last executing test programs:

1.692661493s ago: executing program 2 (id=678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x1d, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x103, 0xffffffffffffffff, 0x7, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, 0x0)
sendmsg$inet_sctp(r3, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010"], 0x20}}, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)}], 0x1, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e20, 0xbc, @loopback, 0x9}}, 0xc, 0xf800}, &(0x7f0000000000)=0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000480)=@get={0x1, &(0x7f0000000180)=""/10, 0xc2c})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r10}, 0x18)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884)

1.37695901s ago: executing program 2 (id=682):
socket$nl_crypto(0x10, 0x3, 0x15)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast})
close(0x4)

1.049518719s ago: executing program 2 (id=687):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e21, 0x4993, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = epoll_create(0x3ff)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x6, 0xfffffe34, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x28)
accept4$netrom(r7, &(0x7f00000003c0)={{0x3, @bcast}, [@remote, @rose, @null, @bcast, @null, @default, @netrom]}, &(0x7f0000000200)=0x48, 0x81800)
r9 = socket$rds(0x15, 0x5, 0x0)
ppoll(&(0x7f00000001c0)=[{r9}], 0x1, 0x0, 0x0, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
unshare(0x8000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r8, @ANYRES8=r4, @ANYBLOB="3267116748655494a8b1ebfde8d000bd648cb196acb2d27da6abdfcd476274c3d73dbe3f0409aa2f55dc9ff0f1f15adc3eaca809937a6656b556bf8d7926211fb7770b4c", @ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYRES16, @ANYBLOB="b4c22309371bdb20c679473cb7c83b15e09f9091d45e440574e71e448c1c9bba4067970c665ae9fb30412d501fe237471c8281f925abd854cb94306a4f5ad3caa03cbb10a4f4608a48d1a5e0951d7e0bba8962a7c36355848206dbe1fd47b2d2449c00101823835ad9b4b7fae97fc73fff7e3520f12ef0e80a3a6aaf1c6a98eda8698607819de912be46a7d09dd6a2b8f299d38930a627090db9944e88866f4d42b8e5743d87eb8b713b5d634e564a271070f21f028f080000f3c4a7f98b6ed0811dbc21d929cf9a1e7ffa01649cb88a8edafb6efb6dfe99d12d"], 0x50)

800.718129ms ago: executing program 1 (id=691):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
r0 = socket(0x18, 0x0, 0x1)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x10, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x70, 0x50}, 0x200400c4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={r4, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90)
getsockopt$nfc_llcp(r0, 0x111, 0x0, 0x0, 0x90aa62107f0000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r6, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYRESOCT=r3], 0x20}}, 0x840)

799.95497ms ago: executing program 1 (id=693):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r1=>0x0})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@getnexthop={0x2c, 0x6a, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x6000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$isdn_base(0x22, 0x3, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000000c0)="83", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24000000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0x4}, &(0x7f0000000080)=0x90)
bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmsg$802154_dgram(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x830)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdc03, {0x0, 0x0, 0x0, r7, 0x8248, 0x2416}}, 0x20}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000001080)={0x11c, 0x21, 0x800, 0x70bd28, 0x25dfdbff, {0xa}, [@nested={0x4, 0x103}, @nested={0x9e, 0x67, 0x0, 0x1, [@typed={0x8, 0xd2, 0x0, 0x0, @u32=0x6}, @generic="86593f27c1cc585dc1658d17a82730e63c12a1020c3122cb706e42a2b51c34115fe511a071dbd917f7efdb086f1eeb9820da64d277095f2f52f9d93958031f57e5e8fd551f9c8ff98ec901b953a04ad45ce13a85298bd1d4c1bb89afa6353af62a7f1ef9aa4a43b8858c76c1122f662ab18056738f3fce73d88b7f8f01d0e5a783a4667d38c9e616756ac821803e57f90c6e"]}, @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private0}, @generic="cdd51526c12fac4134135ee6d7bf3c3b962a9a5f881aba8b5d22b922065b1558b7d9729660b77229e8335b9b62c19c4a220c93722fe2987d7b0dcf600c8ddc93925bea05b5", @typed={0x8, 0xb2, 0x0, 0x0, @u32=0x1}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8090}, 0x40000)
socket(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r9=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r9, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000bc0)={0x0, 0x9, 0x0, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
write(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1, @ANYBLOB="0500060001000000050007d60500000005000300df00000008000200", @ANYRES64=r0], 0x68}}, 0x0)

333.875963ms ago: executing program 0 (id=697):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x3c, 0x2d, 0x1, 0x41000000, 0x0, "", [@nested={0x4, 0x800}, @nested={0x25, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe0"]}]}, 0x3c}], 0x1}, 0x300)

333.491263ms ago: executing program 1 (id=698):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x74, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x28, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300), 0x0}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x48801)

262.866837ms ago: executing program 0 (id=699):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc010000190001000000000000000000fe8000000000000000000000000000bb0a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0)

262.136388ms ago: executing program 1 (id=700):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400d9, 0x3b104}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x74, 0x101, 0x6, 0x7, 0x6, 0x81})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r15, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="080026bd7008ffdbdf255300000008000300", @ANYRES32=r13, @ANYBLOB="0c009900fcf8ffff3a000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

262.064307ms ago: executing program 0 (id=701):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000700000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000)

161.975148ms ago: executing program 0 (id=702):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

161.104736ms ago: executing program 2 (id=703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]})
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]}) (async)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0) (async)

160.254473ms ago: executing program 2 (id=704):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000900)="400000ccbada0fcd3a9c", 0xa}], 0x1}}], 0x1, 0x4001)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x1000)
shutdown(r2, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="007046727004020008001b000000000024001aaa8a881ffa1d040280080002800400058018012d8014000700fc01000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

158.859762ms ago: executing program 0 (id=705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket(0x6, 0x1, 0x9)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000040)=0x4, 0x4) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) (async)
r13 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async)
connect$inet(r13, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x9, &(0x7f0000000100), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0)

83.975955ms ago: executing program 1 (id=706):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bbfc0000000000000000000000000000000200000000000000000000000000000000000000000000000000000000feff0001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c001c"], 0x144}}, 0x20000000)

83.102632ms ago: executing program 0 (id=707):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000941000000060018000007327564703a73797a3200000000eda0e688f68cd054d44c435110913fe4a8d36d8cf19a17d125b16f8aa81118ac45d85598b6fa5f1e924b9f97a7ab9e397dc4c78b5448659148e81cd45964e8152971167f742df5a5fbf3d55ea7139cd027e6521b8bec7014e7ffd8a8a499419fa11854e556cc9b965cef2c71ef8f354487"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0xc, 0x7, 0x8, 0x0, @private2, @loopback, 0x10, 0x40, 0x6, 0x6}})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x9, 0xfff, 0x1, 0x810, 0xffffffffffffffff, 0x5, '\x00', r3, r4, 0x0, 0x1, 0x1, 0xe}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000819a"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r9)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008004)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800129709000100766c01f0ffffff000000028006000100010000000c00020800050000000000008000006b", @ANYRES32=r7, @ANYRES32=r6, @ANYRES64=r5, @ANYRESHEX=r6], 0x50}, 0x1, 0xba01, 0x0, 0x1}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x1d4, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x61}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffff9819}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x74cc}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff801}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x511}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x455}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x5, 0x4, 0x8001, 0x6, 0x3, 0xffffffff, 0xebb, 0x8]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2c0}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xec}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c1}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5dc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff2aec}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xea92}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x4be9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x34}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa9d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x609}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x16f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4f07}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r12 = socket(0x10, 0x3, 0x0)
write(r12, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

1.048057ms ago: executing program 2 (id=708):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
close(0xffffffffffffffff) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async)
connect$rose(r3, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc) (async)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x6]}}, 0x5c) (async)
r5 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) (async)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x40105, 0x1, 0x5}], 'M6U'}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x61, 0x2e, 0x61]}}, 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f0000000180))

