last executing test programs:

1.111376479s ago: executing program 2 (id=1300):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x200})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc, 0x0, 0x4000}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a809003200030030"], 0xfdef)

1.110740891s ago: executing program 0 (id=1301):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18abbc8b70daf7a06348020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newnexthop={0x7c, 0x68, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x1, 0x0, 0xb900959dcf966fd0}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xc}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x31}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40044}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @private=0xa010102}], 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1)
sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

1.110489978s ago: executing program 2 (id=1302):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@local}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000dc0)={0x11c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0xd4, 0x51, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "fa06ba7b11"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "52de00e117a7a8bb12d1321188"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xd, 0x4, "147a3a26423bfae265"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x16}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21dc7a8c3b178f6374b4c0c9d6"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7884a30641869be29c535d13c3"}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d7f78bf48e6d00033b3312d710"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}]}, 0x11c}}, 0x0)

1.041139953s ago: executing program 0 (id=1303):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @none, 0x8}, 0xa)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000020000000000000000000aaff02000000000000000000000000000106"], 0xffe)

1.039266001s ago: executing program 2 (id=1304):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7, 0x4) (async)
setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19)

907.697025ms ago: executing program 0 (id=1305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x14, 0x19, 0x1, 0x4000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0x20}}, 0x0)

907.303197ms ago: executing program 2 (id=1306):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x2f4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2c4, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x6, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0xfd}, 0x18)
getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000140)=""/85, &(0x7f0000000080)=0x55)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRES32=r5], 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

907.142743ms ago: executing program 0 (id=1307):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040604, &(0x7f0000003700)={0x77359400})

860.11579ms ago: executing program 2 (id=1308):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa869a687d37c1f185af751b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)={'ip6gretap0\x00'})
setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000300)=""/148, 0x94}], 0x1}, 0x4}], 0x1, 0x10000, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

859.42861ms ago: executing program 0 (id=1309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=<r1=>0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000013c0)=<r2=>0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000001600)=ANY=[@ANYRESHEX=r3], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
pipe(&(0x7f0000000040))
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r4], 0x20}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480)={0x0, <r6=>0x0}, &(0x7f00000004c0)=0xc)
ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000500)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r6})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001400), &(0x7f0000001440)=0xc)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff})
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$netlink(r0, &(0x7f00000015c0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f0000001380)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="47009c80f227d358cfd99173db3c5227a40d5fd000006b02a10f2754e75eb8c59ddd06ab03b1f59ef5d6ff77dccfaff4a55e2fede3cf4ddc422e1a91b9242180ab9f3a2f0e04020006d0ca47b17bbca36ff30db202658c75e454ba24170935b7be82cf6c48c146dc030031612378f665edb7b51f92b139add4a9f2f22718dc71ed989b7cdc557260d459463622740895d5704b2acacad2f1dc76c7533567dc41"], 0x10f4}], 0x1, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000000000000100000002000000394fe364a327f54585", @ANYRES32=r2, @ANYRES32=r6, @ANYRES64, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18fa0000000000723000010001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0xc8, 0x8004}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
openat$cgroup_devices(r10, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040000000a0a9507010000000000020900"], 0x14}}, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000880)="5d80ceff4aa6dc5f710e8df1f7582c892af8d26c5bd9c07caa9e7ded20f3f5ce5e3a882a02450dcf19", 0x29}], 0x1, 0x0, 0x0, 0x4}, 0x2400c084)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r12, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)

853.90799ms ago: executing program 0 (id=1310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad880000e5c7200000140012800b00010067656e65766500004aff02800a000100aaaaaaaa02000000080025000100000008000400e1ff0000"], 0x50}}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x22, 0x2, 0x4)
close(0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0})
ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0xfffffffffffffdfd, {}, {0x2, 0x4e24, @multicast2}, {0x2, 0x400, @empty}, 0xab852ebbeefbd6b1})
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000005c0)='dctcp-reno\x00', 0xb)
close(0xffffffffffffffff)
connect$inet(r2, &(0x7f0000000600)={0x2, 0x4e21, @empty}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/273], 0x0)
setsockopt$sock_int(r5, 0x1, 0x2b, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8)
write$cgroup_int(r4, &(0x7f0000000440)=0x3, 0x12)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9cdfa8", @ANYRES8=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000006c47cd3045c034a4f83b832b2d60b6e1087719c55125fec0b69c2f0ea2980729c5e3e500bff9c66a3b3d541120a979d884f2011d69a3552a95529498a588a473bd3084e905832efaede243ba3c6fcebb3e25af0823bee39d6ac65f8829ee9a7deeff6376b8a02989bd1bf6fc7b2bb8b61880d82b6ea6969defdd950bca072e5bccc032803956f333606ce4becf36628a0ac9ec73e0fc50fe06d5cb92bd94d971cba8e9e9abc1750f25cc9c87583bad5a2f6f620000000000000000000000000000002f5a73dbbe1b09b389a90cd85036a6d5e7ecf7909263b205c4e030e7331a3e8fd5821ef887a72c847efa3be74207c974d8d27ebdce712988bc5505258018edc719a32cd3997dbe88c09971539122760be0608e7186ec62"], 0x34}}, 0x800)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)

210.975787ms ago: executing program 1 (id=1314):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xaf01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0xa, 0x1, 0x0, 0x1, [@generic="78a449a0dd64"]}]}, 0x28}}, 0x4040080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002540)=@newqdisc={0x2f4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x2c4, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_PARMS={0x38, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x6, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "406157f0e2b1d7b4917a42124fdd9ec1ad15e7350335f3e917fe072936a820531da00dd939075e064e5aade93f1fe6f90372da330feac3045aef78ff175c04f734652514bb5f82e31babf3aeac4fcabbe147563607aa7bd931eb63269f275fc897409b124f535573d2ed67b8b4da4c7c5481e60d6d9da1a6c61e3a7da896f23f18c1e47be9079a9e0af15e8dcf2b5093045d61cfa52eeee2c0b497f1c71e24dda2663795ddd2ddae560bf4157f7df72e02c20ff082ac4697aa2142062ab1bd82ef5894cfe42ff343f54b399c3a8ca024c1bcba6fb6d2b660adb5db59853dce38d78ee9c56018f1757fc8361b3d1f3ff6830503aeacea70c4e8daca550c10ae51"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0xfd}, 0x18)
getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000140)=""/85, &(0x7f0000000080)=0x55)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRES32=r5], 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

