last executing test programs:

1.21010346s ago: executing program 0 (id=923):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000700640000002503000000000000080026006c09"], 0x80}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

1.176509003s ago: executing program 0 (id=925):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000cf1d6ce522ad413028040a0500000000000000000007000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@report={0x154, 0x20, 0x1, 0x70bd29, 0x25dfdbfb, {0x2b, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x5, 0x4e21, 0xf8c2, 0x0, 0x0, 0x80, 0x87, r6, r7}}, [@algo_auth_trunc={0xff, 0x14, {{'poly1305-arm\x00'}, 0x598, 0x100, "6ea500bfc445c066d7367b7ef8348aa95bf10089522c3b2143be40ba5b4dd1886c9799453462fe3b56b72fe45fee386c4ff80798a33aeabb14bd5d076e3d0d2b8f4eb76d0dc6657eb63f49ac565a93c8f9cba8ca17b3c60abfd04e8fe27cfa77fea2d1b2b6e041acf028175656308f110f180e9ee1e93e1898463eb9bbd5a79b7cbf642b40997ab6ec49857fc22eb6f61fc57a28b32a1345a3c3bea40f10f5750ecdf049c52197367dc95c4f5ea07da952528b"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x84004}, 0x44804)

1.121055338s ago: executing program 2 (id=926):
syz_emit_ethernet(0x102a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000076e000000000f29e03ae08bd0000000000fd2000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r4], 0x44}}, 0x20008040)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r10, <r11=>r10}, &(0x7f0000000600), &(0x7f0000000640)=r9}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r13}, 0x10)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r14, &(0x7f0000000180), 0x40010)

1.019543673s ago: executing program 2 (id=928):
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48)
socket$rds(0x15, 0x5, 0x0) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='snd_soc_dapm_connected\x00', r2}, 0x18)
ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x1000}, {r1, 0xa00b}], 0x2, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x2}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0x2}, {0x6}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
accept4(r7, 0x0, 0x0, 0x80000) (async)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r8, 0x0, 0x0, 0x20, 0x0) (async)
recvmmsg(r8, 0x0, 0x0, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x3, 0x6b}, @timestamp={0x44, 0x4, 0x8e, 0x0, 0x2}, @rr={0x7, 0x7, 0x78, [@local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0)

1.019273896s ago: executing program 0 (id=929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c00168000560100", @ANYRES16], 0x38}}, 0x10)

1.01839316s ago: executing program 0 (id=930):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000d30044190001000000000400000000e5418c8dc0a44dcda642c78d20010000060000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit={{0x14, 0x29, 0x34, 0x7f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x88}}], 0x2, 0x2400c044)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480), 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0xd48, r8, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcfc, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x184, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x178, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x6, @loopback, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}]}, {0x3e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x38c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2f6efac069ee65ac885149b8de95cc7bf1fe992e947e1dd588262f1a91aadfc3"}]}, {0x658, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x398, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x31}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0xd48}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

819.319993ms ago: executing program 2 (id=931):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@remote, 0x2, 0x4, 0x3, 0x0, 0xfffffffe}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0x0, 0x7ff})
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0)

817.847129ms ago: executing program 2 (id=932):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="64020000100001000000000000000000fc01f8d30fa111ca4f45000000000005000000000075b1d0fd86f74db500000000080000002f00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000500000000000000be380000000000000300000000000000f9ffffffffffffff2902000000000000000000000000000000080000000000002c00000000000000080000000000000006000000000000007f0000000000000001010000000000000000030300000000"], 0x264}}, 0x0)

510.607267ms ago: executing program 2 (id=933):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580100001000130468bd700000000000ff000001000000000000000000000000ac1e0101000000000000000000000000550000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000100000000320000000a0101000000000000000000000000000400000000000000070000000000000000000000000000000400000000004000fffffffffffffffffeffffffffffffff7f00000000000000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f600000000000000000000000000000000000000020001fe000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d8000000400000006fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d200"], 0x158}}, 0x804)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x24}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYRESDEC=0x0], 0x3c}}, 0x44010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0)
ioctl$sock_ifreq(r3, 0x894a, &(0x7f0000000080)={'pim6reg0\x00', @ifru_map={0x0, 0x8f, 0x401, 0xff, 0xb, 0x1}})
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
r11 = socket$phonet_pipe(0x23, 0x5, 0x2)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a)
sendfile(r11, r12, 0x0, 0xffffffff000)
connect$phonet_pipe(r11, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10], 0x20}}, 0x0)
syz_emit_ethernet(0x11e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

510.362917ms ago: executing program 1 (id=934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000d00640000002503000000000000080026006c09"], 0x80}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

462.091627ms ago: executing program 0 (id=935):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e}, 0x28) (async)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socket$inet6(0xa, 0x200000000003, 0x87) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff0200000000000000000000000000013b"], 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

460.943477ms ago: executing program 1 (id=936):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500030000000c001680005601e0", @ANYRES16], 0x38}}, 0x10)