0s ago: executing program 1 (id=709):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x14, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x54, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@delchain={0x6c, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x2, 0xd}, {0x10, 0x3}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xd}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7e}}, @TCA_RATE={0x6, 0x5, {0x3, 0x85}}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gre0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x4}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x20, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d"}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x1c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x3c, r5, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43964' (ED25519) to the list of known hosts.
syzkaller login: [   48.467750][ T5757] cgroup: Unknown subsys name 'net'
[   48.559306][ T5757] cgroup: Unknown subsys name 'cpuset'
[   48.570246][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.185101][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.325338][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.329797][ T5211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.333937][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.338746][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.342599][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.354900][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.358167][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.360962][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.363920][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.366156][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.369876][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.376533][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.381107][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.395894][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.429884][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.598872][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   55.708926][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   55.714024][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.718064][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.721407][ T5816] bridge_slave_0: entered allmulticast mode
[   55.725682][ T5816] bridge_slave_0: entered promiscuous mode
[   55.732579][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.736076][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.739844][ T5816] bridge_slave_1: entered allmulticast mode
[   55.743582][ T5816] bridge_slave_1: entered promiscuous mode
[   55.842413][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.854296][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.893906][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   55.903009][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.905416][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.907855][ T5824] bridge_slave_0: entered allmulticast mode
[   55.910908][ T5824] bridge_slave_0: entered promiscuous mode
[   55.931291][ T5816] team0: Port device team_slave_0 added
[   55.949972][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.952338][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.954791][ T5824] bridge_slave_1: entered allmulticast mode
[   55.958642][ T5824] bridge_slave_1: entered promiscuous mode
[   55.962956][ T5816] team0: Port device team_slave_1 added
[   56.029899][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.032713][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.043864][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.052624][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.060184][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.081103][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.083677][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.094503][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.145652][ T5824] team0: Port device team_slave_0 added
[   56.162633][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.165989][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.169763][ T5820] bridge_slave_0: entered allmulticast mode
[   56.174305][ T5820] bridge_slave_0: entered promiscuous mode
[   56.180086][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.182972][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.186018][ T5820] bridge_slave_1: entered allmulticast mode
[   56.190773][ T5820] bridge_slave_1: entered promiscuous mode
[   56.195264][ T5824] team0: Port device team_slave_1 added
[   56.265879][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.268863][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.280949][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.302567][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.312541][ T5816] hsr_slave_0: entered promiscuous mode
[   56.315059][ T5816] hsr_slave_1: entered promiscuous mode
[   56.317966][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.320519][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.332438][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.340877][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.443939][ T5820] team0: Port device team_slave_0 added
[   56.450609][ T5820] team0: Port device team_slave_1 added
[   56.458221][ T5824] hsr_slave_0: entered promiscuous mode
[   56.461451][ T5824] hsr_slave_1: entered promiscuous mode
[   56.464749][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   56.467265][ T5824] Cannot create hsr debugfs directory
[   56.499179][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.501807][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.511197][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.530004][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.532922][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.544613][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.704830][ T5820] hsr_slave_0: entered promiscuous mode
[   56.709060][ T5820] hsr_slave_1: entered promiscuous mode
[   56.711747][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   56.714268][ T5820] Cannot create hsr debugfs directory
[   56.840054][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.849133][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.868170][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.883371][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.938755][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.964191][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.982138][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.995908][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.019177][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.027479][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.033252][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.041405][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.125518][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.145019][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.155923][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   57.178834][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.182049][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.193368][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.196438][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.201322][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   57.220431][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.224735][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.227067][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.247428][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.249982][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.256016][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   57.266696][   T86] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.269002][   T86] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.280875][   T86] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.283149][   T86] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.376806][ T5211] Bluetooth: hci0: command tx timeout
[   57.453828][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.461618][ T5211] Bluetooth: hci1: command tx timeout
[   57.463514][ T5211] Bluetooth: hci2: command tx timeout
[   57.471357][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.493983][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.541342][ T5824] veth0_vlan: entered promiscuous mode
[   57.554563][ T5816] veth0_vlan: entered promiscuous mode
[   57.563876][ T5824] veth1_vlan: entered promiscuous mode
[   57.585845][ T5816] veth1_vlan: entered promiscuous mode
[   57.589733][ T5820] veth0_vlan: entered promiscuous mode
[   57.608127][ T5820] veth1_vlan: entered promiscuous mode
[   57.612148][ T5824] veth0_macvtap: entered promiscuous mode
[   57.624106][ T5824] veth1_macvtap: entered promiscuous mode
[   57.629375][ T5816] veth0_macvtap: entered promiscuous mode
[   57.635125][ T5816] veth1_macvtap: entered promiscuous mode
[   57.651352][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.665480][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.673925][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.680915][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.693150][ T5820] veth0_macvtap: entered promiscuous mode
[   57.696017][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.701264][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.704920][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.721106][ T5820] veth1_macvtap: entered promiscuous mode