149.285158ms ago: executing program 1 (id=1315):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3aa00fea040000071061a00000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES8=r0, @ANYBLOB="001326bd7000ec0000004099502cbfdf51841a5d897e9a205dbae1c6519ed16ded951a61789a87a8d72b14d9c906c36ea1b241f4cfe3396f023528bcf9cea708dc67a438755504990562eac9db47b68ee1abd7e4fb5214994658273388de709d7ead9f1c2cde102306bf1a956d95b974b28e8720540fe13f750483ba38de09e6f186d70ee892a0730ce213c9cf2a63866aebeaf86d6ef577f90e8b11f101d227429d1b0950b71b72b2f993355b255a3bada0c4139281eb98e4"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3d003300509c06000802110000010802110000015050505050502a1004008d4100000000010000006400020004060806ffff00007107ff0000010209400000000a00cd008a0102204693a22c"], 0x68}, 0x1, 0x0, 0x0, 0x6a845ecb6f243ee8}, 0x24008080)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @multicast1}, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x810)
socket$netlink(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x4000)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)=0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x8010, r6, 0xf523000)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000140)=@ethtool_stats={0x11, 0x3, [0xc, 0x6, 0x7]}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x10, 0x70bd2b, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0)

148.036315ms ago: executing program 1 (id=1316):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r2}, 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000180)={0x20, 0x1410, 0x1, 0x72bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000885}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040), 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, 0x0, 0x0, 0x2400ed80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c)
writev(r4, &(0x7f0000001180)=[{&(0x7f0000000180)="d90475e298d543ceafed7d59206f7906367d6d", 0x13}], 0x1)

70.635349ms ago: executing program 1 (id=1317):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a000000000000fe8000000000000000000000000000aa000004d533"], 0x23c}}, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x800, 0x32a, {{0x2a, 0x4, 0x0, 0x2, 0xa8, 0x68, 0x0, 0x72, 0x2f, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x19, 0x2, [{0x2, 0x4, 'cs'}, {0x5, 0xf, "48e54dd24ba8e449f241078c02"}]}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0x2, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010102}]}, @generic={0x7, 0x10, "f5b64597ac2adeca4e131f06bce7"}, @generic={0x89, 0xe, "882ab44fbc3bcf55e19fcf15"}, @generic={0x83, 0x8, "10626ae12608"}, @ssrr={0x89, 0x17, 0xe7, [@remote, @remote, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @end, @timestamp={0x44, 0x18, 0x6, 0x0, 0xa, [0x0, 0xff800000, 0x4b9, 0x3, 0x2]}]}}}}})
r2 = accept(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x4000)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r4, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx  \x00'}, 0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0))
bind$bt_hci(r5, &(0x7f0000000040), 0xffffffffffffff44)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
getpeername$netrom(r6, &(0x7f0000000a40)={{0x3, @netrom}, [@netrom, @rose, @null, @rose, @rose, @remote, @netrom, @null]}, &(0x7f0000000380)=0x48)
ioctl$sock_bt_hci(r5, 0x400448ca, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x48}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)

70.386985ms ago: executing program 1 (id=1318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
socket$inet6(0xa, 0x800, 0x5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000240)=0x1c00000000000000, 0x8)
connect$vsock_stream(r2, &(0x7f0000001c80)={0x28, 0x0, 0x2710, @local}, 0x10)

1.395531ms ago: executing program 2 (id=1319):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24000051}, 0x8008151)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xaf01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1)