351.342529ms ago: executing program 1 (id=937):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001680)={<r1=>r0}) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000016c0)={<r2=>0x0, 0x7}, &(0x7f0000001700)=0x8) (rerun: 32)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001740)={0x299, 0x0, 0x4, 0xc6dd8060, r2}, &(0x7f0000001780)=0x10) (async)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x7, 0x0, 0x0, 0x409}, {0x1ff, 0xffffffffe, 0x4053e2, 0x20}, 0x6, 0x10000001, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x2, 0x0, 0x6, 0xfffffffd}}, 0xe8) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0xe}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, &(0x7f0000000280), 0x0}, 0x20) (async, rerun: 64)
shutdown(r4, 0x1) (rerun: 64)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000040)={0x9, &(0x7f0000000380)=[{@fixed}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@fixed}, {@none}, {@none}]}) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r7)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r8, 0x111, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x18, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x80}, [@RTA_PREF={0x5, 0x1c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3)
sendmsg$L2TP_CMD_NOOP(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x20048080)

271.203293ms ago: executing program 1 (id=938):
socket$alg(0x26, 0x5, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x80000)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)) (async)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) (async)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) (async)
sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000440)="ac093296", 0x4}], 0x1)
sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x480c0}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x480c0}, 0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2719, 0x0, &(0x7f0000000040)=0x4f)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) (async)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) (async)
bind$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

111.380257ms ago: executing program 0 (id=939):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="64020000100001000000000000000000fc01f8d30fa111ca4f45000000000005000000000075b1d0fd86f74db500000000080000002f00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="7f0000010000000000000000000000000000000032000000ac1e000100000000000000000020000000000000000000000000000000000000050000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002bbd70000000000002000000cd00000000000000ab0002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018030000e8e24c3ae283dc390b8d80c6a0f0560d4f0c3a14fef272e63d468db1a2a10691c030a64c39b96b1f3621a2bc5b09e7c0d21d2190dd06bfd4dd27271a42fb8a98f50caf1741b5014e8c2cd3882929542340bca70fd71ff83315acc873db557835f6fa14001c001700000000000000000000000000000000000000000000000000ac000700ac1414bb00000000000000000000000000000000000000000000ffffffffffff4e2110004e228000000000206c000000", @ANYRES32, @ANYRES32, @ANYBLOB="05000000000000000500000000000000be380000000000000300000000000000f9ffffffffffffff2902000000000000000000000000000000080000000000002c00000000000000080000000000000006000000000000007f0000000000000001010000000000000000030300000000"], 0x264}}, 0x0)

110.961346ms ago: executing program 2 (id=940):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001a0001002bbd7000000000080a0020"], 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)
socket$netlink(0x10, 0x3, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
bind$unix(r4, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x4, 0x4, {0xa, 0x4e22, 0x6f2, @mcast2, 0x935}}}, 0x32)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r6 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000140)=0x9) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000140)=0x9)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000021"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

110.444305ms ago: executing program 1 (id=941):
socket(0x11, 0x3, 0x0) (async)
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)
socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0xe8, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a144ca0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fd20378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf40e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3878}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3228575b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3277c258}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ac75f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x140c37dd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fb50e8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x423132d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf93b640}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33c08313}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xadcaab1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e61b4d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40709216}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x605972f0}]}]}]}, 0xe8}}, 0x4)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x34}}, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r10=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x1, 0x4) (async)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f000114600000320600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1)