[   57.725147][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.728653][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.746863][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.749932][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.753084][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.781197][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.794408][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.811524][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.814432][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.819816][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.839781][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.861179][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.864711][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.895118][   T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.899275][   T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.938120][  T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.941416][  T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.949235][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.953501][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.979714][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.983808][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.002620][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.007554][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.007576][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.075746][ T5887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.078116][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.091096][ T5889] netlink: 212760 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.112397][ T5891] sctp: [Deprecated]: syz.1.2 (pid 5891) Use of int in maxseg socket option.
[   58.112397][ T5891] Use struct sctp_assoc_value instead
[   58.131738][ T5893] veth0_to_bridge: entered promiscuous mode
[   58.149698][ T5893] syz.2.4 uses obsolete (PF_INET,SOCK_PACKET)
[   58.198025][ T5897] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.940939][ T5911] warning: `syz.0.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.996012][ T5913] Bluetooth: MGMT ver 1.23
[   59.093374][ T5917] netlink: 'syz.1.12': attribute type 11 has an invalid length.
[   59.169941][ T5920] netlink: 'syz.1.13': attribute type 58 has an invalid length.
[   59.250528][ T5925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.317389][ T5892] veth0_to_bridge: left promiscuous mode
[   59.457707][ T5826] Bluetooth: hci0: command tx timeout
[   59.537484][ T5211] Bluetooth: hci1: command tx timeout
[   59.539953][ T5826] Bluetooth: hci2: command tx timeout
[   59.803166][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.822526][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'.
[   59.872734][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.912373][ T5943] bridge0: entered promiscuous mode
[   59.914247][ T5943] bridge0: entered allmulticast mode
[   60.227696][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'.
[   60.701871][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'.
[   60.734260][ T5969] netlink: 'syz.1.29': attribute type 10 has an invalid length.
[   60.738990][ T5964] Zero length message leads to an empty skb
[   60.742016][ T5969] team0: Cannot enslave team device to itself
[   60.881364][ T5980] tipc: Started in network mode
[   60.883161][ T5980] tipc: Node identity 7af9f1cb1243, cluster identity 4711
[   60.885850][ T5980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.892431][ T5980] syzkaller0: entered promiscuous mode
[   60.894601][ T5980] syzkaller0: entered allmulticast mode
[   60.955229][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   60.977270][ T5979] tipc: Resetting bearer <eth:syzkaller0>
[   61.004883][ T5979] tipc: Disabling bearer <eth:syzkaller0>
[   61.067477][ T5994] netlink: 'syz.0.38': attribute type 4 has an invalid length.
[   61.097167][ T5999] netlink: 248 bytes leftover after parsing attributes in process `syz.2.40'.
[   61.158923][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.419495][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[   61.432687][ T6034] bond_slave_0: entered promiscuous mode
[   61.435482][ T6034] bond_slave_1: entered promiscuous mode
[   61.440458][ T6034] macsec1: entered promiscuous mode
[   61.442656][ T6034] bond0: entered promiscuous mode
[   61.445206][ T6034] macsec1: entered allmulticast mode
[   61.448774][ T6034] bond0: entered allmulticast mode
[   61.450927][ T6034] bond_slave_0: entered allmulticast mode
[   61.453250][ T6034] bond_slave_1: entered allmulticast mode
[   61.460609][ T6034] bond0: left allmulticast mode
[   61.462643][ T6034] bond_slave_0: left allmulticast mode
[   61.464899][ T6034] bond_slave_1: left allmulticast mode
[   61.467916][ T6034] bond0: left promiscuous mode
[   61.470850][ T6034] bond_slave_0: left promiscuous mode
[   61.473119][ T6034] bond_slave_1: left promiscuous mode
[   61.581569][ T6041] netlink: 'syz.1.52': attribute type 1 has an invalid length.
[   61.617727][ T5826] Bluetooth: hci2: command tx timeout
[   61.620569][ T5211] Bluetooth: hci1: command tx timeout
[   62.104164][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.154588][ T6070] netlink: 'syz.1.61': attribute type 4 has an invalid length.
[   62.166837][ T6070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.171470][ T6070] syzkaller0: entered promiscuous mode
[   62.173314][ T6070] syzkaller0: entered allmulticast mode
[   62.200703][ T6070] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   62.232163][ T6069] tipc: Resetting bearer <eth:syzkaller0>
[   62.245046][ T6069] tipc: Disabling bearer <eth:syzkaller0>
[   62.256911][ T6072] syz.0.62 uses old SIOCAX25GETINFO
[   62.263019][ T6072] sit1: entered promiscuous mode
[   62.396753][ T6079] veth1_to_bond: entered allmulticast mode
[   62.418743][ T6079] bond0: (slave bond_slave_1): Releasing backup interface
[   62.435494][ T6079] veth1_to_bond (unregistering): left allmulticast mode
[   63.397816][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.455662][ T6147] netlink: 'syz.1.87': attribute type 4 has an invalid length.
[   63.458939][ T6148] netlink: 'syz.1.87': attribute type 4 has an invalid length.
[   63.546911][ T6156] __nla_validate_parse: 6 callbacks suppressed
[   63.546924][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'.
[   63.696766][ T5826] Bluetooth: hci2: command tx timeout
[   63.699284][ T5211] Bluetooth: hci1: command tx timeout
[   63.741846][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'.
[   63.800796][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'.
[   63.857206][ T6179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.97'.
[   64.139883][ T6207] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   64.143135][ T6207] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   64.218338][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'.
[   64.338071][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.355616][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   64.373007][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'.
[   64.537471][ T6254] netlink: 'syz.0.118': attribute type 1 has an invalid length.
[   64.545864][ T6254] bridge1: entered promiscuous mode
[   64.595783][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   64.644919][ T6271] netlink: 48 bytes leftover after parsing attributes in process `syz.0.122'.
[   64.821936][ T6277] bridge_slave_0: left allmulticast mode
[   64.823829][ T6277] bridge_slave_0: left promiscuous mode
[   64.825939][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.832038][ T6277] bridge_slave_1: left allmulticast mode
[   64.833849][ T6277] bridge_slave_1: left promiscuous mode
[   64.835758][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.840797][ T6277] bond0: (slave bond_slave_0): Releasing backup interface
[   64.845139][ T6277] bond0: (slave bond_slave_1): Releasing backup interface
[   64.854949][ T6277] team0: Port device team_slave_0 removed
[   64.860692][ T6277] team0: Port device team_slave_1 removed
[   64.862923][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.865285][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.869902][ T6277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.872282][ T6277] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.300011][ T6302] syzkaller0: entered promiscuous mode
[   65.301850][ T6302] syzkaller0: entered allmulticast mode
[   66.067998][ T6304] batadv1: entered promiscuous mode
[   66.070233][ T6304] batadv1: entered allmulticast mode
[   66.155293][ T6314] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   66.158920][ T6314] macsec1: entered promiscuous mode
[   66.160811][ T6314] macsec1: entered allmulticast mode
[   66.162503][ T6314] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   66.301013][ T6324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.305887][ T6324] IPv6: NLM_F_CREATE should be set when creating new route
[   66.309127][ T6324] IPv6: NLM_F_CREATE should be set when creating new route
[   66.323057][ T6324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.420201][ T6326] vxcan2: entered promiscuous mode
[   66.447980][ T6328] syzkaller1: tun_chr_ioctl cmd 1074025672
[   66.450645][ T6328] syzkaller1: ignored: set checksum disabled
[   66.834616][ T6363] netlink: 'syz.1.153': attribute type 12 has an invalid length.
[   66.883193][ T6368] netlink: 'syz.2.155': attribute type 12 has an invalid length.
[   66.971290][ T6370] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   67.348543][ T6386] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   67.352858][ T6385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.357197][ T6385] batadv_slave_1: entered promiscuous mode
[   67.369587][ T6390] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   67.373337][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.377705][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.384051][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.392919][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.412349][ T6393] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   67.422754][ T6395] netlink: 'syz.2.164': attribute type 4 has an invalid length.
[   67.496957][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.502346][ T6400] batadv_slave_0: entered promiscuous mode
[   67.592641][ T6406] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   67.598318][ T6404] IPVS: stopping backup sync thread 6406 ...
[   67.705762][ T6401] netlink: 'syz.2.165': attribute type 13 has an invalid length.
[   67.709237][ T6401] netlink: 'syz.2.165': attribute type 17 has an invalid length.
[   67.775173][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.780050][ T6401] 8021q: adding VLAN 0 to HW filter on device team0
[   67.788618][ T6401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.001533][ T6437] netlink: 'syz.0.171': attribute type 3 has an invalid length.