0s ago: executing program 1 (id=1325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48513' (ED25519) to the list of known hosts.
syzkaller login: [   47.974862][ T5808] cgroup: Unknown subsys name 'net'
[   48.105039][ T5808] cgroup: Unknown subsys name 'cpuset'
[   48.109335][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.532791][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.087062][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.092360][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.097153][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.105386][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.112190][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.115787][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.120748][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.124019][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.130275][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.134073][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.160408][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.172245][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.180926][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.187014][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.199970][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.435625][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.527676][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   54.604301][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.607905][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.612442][ T5845] bridge_slave_0: entered allmulticast mode
[   54.616459][ T5845] bridge_slave_0: entered promiscuous mode
[   54.622589][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.625523][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.628653][ T5845] bridge_slave_1: entered allmulticast mode
[   54.633767][ T5845] bridge_slave_1: entered promiscuous mode
[   54.694207][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.698307][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.713853][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.774868][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.777387][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.781016][ T5841] bridge_slave_0: entered allmulticast mode
[   54.783901][ T5841] bridge_slave_0: entered promiscuous mode
[   54.804932][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.807439][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.810381][ T5841] bridge_slave_1: entered allmulticast mode
[   54.813480][ T5841] bridge_slave_1: entered promiscuous mode
[   54.828412][ T5845] team0: Port device team_slave_0 added
[   54.845178][ T5845] team0: Port device team_slave_1 added
[   54.849625][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.876544][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.906215][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.908790][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.917891][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.936979][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.940229][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.943139][ T5849] bridge_slave_0: entered allmulticast mode
[   54.945892][ T5849] bridge_slave_0: entered promiscuous mode
[   54.949057][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.951583][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.954028][ T5849] bridge_slave_1: entered allmulticast mode
[   54.956753][ T5849] bridge_slave_1: entered promiscuous mode
[   54.959465][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.961938][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.971144][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.976875][ T5841] team0: Port device team_slave_0 added
[   54.998364][ T5841] team0: Port device team_slave_1 added
[   55.002356][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.023846][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.045906][ T5845] hsr_slave_0: entered promiscuous mode
[   55.048415][ T5845] hsr_slave_1: entered promiscuous mode
[   55.070422][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.073208][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.083627][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.088404][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.091682][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.102229][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.108750][ T5849] team0: Port device team_slave_0 added
[   55.145119][ T5849] team0: Port device team_slave_1 added
[   55.186726][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.190490][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.202443][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.220407][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.222954][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.235443][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.252010][ T5841] hsr_slave_0: entered promiscuous mode
[   55.255538][ T5841] hsr_slave_1: entered promiscuous mode
[   55.258836][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   55.261672][ T5841] Cannot create hsr debugfs directory
[   55.315643][ T5849] hsr_slave_0: entered promiscuous mode
[   55.318048][ T5849] hsr_slave_1: entered promiscuous mode
[   55.320349][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.322274][ T5849] Cannot create hsr debugfs directory
[   55.466207][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.474797][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.492461][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.505141][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.549816][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.556161][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.574531][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.580455][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.645372][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.652599][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.666280][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.680823][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.723061][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.740143][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.756090][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.758405][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.764077][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.766926][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.783732][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.818219][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.822371][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   55.836611][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.839127][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.852045][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.854846][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.863529][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.896735][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.899595][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.905596][   T55] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.907989][   T55] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.993266][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.053997][ T5845] veth0_vlan: entered promiscuous mode
[   56.062124][ T5845] veth1_vlan: entered promiscuous mode
[   56.092105][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.097928][ T5845] veth0_macvtap: entered promiscuous mode
[   56.107245][ T5845] veth1_macvtap: entered promiscuous mode
[   56.144248][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.148199][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.154258][ T5841] veth0_vlan: entered promiscuous mode
[   56.162467][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.170303][ T5841] veth1_vlan: entered promiscuous mode
[   56.177609][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.180869][ T5843] Bluetooth: hci1: command tx timeout
[   56.182197][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.185787][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.188618][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.219227][ T5849] veth0_vlan: entered promiscuous mode
[   56.254256][ T5841] veth0_macvtap: entered promiscuous mode
[   56.259605][ T5846] Bluetooth: hci0: command tx timeout
[   56.260782][ T5849] veth1_vlan: entered promiscuous mode
[   56.261648][ T5843] Bluetooth: hci2: command tx timeout
[   56.277129][ T5841] veth1_macvtap: entered promiscuous mode
[   56.302361][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.314689][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.329603][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.333423][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.335912][ T5705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.339092][ T5849] veth0_macvtap: entered promiscuous mode
[   56.344461][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.355167][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.363768][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.370847][ T5849] veth1_macvtap: entered promiscuous mode