0s ago: executing program 1 (id=942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r4}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
unshare(0x6a060000) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff000)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00')
ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c00000004002b0500000084fdffffff0a0000000200000000000022000000000000000105000000200000c8636100302e61615f6100610067a4586d70a30b1e9b113f1a947ab38378df520c3aa6288081b6f5a2d05d426c48ea45f495de8619fd98755b2eeae67b231d14af3b97a869443bfad30cc2d0a3ddf0e63702c4e282882678b0e94e4662bf29485392089150913b"], 0x0, 0x4c}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="010802040000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4048091) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000490000000e0001006e657467c87673696d0000000f0002006e657464657673696d3000000800730000000000"], 0x3c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4020010)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46488' (ED25519) to the list of known hosts.
syzkaller login: [   41.572718][ T5753] cgroup: Unknown subsys name 'net'
[   41.686715][ T5753] cgroup: Unknown subsys name 'cpuset'
[   41.691335][ T5753] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.029268][ T5753] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.710876][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.715474][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.718956][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.722355][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.725696][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.778593][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.781928][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.785213][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.789553][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.792694][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.827164][ T5212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.834176][ T5212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.836942][ T5212] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.840438][ T5212] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.843243][ T5212] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.901172][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   47.055866][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.059947][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.063198][ T5825] bridge_slave_0: entered allmulticast mode
[   47.067185][ T5825] bridge_slave_0: entered promiscuous mode
[   47.072777][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.076007][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.079746][ T5825] bridge_slave_1: entered allmulticast mode
[   47.083733][ T5825] bridge_slave_1: entered promiscuous mode
[   47.141214][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.163261][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   47.173446][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.247805][ T5825] team0: Port device team_slave_0 added
[   47.259384][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   47.273363][ T5825] team0: Port device team_slave_1 added
[   47.334056][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.337228][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.340878][ T5830] bridge_slave_0: entered allmulticast mode
[   47.344815][ T5830] bridge_slave_0: entered promiscuous mode
[   47.349343][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.351703][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.360798][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.371573][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.374674][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.377806][ T5830] bridge_slave_1: entered allmulticast mode
[   47.382897][ T5830] bridge_slave_1: entered promiscuous mode
[   47.386704][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.389435][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.398121][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.442881][ T5825] hsr_slave_0: entered promiscuous mode
[   47.445272][ T5825] hsr_slave_1: entered promiscuous mode
[   47.479428][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.496921][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.499645][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.502082][ T5833] bridge_slave_0: entered allmulticast mode
[   47.504823][ T5833] bridge_slave_0: entered promiscuous mode
[   47.508612][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.531474][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.534592][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.537703][ T5833] bridge_slave_1: entered allmulticast mode
[   47.542286][ T5833] bridge_slave_1: entered promiscuous mode
[   47.572591][ T5830] team0: Port device team_slave_0 added
[   47.593678][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.598336][ T5830] team0: Port device team_slave_1 added
[   47.603074][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.670673][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.673042][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.681675][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.705149][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.707494][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.716284][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.722545][ T5833] team0: Port device team_slave_0 added
[   47.737242][ T5833] team0: Port device team_slave_1 added
[   47.788172][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.791428][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.802800][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.808932][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.811905][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.822827][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.830466][ T5830] hsr_slave_0: entered promiscuous mode
[   47.832784][ T5830] hsr_slave_1: entered promiscuous mode
[   47.834948][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   47.836925][ T5830] Cannot create hsr debugfs directory
[   47.908764][ T5833] hsr_slave_0: entered promiscuous mode
[   47.912069][ T5833] hsr_slave_1: entered promiscuous mode
[   47.915097][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   47.917529][ T5833] Cannot create hsr debugfs directory
[   47.967776][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.983300][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.008558][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.031433][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.123090][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.131087][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.142607][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.154898][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.190614][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.195369][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.203391][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.208121][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.228491][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.266375][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   48.284920][ T3902] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.287293][ T3902] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.302852][ T3902] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.305238][ T3902] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.346812][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.353716][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.360678][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.385547][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   48.400055][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   48.410818][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.413157][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.421448][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.423696][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.431873][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.434376][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.439656][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.441902][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.477346][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.480813][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.519821][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.575199][ T5825] veth0_vlan: entered promiscuous mode
[   48.586055][ T5825] veth1_vlan: entered promiscuous mode
[   48.610565][ T5825] veth0_macvtap: entered promiscuous mode
[   48.614743][ T5825] veth1_macvtap: entered promiscuous mode
