last executing test programs:

786.981982ms ago: executing program 1 (id=273):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080), 0x8)

730.190759ms ago: executing program 1 (id=274):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="3867c26cdaec"}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x2fc620ae)

716.467033ms ago: executing program 2 (id=275):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="93", 0x1}], 0x1, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x101, 0x2a, 0x6}}], 0x18, 0x40}, 0x6008045)

649.55113ms ago: executing program 1 (id=276):
r0 = socket(0x22, 0x2, 0x4)
ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0)

649.219734ms ago: executing program 2 (id=277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r0, &(0x7f0000000480)="3d0b41e2"}, 0x20)

589.086349ms ago: executing program 2 (id=278):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'vlan0\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0)
close(r1)
socket$kcm(0x10, 0x100000000002, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

588.893193ms ago: executing program 1 (id=279):
syz_80211_inject_frame(&(0x7f0000001f80)=@broadcast, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_b, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94)

480.387031ms ago: executing program 2 (id=280):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001ccab"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x64, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x2}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x14004804)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0)

358.346686ms ago: executing program 0 (id=283):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000080"], 0xb8}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})

273.558171ms ago: executing program 0 (id=284):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfc100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

244.94135ms ago: executing program 2 (id=285):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000019c0)={0x0, 'veth0_virt_wifi\x00', {0x1}, 0x80})

165.862863ms ago: executing program 0 (id=286):
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x11, @multicast1, 0x4e20, 0x0, 'fo\x00', 0x1, 0xa, 0x6e}, {@local, 0x4e23, 0x2000, 0x0, 0x7, 0x400}}, 0x44)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
pipe(&(0x7f0000000200))
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x18)

165.136691ms ago: executing program 2 (id=287):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000800)={@val={0x8, 0xf8}, @val={0x2, 0x1, 0xce, 0x68, 0x8000, 0x9}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0xce, 0x64, 0x0, 0x8, 0x1, 0x0, @empty, @local}, @echo={0x8, 0x0, 0x0, 0xe0, 0x0, "27f372c92848c3c7355410391a5d3d0f9d9c56647b52d1061446ce7cf4d3ad624fe991754f46923e78bb1269e4d8bc3d0ba7627cfa2a5ceac760650dc2a0ab65dfb0306160b1a728fd05e627150deba0812e7574e746cc65359b60a87654836636c19551268bbafb09589a41d50cac4d6300764166ebf6646f057c7df0c384f4e31d1ba6f1bc6c5cf741239dd8cb2c38fe97190537d49c4f7d7d55e25089346ebbd3e1277e691793820cbd848ea2a687ca78"}}}, 0xdc)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

164.718979ms ago: executing program 0 (id=288):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x200, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x1b0, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x134, 0x9, 0x0, 0x1, [@m_ct={0x8c, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x61, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

57.44759ms ago: executing program 0 (id=289):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

57.089154ms ago: executing program 1 (id=290):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "19d0606ac3c3bc8f"}, 0x7}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xfffffffffffffff7}}]}, 0x34}}, 0x0)

214.645µs ago: executing program 0 (id=291):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040844}, 0x40000)

