0x420
[   95.179840][  T791]  ? icmp6_dst_alloc+0x3a5/0x420
[   95.181484][  T791]  mld_sendpack+0x800/0xd80
[   95.182997][  T791]  ? mld_sendpack+0x1de/0xd80
[   95.184503][  T791]  ? __pfx_mld_sendpack+0x10/0x10
[   95.186120][  T791]  mld_ifc_work+0x835/0xde0
[   95.187602][  T791]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.189334][  T791]  ? process_scheduled_works+0x9ef/0x17b0
[   95.191186][  T791]  process_scheduled_works+0xae1/0x17b0
[   95.193011][  T791]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.195013][  T791]  worker_thread+0x8a0/0xda0
[   95.196553][  T791]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.198641][  T791]  ? __kthread_parkme+0x7b/0x200
[   95.200289][  T791]  kthread+0x711/0x8a0
[   95.201650][  T791]  ? __pfx_worker_thread+0x10/0x10
[   95.203387][  T791]  ? __pfx_kthread+0x10/0x10
[   95.204950][  T791]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.206669][  T791]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.208374][  T791]  ? __pfx_kthread+0x10/0x10
[   95.209850][  T791]  ret_from_fork+0x3fc/0x770
[   95.211386][  T791]  ? __pfx_ret_from_fork+0x10/0x10
[   95.213081][  T791]  ? __switch_to_asm+0x39/0x70
[   95.214702][  T791]  ? __switch_to_asm+0x33/0x70
[   95.216232][  T791]  ? __pfx_kthread+0x10/0x10
[   95.217727][  T791]  ret_from_fork_asm+0x1a/0x30
[   95.219272][  T791]  </TASK>
[   95.220864][  T791] Kernel Offset: disabled
[   95.222307][  T791] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:36:55  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822efbc1 RBX=ffffea00046f4a98 RCX=ffff8880222b9cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffea00046f4a80 RSP=ffffc9000310f360
R8 =0000000000000000 R9 =ffffffff822f099a R10=dffffc0000000000 R11=fffff940008de951
R12=ffffea00046f4a88 R13=0000000000000000 R14=1ffffd40008de951 R15=0000000000000001
RIP=ffffffff81c05387 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569183500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feafd0e56c0 CR3=000000010a2bc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007feafc411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000473dc30
R8 =ffff88801ffa8237 R9 =1ffff11003ff5046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48ce R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b7c3d CR3=0000000023762000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000001df8a
XMM02=000055557aadb8a7 000055557aadb260 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=000055557aae98b9 000055557aae9020
XMM06=0000000000000000 0000000000000000 XMM07=5e8a0480c2a28008 0012e00300100012
XMM08=d00300100012c003 02100012b0030480 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