[   48.635611][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.645943][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.651742][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.659925][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.664591][ T5723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.667695][ T5723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.672815][ T5723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.675899][ T5723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.735403][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.740105][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.743759][ T5833] veth0_vlan: entered promiscuous mode
[   48.766179][ T5830] veth0_vlan: entered promiscuous mode
[   48.771410][ T5833] veth1_vlan: entered promiscuous mode
[   48.774554][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.779710][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.790461][ T5830] veth1_vlan: entered promiscuous mode
[   48.799176][ T5828] Bluetooth: hci0: command tx timeout
[   48.814966][ T5833] veth0_macvtap: entered promiscuous mode
[   48.823460][ T5833] veth1_macvtap: entered promiscuous mode
[   48.829718][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.848325][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.857922][ T5830] veth0_macvtap: entered promiscuous mode
[   48.862303][ T5830] veth1_macvtap: entered promiscuous mode
[   48.875682][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.879177][ T5828] Bluetooth: hci1: command tx timeout
[   48.882776][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.889349][ T5828] Bluetooth: hci2: command tx timeout
[   48.897801][ T5887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.901838][ T5887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.905984][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.912743][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.930866][ T5887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.937793][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.946860][ T5887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.951828][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.966169][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.970785][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.009540][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.014355][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.041745][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.045028][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.098060][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   49.108646][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.123508][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.140493][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.143445][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.256495][ T5893] netlink: zone id is out of range
[   49.271248][ T5893] netlink: zone id is out of range
[   49.304770][ T5893] netlink: zone id is out of range
[   49.307027][ T5893] netlink: zone id is out of range
[   49.309603][ T5893] netlink: zone id is out of range
[   49.311528][ T5893] netlink: zone id is out of range
[   49.313259][ T5893] netlink: zone id is out of range
[   49.315289][ T5893] netlink: zone id is out of range
[   49.317444][ T5893] netlink: zone id is out of range
[   49.328264][ T5893] netlink: zone id is out of range
[   49.417675][ T5906] sctp: [Deprecated]: syz.2.5 (pid 5906) Use of struct sctp_assoc_value in delayed_ack socket option.
[   49.417675][ T5906] Use struct sctp_sack_info instead
[   49.446644][ T5906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5'.
[   49.559481][ T5908] netlink: 'syz.1.6': attribute type 9 has an invalid length.
[   49.562163][ T5908] netlink: 'syz.1.6': attribute type 7 has an invalid length.
[   49.564595][ T5908] netlink: 'syz.1.6': attribute type 8 has an invalid length.
[   49.581558][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   49.622345][ T5915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.675216][ T5920] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   49.683592][ T5921] netlink: 'syz.0.8': attribute type 9 has an invalid length.
[   49.687101][ T5921] netlink: 'syz.0.8': attribute type 9 has an invalid length.
[   49.690138][ T5915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.715254][ T5920] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9'.
[   49.774393][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'.
[   49.836004][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11'.
[   50.622838][ T5947] netlink: 240 bytes leftover after parsing attributes in process `syz.0.17'.
[   50.793446][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.879048][ T5212] Bluetooth: hci0: command tx timeout
[   50.953339][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'.
[   50.956426][ T5974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.25'.
[   50.969570][ T5212] Bluetooth: hci2: command tx timeout
[   50.972130][ T5212] Bluetooth: hci1: command tx timeout
[   51.011425][ T5980] netlink: 'syz.1.26': attribute type 32 has an invalid length.
[   51.092162][ T5915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.257589][ T6009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.304470][ T6009] bridge_slave_1: left allmulticast mode
[   51.306384][ T6009] bridge_slave_1: left promiscuous mode
[   51.309448][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.316539][ T6009] bridge_slave_0: left allmulticast mode
[   51.320065][ T6009] bridge_slave_0: left promiscuous mode
[   51.322499][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.395146][ T6015] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.562266][ T6028] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   51.733714][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.736789][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.822994][ T6040] netlink: 'syz.0.41': attribute type 10 has an invalid length.
[   51.830837][ T6040] 8021q: adding VLAN 0 to HW filter on device team0
[   51.834885][ T6040] bond0: (slave team0): Enslaving as an active interface with an up link
[   51.919914][ T6048] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   52.601755][ T5915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.677663][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.693502][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.708290][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.722479][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.787336][ T6110] bond1: entered promiscuous mode
[   52.792163][ T6110] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.887895][ T6110] bond1 (unregistering): Released all slaves
[   52.889231][ T6117] Bluetooth: MGMT ver 1.23
[   52.960989][   T54] Bluetooth: hci0: command tx timeout
[   53.042678][   T54] Bluetooth: hci1: command tx timeout
[   53.044991][   T54] Bluetooth: hci2: command 0x040f tx timeout
[   53.182642][ T6144] netlink: 'syz.2.55': attribute type 1 has an invalid length.
[   53.207966][ T6144] bond1 (unregistering): Released all slaves
[   53.343074][ T6163] netlink: 'syz.1.57': attribute type 1 has an invalid length.
[   53.385499][ T6163] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.473769][ T6163] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.536909][ T6163] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.593977][ T6163] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.659776][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.667775][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.690685][ T5887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.694701][ T5887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.076050][ T6230] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.146979][ T6227] syz.2.63 uses obsolete (PF_INET,SOCK_PACKET)
[   54.171653][ T6230] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.236824][ T6230] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.310659][ T6230] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.316017][ T6237] __nla_validate_parse: 12 callbacks suppressed
[   54.316027][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   54.374541][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.382453][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.393053][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.406455][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.515076][ T6241] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.577170][ T6241] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.633132][ T6241] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.693516][ T6241] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.038960][ T5828] Bluetooth: hci0: command tx timeout
[   55.118959][ T5828] Bluetooth: hci2: command 0x040f tx timeout
[   55.119038][ T5977] Bluetooth: hci1: command tx timeout
[   55.136867][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880397a4800: rx timeout, send abort