[   68.131466][ T6456] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   68.138344][ T6456] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   68.153248][ T6455] sctp: [Deprecated]: syz.2.177 (pid 6455) Use of int in maxseg socket option.
[   68.153248][ T6455] Use struct sctp_assoc_value instead
[   68.248029][ T6461] netlink: 'syz.1.179': attribute type 1 has an invalid length.
[   68.323734][ T6470] netlink: 'syz.2.182': attribute type 21 has an invalid length.
[   68.333412][ T6470] netlink: 'syz.2.182': attribute type 4 has an invalid length.
[   68.394186][   T33] audit: type=1800 audit(1754555780.819:2): pid=6475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=386 res=0 errno=0
[   68.453649][ T6478] nbd: must specify at least one socket
[   68.557812][ T6478] syzkaller0: entered promiscuous mode
[   68.560298][ T6478] syzkaller0: entered allmulticast mode
[   68.804566][ T6482] __nla_validate_parse: 33 callbacks suppressed
[   68.804585][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.186'.
[   69.352676][ T6484] tipc: Started in network mode
[   69.354513][ T6484] tipc: Node identity 2ee7bdff8c8e, cluster identity 4711
[   69.359142][ T6484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.362058][ T6485] syzkaller0: entered promiscuous mode
[   69.364110][ T6485] syzkaller0: entered allmulticast mode
[   69.368326][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   69.397880][ T6493] tipc: Resetting bearer <eth:syzkaller0>
[   69.410682][ T6493] tipc: Disabling bearer <eth:syzkaller0>
[   69.445191][ T6495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.457218][ T6495] syzkaller0: entered promiscuous mode
[   69.459352][ T6495] syzkaller0: entered allmulticast mode
[   69.473713][ T6495] tipc: Resetting bearer <eth:syzkaller0>
[   69.482599][ T6494] tipc: Resetting bearer <eth:syzkaller0>
[   69.494828][ T6494] tipc: Disabling bearer <eth:syzkaller0>
[   69.532915][ T6500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.625688][ T6500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.693713][ T6500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.749156][ T6500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.788352][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[   69.890219][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.924896][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.945916][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.967438][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.402366][ T6522] validate_nla: 3 callbacks suppressed
[   70.402385][ T6522] netlink: 'syz.2.194': attribute type 3 has an invalid length.
[   70.421484][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'.
[   70.811831][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   70.901447][   T24] IPVS: starting estimator thread 0...
[   70.912855][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.915683][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.986469][ T6552] IPVS: using max 77 ests per chain, 184800 per kthread
[   71.034852][ T6559] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   71.062492][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.070224][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.094207][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'.
[   71.130129][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'.
[   71.146260][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'.
[   71.164171][ T6575] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[   71.186193][ T6575] bond2: (slave geneve2): making interface the new active one
[   71.189824][ T6575] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   71.192708][ T6579] netlink: 'syz.2.212': attribute type 3 has an invalid length.
[   71.195470][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   71.200783][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   71.205894][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   71.209486][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   71.214028][ T6579] syz_tun: entered allmulticast mode
[   71.220167][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'.
[   71.231943][ T6579] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.239090][ T6579] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   71.301494][ T6579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.318457][ T6578] syz_tun: left allmulticast mode
[   71.345962][ T6590] ksmbd: Unknown IPC event: 3, ignore.
[   71.389899][ T6596] vlan2: entered allmulticast mode
[   71.391605][ T6596] veth1: entered allmulticast mode
[   71.449000][ T6599] netlink: 'syz.2.218': attribute type 12 has an invalid length.
[   71.890751][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.2.223'.
[   72.128996][ T6631] netlink: 'syz.2.226': attribute type 102 has an invalid length.
[   72.134679][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'.
[   72.209573][ T6635] tipc: Started in network mode
[   72.216179][ T6635] tipc: Node identity 62c9ec8fc26c, cluster identity 4711
[   72.219181][ T6635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.230663][ T6635] syzkaller0: entered promiscuous mode
[   72.232860][ T6635] syzkaller0: entered allmulticast mode
[   72.246912][ T6635] tipc: Resetting bearer <eth:syzkaller0>
[   72.250757][ T6634] tipc: Resetting bearer <eth:syzkaller0>
[   72.260759][ T6634] tipc: Disabling bearer <eth:syzkaller0>
[   72.314246][ T6642] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   72.315345][ T5668] bond0: (slave bond_slave_0): interface is now down
[   72.331899][ T5668] bond0: (slave bond_slave_1): interface is now down
[   72.351196][ T5668] bond0: now running without any active interface!
[   72.462588][ T6653] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   72.635003][ T6669] netlink: 'syz.1.234': attribute type 4 has an invalid length.
[   72.838786][ T6686] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   72.934416][ T6697] team0: Mode changed to "activebackup"
[   72.947999][ T6697] tipc: Enabled bearer <eth:team0>, priority 0
[   73.011526][ T6694] netlink: 'syz.1.240': attribute type 11 has an invalid length.
[   73.023464][ T6707] veth0: entered promiscuous mode
[   73.038780][ T6707] veth0 (unregistering): left promiscuous mode
[   73.050867][ T6708] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   73.080113][ T6708] pim6reg1: entered promiscuous mode
[   73.082520][ T6708] pim6reg1: entered allmulticast mode
[   73.367907][ T6721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.370730][ T6721] syzkaller0: entered promiscuous mode
[   73.373091][ T6721] syzkaller0: entered allmulticast mode
[   73.388869][ T6721] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   73.393611][ T6721] tipc: Resetting bearer <eth:syzkaller0>
[   73.398540][ T6720] tipc: Resetting bearer <eth:syzkaller0>
[   73.409209][ T6720] tipc: Disabling bearer <eth:syzkaller0>
[   73.987794][ T6747] __nla_validate_parse: 9 callbacks suppressed
[   73.987806][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'.
[   74.008222][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[   74.077755][   T10] tipc: Node number set to 2695228559
[   74.103315][ T6753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.105938][ T6753] syzkaller0: entered promiscuous mode
[   74.108509][ T6753] syzkaller0: entered allmulticast mode
[   74.121273][ T6753] tipc: Resetting bearer <eth:syzkaller0>
[   74.124345][ T6753] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[   74.140132][ T6753] bond1: entered promiscuous mode
[   74.141932][ T6753] bond1: entered allmulticast mode
[   74.148711][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[   74.158223][ T6752] tipc: Disabling bearer <eth:syzkaller0>
[   74.224348][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'.
[   74.448527][ T6777] netlink: 'syz.1.264': attribute type 3 has an invalid length.
[   74.452106][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'.
[   74.565052][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'.
[   74.594661][ T6784] vxcan3: entered allmulticast mode
[   74.955015][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[   74.985864][ T6816] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[   74.995974][ T6798] team0 (unregistering): Port device team_slave_0 removed
[   75.003733][ T6798] team0 (unregistering): Port device team_slave_1 removed
[   75.069391][ T6836] trusted_key: syz.2.276 sent an empty control message without MSG_MORE.
[   75.100566][ T6836] netlink: 5 bytes leftover after parsing attributes in process `syz.2.276'.
[   75.115692][ T6845] bridge_slave_0: left allmulticast mode
[   75.123179][ T6845] bridge_slave_0: left promiscuous mode
[   75.129783][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.146702][ T6845] bridge_slave_1: left allmulticast mode
[   75.149163][ T6845] bridge_slave_1: left promiscuous mode
[   75.151595][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.172944][ T6845] bond0: (slave bond_slave_0): Releasing backup interface
[   75.179897][ T6845] bond0: (slave bond_slave_1): Releasing backup interface
[   75.185023][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.188097][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.191392][ T6845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.193964][ T6845] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.203650][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[   75.283441][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'.
[   75.289402][ T6860] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   75.292954][ T6860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.300599][ T6860] sctp: [Deprecated]: syz.2.283 (pid 6860) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.300599][ T6860] Use struct sctp_sack_info instead
[   75.422226][ T6871] af_packet: tpacket_rcv: packet too big, clamped from 152 to 4294967272. macoff=96
[   75.437138][ T6871] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   75.439839][ T6871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.460891][ T5826] Bluetooth: hci2: command 0x0405 tx timeout
[   75.765665][ T6908] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.341477][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024451000: rx timeout, send abort