0s ago: executing program 1 (id=292):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:63470' (ED25519) to the list of known hosts.
syzkaller login: [   55.773792][ T5830] cgroup: Unknown subsys name 'net'
[   55.882212][ T5830] cgroup: Unknown subsys name 'cpuset'
[   55.886229][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.310141][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.356419][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.361964][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.365376][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.377498][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.380516][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.383038][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.386519][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.390082][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.394685][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.401070][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.404831][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.409691][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.429737][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.432415][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.453042][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.710179][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   62.735499][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   62.824484][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   62.872616][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.875088][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.877852][ T5850] bridge_slave_0: entered allmulticast mode
[   62.881979][ T5850] bridge_slave_0: entered promiscuous mode
[   62.902788][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.905107][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.907368][ T5854] bridge_slave_0: entered allmulticast mode
[   62.910246][ T5854] bridge_slave_0: entered promiscuous mode
[   62.913123][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.916181][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.919151][ T5850] bridge_slave_1: entered allmulticast mode
[   62.923890][ T5850] bridge_slave_1: entered promiscuous mode
[   62.942090][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.944541][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.947016][ T5854] bridge_slave_1: entered allmulticast mode
[   62.950682][ T5854] bridge_slave_1: entered promiscuous mode
[   62.982061][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.005314][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.010932][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.033931][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.089168][ T5850] team0: Port device team_slave_0 added
[   63.093783][ T5854] team0: Port device team_slave_0 added
[   63.107829][ T5850] team0: Port device team_slave_1 added
[   63.121653][ T5854] team0: Port device team_slave_1 added
[   63.124491][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.127780][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.132433][ T5846] bridge_slave_0: entered allmulticast mode
[   63.135873][ T5846] bridge_slave_0: entered promiscuous mode
[   63.157143][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.160441][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.163387][ T5846] bridge_slave_1: entered allmulticast mode
[   63.167909][ T5846] bridge_slave_1: entered promiscuous mode
[   63.184554][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.187225][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.197476][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.203794][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.206331][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.215854][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.232409][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.235648][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.246293][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.251375][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.253914][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.264223][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.290459][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.318540][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.368980][ T5850] hsr_slave_0: entered promiscuous mode
[   63.373119][ T5850] hsr_slave_1: entered promiscuous mode
[   63.380829][ T5854] hsr_slave_0: entered promiscuous mode
[   63.383644][ T5854] hsr_slave_1: entered promiscuous mode
[   63.386427][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   63.388724][ T5854] Cannot create hsr debugfs directory
[   63.393414][ T5846] team0: Port device team_slave_0 added
[   63.398839][ T5846] team0: Port device team_slave_1 added
[   63.462129][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.464578][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.474103][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.505939][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.508465][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.518572][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.611930][ T5846] hsr_slave_0: entered promiscuous mode
[   63.614903][ T5846] hsr_slave_1: entered promiscuous mode
[   63.617402][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   63.620165][ T5846] Cannot create hsr debugfs directory
[   63.758742][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.784282][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.795194][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.813435][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.834453][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.851895][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.882220][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.898565][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.926859][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.934812][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.943145][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.956734][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.078088][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.109199][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   64.117767][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.129146][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.136724][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.139163][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.151964][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.154793][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.183371][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   64.187434][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   64.198146][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.201090][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.218544][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.221485][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.230886][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.233563][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.252238][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.255087][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.338151][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.346529][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.460035][ T5848] Bluetooth: hci2: command tx timeout