[   55.140364][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880397a4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   56.418483][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880397a4400: rx timeout, send abort
[   56.421376][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880397a4400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   56.523629][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   56.734322][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'.
[   56.738524][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.741125][ T6258] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.956617][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'.
[   57.014043][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'.
[   57.158402][ T6279] Zero length message leads to an empty skb
[   57.200106][ T5977] Bluetooth: hci2: command 0x040f tx timeout
[   57.845713][ T6285] netlink: 168 bytes leftover after parsing attributes in process `syz.2.81'.
[   57.992532][ T6295] validate_nla: 2 callbacks suppressed
[   57.992547][ T6295] netlink: 'syz.2.82': attribute type 10 has an invalid length.
[   58.004614][ T6295] 8021q: adding VLAN 0 to HW filter on device team0
[   58.012672][ T6295] bond0: (slave team0): Enslaving as an active interface with an up link
[   58.012817][ T6286] net_ratelimit: 94 callbacks suppressed
[   58.012829][ T6286] netlink: zone id is out of range
[   58.019953][ T6295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.82'.
[   58.030520][ T6286] netlink: zone id is out of range
[   58.053315][ T6286] netlink: zone id is out of range
[   58.056385][ T6286] netlink: zone id is out of range
[   58.058623][ T6286] netlink: zone id is out of range
[   58.063991][ T6286] netlink: zone id is out of range
[   58.066206][ T6286] netlink: zone id is out of range
[   58.071777][ T6286] netlink: zone id is out of range
[   58.073990][ T6286] netlink: zone id is out of range
[   58.076139][ T6286] netlink: zone id is out of range
[   58.273109][ T5834] IPVS: starting estimator thread 0...
[   58.360582][ T6302] IPVS: using max 47 ests per chain, 112800 per kthread
[   58.547167][ T6312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.88'.
[   58.637661][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.644171][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[   58.653095][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.655790][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.675508][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.788986][ T6324] netlink: 'syz.0.93': attribute type 9 has an invalid length.
[   58.791548][ T6324] netlink: 'syz.0.93': attribute type 9 has an invalid length.
[   58.891805][ T6327] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.94'.
[   59.203220][ T6334] sctp: [Deprecated]: syz.1.97 (pid 6334) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.203220][ T6334] Use struct sctp_sack_info instead
[   59.317325][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a214800: rx timeout, send abort
[   59.321252][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811a214800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   59.648270][ T6358] sctp: [Deprecated]: syz.0.104 (pid 6358) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.648270][ T6358] Use struct sctp_sack_info instead
[   59.733276][ T6364] __nla_validate_parse: 1 callbacks suppressed
[   59.733285][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'.
[   59.770553][ T6366] netlink: 'syz.0.108': attribute type 9 has an invalid length.
[   59.773761][ T6366] netlink: 'syz.0.108': attribute type 9 has an invalid length.
[   60.592145][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a214c00: rx timeout, send abort
[   60.596118][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811a214c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.691694][ T6374] sctp: [Deprecated]: syz.0.111 (pid 6374) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.691694][ T6374] Use struct sctp_sack_info instead
[   60.734375][ T6376] macvlan2: entered promiscuous mode
[   60.736250][ T6376] macvlan2: entered allmulticast mode
[   60.847819][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'.
[   60.872445][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'.
[   60.875431][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888108bfc400: rx timeout, send abort
[   60.875574][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888108bfc400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   60.885191][ T6382] netlink: 'syz.0.114': attribute type 2 has an invalid length.
[   60.887695][ T6382] netlink: 'syz.0.114': attribute type 1 has an invalid length.
[   60.890420][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[   60.895398][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'.
[   60.960380][ T6389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.004043][ T6389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.067522][ T6389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.118892][ T6389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.617302][ T6419] sctp: [Deprecated]: syz.2.123 (pid 6419) Use of struct sctp_assoc_value in delayed_ack socket option.
[   61.617302][ T6419] Use struct sctp_sack_info instead
[   61.652977][ T6421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.124'.
[   61.713046][ T6423] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.752338][ T6423] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.804092][ T6423] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.863067][ T6423] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.917577][ T5853] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.925148][ T5853] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.932731][ T5853] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.941444][ T5853] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.990097][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'.
[   61.994740][ T6431] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   62.140454][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88803998e800: rx timeout, send abort
[   62.145361][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803998e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   62.177078][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.186486][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.197681][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.205572][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.262079][ T6456] netlink: 'syz.0.135': attribute type 1 has an invalid length.
[   62.300169][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.305865][ T6452] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.370081][ T5887] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.373305][ T5887] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.376125][ T5887] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.380585][ T5887] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.676997][ T6475] netlink: 44 bytes leftover after parsing attributes in process `syz.1.141'.
[   62.733253][ T6479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.142'.
[   62.736383][ T6479] unsupported nlmsg_type 40
[   62.772276][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   62.784928][ T6485] sctp: [Deprecated]: syz.0.144 (pid 6485) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.784928][ T6485] Use struct sctp_sack_info instead
[   62.981235][ T6503] syz.1.151 uses old SIOCAX25GETINFO
[   62.986016][ T6505] sctp: [Deprecated]: syz.0.152 (pid 6505) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.986016][ T6505] Use struct sctp_sack_info instead
[   63.230288][ T6539] netlink: 'syz.2.163': attribute type 9 has an invalid length.
[   63.582179][ T6553] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.613541][ T6553] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.674563][ T6553] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.712913][ T6553] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.779322][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.792238][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.805195][ T5887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.818384][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.033050][ T6563] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.080966][ T6566] netlink: 'syz.1.171': attribute type 9 has an invalid length.
[   64.101334][ T6563] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.156969][ T6563] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.194197][ T6563] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.437781][ T6580] netlink: 'syz.1.176': attribute type 8 has an invalid length.
[   64.457873][ T6580] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.462464][ T6580] bond0: (slave bond1): Enslaving as an active interface with an up link
[   64.512936][ T6583] netlink: 'syz.1.177': attribute type 9 has an invalid length.