[   76.346105][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024450000: rx timeout, send abort
[   76.349955][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024451000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   76.356760][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024450000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   76.525375][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.531086][ T6935] syzkaller0: entered promiscuous mode
[   76.533694][ T6935] syzkaller0: entered allmulticast mode
[   76.544662][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   76.548207][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   76.556087][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   76.655884][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'.
[   76.780539][ T6959] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   76.790268][ T6959] validate_nla: 5 callbacks suppressed
[   76.790277][ T6959] netlink: 'syz.2.315': attribute type 3 has an invalid length.
[   76.798519][ T6961] ip6erspan0: entered promiscuous mode
[   77.085910][ T6985] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   77.088995][ T6985] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   77.292037][ T6998] netlink: 'syz.1.331': attribute type 11 has an invalid length.
[   77.311472][ T6998] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   77.420103][ T7002] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.423517][ T7002] syzkaller0: entered promiscuous mode
[   77.425872][ T7002] syzkaller0: entered allmulticast mode
[   77.445370][ T7002] tipc: Resetting bearer <eth:syzkaller0>
[   77.449537][ T7001] tipc: Resetting bearer <eth:syzkaller0>
[   77.456109][ T7001] tipc: Disabling bearer <eth:syzkaller0>
[   77.587969][ T7006] macvtap1: entered allmulticast mode
[   77.589930][ T7006] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   77.594023][ T7006] batman_adv: batadv0: Adding interface: macvtap1
[   77.596248][ T7006] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.604719][ T7006] batman_adv: batadv0: Interface activated: macvtap1
[   77.788299][ T7024] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   77.848134][ T7029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.052503][ T7055] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   78.068683][ T7054] netlink: 'syz.0.350': attribute type 16 has an invalid length.
[   78.071378][ T7054] netlink: 'syz.0.350': attribute type 17 has an invalid length.
[   78.202692][ T5668] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.207240][ T5668] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.210008][ T5668] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.212790][ T5668] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.335709][ T7062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.339548][ T7062] syzkaller0: entered promiscuous mode
[   78.341675][ T7062] syzkaller0: entered allmulticast mode
[   78.357378][ T7062] tipc: Resetting bearer <eth:syzkaller0>
[   78.391691][ T7066] netlink: 'syz.0.354': attribute type 3 has an invalid length.
[   78.400002][ T7066] syz_tun: entered allmulticast mode
[   78.404055][ T7066] siw: device registration error -23
[   78.410259][ T7065] syz_tun: left allmulticast mode
[   78.454466][ T7068] netlink: 'syz.0.355': attribute type 1 has an invalid length.
[   78.468924][ T7068] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.479379][ T7068] bond2: (slave bridge2): making interface the new active one
[   78.483150][ T7068] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   78.498743][ T7068] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   78.642776][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.692509][ T7085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.695527][ T7085] syzkaller0: entered promiscuous mode
[   78.698294][ T7085] syzkaller0: entered allmulticast mode
[   78.710522][ T7084] tipc: Resetting bearer <eth:syzkaller0>
[   78.721589][ T7084] tipc: Disabling bearer <eth:syzkaller0>
[   78.838665][ T7096] gtp0: entered promiscuous mode
[   78.925811][ T7104] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   78.952311][ T7104] bond3: entered promiscuous mode
[   78.954056][ T7104] bond3: entered allmulticast mode
[   78.958542][ T7104] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.001750][ T7112] __nla_validate_parse: 13 callbacks suppressed
[   79.001762][ T7112] netlink: 164 bytes leftover after parsing attributes in process `syz.0.371'.
[   79.011479][ T7112] netlink: 164 bytes leftover after parsing attributes in process `syz.0.371'.
[   79.017228][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.0.371'.
[   79.115644][ T7126] sit1: left promiscuous mode
[   79.117849][ T7126] bridge1: left promiscuous mode
[   79.125636][ T7126] vlan2: left allmulticast mode
[   79.128024][ T7126] veth1: left allmulticast mode
[   79.130161][ T7126] tipc: Resetting bearer <eth:syzkaller0>
[   79.132582][ T7126] syzkaller0: left promiscuous mode
[   79.136507][ T7126] syzkaller0: left allmulticast mode
[   79.139093][ T7126] ip6erspan0: left promiscuous mode
[   79.145565][ T7126] bond3: left promiscuous mode
[   79.149387][ T7126] bond3: left allmulticast mode
[   79.230466][ T7134] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071877174886)
[   79.237770][ T7134] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   79.285527][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.382'.
[   79.403044][ T7171] netlink: 'syz.2.386': attribute type 1 has an invalid length.
[   79.430966][ T5821] tipc: Node number set to 2724838911
[   79.448602][ T7171] bond3: entered promiscuous mode
[   79.454764][ T7171] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.471350][ T7176] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.474064][ T7176] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[   79.478601][ T7176] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   79.488086][ T7176] bond3: (slave wireguard0): making interface the new active one
[   79.491259][ T7176] wireguard0: entered promiscuous mode
[   79.494462][ T7176] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[   79.505279][ T7171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.509320][ T7171] IPv6: NLM_F_CREATE should be set when creating new route
[   79.512455][ T7171] IPv6: NLM_F_CREATE should be set when creating new route
[   79.516205][ T7171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.322960][ T7196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.390'.
[   80.530752][ T7207] netlink: 'syz.0.393': attribute type 10 has an invalid length.
[   80.536640][ T7207] netlink: 'syz.0.393': attribute type 10 has an invalid length.
[   80.550879][ T7207] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   80.633223][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[   80.636202][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[   80.739627][ T7218] netlink: 'syz.2.398': attribute type 64 has an invalid length.
[   80.747307][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'.
[   80.750998][ T7218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.398'.
[   80.771908][ T7222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.775655][ T7222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   80.788334][ T7218] gretap2: entered promiscuous mode
[   80.867124][ T7222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.870713][ T7222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   80.970015][ T7222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.973647][ T7222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   80.985006][ T7232] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   81.049971][ T7222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.054060][ T7222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   81.110566][ T7232] netlink: 160 bytes leftover after parsing attributes in process `syz.2.401'.
[   81.116022][ T7232] openvswitch: netlink: Flow key attr not present in new flow.
[   81.322153][   T51] cfg80211: failed to load regulatory.db
[   81.325352][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   81.328638][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   81.340258][ T7237] bond0: (slave dummy0): Releasing backup interface
[   81.345578][ T7237] bond2: (slave bridge2): Releasing active interface
[   81.355759][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   81.360723][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   81.377951][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   81.383239][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   81.402739][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   81.411119][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   81.464019][ T7249] macsec1: entered promiscuous mode
[   81.649357][ T7265] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[   81.694975][ T7271] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.708133][ T7271] vlan0: entered promiscuous mode
[   81.713799][ T7271] bond5: entered promiscuous mode
[   81.716168][ T7271] vlan0: entered allmulticast mode
[   81.719132][ T7271] bond5: entered allmulticast mode
[   81.755102][ T7271] bond5: (slave gretap3): making interface the new active one
[   81.761165][ T7271] gretap3: entered promiscuous mode
[   81.763558][ T7271] gretap3: entered allmulticast mode
[   81.770363][ T7271] bond5: (slave gretap3): Enslaving as an active interface with an up link
[   82.106225][ T7308] veth1: entered promiscuous mode
[   82.125889][ T7312] openvswitch: netlink: Flow key attr not present in new flow.
[   82.140204][ T7308] tipc: Resetting bearer <eth:team0>
[   82.150438][ T7308] bond3: (slave wireguard0): Releasing backup interface
[   82.156465][ T7308] wireguard0: left promiscuous mode
[   82.172739][ T7308] bond5: (slave gretap3): Releasing active interface
[   82.175570][ T7308] gretap3: left promiscuous mode
[   82.178413][ T7308] gretap3: left allmulticast mode
[   82.255426][ T7327] validate_nla: 1 callbacks suppressed
[   82.255447][ T7327] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   82.317615][ T7327] 8021q: adding VLAN 0 to HW filter on device bond5
[   82.322330][ T7332] netlink: 'syz.2.434': attribute type 7 has an invalid length.