[   56.380913][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.384701][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.420837][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.432491][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.448484][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.460817][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.464511][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.472378][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.479598][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.485277][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.499655][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.540215][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.543035][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.562278][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.564959][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.593155][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.610567][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.634456][ T5912] netlink: 'syz.2.3': attribute type 33 has an invalid length.
[   56.637663][ T5912] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.672617][ T5917] netlink: 'syz.1.2': attribute type 12 has an invalid length.
[   56.682370][ T5917] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   56.787065][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'.
[   56.797721][ T5926] netlink: 'syz.2.6': attribute type 3 has an invalid length.
[   56.802479][ T5926] netlink: 'syz.2.6': attribute type 3 has an invalid length.
[   57.036608][ T5934] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.045078][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.051964][ T5934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.535927][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.665891][ T5943] delete_channel: no stack
[   58.270431][ T5843] Bluetooth: hci1: command tx timeout
[   58.341175][ T5843] Bluetooth: hci2: command tx timeout
[   59.328411][ T5961] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.336845][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.342579][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.888061][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.892163][ T5964] delete_channel: no stack
[   59.941082][ T5970] netlink: 'syz.2.20': attribute type 12 has an invalid length.
[   60.051319][ T5977] Bluetooth: MGMT ver 1.23
[   60.183148][ T5985] delete_channel: no stack
[   60.241764][ T5992] syzkaller1: entered promiscuous mode
[   60.243668][ T5992] syzkaller1: entered allmulticast mode
[   60.276133][ T5987] netlink: 96 bytes leftover after parsing attributes in process `syz.0.26'.
[   60.283267][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.294264][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.340845][ T5843] Bluetooth: hci1: command tx timeout
[   60.419950][ T5843] Bluetooth: hci2: command tx timeout
[   60.857147][ T6008] netlink: 'syz.0.35': attribute type 12 has an invalid length.
[   60.930449][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.012074][ T6016] netlink: 96 bytes leftover after parsing attributes in process `syz.1.44'.
[   61.017819][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.033691][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.408292][ T6032] netlink: 56 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.414156][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'.
[   61.513286][ T6037] tipc: Started in network mode
[   61.515165][ T6037] tipc: Node identity e0000001, cluster identity 4711
[   61.517652][ T6037] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   61.648786][ T6045] syzkaller1: entered promiscuous mode
[   61.652152][ T6045] syzkaller1: entered allmulticast mode
[   61.885358][ T6059] __nla_validate_parse: 1 callbacks suppressed
[   61.885372][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'.
[   62.038308][ T6062] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   62.168738][ T6064] netlink: 96 bytes leftover after parsing attributes in process `syz.2.55'.
[   62.173850][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.178221][ T6064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.419789][ T5843] Bluetooth: hci1: command tx timeout
[   62.499439][ T5843] Bluetooth: hci2: command tx timeout
[   62.847275][ T6077] openvswitch: netlink: Message has 8 unknown bytes.
[   62.969964][ T6088] netlink: 96 bytes leftover after parsing attributes in process `syz.2.64'.
[   62.976119][ T6088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.981127][ T6088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.034534][ T6091] syzkaller1: entered promiscuous mode
[   63.036541][ T6091] syzkaller1: entered allmulticast mode
[   63.248237][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.68'.
[   63.320655][ T6105] netlink: 'syz.0.70': attribute type 2 has an invalid length.
[   63.505640][ T6118] team0: Device gtp0 is of different type
[   63.592909][ T6125] netlink: 'syz.0.79': attribute type 1 has an invalid length.
[   63.596309][ T6125] netlink: 'syz.0.79': attribute type 5 has an invalid length.
[   63.670256][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   63.685214][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'.
[   63.688851][ T6129] netlink: 'syz.2.82': attribute type 7 has an invalid length.
[   63.721352][ T6129] Zero length message leads to an empty skb
[   63.722265][ T6137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.758197][ T6139] netlink: 96 bytes leftover after parsing attributes in process `syz.1.84'.
[   63.762543][ T6139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.767677][ T6139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.248608][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   64.396294][ T6182] netlink: 32 bytes leftover after parsing attributes in process `syz.1.98'.
[   64.524357][ T6193] netlink: 96 bytes leftover after parsing attributes in process `syz.2.104'.
[   64.528140][ T6193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.646881][ T6200] netlink: 'syz.0.106': attribute type 1 has an invalid length.
[   64.780743][ T6204] ip6erspan0: entered promiscuous mode
[   65.280282][ T6219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.536296][ T6239] lo: entered allmulticast mode
[   65.538807][ T6238] lo: left allmulticast mode
[   66.041131][ T6275] trusted_key: syz.1.129 sent an empty control message without MSG_MORE.
[   66.130905][ T6285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.184106][ T6281] tipc: Started in network mode
[   66.185892][ T6281] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   66.191429][ T6281] tipc: Enabled bearer <udp:syz0>, priority 10
[   66.594649][ T6296] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032
[   67.069151][ T6344] __nla_validate_parse: 11 callbacks suppressed
[   67.073314][ T6344] netlink: 80 bytes leftover after parsing attributes in process `syz.2.151'.
[   67.073826][ T6342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.150'.
[   67.166111][ T6353] netlink: 'syz.0.154': attribute type 10 has an invalid length.
[   67.171179][ T6353] netlink: 152 bytes leftover after parsing attributes in process `syz.0.154'.
[   67.175831][ T6353] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   67.189910][ T5892] tipc: Node number set to 4269801488
[   67.214485][ T6354] veth0_to_team: entered promiscuous mode
[   67.217057][ T6354] veth0_to_team: entered allmulticast mode
[   67.221961][ T6354] warning: `syz.2.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.382736][ T6375] netlink: 96 bytes leftover after parsing attributes in process `syz.2.160'.
[   67.498369][ T6389] netlink: 248 bytes leftover after parsing attributes in process `syz.2.165'.
[   67.556791][ T6394] netlink: 'syz.1.166': attribute type 10 has an invalid length.
[   67.562005][ T6394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.166'.
[   67.571164][ T6394] batman_adv: batadv0: Adding interface: virt_wifi0
[   67.575612][ T6394] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.587608][ T6394] batman_adv: batadv0: Interface activated: virt_wifi0
[   67.663334][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.820518][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.171'.
[   67.978170][ T6420] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   67.981082][ T6420] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.175'.
[   68.291701][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   68.695206][ T6449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.823124][ T6453] openvswitch: netlink: IP tunnel dst address not specified
[   69.282348][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.196'.
[   69.370876][ T6485] netlink: 'syz.1.198': attribute type 1 has an invalid length.
[   69.373431][ T6485] netlink: 'syz.1.198': attribute type 1 has an invalid length.
[   69.381015][ T6486] netlink: 'syz.1.198': attribute type 1 has an invalid length.
[   69.399588][ T6486] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.415677][ T6485] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   69.477330][ T6494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.690771][  T791] IPVS: starting estimator thread 0...
[   69.786551][ T6510] IPVS: using max 81 ests per chain, 194400 per kthread
[   70.566841][ T6540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.070276][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.073136][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.498136][ T6577] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   71.641067][ T6582] netlink: 'syz.2.232': attribute type 1 has an invalid length.
[   71.688835][ T6582] bond2: (slave geneve2): making interface the new active one