[   64.984205][ T6603] __nla_validate_parse: 17 callbacks suppressed
[   64.984216][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   64.990515][ T6603] veth1_macvtap: left promiscuous mode
[   65.038476][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'.
[   65.697888][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.705941][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.720393][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.730620][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.766542][ T6606] netlink: 168 bytes leftover after parsing attributes in process `syz.0.183'.
[   65.910360][ T6618] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.943687][ T6618] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.992542][ T6618] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.035383][ T6618] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.762661][ T6636] netlink: 596 bytes leftover after parsing attributes in process `syz.2.189'.
[   68.906957][ T6647] netlink: 168 bytes leftover after parsing attributes in process `syz.2.190'.
[   69.042263][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'.
[   69.119335][ T6654] net_ratelimit: 96 callbacks suppressed
[   69.119348][ T6654] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   69.496980][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.523489][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.548121][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.566954][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.628562][ T6673] netlink: 'syz.0.198': attribute type 9 has an invalid length.
[   69.631422][ T6673] netlink: 'syz.0.198': attribute type 9 has an invalid length.
[   69.635821][   T24] IPVS: starting estimator thread 0...
[   69.654408][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.662274][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.681897][ T6676] netlink: 168 bytes leftover after parsing attributes in process `syz.2.199'.
[   69.719072][ T6674] IPVS: using max 80 ests per chain, 192000 per kthread
[   69.783260][ T6686] !: renamed from dummy0
[   69.783545][ T6679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.200'.
[   69.997160][ T6709] pim6reg1: entered promiscuous mode
[   70.003268][ T6709] pim6reg1: entered allmulticast mode
[   70.081385][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'.
[   70.117543][ T6709] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.120660][ T6709] team0: Port device bond2 added
[   70.505650][ T6738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.516335][ T6738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.524350][ T6738] bond0 (unregistering): (slave bond1): Releasing backup interface
[   70.532008][ T6738] bond0 (unregistering): Released all slaves
[   70.554929][ T6742] netlink: 'syz.2.208': attribute type 6 has an invalid length.
[   70.564871][ T6742] netlink: 'syz.2.208': attribute type 9 has an invalid length.
[   70.567595][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'.
[   70.677900][ T6746] netlink: 'syz.1.209': attribute type 10 has an invalid length.
[   70.796949][ T6752] netlink: 'syz.0.211': attribute type 29 has an invalid length.
[   70.802042][ T6752] netlink: 'syz.0.211': attribute type 29 has an invalid length.
[   70.806015][ T6752] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   70.845379][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'.
[   70.895957][ T6759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   70.963952][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.967332][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.992153][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[   71.071348][ T6771] netlink: 168 bytes leftover after parsing attributes in process `syz.1.215'.
[   71.316031][ T6777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'.
[   71.476148][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   71.571469][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'.
[   71.684419][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[   72.144194][ T6800] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   72.146981][ T6800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'.
[   72.151057][ T6800] netlink: 'syz.2.223': attribute type 1 has an invalid length.
[   72.167461][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880253f9000: rx timeout, send abort
[   72.170321][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880253f9000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   72.230150][   T33] audit: type=1107 audit(1754306767.401:2): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   73.440983][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880253f9400: rx timeout, send abort
[   73.444550][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880253f9400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.002761][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.008367][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.161077][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.164116][ T5887] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.167884][ T5887] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.171745][ T5887] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.174940][ T5887] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.178155][ T5887] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.181455][ T5887] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.184210][ T5887] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.392848][ T6933] tipc: Started in network mode
[   74.394659][ T6933] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   74.397743][ T6933] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   74.403363][ T6934] tipc: Enabling of bearer <eth:ipvlan1> rejected, already enabled
[   75.130548][ T6994] __nla_validate_parse: 26 callbacks suppressed
[   75.130560][ T6994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.274'.
[   75.159438][ T6997] netlink: 44 bytes leftover after parsing attributes in process `syz.0.275'.
[   75.271995][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'.
[   75.433895][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'.
[   75.509808][   T24] tipc: Node number set to 10136234
[   75.556623][ T7017] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   75.559393][ T7016] IPVS: stopping backup sync thread 7017 ...
[   75.626153][ T7021] netlink: 76 bytes leftover after parsing attributes in process `syz.1.282'.
[   75.651166][ T7023] netlink: 168 bytes leftover after parsing attributes in process `syz.1.283'.
[   76.017852][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.288'.
[   76.084525][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'.
[   76.146084][ T7072] validate_nla: 1 callbacks suppressed
[   76.146095][ T7072] netlink: 'syz.1.297': attribute type 1 has an invalid length.
[   76.151210][ T7072] netlink: 244 bytes leftover after parsing attributes in process `syz.1.297'.
[   76.155794][ T7072] netlink: 'syz.1.297': attribute type 21 has an invalid length.
[   76.159189][ T7072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.297'.
[   76.162261][ T7072] netlink: 'syz.1.297': attribute type 5 has an invalid length.
[   76.164887][ T7072] netlink: 'syz.1.297': attribute type 6 has an invalid length.
[   76.176601][ T7072] vlan3: entered promiscuous mode
[   76.187197][ T7072] syz_tun: entered promiscuous mode
[   76.223322][ T7079] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.293773][ T7091] netlink: 'syz.0.299': attribute type 10 has an invalid length.
[   76.297013][ T7091] dummy0: entered promiscuous mode
[   76.299207][ T7091] dummy0: entered allmulticast mode
[   76.302300][ T7091] bridge0: port 3(dummy0) entered blocking state
[   76.304571][ T7091] bridge0: port 3(dummy0) entered disabled state
[   76.654931][ T7137] netlink: 'syz.2.315': attribute type 1 has an invalid length.
[   76.899089][ T7152] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.901908][ T7152] syzkaller0: entered promiscuous mode
[   76.903731][ T7152] syzkaller0: entered allmulticast mode
[   76.981850][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[   77.742114][ T7151] tipc: Resetting bearer <eth:syzkaller0>
[   77.754903][ T7151] tipc: Disabling bearer <eth:syzkaller0>
[   77.895089][ T7184] syzkaller1: entered promiscuous mode
[   77.897167][ T7184] syzkaller1: entered allmulticast mode
[   78.727497][ T7258] netlink: 'syz.2.342': attribute type 62 has an invalid length.
[   78.783218][ T7271] netlink: 'syz.0.344': attribute type 4 has an invalid length.
[   79.084682][ T7313] netlink: 'syz.0.356': attribute type 12 has an invalid length.