[   64.462490][ T5848] Bluetooth: hci0: command tx timeout
[   64.512227][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.530067][   T55] Bluetooth: hci1: command tx timeout
[   64.551270][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.571318][ T5854] veth0_vlan: entered promiscuous mode
[   64.586202][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.604679][ T5854] veth1_vlan: entered promiscuous mode
[   64.651000][ T5850] veth0_vlan: entered promiscuous mode
[   64.675641][ T5850] veth1_vlan: entered promiscuous mode
[   64.682619][ T5854] veth0_macvtap: entered promiscuous mode
[   64.688668][ T5854] veth1_macvtap: entered promiscuous mode
[   64.696494][ T5846] veth0_vlan: entered promiscuous mode
[   64.717770][ T5846] veth1_vlan: entered promiscuous mode
[   64.745717][ T5850] veth0_macvtap: entered promiscuous mode
[   64.757694][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.768263][ T5850] veth1_macvtap: entered promiscuous mode
[   64.776110][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.803081][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.807816][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.818127][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.822581][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.826532][ T5846] veth0_macvtap: entered promiscuous mode
[   64.838401][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.842165][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.854833][ T5846] veth1_macvtap: entered promiscuous mode
[   64.876621][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.887016][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.913872][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.928598][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.936178][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.967730][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.985852][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.993432][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.999554][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.013785][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.032021][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.038148][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.076613][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.080843][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.108617][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.114997][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.146821][ T1950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.155104][ T1950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.179243][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.198412][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.211507][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.286024][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.291382][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.830458][ T5945] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[   66.328669][ T5977] openvswitch: netlink: IP tunnel dst address not specified
[   66.419810][ T5984] sctp: [Deprecated]: syz.0.34 (pid 5984) Use of int in max_burst socket option.
[   66.419810][ T5984] Use struct sctp_assoc_value instead
[   66.467681][ T5986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36'.
[   66.541187][ T5848] Bluetooth: hci2: command tx timeout
[   66.543096][   T55] Bluetooth: hci0: command tx timeout
[   66.612307][   T55] Bluetooth: hci1: command tx timeout
[   66.757287][ T6004] can: request_module (can-proto-0) failed.
[   66.780891][ T6004] openvswitch: netlink: IP tunnel dst address not specified
[   66.921437][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'.
[   67.156387][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'.
[   67.628367][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'.
[   68.049810][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.175954][ T6087] netlink: 256 bytes leftover after parsing attributes in process `syz.2.81'.
[   68.189870][ T6087] unsupported nlmsg_type 40
[   68.401289][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   68.610124][   T55] Bluetooth: hci0: command tx timeout
[   68.612133][   T55] Bluetooth: hci2: command tx timeout
[   68.701319][ T5848] Bluetooth: hci1: command tx timeout
[   68.734394][ T6133] netlink: 152 bytes leftover after parsing attributes in process `syz.0.103'.
[   68.739519][ T6133] netlink: 152 bytes leftover after parsing attributes in process `syz.0.103'.
[   69.017767][ T6155] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   69.561584][ T6176] tipc: Started in network mode
[   69.563888][ T6176] tipc: Node identity 52bbf3a5b209, cluster identity 4711
[   69.571012][ T6176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.578289][ T6176] syzkaller0: entered promiscuous mode
[   69.582021][ T6176] syzkaller0: entered allmulticast mode
[   69.637051][ T6176] tipc: Resetting bearer <eth:syzkaller0>
[   69.645470][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   69.654987][ T6175] tipc: Disabling bearer <eth:syzkaller0>
[   70.101496][ T6203] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[   70.121004][ T6203] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   70.125824][ T6203] netlink: 'syz.0.133': attribute type 12 has an invalid length.
[   70.197321][ T6206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.134'.
[   70.465146][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'.
[   70.689762][ T5848] Bluetooth: hci2: command tx timeout
[   70.689868][   T55] Bluetooth: hci0: command tx timeout
[   70.766504][ T6256] syz.0.156 uses obsolete (PF_INET,SOCK_PACKET)
[   70.770985][   T55] Bluetooth: hci1: command tx timeout
[   70.779863][ T6260] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   71.056639][ T6271] netlink: 'syz.1.161': attribute type 1 has an invalid length.
[   71.110374][   T47] IPVS: starting estimator thread 0...
[   71.112803][ T6284] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   71.174108][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.223486][ T6285] IPVS: using max 48 ests per chain, 115200 per kthread