[   82.325044][ T7332] netlink: 'syz.2.434': attribute type 8 has an invalid length.
[   82.345667][ T7333] bond5: (slave veth7): Enslaving as an active interface with a down link
[   82.362163][ T7326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.461633][ T7342] pim6reg: entered allmulticast mode
[   82.501264][ T7342] syzkaller0: entered promiscuous mode
[   82.503188][ T7342] syzkaller0: entered allmulticast mode
[   82.507048][ T7342] pim6reg: left allmulticast mode
[   83.230919][ T7348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   83.234069][ T7350] syzkaller0: entered promiscuous mode
[   83.236000][ T7350] syzkaller0: entered allmulticast mode
[   83.420993][ T7362] batadv_slave_0: entered promiscuous mode
[   83.610388][ T7377] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   83.738671][ T7385] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[   83.821190][ T7394] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   83.872152][ T7397] netlink: 'syz.0.450': attribute type 4 has an invalid length.
[   84.059057][ T7411] netlink: 'syz.1.453': attribute type 23 has an invalid length.
[   84.092244][ T7416] dvmrp1: entered allmulticast mode
[   84.133750][ T7421] __nla_validate_parse: 24 callbacks suppressed
[   84.133761][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[   84.194133][ T7425] Bluetooth: MGMT ver 1.23
[   84.255074][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'.
[   84.274536][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   84.284641][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.458'.
[   84.351424][ T7445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'.
[   85.061247][ T7448] tipc: Resetting bearer <eth:team0>
[   85.063161][ T7448] tipc: Resetting bearer <eth:team0>
[   85.091312][ T7448] netlink: 'syz.2.462': attribute type 16 has an invalid length.
[   85.098733][ T7448] netlink: 'syz.2.462': attribute type 17 has an invalid length.
[   85.138378][ T7448] tipc: Resetting bearer <eth:team0>
[   85.140449][ T7448] tipc: Resetting bearer <eth:team0>
[   85.144027][ T7448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.151429][ T7454] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   85.191147][ T7459] vlan2: entered promiscuous mode
[   85.193578][ T7448] syz.2.462 (7448) used greatest stack depth: 19672 bytes left
[   85.202670][ T7459] bond0: entered promiscuous mode
[   85.204912][ T7459] bond_slave_0: entered promiscuous mode
[   85.212694][ T7459] vlan2: entered allmulticast mode
[   85.214968][ T7459] bond0: entered allmulticast mode
[   85.218454][ T7459] bond_slave_0: entered allmulticast mode
[   85.381795][ T7477] netlink: 'syz.0.468': attribute type 16 has an invalid length.
[   85.392813][ T7477] tipc: Resetting bearer <eth:syzkaller0>
[   85.410922][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'.
[   85.419041][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'.
[   85.431802][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.431852][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'.
[   85.438418][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.442880][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.450707][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.581687][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'.
[   85.584813][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'.
[   85.761259][ T7520] tipc: Resetting bearer <eth:team0>
[   85.763783][ T7520] tipc: Resetting bearer <eth:team0>
[   85.770300][ T7520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.810828][ T7527] veth1_to_bond: entered allmulticast mode
[   85.813788][ T7527] bond_slave_1: entered promiscuous mode
[   85.819885][ T7526] bond_slave_1: left promiscuous mode
[   85.824107][ T7526] veth1_to_bond: left allmulticast mode
[   86.131923][ T7546] sctp: [Deprecated]: syz.2.480 (pid 7546) Use of int in max_burst socket option.
[   86.131923][ T7546] Use struct sctp_assoc_value instead
[   86.380868][ T7558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.383936][ T7558] syzkaller0: entered promiscuous mode
[   86.402267][ T7558] syzkaller0: entered allmulticast mode
[   86.448048][ T7560] tipc: Resetting bearer <eth:syzkaller0>
[   86.469798][ T7557] tipc: Resetting bearer <eth:syzkaller0>
[   86.498896][ T7557] tipc: Disabling bearer <eth:syzkaller0>
[   86.597467][ T7580] netlink: del zone limit has 4 unknown bytes
[   86.602624][ T7580] lo speed is unknown, defaulting to 1000
[   86.604758][ T7580] lo speed is unknown, defaulting to 1000
[   86.615780][ T7580] lo speed is unknown, defaulting to 1000
[   86.629932][ T7585] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   86.632232][ T7580] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   86.674183][ T7588] wg1: entered promiscuous mode
[   86.675937][ T7588] wg1: entered allmulticast mode
[   86.691851][ T7580] lo speed is unknown, defaulting to 1000
[   86.698138][ T7580] lo speed is unknown, defaulting to 1000
[   86.708249][ T7580] lo speed is unknown, defaulting to 1000
[   86.752946][ T7591] bond6 (unregistering): Released all slaves
[   86.877938][ T7603] tc_dump_action: action bad kind
[   87.063773][ T7636] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.149090][ T7641] syz_tun: entered allmulticast mode
[   87.152737][ T7641] dvmrp1: left allmulticast mode
[   87.207674][ T7645] siw: device registration error -23
[   87.223643][ T7640] syz_tun: left allmulticast mode
[   87.420624][ T7668] bridge0: port 1(erspan0) entered blocking state
[   87.423756][ T7668] bridge0: port 1(erspan0) entered disabled state
[   87.429357][ T7668] erspan0: entered allmulticast mode
[   87.440086][ T7668] erspan0: entered promiscuous mode
[   87.458176][ T7668] erspan0: left allmulticast mode
[   87.460604][ T7668] erspan0: left promiscuous mode
[   87.464335][ T7668] bridge0: port 1(erspan0) entered disabled state
[   87.481549][ T7668] siw: device registration error -23
[   87.531643][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.535748][ T7668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.831389][ T7695] siw: device registration error -23
[   87.975843][ T7709] lo speed is unknown, defaulting to 1000
[   87.992783][ T7717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.013613][ T7714] tipc: Disabling bearer <eth:syzkaller0>
[   88.103055][ T7727] validate_nla: 5 callbacks suppressed
[   88.103067][ T7727] netlink: 'syz.1.517': attribute type 1 has an invalid length.
[   88.109925][ T7727] netlink: 'syz.1.517': attribute type 4 has an invalid length.
[   88.220705][ T7740] sctp: [Deprecated]: syz.0.519 (pid 7740) Use of int in maxseg socket option.
[   88.220705][ T7740] Use struct sctp_assoc_value instead
[   88.294446][ T7745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   88.351802][ T7745] netlink: 'syz.2.521': attribute type 4 has an invalid length.
[   88.360349][ T7745] : renamed from bond0 (while UP)
[   88.550263][ T7768] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   88.911122][ T7792] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   89.007338][ T7809] netlink: 'syz.2.534': attribute type 12 has an invalid length.
[   89.029760][ T7809] pimreg3: entered allmulticast mode
[   89.574131][ T7854] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   89.626062][ T7858] Driver unsupported XDP return value 0 on prog  (id 116) dev N/A, expect packet loss!
[   89.706230][ T7866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.906405][ T7878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.927440][ T7877] tipc: Disabling bearer <eth:syzkaller0>
[   90.004661][ T7889] __nla_validate_parse: 13 callbacks suppressed
[   90.004672][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'.
[   90.012588][ T7891] netlink: 'syz.0.551': attribute type 1 has an invalid length.
[   90.131166][ T7903] netlink: 'syz.0.553': attribute type 66 has an invalid length.
[   90.320188][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'.
[   90.324924][ T7914] netlink: 'syz.0.556': attribute type 20 has an invalid length.
[   90.328542][ T7914] netlink: 'syz.0.556': attribute type 21 has an invalid length.
[   90.360689][ T7917] lo speed is unknown, defaulting to 1000
[   90.666669][ T7917] netlink: 248 bytes leftover after parsing attributes in process `syz.1.557'.
[   90.710684][ T7944] netlink: 14208 bytes leftover after parsing attributes in process `syz.2.560'.
[   90.777494][ T7959] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[   90.809249][ T7959] bond7: entered promiscuous mode
[   90.811759][ T7959] 8021q: adding VLAN 0 to HW filter on device bond7
[   90.827750][ T7959] netlink: 3 bytes leftover after parsing attributes in process `syz.0.563'.
[   90.837268][ T7959] batadv1: entered promiscuous mode
[   90.839058][ T7959] batadv1: entered allmulticast mode
[   90.841711][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv1
[   90.844970][ T7959] bond7: (slave batadv1): making interface the new active one
[   90.848532][ T7959] bond7: (slave batadv1): Enslaving as an active interface with an up link
[   91.007708][ T7959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.563'.
[   91.063593][ T7984] syzkaller1: entered promiscuous mode
[   91.065413][ T7984] syzkaller1: entered allmulticast mode
[   91.154015][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.569'.
[   91.165311][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'.
[   91.300450][ T8019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   91.303662][ T8019] syzkaller0: left promiscuous mode
[   91.305545][ T8019] syzkaller0: left allmulticast mode
[   91.329864][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'.
[   91.442552][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'.
[   91.456091][ T7349] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.461489][ T7349] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.461521][ T8035] netlink: 'syz.2.578': attribute type 7 has an invalid length.
[   91.468622][ T7349] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.472815][ T7349] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.585673][ T8043] lo speed is unknown, defaulting to 1000
[   91.708502][ T8056] netlink: 'syz.2.583': attribute type 11 has an invalid length.