[   79.173863][ T7324] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.252238][ T7324] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.318194][ T7324] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.355302][ T7324] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.415757][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.423336][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.434384][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.446280][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.839045][ T5977] Bluetooth: hci2: command 0x040f tx timeout
[   80.254032][ T7365] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.282024][ T7365] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.322982][ T7365] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.422383][ T7365] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   80.455476][ T7380] __nla_validate_parse: 36 callbacks suppressed
[   80.455497][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   80.490730][ T7382] netlink: 14 bytes leftover after parsing attributes in process `syz.2.379'.
[   80.540628][ T7382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.544899][ T7382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.550388][ T7382] bond0 (unregistering): (slave team0): Releasing backup interface
[   80.553705][ T7382] bond0 (unregistering): Released all slaves
[   80.869031][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.880446][ T5887] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.894726][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.906498][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.027632][ T7391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.382'.
[   81.057754][ T7393] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.144975][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'.
[   81.152404][ T7393] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.194987][ T7393] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.210473][    T9] cfg80211: failed to load regulatory.db
[   81.303970][ T7393] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.323951][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'.
[   81.326983][ T7401] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   81.365021][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   81.420340][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.430423][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.442437][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.455048][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.533676][ T7420] netlink: 44 bytes leftover after parsing attributes in process `syz.1.390'.
[   81.572012][ T7422] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.620339][ T7422] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.622987][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.393'.
[   81.662618][ T7432] sctp: [Deprecated]: syz.0.392 (pid 7432) Use of int in max_burst socket option.
[   81.662618][ T7432] Use struct sctp_assoc_value instead
[   81.686835][ T7422] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.734781][ T7422] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   82.301212][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   82.312155][ T5887] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   82.324457][ T5887] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   82.333314][ T5887] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   82.681058][ T7473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.404'.
[   82.744736][ T7480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.405'.
[   83.106497][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.127814][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.513165][ T7514] tipc: Started in network mode
[   83.514964][ T7514] tipc: Node identity b64603f3494a, cluster identity 4711
[   83.517651][ T7514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.522027][ T7514] syzkaller0: entered promiscuous mode
[   83.524646][ T7514] syzkaller0: entered allmulticast mode
[   83.541165][ T7514] tipc: Resetting bearer <eth:syzkaller0>
[   83.546235][ T7513] tipc: Resetting bearer <eth:syzkaller0>
[   83.557648][ T7513] tipc: Disabling bearer <eth:syzkaller0>
[   83.791711][ T7523] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.873399][ T7523] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.925881][ T7523] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.991512][ T7523] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   84.056525][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.066188][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.074734][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.095460][ T5887] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.497606][ T7582] __nla_validate_parse: 7 callbacks suppressed
[   85.497618][ T7582] netlink: 48 bytes leftover after parsing attributes in process `syz.2.435'.
[   85.505057][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'.
[   85.508182][ T7582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.568648][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[   85.654147][ T7596] netlink: 248 bytes leftover after parsing attributes in process `syz.2.440'.
[   85.906870][ T7614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.442'.
[   85.950954][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[   86.045961][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'.
[   86.220737][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'.
[   86.303615][ T7662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.451'.
[   86.573064][ T7683] smc: net device bond0 applied user defined pnetid SYZ2
[   86.578362][ T7683] netlink: 14 bytes leftover after parsing attributes in process `syz.0.456'.
[   86.651778][ T7683] smc: removing net device bond0 with user defined pnetid SYZ2
[   86.655231][ T7683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.660922][ T7683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.667155][ T7683] bond0 (unregistering): (slave team0): Releasing backup interface
[   86.673870][ T7683] bond0 (unregistering): Released all slaves
[   87.351377][ T7724] netlink: 'syz.0.468': attribute type 1 has an invalid length.
[   87.355769][ T7724] netlink: 'syz.0.468': attribute type 1 has an invalid length.
[   87.882759][ T7752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.922882][ T7752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.981336][ T7752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.026224][ T7752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.111421][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.128651][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.139770][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.148314][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.175397][ T7759] bond0: entered promiscuous mode
[   88.177744][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.237996][ T7759] bond0 (unregistering): Released all slaves
[   88.353874][ T7767] tc_dump_action: action bad kind
[   88.503818][ T7787] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   88.506965][ T7787] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   88.857405][ T7841] netlink: 'syz.2.496': attribute type 1 has an invalid length.
[   88.918167][ T7841] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.921826][ T7841] bond0: (slave bond2): making interface the new active one
[   88.924675][ T7841] bond0: (slave bond2): Enslaving as an active interface with an up link
[   88.932956][ T7841] bond0: (slave gretap1): Enslaving as a backup interface with an up link
[   88.938127][ T7841] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.004528][ T7868] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.014619][ T7868] macvlan1: entered promiscuous mode
[   89.016960][ T7868] ipvlan0: entered promiscuous mode
[   89.021709][ T7868] ipvlan0: left promiscuous mode
[   89.025690][ T7868] macvlan1: left promiscuous mode
[   89.066999][ T5932] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   89.080089][ T5932] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   89.109225][ T5932] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   89.124155][ T7881] netlink: 'syz.0.506': attribute type 1 has an invalid length.
[   89.461566][ T6904] IPVS: starting estimator thread 0...
[   89.464671][ T7916] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   89.506086][ T7937] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   89.509543][ T7936] IPVS: stopping backup sync thread 7937 ...
[   89.539458][ T7941] netlink: 'syz.1.520': attribute type 1 has an invalid length.
[   89.552185][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.554742][ T7927] IPVS: using max 79 ests per chain, 189600 per kthread
[   90.507538][ T7991] netlink: 'syz.1.537': attribute type 3 has an invalid length.
[   90.515238][ T7991] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.533049][ T7997] __nla_validate_parse: 29 callbacks suppressed
[   90.533060][ T7997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.539'.
[   90.568627][ T8000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.540'.