[   71.340949][ T6295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.536403][ T6304] __nla_validate_parse: 3 callbacks suppressed
[   71.536416][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'.
[   72.213806][ T6314] batman_adv: batadv0: Adding interface: vxlan0
[   72.216614][ T6314] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.230462][ T6314] batman_adv: batadv0: Interface activated: vxlan0
[   72.235179][ T5899] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.235361][ T6314] Zero length message leads to an empty skb
[   72.239094][ T5899] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.250291][ T5860] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.254144][ T5860] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.513995][ T6328] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   72.565595][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'.
[   72.665607][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.186'.
[   72.680227][ T6338] netlink: 43 bytes leftover after parsing attributes in process `syz.0.186'.
[   72.699113][ T6338] netlink: 'syz.0.186': attribute type 5 has an invalid length.
[   72.707624][ T6338] netlink: 43 bytes leftover after parsing attributes in process `syz.0.186'.
[   72.881662][ T6356] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   72.886489][ T6356] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.897422][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   73.432966][ T6400] netlink: 136 bytes leftover after parsing attributes in process `syz.1.212'.
[   73.992375][ T6413] pimreg: tun_chr_ioctl cmd 1074025677
[   73.995074][ T6413] pimreg: linktype set to 780
[   73.998698][ T6413] pimreg: tun_chr_ioctl cmd 35111
[   74.271792][ T6420] Bluetooth: MGMT ver 1.23
[   74.805523][ T6439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.341966][ T6453] netlink: 52 bytes leftover after parsing attributes in process `syz.2.238'.
[   75.345832][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   75.547556][ T6469] tc_dump_action: action bad kind
[   75.760440][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'.
[   76.477434][ T6528] batadv_slave_1: entered promiscuous mode
[   76.488635][ T6527] batadv_slave_1: left promiscuous mode
[   76.598853][ T6538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.747398][ T6541] __nla_validate_parse: 4 callbacks suppressed
[   76.747412][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'.
[   76.754809][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'.
[   76.758478][ T6541] netlink: 'syz.2.280': attribute type 4 has an invalid length.
[   76.774266][ T6541] netlink: 224 bytes leftover after parsing attributes in process `syz.2.280'.
[   77.053446][ T6555] syzkaller1: entered promiscuous mode
[   77.056222][ T6555] syzkaller1: entered allmulticast mode
Connection to localhost closed by remote host.
[   77.709112][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.762841][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.824899][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.880410][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.981456][ T5860] bridge_slave_1: left allmulticast mode
[   77.983825][ T5860] bridge_slave_1: left promiscuous mode
[   77.987063][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.994829][ T5860] bridge_slave_0: left allmulticast mode
[   77.997216][ T5860] bridge_slave_0: left promiscuous mode
[   78.000821][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.333021][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.338567][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.343731][ T5860] bond0 (unregistering): Released all slaves
[   78.561307][ T5860] hsr_slave_0: left promiscuous mode
[   78.564634][ T5860] hsr_slave_1: left promiscuous mode
[   78.567677][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.571247][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.575287][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.578388][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.595352][ T5860] veth1_macvtap: left promiscuous mode
[   78.597912][ T5860] veth0_macvtap: left promiscuous mode
[   78.601480][ T5860] veth1_vlan: left promiscuous mode
[   78.603829][ T5860] veth0_vlan: left promiscuous mode
[   78.989098][ T5860] team0 (unregistering): Port device team_slave_1 removed
[   79.024083][ T5860] team0 (unregistering): Port device team_slave_0 removed
[   79.746531][ T5860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.794782][ T5860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.851117][ T5860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.910261][ T5860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.012089][ T5860] bridge_slave_1: left allmulticast mode
[   80.014558][ T5860] bridge_slave_1: left promiscuous mode
[   80.016947][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.023724][ T5860] bridge_slave_0: left allmulticast mode
[   80.026092][ T5860] bridge_slave_0: left promiscuous mode
[   80.028665][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.328023][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.334483][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.340023][ T5860] bond0 (unregistering): Released all slaves
[   80.563450][ T5860] hsr_slave_0: left promiscuous mode
[   80.566632][ T5860] hsr_slave_1: left promiscuous mode
[   80.569167][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.572330][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.575692][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.578318][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.588820][ T5860] veth1_macvtap: left promiscuous mode
[   80.591530][ T5860] veth0_macvtap: left promiscuous mode
[   80.594067][ T5860] veth1_vlan: left promiscuous mode
[   80.596368][ T5860] veth0_vlan: left promiscuous mode
[   80.941788][ T5860] team0 (unregistering): Port device team_slave_1 removed
[   80.972979][ T5860] team0 (unregistering): Port device team_slave_0 removed
[   81.548558][ T5860] IPVS: stop unused estimator thread 0...
[   86.532495][ T3142] cfg80211: failed to load regulatory.db

VM DIAGNOSIS:
21:06:31  Registers:
info registers vcpu 0

CPU#0
RAX=1b2e0b02662d6200 RBX=ffffffff819683c8 RCX=1b2e0b02662d6200 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39030 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c6c6f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00000000ffff0000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c8680bee2dab8600 RBX=ffffffff819683c8 RCX=c8680bee2dab8600 RDX=0000000000000001
RSI=ffffffff8d9b8241 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39030 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f89474f7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=00000000000000ff 0000ff0000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