[   71.693619][ T6582] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   71.697515][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   71.704988][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   71.709108][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   71.713171][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   71.765346][ T6586] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.932737][ T6590] tun0: tun_chr_ioctl cmd 2147767520
[   72.328112][ T6607] netlink: 'syz.0.240': attribute type 1 has an invalid length.
[   72.412300][ T6609] netlink: 'syz.0.241': attribute type 11 has an invalid length.
[   72.515098][ T6612] __nla_validate_parse: 2 callbacks suppressed
[   72.515108][ T6612] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'.
[   73.455698][ T6654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.254'.
[   73.461596][ T6654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.365724][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.751783][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'.
[   74.757024][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'.
[   74.860935][ T6707] netlink: 'syz.0.271': attribute type 33 has an invalid length.
[   74.864564][ T6707] netlink: 152 bytes leftover after parsing attributes in process `syz.0.271'.
[   75.017425][ T6718] sctp: [Deprecated]: syz.0.274 (pid 6718) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.017425][ T6718] Use struct sctp_sack_info instead
[   75.062327][ T6722] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   75.302771][ T6737] netlink: 'syz.1.280': attribute type 33 has an invalid length.
[   75.312514][ T6737] netlink: 152 bytes leftover after parsing attributes in process `syz.1.280'.
[   75.330734][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.013723][ T6775] netlink: 'syz.2.289': attribute type 33 has an invalid length.
[   76.017367][ T6775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.289'.
[   76.150736][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.291'.
[   76.297973][ T6801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'.
[   76.447529][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'.
[   76.488420][ T6824] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   76.493103][ T6826] netlink: 'syz.1.305': attribute type 1 has an invalid length.
[   77.566132][ T6860] bridge_slave_0: left allmulticast mode
[   77.568608][ T6860] bridge_slave_0: left promiscuous mode
[   77.572749][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.578936][ T6860] bridge_slave_1: left allmulticast mode
[   77.582768][ T6860] bridge_slave_1: left promiscuous mode
[   77.585065][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.599348][ T6860] bond0: (slave bond_slave_0): Releasing backup interface
[   77.606236][ T6860] bond0: (slave bond_slave_1): Releasing backup interface
[   77.614200][ T6864] __nla_validate_parse: 1 callbacks suppressed
[   77.614211][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'.
[   77.632562][ T6860] team0: Port device team_slave_0 removed
[   77.657285][ T6860] team0: Port device team_slave_1 removed
[   77.662130][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.665582][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.672658][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.676098][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.689503][ T6860] bond2: (slave geneve2): Releasing active interface
[   77.706490][ T5705] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   77.713264][ T5705] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   77.716531][ T5705] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   77.722539][ T5705] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   77.783240][ T6879] netlink: 'syz.1.321': attribute type 33 has an invalid length.
[   77.788482][ T6879] netlink: 152 bytes leftover after parsing attributes in process `syz.1.321'.
[   77.874095][ T6886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.890021][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'.
[   77.906598][ T6892] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   77.913621][ T6894] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   78.035740][ T6914] syzkaller0: entered promiscuous mode
[   78.042718][ T6914] syzkaller0: entered allmulticast mode
[   78.796392][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   78.808222][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.808280][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'.
[   78.813446][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.821055][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.826190][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.624837][ T6939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.684866][ T6944] syzkaller1: entered promiscuous mode
[   79.687337][ T6944] syzkaller1: entered allmulticast mode
[   79.691339][ T6944] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   79.910264][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'.
[   79.971814][ T6967] netlink: 'syz.1.350': attribute type 33 has an invalid length.
[   79.975349][ T6967] netlink: 152 bytes leftover after parsing attributes in process `syz.1.350'.
[   80.205433][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'.
[   80.313960][ T6998] netlink: 'syz.0.361': attribute type 33 has an invalid length.
[   80.320202][ T6998] netlink: 152 bytes leftover after parsing attributes in process `syz.0.361'.
[   80.389066][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[   80.424628][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.585461][ T7013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.699318][ T7027] netlink: 'syz.0.369': attribute type 33 has an invalid length.
[   80.988106][ T7041] netlink: 'syz.1.374': attribute type 12 has an invalid length.
[   80.991795][ T7041] netlink: 'syz.1.374': attribute type 29 has an invalid length.
[   81.066545][ T7049] macvlan0: entered allmulticast mode
[   81.079419][ T7049] veth1_vlan: entered allmulticast mode
[   81.182057][ T7057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.300234][ T1268] cfg80211: failed to load regulatory.db
[   81.964488][ T7072] netlink: 'syz.1.385': attribute type 9 has an invalid length.
[   82.676171][ T7127] __nla_validate_parse: 6 callbacks suppressed
[   82.676181][ T7127] netlink: 96 bytes leftover after parsing attributes in process `syz.0.402'.
[   82.861359][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'.
[   83.219139][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   83.346647][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'.
[   84.154591][ T7222] nbd: must specify a device to reconfigure
[   84.746874][ T7250] netlink: 96 bytes leftover after parsing attributes in process `syz.0.425'.
[   84.917961][ T7258] syzkaller0: entered promiscuous mode
[   84.922391][ T7258] syzkaller0: entered allmulticast mode
[   85.773253][ T7276] vlan0: entered promiscuous mode
[   85.787447][ T7276] team0: Port device vlan0 added
[   85.840133][ T7282] netlink: 96 bytes leftover after parsing attributes in process `syz.0.436'.
[   85.964354][ T7301] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[   85.987484][ T7301] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   85.992106][ T7301] netlink: 'syz.1.440': attribute type 39 has an invalid length.
[   86.045664][ T7306] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface
[   86.064887][ T7306] bond3 (unregistering): Released all slaves
[   86.408303][ T7327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'.
[   86.973546][ T7352] netlink: 96 bytes leftover after parsing attributes in process `syz.2.457'.
[   87.144768][ T7356] netlink: 52 bytes leftover after parsing attributes in process `syz.1.459'.
[   87.558799][ T7373] sctp: [Deprecated]: syz.0.462 (pid 7373) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.558799][ T7373] Use struct sctp_sack_info instead
[   87.640062][ T7380] can: request_module (can-proto-0) failed.
[   87.643029][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   88.628347][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.480'.
[   88.672672][ T7427] netlink: 'syz.0.483': attribute type 3 has an invalid length.
[   88.676636][ T7427] netlink: 666 bytes leftover after parsing attributes in process `syz.0.483'.
[   88.687531][ T7427] sctp: [Deprecated]: syz.0.483 (pid 7427) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.687531][ T7427] Use struct sctp_sack_info instead
[   88.767416][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.486'.
[   88.858070][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[   89.197098][ T7449] netlink: 36 bytes leftover after parsing attributes in process `syz.1.491'.
[   89.386014][ T7456] netlink: 'syz.1.493': attribute type 10 has an invalid length.
[   89.398592][ T7456] team0: Port device dummy0 added
[   89.404358][ T7456] netlink: 'syz.1.493': attribute type 10 has an invalid length.
[   89.413224][ T7456] team0: Port device dummy0 removed
[   89.418253][ T7456] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.813279][ T7462] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   89.885243][ T7467] team0: Device gtp0 is of different type
[   90.137426][ T7485] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.241770][ T7499] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.508'.
[   90.408717][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'.