[   91.884304][ T8068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.888212][ T8069] D: renamed from syzkaller0
[   91.891114][ T8069] tipc: Disabling bearer <eth:syzkaller0>
[   92.090822][ T8080] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.155029][ T8080] bond4: (slave veth3): Enslaving as an active interface with a down link
[   92.170503][ T8083] bond0: entered promiscuous mode
[   92.172584][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.247824][ T8083] bond0 (unregistering): Released all slaves
[   92.262161][ T8079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.279997][ T8086] lo speed is unknown, defaulting to 1000
[   92.537772][ T8108] tipc: Can't bind to reserved service type 2
[   92.545102][ T8108] dummy0: entered promiscuous mode
[   92.549056][ T8108] dummy0: entered allmulticast mode
[   92.552470][ T8108] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   92.837404][ T8129] Bluetooth: MGMT ver 1.23
[   93.053081][ T8158] openvswitch: netlink: Duplicate or invalid key (type 0).
[   93.062805][ T8158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.502478][ T8199] validate_nla: 6 callbacks suppressed
[   93.502490][ T8199] netlink: 'syz.1.614': attribute type 1 has an invalid length.
[   93.991919][ T8240] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   94.186119][ T8249] syzkaller1: tun_chr_ioctl cmd 1074025677
[   94.198288][ T8249] syzkaller1: linktype set to 778
[   94.201550][ T8254] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.209484][ T8255] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.221436][ T8254] syzkaller0: entered promiscuous mode
[   94.224111][ T8254] syzkaller0: entered allmulticast mode
[   94.232675][ T8254] syzkaller0: Caught tx_queue_len zero misconfig
[   95.097036][ T8333] __nla_validate_parse: 36 callbacks suppressed
[   95.097047][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'.
[   95.286026][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.643'.
[   95.318482][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'.
[   95.339364][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'.
[   95.351552][ T8355] bridge3: entered promiscuous mode
[   95.354354][ T8355] macsec2: entered promiscuous mode
[   95.357039][ T8355] macsec2: entered allmulticast mode
[   95.359579][ T8355] bridge3: entered allmulticast mode
[   95.363724][ T8355] bridge3: port 1(macsec2) entered blocking state
[   95.366133][ T8355] bridge3: port 1(macsec2) entered disabled state
[   95.371357][ T8355] bridge3: left allmulticast mode
[   95.373428][ T8355] bridge3: left promiscuous mode
[   95.540006][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.648'.
[   95.552431][ T8368] veth9: entered promiscuous mode
[   95.599454][ T8369] erspan0: entered allmulticast mode
[   95.645028][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'.
[   95.723335][ T8380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.726717][ T8381] syzkaller0: entered promiscuous mode
[   95.729599][ T8381] syzkaller0: entered allmulticast mode
[   95.741924][ T8377] lo speed is unknown, defaulting to 1000
[   95.747986][ T8378] lo speed is unknown, defaulting to 1000
[   95.776122][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[   95.787203][ T8381] tipc: Disabling bearer <eth:syzkaller0>
[   96.487024][ T8430] sctp: [Deprecated]: syz.1.666 (pid 8430) Use of int in maxseg socket option.
[   96.487024][ T8430] Use struct sctp_assoc_value instead
[   96.646709][ T8443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.652927][ T8446] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.675172][ T8443] syzkaller0: entered promiscuous mode
[   96.681022][ T8443] syzkaller0: entered allmulticast mode
[   96.690768][ T8449] lo speed is unknown, defaulting to 1000
[   96.772012][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[   96.793229][ T8442] tipc: Disabling bearer <eth:syzkaller0>
[   96.961382][ T8449] netlink: 'syz.0.670': attribute type 13 has an invalid length.
[   96.981830][ T8449] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   97.097863][ T8465] x_tables: ip_tables: udp match: only valid for protocol 17
[   97.123777][ T8465] erspan1: entered promiscuous mode
[   97.125528][ T8465] erspan1: entered allmulticast mode
[   97.225981][ T8469] lo speed is unknown, defaulting to 1000
[   97.470547][ T8496] netlink: 'syz.2.675': attribute type 16 has an invalid length.
[   97.477556][ T8496] netlink: 'syz.2.675': attribute type 17 has an invalid length.
[   97.481959][ T8496] netlink: 'syz.2.675': attribute type 27 has an invalid length.
[   97.488120][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[   97.496894][ T8489] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.572766][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.677'.
[   97.582477][ T8508] syz_tun: entered allmulticast mode
[   97.586020][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[   97.590529][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.677'.
[   97.595977][ T8507] syz_tun: left allmulticast mode
[   97.694771][ T8516] tipc: Resetting bearer <eth:team0>
[   97.810395][ T8516] tipc: Disabling bearer <eth:team0>
[   98.014056][ T8531] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   98.018757][   T12] bond0: (slave bond_slave_0): interface is now down
[   98.046545][   T13] bond0: (slave bond_slave_0): interface is now down
[   98.067087][ T7349] bond0: (slave bond_slave_0): interface is now down
[   98.079218][ T8534] pim6reg1: entered promiscuous mode
[   98.082108][ T8534] pim6reg1: entered allmulticast mode
[   98.098904][ T7349] bond0: (slave bond_slave_0): interface is now down
[   98.118443][ T7349] bond0: (slave bond_slave_0): interface is now down
[   98.146442][ T7349] bond0: (slave bond_slave_0): interface is now down
[   98.152855][ T7349] bond0: now running without any active interface!
[   98.321312][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.686047][ T8588] bridge0: entered promiscuous mode
[   98.692286][ T8588] macvtap1: entered promiscuous mode
[   98.695010][ T8588] macvtap1: entered allmulticast mode
[   98.698260][ T8588] bridge0: entered allmulticast mode
[   98.796221][ T8601] dvmrp1: entered allmulticast mode
[   98.819556][ T8601] dvmrp1: left allmulticast mode
[   99.073484][ T8626] bridge0: left promiscuous mode
[   99.083984][ T8626] batadv_slave_0: left promiscuous mode
[   99.092676][ T8626] batadv_slave_1: left promiscuous mode
[   99.104199][ T8626] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   99.112987][ T8626] vlan2: left promiscuous mode
[   99.118068][ T8626] bond0: left promiscuous mode
[   99.119780][ T8626] bond_slave_0: left promiscuous mode
[   99.124811][ T8626] erspan1: left promiscuous mode
[   99.143128][ T8626] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   99.228939][ T8644] bridge_slave_0: entered allmulticast mode
[   99.286023][   T51] lo speed is unknown, defaulting to 1000
[   99.327526][ T8653] bridge0 (unregistering): left allmulticast mode
[   99.379576][ T8657] bpq0: entered promiscuous mode
[   99.411277][ T8663] ==================================================================
[   99.414133][ T8663] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   99.416905][ T8663] Read of size 1 at addr ffff888026f48432 by task syz.2.708/8663
[   99.420616][ T8663] 
[   99.421476][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.2.708 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[   99.421486][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.421491][ T8663] Call Trace:
[   99.421495][ T8663]  <TASK>
[   99.421499][ T8663]  dump_stack_lvl+0x189/0x250
[   99.421509][ T8663]  ? __virt_addr_valid+0x1c8/0x5c0
[   99.421518][ T8663]  ? rcu_is_watching+0x15/0xb0
[   99.421530][ T8663]  ? __kasan_check_byte+0x12/0x40
[   99.421542][ T8663]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.421548][ T8663]  ? rcu_is_watching+0x15/0xb0
[   99.421558][ T8663]  ? lock_release+0x4b/0x3e0
[   99.421569][ T8663]  ? __virt_addr_valid+0x1c8/0x5c0
[   99.421577][ T8663]  ? __virt_addr_valid+0x4a5/0x5c0
[   99.421585][ T8663]  print_report+0xca/0x240
[   99.421595][ T8663]  ? rose_transmit_link+0x5c3/0x740
[   99.421603][ T8663]  kasan_report+0x118/0x150
[   99.421613][ T8663]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   99.421624][ T8663]  ? rose_transmit_link+0x5c3/0x740
[   99.421632][ T8663]  rose_transmit_link+0x5c3/0x740
[   99.421639][ T8663]  ? skb_put+0x11b/0x210
[   99.421647][ T8663]  rose_write_internal+0x11dc/0x1ac0
[   99.421658][ T8663]  ? __pfx_rose_write_internal+0x10/0x10
[   99.421666][ T8663]  ? __timer_delete+0x5d/0x390
[   99.421676][ T8663]  rose_release+0x24e/0x520
[   99.421687][ T8663]  sock_close+0xc3/0x240
[   99.421696][ T8663]  ? __pfx_sock_close+0x10/0x10
[   99.421704][ T8663]  __fput+0x44c/0xa70
[   99.421714][ T8663]  task_work_run+0x1d4/0x260
[   99.421723][ T8663]  ? __pfx_task_work_run+0x10/0x10
[   99.421732][ T8663]  ? kmem_cache_free+0x18f/0x400
[   99.421743][ T8663]  do_exit+0x6b5/0x22e0
[   99.421752][ T8663]  ? do_raw_spin_lock+0x121/0x290
[   99.421761][ T8663]  ? __pfx_do_exit+0x10/0x10
[   99.421771][ T8663]  do_group_exit+0x21c/0x2d0
[   99.421779][ T8663]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.421790][ T8663]  get_signal+0x1286/0x1340
[   99.421803][ T8663]  arch_do_signal_or_restart+0x9a/0x750
[   99.421814][ T8663]  ? rawv6_setsockopt+0x23b/0x5b0
[   99.421826][ T8663]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   99.421838][ T8663]  ? exit_to_user_mode_loop+0x40/0x110
[   99.421848][ T8663]  exit_to_user_mode_loop+0x75/0x110
[   99.421857][ T8663]  do_syscall_64+0x2bd/0x3b0
[   99.421866][ T8663]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.421875][ T8663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.421882][ T8663]  ? exc_page_fault+0x9f/0xf0
[   99.421891][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.421899][ T8663] RIP: 0033:0x7f25b5d8ebe9
[   99.421906][ T8663] Code: Unable to access opcode bytes at 0x7f25b5d8ebbf.
[   99.421909][ T8663] RSP: 002b:00007f25b6c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.421918][ T8663] RAX: 0000000000000000 RBX: 00007f25b5fb6180 RCX: 00007f25b5d8ebe9
[   99.421923][ T8663] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 000000000000000b
[   99.421927][ T8663] RBP: 00007f25b5e11e19 R08: 000000000c000000 R09: 0000000000000000