[   90.446711][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[   90.577565][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.586030][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.588322][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.590963][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.593399][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.595619][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.597836][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.600254][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.602798][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.605954][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.608760][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.611486][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.613781][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.616133][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.618357][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.620899][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.623351][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.625516][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.628015][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   90.630737][ T7525] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002
[   91.510815][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'.
[   91.605532][ T7550] vlan0: entered promiscuous mode
[   91.614557][ T7550] team0: Port device vlan0 added
[   91.651054][ T7558] sctp: [Deprecated]: syz.2.532 (pid 7558) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.651054][ T7558] Use struct sctp_sack_info instead
[   91.945222][ T7584] netlink: 'syz.0.543': attribute type 15 has an invalid length.
[   91.983696][ T7589] netlink: 96 bytes leftover after parsing attributes in process `syz.2.544'.
[   94.416341][ T7700] __nla_validate_parse: 2 callbacks suppressed
[   94.416352][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'.
[   94.665653][ T7712] netlink: 156 bytes leftover after parsing attributes in process `syz.1.587'.
[   95.196665][ T7733] netlink: 18 bytes leftover after parsing attributes in process `syz.2.594'.
[   95.563052][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'.
[   95.734509][ T7767] netlink: 96 bytes leftover after parsing attributes in process `syz.0.605'.
[   96.302738][ T7783] netlink: 'syz.0.608': attribute type 1 has an invalid length.
[   96.375251][ T7783] bond1: (slave gretap1): making interface the new active one
[   96.378915][ T7783] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   96.392028][ T7790] netlink: 44 bytes leftover after parsing attributes in process `syz.1.609'.
[   96.395225][ T7790] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   96.402391][ T7790] netlink: 'syz.1.609': attribute type 6 has an invalid length.
[   96.568654][ T7808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.614'.
[   96.598139][ T7810] netlink: 52 bytes leftover after parsing attributes in process `syz.1.616'.
[   96.603612][ T7810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.616'.
[   96.659825][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.617'.
[   97.362924][ T7863] netlink: 'syz.2.635': attribute type 7 has an invalid length.
[   97.379876][ T7863] : entered promiscuous mode
[   97.633266][ T7879] IPv6: NLM_F_CREATE should be specified when creating new route
[   97.679612][ T7884] syzkaller0: entered promiscuous mode
[   97.682000][ T7884] syzkaller0: entered allmulticast mode
[  100.091817][ T7956] __nla_validate_parse: 7 callbacks suppressed
[  100.091827][ T7956] netlink: 96 bytes leftover after parsing attributes in process `syz.0.673'.
[  100.282763][ T7960] veth0_to_bridge: entered promiscuous mode
[  100.287305][ T7959] veth0_to_bridge: left promiscuous mode
[  100.356437][ T7966] IPVS: length: 44 != 24
[  100.673572][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.683'.
[  100.864632][ T7993] netlink: 96 bytes leftover after parsing attributes in process `syz.2.687'.
[  101.280098][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  101.749605][ T8015] netlink: 96 bytes leftover after parsing attributes in process `syz.2.695'.
[  101.753466][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.696'.
[  102.011885][ T8031] netlink: 268 bytes leftover after parsing attributes in process `syz.0.700'.
[  102.015189][ T8031] unsupported nla_type 65024
[  102.192638][ T5843] Bluetooth: hci2: link tx timeout
[  102.197279][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.251763][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.708'.
[  102.342679][ T8055] veth0: entered promiscuous mode
[  102.346327][ T8054] veth0: left promiscuous mode
[  102.471352][ T8058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.711'.
[  102.482225][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'.
[  102.546608][ T8064] vlan0: entered promiscuous mode
[  102.554687][ T8064] team0: Port device vlan0 added
[  103.273883][ T8085] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.297856][ T8085] netlink: zone id is out of range
[  103.300264][ T8085] netlink: zone id is out of range
[  103.302159][ T8085] netlink: zone id is out of range
[  103.304381][ T8085] netlink: zone id is out of range
[  103.308015][ T8085] netlink: zone id is out of range
[  103.311424][ T8085] netlink: zone id is out of range
[  103.313422][ T8085] netlink: zone id is out of range
[  103.315272][ T8085] netlink: zone id is out of range
[  103.328869][ T8085] netlink: set zone limit has 4 unknown bytes
[  104.260383][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  104.710832][ T8154] ksmbd: Unknown IPC event: 3, ignore.
[  105.200902][ T8175] __nla_validate_parse: 9 callbacks suppressed
[  105.200913][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'.
[  105.228756][ T8175] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  105.236197][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'.
[  105.409292][ T8182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.757'.
[  105.413679][ T8182] netlink: 'syz.2.757': attribute type 83 has an invalid length.
[  105.796402][ T8217] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  105.797761][ T8210] netlink: 96 bytes leftover after parsing attributes in process `syz.2.767'.
[  105.799109][ T8217] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  105.815112][ T8217] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  105.817931][ T8217] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  105.827635][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.768'.
[  105.837172][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  106.358742][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'.
[  106.777463][ T8248] netlink: 96 bytes leftover after parsing attributes in process `syz.1.781'.
[  106.796466][ T8250] Driver unsupported XDP return value 0 on prog  (id 156) dev N/A, expect packet loss!
[  107.327529][ T8283] netlink: 'syz.0.795': attribute type 12 has an invalid length.
[  107.332682][ T8283] netlink: 'syz.0.795': attribute type 18 has an invalid length.
[  107.335936][ T8283] netlink: 'syz.0.795': attribute type 21 has an invalid length.
[  107.344085][ T8283] netlink: 'syz.0.795': attribute type 26 has an invalid length.
[  107.541362][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.804'.
[  107.550680][ T8307] netlink: 160 bytes leftover after parsing attributes in process `syz.2.804'.
[  107.791723][ T8336] delete_channel: no stack
[  107.940076][ T8341] block nbd0: server does not support multiple connections per device.
[  107.945005][ T8341] block nbd0: shutting down sockets
[  108.130370][ T8366] ipvlan2: entered promiscuous mode
[  108.182956][ T8366] syzkaller1: entered promiscuous mode
[  108.185292][ T8366] syzkaller1: entered allmulticast mode
[  108.849112][ T8386] syzkaller1: entered promiscuous mode
[  108.852114][ T8386] syzkaller1: entered allmulticast mode
[  109.171125][ T8403] veth1_to_batadv: entered promiscuous mode
[  109.263784][ T8409] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.267089][ T8409] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.239057][ T8438] tipc: Started in network mode
[  110.241231][ T8438] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  110.245764][ T8438] tipc: Enabled bearer <udp:syz0>, priority 10
[  110.686322][ T8451] __nla_validate_parse: 12 callbacks suppressed
[  110.686332][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.853'.
[  110.715085][ T8455] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.854'.
[  110.834803][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'.
[  111.006920][ T8471] netlink: 96 bytes leftover after parsing attributes in process `syz.0.858'.
[  111.360119][ T5907] tipc: Node number set to 4269801488
[  111.601188][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'.
[  113.240124][ T8508] netlink: 96 bytes leftover after parsing attributes in process `syz.1.869'.
[  113.245552][ T8509] tipc: Enabled bearer <udp:syz0>, priority 10
[  113.363168][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'.
[  113.424583][ T8520] netlink: 32 bytes leftover after parsing attributes in process `syz.2.873'.
[  113.532818][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.875'.
[  113.892859][ T8554] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  113.904141][ T8557] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.881'.
[  114.250345][ T1268] tipc: Node number set to 3758096385
[  114.771288][ T8582] net_ratelimit: 1 callbacks suppressed
[  114.771300][ T8582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.121526][ T8600] validate_nla: 2 callbacks suppressed
[  115.121538][ T8600] netlink: 'syz.1.895': attribute type 1 has an invalid length.
[  115.544365][ T8628] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  115.758296][ T8645] __nla_validate_parse: 9 callbacks suppressed
[  115.758313][ T8645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.910'.