[   99.421932][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.421936][ T8663] R13: 00007f25b5fb6218 R14: 00007f25b5fb6180 R15: 00007fffc1986168
[   99.421948][ T8663]  </TASK>
[   99.421952][ T8663] 
[   99.530936][ T8663] Allocated by task 8129:
[   99.532551][ T8663]  kasan_save_track+0x3e/0x80
[   99.534309][ T8663]  __kasan_kmalloc+0x93/0xb0
[   99.535918][ T8663]  __kmalloc_cache_noprof+0x230/0x3d0
[   99.537862][ T8663]  rose_add_node+0x23a/0xde0
[   99.539617][ T8663]  rose_rt_ioctl+0xa48/0xfb0
[   99.541431][ T8663]  rose_ioctl+0x3ce/0x8b0
[   99.542918][ T8663]  sock_do_ioctl+0xdc/0x300
[   99.544453][ T8663]  sock_ioctl+0x576/0x790
[   99.545892][ T8663]  __se_sys_ioctl+0xfc/0x170
[   99.547451][ T8663]  do_syscall_64+0xfa/0x3b0
[   99.549001][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.551094][ T8663] 
[   99.552048][ T8663] Freed by task 8657:
[   99.553611][ T8663]  kasan_save_track+0x3e/0x80
[   99.555346][ T8663]  kasan_save_free_info+0x46/0x50
[   99.557055][ T8663]  __kasan_slab_free+0x62/0x70
[   99.558665][ T8663]  kfree+0x18e/0x440
[   99.559980][ T8663]  rose_rt_device_down+0x473/0x4c0
[   99.561704][ T8663]  rose_device_event+0x603/0x6a0
[   99.563434][ T8663]  notifier_call_chain+0x1b6/0x3e0
[   99.565287][ T8663]  __dev_notify_flags+0x18d/0x2e0
[   99.567188][ T8663]  netif_change_flags+0xe8/0x1a0
[   99.569007][ T8663]  dev_change_flags+0x130/0x260
[   99.570719][ T8663]  dev_ioctl+0x7b4/0x1150
[   99.572155][ T8663]  sock_do_ioctl+0x22c/0x300
[   99.573696][ T8663]  sock_ioctl+0x576/0x790
[   99.575152][ T8663]  __se_sys_ioctl+0xfc/0x170
[   99.576696][ T8663]  do_syscall_64+0xfa/0x3b0
[   99.578263][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.580214][ T8663] 
[   99.581035][ T8663] The buggy address belongs to the object at ffff888026f48400
[   99.581035][ T8663]  which belongs to the cache kmalloc-512 of size 512
[   99.586347][ T8663] The buggy address is located 50 bytes inside of
[   99.586347][ T8663]  freed 512-byte region [ffff888026f48400, ffff888026f48600)
[   99.590927][ T8663] 
[   99.591751][ T8663] The buggy address belongs to the physical page:
[   99.593871][ T8663] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26f48
[   99.596765][ T8663] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   99.599898][ T8663] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   99.602917][ T8663] page_type: f5(slab)
[   99.604319][ T8663] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   99.607139][ T8663] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   99.609994][ T8663] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[   99.613001][ T8663] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   99.616126][ T8663] head: 00fff00000000002 ffffea00009bd201 00000000ffffffff 00000000ffffffff
[   99.619382][ T8663] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   99.622128][ T8663] page dumped because: kasan: bad access detected
[   99.624352][ T8663] page_owner tracks the page as allocated
[   99.626444][ T8663] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 86, tgid 86 (kworker/u9:3), ts 57268957120, free_ts 29303582294
[   99.632836][ T8663]  post_alloc_hook+0x240/0x2a0
[   99.634582][ T8663]  get_page_from_freelist+0x21e4/0x22c0
[   99.636491][ T8663]  __alloc_frozen_pages_noprof+0x181/0x370
[   99.638707][ T8663]  alloc_pages_mpol+0x232/0x4a0
[   99.640494][ T8663]  allocate_slab+0x8a/0x3b0
[   99.642021][ T8663]  ___slab_alloc+0xbfc/0x1480
[   99.643596][ T8663]  __kmalloc_noprof+0x305/0x4f0
[   99.645222][ T8663]  switchdev_deferred_enqueue+0x2d/0x240
[   99.647133][ T8663]  __set_ageing_time+0xc8/0x150
[   99.648921][ T8663]  br_stp_enable_port+0x13f/0x250
[   99.650887][ T8663]  br_port_carrier_check+0x301/0x3f0
[   99.652768][ T8663]  br_device_event+0x5fa/0x910
[   99.654396][ T8663]  notifier_call_chain+0x1b6/0x3e0
[   99.656270][ T8663]  netif_state_change+0x284/0x3a0
[   99.658094][ T8663]  linkwatch_do_dev+0x117/0x170
[   99.659896][ T8663]  __linkwatch_run_queue+0x56a/0x7e0
[   99.662059][ T8663] page last free pid 5272 tgid 5272 stack trace:
[   99.664366][ T8663]  __free_frozen_pages+0xc71/0xe70
[   99.666121][ T8663]  pagetable_dtor_free+0x2d2/0x3b0
[   99.667827][ T8663]  __mmdrop+0xb5/0x460
[   99.669213][ T8663]  finish_task_switch+0x3ee/0x950
[   99.670966][ T8663]  __schedule+0x173f/0x4d30
[   99.672582][ T8663]  schedule+0x165/0x360
[   99.674222][ T8663]  schedule_hrtimeout_range_clock+0x13c/0x2f0
[   99.676516][ T8663]  do_epoll_wait+0xcac/0xf40
[   99.678028][ T8663]  __x64_sys_epoll_wait+0x1be/0x210
[   99.679931][ T8663]  do_syscall_64+0xfa/0x3b0
[   99.681529][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.683798][ T8663] 
[   99.684715][ T8663] Memory state around the buggy address:
[   99.686740][ T8663]  ffff888026f48300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   99.689499][ T8663]  ffff888026f48380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   99.692191][ T8663] >ffff888026f48400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.694762][ T8663]                                      ^
[   99.696668][ T8663]  ffff888026f48480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.699610][ T8663]  ffff888026f48500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   99.702337][ T8663] ==================================================================
[   99.719378][ T8663] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   99.721797][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.2.708 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[   99.726013][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.729332][ T8663] Call Trace:
[   99.730540][ T8663]  <TASK>
[   99.731573][ T8663]  dump_stack_lvl+0x99/0x250
[   99.733142][ T8663]  ? __asan_memcpy+0x40/0x70
[   99.734784][ T8663]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.736653][ T8663]  ? __pfx__printk+0x10/0x10
[   99.738380][ T8663]  panic+0x2db/0x790
[   99.739743][ T8663]  ? __pfx_preempt_schedule+0x10/0x10
[   99.741523][ T8663]  ? __pfx_panic+0x10/0x10
[   99.742951][ T8663]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   99.744893][ T8663]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.747004][ T8663]  ? rose_transmit_link+0x5c3/0x740
[   99.748847][ T8663]  check_panic_on_warn+0x89/0xb0
[   99.750751][ T8663]  ? rose_transmit_link+0x5c3/0x740
[   99.752672][ T8663]  end_report+0x78/0x160
[   99.754118][ T8663]  kasan_report+0x129/0x150
[   99.755636][ T8663]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   99.757643][ T8663]  ? rose_transmit_link+0x5c3/0x740
[   99.759388][ T8663]  rose_transmit_link+0x5c3/0x740
[   99.761222][ T8663]  ? skb_put+0x11b/0x210
[   99.762800][ T8663]  rose_write_internal+0x11dc/0x1ac0
[   99.764681][ T8663]  ? __pfx_rose_write_internal+0x10/0x10
[   99.766538][ T8663]  ? __timer_delete+0x5d/0x390
[   99.768062][ T8663]  rose_release+0x24e/0x520
[   99.769560][ T8663]  sock_close+0xc3/0x240
[   99.770974][ T8663]  ? __pfx_sock_close+0x10/0x10
[   99.772737][ T8663]  __fput+0x44c/0xa70
[   99.774263][ T8663]  task_work_run+0x1d4/0x260
[   99.775886][ T8663]  ? __pfx_task_work_run+0x10/0x10
[   99.777608][ T8663]  ? kmem_cache_free+0x18f/0x400
[   99.779253][ T8663]  do_exit+0x6b5/0x22e0
[   99.780636][ T8663]  ? do_raw_spin_lock+0x121/0x290
[   99.782341][ T8663]  ? __pfx_do_exit+0x10/0x10
[   99.783933][ T8663]  do_group_exit+0x21c/0x2d0
[   99.785675][ T8663]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.787672][ T8663]  get_signal+0x1286/0x1340
[   99.789344][ T8663]  arch_do_signal_or_restart+0x9a/0x750
[   99.791282][ T8663]  ? rawv6_setsockopt+0x23b/0x5b0
[   99.792965][ T8663]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   99.794955][ T8663]  ? exit_to_user_mode_loop+0x40/0x110
[   99.797014][ T8663]  exit_to_user_mode_loop+0x75/0x110
[   99.799505][ T8663]  do_syscall_64+0x2bd/0x3b0
[   99.801799][ T8663]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.804152][ T8663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.806817][ T8663]  ? exc_page_fault+0x9f/0xf0
[   99.808859][ T8663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.811286][ T8663] RIP: 0033:0x7f25b5d8ebe9
[   99.813370][ T8663] Code: Unable to access opcode bytes at 0x7f25b5d8ebbf.
[   99.816271][ T8663] RSP: 002b:00007f25b6c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   99.819360][ T8663] RAX: 0000000000000000 RBX: 00007f25b5fb6180 RCX: 00007f25b5d8ebe9
[   99.822256][ T8663] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 000000000000000b
[   99.825896][ T8663] RBP: 00007f25b5e11e19 R08: 000000000c000000 R09: 0000000000000000
[   99.829399][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.832754][ T8663] R13: 00007f25b5fb6218 R14: 00007f25b5fb6180 R15: 00007fffc1986168
[   99.836326][ T8663]  </TASK>
[   99.838562][ T8663] Kernel Offset: disabled
[   99.840483][ T8663] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:36:52  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33b3460 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99d9a770 RSP=ffffc900069a7010
R8 =ffff888106f18237 R9 =1ffff11020de3046 R10=dffffc0000000000 R11=ffffffff854c1cc0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1d37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f25b6c6d6c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fce50908bd0 CR3=00000000277ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000ff0000000000 XMM03=0000000000000000 00000000000000ff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff84fb2d03 RBX=dffffc0000000000 RCX=ffff88801fc55640 RDX=ffff88801fc55640
RSI=0000000000000000 RDI=0000000000000000 RBP=000000000000001b RSP=ffffc90002b2ef18
R8 =0000000000000000 R9 =1ffff110224881e4 R10=dffffc0000000000 R11=ffffed10224881e5
R12=0000000000000000 R13=0000000000000000 R14=0000000000000004 R15=ffff888028330c00
RIP=ffffffff81bfb0c1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fce50830740 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e2853483b8 CR3=000000002767a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffff0000000000 XMM05=0000000000000041 000036316e1a366e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff000000000000 XMM09=0000000000000041 000036316e616c77
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