[  115.829873][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.0.912'.
[  116.201087][ T8660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.915'.
[  116.311954][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'.
[  116.316126][ T8670] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  116.319010][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.331377][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888123c38000: rx timeout, send abort
[  116.832475][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888123c3b000: rx timeout, send abort
[  116.836343][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888123c38000: abort rx timeout. Force session deactivation
[  116.955968][ T8694] sctp: [Deprecated]: syz.2.923 (pid 8694) Use of struct sctp_assoc_value in delayed_ack socket option.
[  116.955968][ T8694] Use struct sctp_sack_info instead
[  117.209021][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'.
[  117.250445][ T8707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'.
[  117.283999][ T8709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.929'.
[  117.336209][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888123c3b000: abort rx timeout. Force session deactivation
[  117.876442][ T8716] sctp: [Deprecated]: syz.1.932 (pid 8716) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.876442][ T8716] Use struct sctp_sack_info instead
[  117.995271][ T8731] netlink: 96 bytes leftover after parsing attributes in process `syz.1.937'.
[  118.173160][ T8732] veth1_vlan: left allmulticast mode
[  118.243265][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.249333][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.256093][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.269295][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.280646][ T8740] sctp: [Deprecated]: syz.0.939 (pid 8740) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.280646][ T8740] Use struct sctp_sack_info instead
[  118.560150][ T8760] sctp: [Deprecated]: syz.1.948 (pid 8760) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.560150][ T8760] Use struct sctp_sack_info instead
[  118.581409][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'.
[  118.732466][ T8764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.217134][ T8779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.954'.
[  119.762904][ T8783] sctp: [Deprecated]: syz.0.956 (pid 8783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.762904][ T8783] Use struct sctp_sack_info instead
[  132.506079][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.508869][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  140.183509][ T8786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.191892][ T8790] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[  140.195095][ T8790] netlink: 144 bytes leftover after parsing attributes in process `syz.2.959'.
[  140.198851][ T8790] netlink: 'syz.2.959': attribute type 2 has an invalid length.
[  140.202411][ T8790] netlink: 64 bytes leftover after parsing attributes in process `syz.2.959'.
[  140.210283][ T8785] tipc: Resetting bearer <eth:syzkaller0>
[  140.257274][ T8785] tipc: Disabling bearer <eth:syzkaller0>
[  140.342344][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.962'.
[  140.355238][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.962'.
[  140.368639][ T8797] netlink: 34 bytes leftover after parsing attributes in process `syz.0.962'.
[  140.758258][ T8836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.920909][ T8844] netlink: 156 bytes leftover after parsing attributes in process `syz.1.979'.
[  141.185902][ T8870] tap0: tun_chr_ioctl cmd 1074025680
[  141.196914][ T8870] D: renamed from syzkaller0
[  141.676706][ T8904] syzkaller1: entered promiscuous mode
[  141.678789][ T8904] syzkaller1: entered allmulticast mode
[  141.774543][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'.
[  141.777691][ T8906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.797302][ T8906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.105233][ T8911] netlink: 68 bytes leftover after parsing attributes in process `syz.1.995'.
[  142.114760][ T8911] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  142.118336][ T8912] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  142.130807][ T8911] 8021q: adding VLAN 0 to HW filter on device bond3
[  142.258759][ T8919] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.997'.
[  142.264403][ T8918] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.997'.
[  145.206264][ T9027] __nla_validate_parse: 13 callbacks suppressed
[  145.206281][ T9027] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1041'.
[  146.229091][ T9070] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1059'.
[  146.423796][ T9090] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000
[  146.753868][ T9108] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1071'.
[  147.176887][ T9112] sctp: [Deprecated]: syz.1.1073 (pid 9112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.176887][ T9112] Use struct sctp_sack_info instead
[  147.290176][ T9123] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1076'.
[  147.293692][ T9123] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1076'.
[  147.298133][ T9123] netlink: 'syz.1.1076': attribute type 6 has an invalid length.
[  147.302345][ T9123] netlink: 'syz.1.1076': attribute type 4 has an invalid length.
[  147.335466][ T1268] IPVS: starting estimator thread 0...
[  147.374290][ T9129] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1078'.
[  147.421050][ T9128] IPVS: using max 82 ests per chain, 196800 per kthread
[  148.336996][ T9152] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1086'.
[  148.455225][ T9160] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1089'.
[  148.677221][ T9164] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.682623][ T9164] 8021q: adding VLAN 0 to HW filter on device team0
[  148.687272][ T9164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  148.702801][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1091'.
[  148.706596][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  149.103841][ T9190] veth3: entered promiscuous mode
[  149.786165][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.285011][ T9237] __nla_validate_parse: 4 callbacks suppressed
[  151.285027][ T9237] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1113'.
[  151.387401][ T9241] netlink: 'syz.1.1115': attribute type 12 has an invalid length.
[  151.391280][ T9241] netlink: 'syz.1.1115': attribute type 18 has an invalid length.
[  151.394126][ T9241] netlink: 'syz.1.1115': attribute type 21 has an invalid length.
[  151.396931][ T9241] netlink: 'syz.1.1115': attribute type 26 has an invalid length.
[  152.129360][ T9263] netlink: 'syz.2.1122': attribute type 4 has an invalid length.
[  153.303767][ T9303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.542547][ T9326] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1141'.
[  153.905795][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'.
[  153.948919][ T9348] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1148'.
[  154.189751][ T9381] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1159'.
[  154.385511][ T9399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1164'.
[  154.594340][ T9407] team0: Device gtp0 is of different type
[  155.036906][ T9418] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1171'.
[  155.286128][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  155.389330][ T9433] syzkaller0: entered promiscuous mode
[  155.391747][ T9433] syzkaller0: entered allmulticast mode
[  155.640969][ T9442] netlink: 'syz.2.1178': attribute type 7 has an invalid length.
[  155.644204][ T9442] netlink: 'syz.2.1178': attribute type 8 has an invalid length.
[  155.706818][ T9442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  155.920352][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'.
[  155.923902][ T9451] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1181'.
[  155.932235][ T9451] team0: Port device vlan0 removed
[  156.294685][ T9473] netlink: 'syz.1.1187': attribute type 10 has an invalid length.
[  156.309693][ T9473] 8021q: adding VLAN 0 to HW filter on device team0
[  156.314788][ T9473] bond0: (slave team0): Enslaving as an active interface with an up link
[  156.567049][ T9497] __nla_validate_parse: 3 callbacks suppressed
[  156.567061][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1195'.
[  156.597861][ T9499] syzkaller0: entered promiscuous mode
[  156.599910][ T9499] syzkaller0: entered allmulticast mode
[  158.093607][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1226'.
[  158.851940][ T9629] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1235'.
[  159.107286][ T9643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.112005][ T9643] syzkaller0: entered promiscuous mode
[  159.114562][ T9643] syzkaller0: entered allmulticast mode
[  159.161671][ T9643] tipc: Resetting bearer <eth:syzkaller0>
[  159.168772][ T9643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1239'.
[  159.173548][ T9643] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1239'.
[  159.177911][ T9641] tipc: Resetting bearer <eth:syzkaller0>
[  159.188006][ T9641] tipc: Disabling bearer <eth:syzkaller0>
[  159.201004][ T9648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.203973][ T9648] syzkaller0: entered promiscuous mode
[  159.205822][ T9648] syzkaller0: entered allmulticast mode
[  159.218358][ T9648] tipc: Resetting bearer <eth:syzkaller0>
[  159.225282][ T9647] tipc: Resetting bearer <eth:syzkaller0>
[  159.244247][ T9647] tipc: Disabling bearer <eth:syzkaller0>
[  159.288087][ T9652] veth0_to_bridge: entered promiscuous mode
[  159.295481][ T9651] veth0_to_bridge: left promiscuous mode
[  159.585818][ T9697] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1258'.
[  160.071107][ T9715] sctp: [Deprecated]: syz.2.1264 (pid 9715) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.071107][ T9715] Use struct sctp_sack_info instead
[  160.334659][ T9722] syzkaller0: entered promiscuous mode
[  160.338733][ T9722] syzkaller0: entered allmulticast mode
[  160.387194][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  160.415974][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'.
[  160.537284][ T9736] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1267'.
[  160.635835][ T9754] netlink: 'syz.1.1271': attribute type 22 has an invalid length.
[  160.638725][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  160.661026][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.661148][ T9754] netlink: 'syz.1.1271': attribute type 22 has an invalid length.
[  160.664324][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.677226][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.681085][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.301042][ T9815] team0: Device gtp0 is of different type
[  162.393920][ T9841] __nla_validate_parse: 1 callbacks suppressed
[  162.393931][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1279'.
[  162.412148][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1279'.
[  162.433016][ T9843] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1281'.
[  162.801392][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1285'.
[  162.852596][ T9863] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1288'.
[  163.687667][ T9883] geneve3: entered promiscuous mode
[  163.692833][ T5908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.696999][ T5908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.701968][ T5908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.705036][ T5908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.991044][ T9899] netlink: 'syz.1.1299': attribute type 32 has an invalid length.
[  164.218989][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1310'.
[  165.089068][ T9953] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  165.093052][ T9953] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  165.096706][ T9953] CPU: 0 UID: 0 PID: 9953 Comm: syz.1.1325 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  165.101158][ T9953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.104629][ T9953] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  165.106891][ T9953] Code: 18 00 74 08 4c 89 ef e8 dd 32 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 da 31 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 b1 32 02 f8 4d 89 2e 41 80 3c 1f 00
[  165.113736][ T9953] RSP: 0018:ffffc90006cc70f8 EFLAGS: 00010246
[  165.115762][ T9953] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  165.118357][ T9953] RDX: ffffc9000fa52000 RSI: 00000000000004af RDI: 00000000000004b0
[  165.121014][ T9953] RBP: ffff888026ff4930 R08: dffffc0000000000 R09: 0000000000000002
[  165.123845][ T9953] R10: 000000000000000a R11: 0000000000000002 R12: ffff888026ff4928
[  165.126413][ T9953] R13: ffff888026ff4928 R14: 0000000000000000 R15: 1ffff11004dfe926
[  165.128968][ T9953] FS:  00007faf8dd296c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  165.132133][ T9953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.134970][ T9953] CR2: 00007f3fcb4e56c0 CR3: 000000010db06000 CR4: 00000000000006f0
[  165.138414][ T9953] Call Trace:
[  165.139876][ T9953]  <TASK>
[  165.141202][ T9953]  ? xfrm_state_insert+0x44/0x60
[  165.143379][ T9953]  xfrm_state_insert+0x54/0x60
[  165.145440][ T9953]  ipcomp6_init_state+0x655/0x900
[  165.147655][ T9953]  __xfrm_init_state+0xa76/0x13f0
[  165.149879][ T9953]  ? __xfrm_init_state+0x7ef/0x13f0
[  165.152139][ T9953]  xfrm_add_sa+0x2f5b/0x4070
[  165.154175][ T9953]  ? __pfx_xfrm_add_sa+0x10/0x10
[  165.156411][ T9953]  ? apparmor_capable+0x137/0x1b0
[  165.158639][ T9953]  ? __nla_parse+0x40/0x60
[  165.160664][ T9953]  xfrm_user_rcv_msg+0x7a3/0xab0
[  165.162848][ T9953]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.165265][ T9953]  ? __pfx___mutex_trylock_common+0x10/0x10
[  165.167911][ T9953]  ? rcu_is_watching+0x15/0xb0
[  165.170013][ T9953]  ? trace_contention_end+0x39/0x120
[  165.172360][ T9953]  ? __mutex_lock+0x335/0x1360
[  165.174508][ T9953]  netlink_rcv_skb+0x208/0x470
[  165.176598][ T9953]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.178962][ T9953]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.181319][ T9953]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.183611][ T9953]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.185896][ T9953]  xfrm_netlink_rcv+0x79/0x90
[  165.188003][ T9953]  netlink_unicast+0x82f/0x9e0
[  165.190085][ T9953]  ? __pfx_netlink_unicast+0x10/0x10
[  165.192394][ T9953]  ? netlink_sendmsg+0x642/0xb30
[  165.194417][ T9953]  ? skb_put+0x11b/0x210
[  165.195942][ T9953]  netlink_sendmsg+0x805/0xb30
[  165.197667][ T9953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.199573][ T9953]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.201364][ T9953]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.203608][ T9953]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.205900][ T9953]  __sock_sendmsg+0x21c/0x270
[  165.207969][ T9953]  ____sys_sendmsg+0x505/0x830
[  165.209666][ T9953]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.211559][ T9953]  ? import_iovec+0x74/0xa0
[  165.213590][ T9953]  ___sys_sendmsg+0x21f/0x2a0
[  165.215677][ T9953]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.217923][ T9953]  ? __fget_files+0x2a/0x420
[  165.219936][ T9953]  ? __fget_files+0x3a0/0x420
[  165.221766][ T9953]  __x64_sys_sendmsg+0x19b/0x260
[  165.223900][ T9953]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.225684][ T9953]  ? rcu_is_watching+0x15/0xb0
[  165.227364][ T9953]  ? do_syscall_64+0xbe/0x3b0
[  165.228993][ T9953]  do_syscall_64+0xfa/0x3b0
[  165.230574][ T9953]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.232682][ T9953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.234878][ T9953]  ? exc_page_fault+0x9f/0xf0
[  165.236465][ T9953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.238506][ T9953] RIP: 0033:0x7faf8cf8ebe9
[  165.240018][ T9953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.246879][ T9953] RSP: 002b:00007faf8dd29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.249888][ T9953] RAX: ffffffffffffffda RBX: 00007faf8d1b5fa0 RCX: 00007faf8cf8ebe9
[  165.252959][ T9953] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000004
[  165.255685][ T9953] RBP: 00007faf8d011e19 R08: 0000000000000000 R09: 0000000000000000
[  165.258448][ T9953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.261090][ T9953] R13: 00007faf8d1b6038 R14: 00007faf8d1b5fa0 R15: 00007ffcf9ec50b8
[  165.263813][ T9953]  </TASK>
[  165.264915][ T9953] Modules linked in:
[  165.266626][ T9953] ---[ end trace 0000000000000000 ]---
[  165.268637][ T9953] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  165.271184][ T9953] Code: 18 00 74 08 4c 89 ef e8 dd 32 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 da 31 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 b1 32 02 f8 4d 89 2e 41 80 3c 1f 00
[  165.277936][ T9953] RSP: 0018:ffffc90006cc70f8 EFLAGS: 00010246
[  165.280214][ T9953] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  165.283025][ T9953] RDX: ffffc9000fa52000 RSI: 00000000000004af RDI: 00000000000004b0
[  165.285785][ T9953] RBP: ffff888026ff4930 R08: dffffc0000000000 R09: 0000000000000002
[  165.288582][ T9953] R10: 000000000000000a R11: 0000000000000002 R12: ffff888026ff4928
[  165.291413][ T9953] R13: ffff888026ff4928 R14: 0000000000000000 R15: 1ffff11004dfe926
[  165.294254][ T9953] FS:  00007faf8dd296c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  165.297518][ T9953] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.299973][ T9953] CR2: 00007f3fcb4e56c0 CR3: 000000010db06000 CR4: 00000000000006f0
[  165.302881][ T9953] Kernel panic - not syncing: Fatal exception in interrupt
[  165.306121][ T9953] Kernel Offset: disabled
[  165.307712][ T9953] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:56:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000109d RDI=000000000000109e RBP=00000000000003f8 RSP=ffffc90006cc6930
R8 =ffff888106ca8237 R9 =1ffff11020d95046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9914 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faf8dd296c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3fcb4e56c0 CR3=000000010db06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faf8d187498 00007faf8d187470 XMM03=00007faf8d1874a8 00007faf8d1874a0
XMM04=00007faf8dced100 00007faf8d187460 XMM05=00007faf8d187478 00007faf8d1874c0
XMM06=00007faf8d1874b8 00007faf8d1874b0 XMM07=00007faf8d1874a8 00007faf8d1874a0
XMM08=0000000000000000 00007faf8d012ee7 XMM09=0000000000000000 00007faf8d012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11026cc7413 RBX=ffff88810f57a8c0 RCX=ffffffff81901b22 RDX=ffff88810f57a800
RSI=dffffc0000000000 RDI=ffff88810f57a850 RBP=0000000000000000 RSP=ffffc9000368eb50
R8 =ffff88810b069cc7 R9 =1ffff1102160d398 R10=dffffc0000000000 R11=ffffed102160d399
R12=ffff88810f57a8b0 R13=0000000000000000 R14=00000024526671a3 R15=ffff88813663a098
RIP=ffffffff819703b9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb3b8fb2800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005645a3b9e000 CR3=00000000292be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