[   90.633601][ T8005] netlink: 10 bytes leftover after parsing attributes in process `syz.0.542'.
[   90.662752][ T7991] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.727233][ T7991] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.801080][ T7991] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   90.892584][ T5853] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.900818][ T5853] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.907791][ T5853] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.916377][ T5853] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.973808][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.547'.
[   91.020360][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.1.548'.
[   91.866439][ T8048] openvswitch: netlink: Message has 4 unknown bytes.
[   91.868923][ T8048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.897065][ T8050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.554'.
[   91.941897][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[   91.951943][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[   92.031504][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'.
[   92.134573][ T8067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.558'.
[   92.187893][ T8069] can: request_module (can-proto-4) failed.
[   92.223101][ T8077] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.247557][ T8082] netlink: 'syz.0.563': attribute type 1 has an invalid length.
[   92.252979][ T8082] (unnamed net_device) (uninitialized): option ad_select: invalid value (104)
[   92.289339][ T8077] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.342203][ T8077] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.393299][ T8077] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.403094][ T8098] netlink: 'syz.2.566': attribute type 14 has an invalid length.
[   92.406753][ T8098] netlink: 'syz.2.566': attribute type 14 has an invalid length.
[   92.444402][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.457251][ T5887] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.466852][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.476724][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.564571][ T8141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.613147][ T8141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.704931][ T8141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.778271][ T8141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.843117][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.859377][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.881019][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.894412][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.029010][ T8180] syzkaller1: entered promiscuous mode
[   94.030974][ T8180] syzkaller1: entered allmulticast mode
[   94.129647][ T8195] bond5: entered promiscuous mode
[   94.131997][ T8195] 8021q: adding VLAN 0 to HW filter on device bond5
[   95.153742][ T8267] delete_channel: no stack
[   95.685434][ T8298] __nla_validate_parse: 18 callbacks suppressed
[   95.685448][ T8298] netlink: 96 bytes leftover after parsing attributes in process `syz.1.608'.
[   95.802364][ T8302] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.858060][ T8303] geneve2: entered promiscuous mode
[   95.861749][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   95.865596][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   95.871394][ T8302] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.602488][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[   96.641498][ T8310] netlink: 88 bytes leftover after parsing attributes in process `syz.2.612'.
[   96.726085][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[   96.816275][ T8322] netlink: 56 bytes leftover after parsing attributes in process `syz.2.615'.
[   96.850834][ T8324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.616'.
[   97.273197][ T8302] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.277566][ T8302] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.334837][ T8302] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   97.339613][ T8302] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.398089][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.403060][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   97.415409][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.419432][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   97.434101][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.436864][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   97.451748][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.455105][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   97.508781][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[   97.583827][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'.
[   97.720418][ T8352] netlink: 140 bytes leftover after parsing attributes in process `syz.1.624'.
[   97.749713][ T8356] netlink: 14 bytes leftover after parsing attributes in process `syz.2.625'.
[   98.431938][ T8376] netlink: 'syz.1.632': attribute type 9 has an invalid length.
[   98.462141][ T8377] netlink: 'syz.1.632': attribute type 9 has an invalid length.
[   98.535597][ T8384] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[   99.299241][ T8387] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.302797][ T8387] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   99.362516][ T8387] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.366856][ T8387] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   99.403266][ T8387] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.409600][ T8387] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   99.420442][ T8400] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[   99.434428][ T8400] bond6: entered promiscuous mode
[   99.436579][ T8400] 8021q: adding VLAN 0 to HW filter on device bond6
[   99.451780][ T8387] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.455144][ T8387] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   99.524195][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.528899][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   99.544615][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.547619][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   99.558068][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.561441][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   99.571772][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.574535][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   99.615388][ T8408] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.676735][ T8410] netlink: 'syz.1.644': attribute type 9 has an invalid length.
[   99.716915][ T8408] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.725221][ T8415] netlink: 'syz.1.645': attribute type 1 has an invalid length.
[   99.781507][ T8408] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.862656][ T8408] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.918485][ T8419] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[   99.921443][ T8419] netlink: 'syz.1.646': attribute type 2 has an invalid length.
[   99.924718][ T8419] netlink: 'syz.1.646': attribute type 29 has an invalid length.
[   99.929250][ T8419] netlink: 'syz.1.646': attribute type 29 has an invalid length.
[   99.934746][ T8419] unsupported nla_type 58
[   99.970070][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.987198][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.991424][ T8424] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.994789][ T8424] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  100.012659][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.016247][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.023248][ T8424] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.027084][ T8424] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  100.134729][ T8424] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.140224][ T8424] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  100.218239][ T8424] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  100.227271][ T8424] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  100.355570][ T8447] pim6reg1: entered allmulticast mode
[  100.554370][ T8459] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.641233][ T8459] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.682229][ T8459] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.721881][ T8459] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.857108][ T5887] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.861613][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  100.875599][ T5887] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.879945][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  100.891710][ T5887] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.894454][ T5887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  100.905224][ T5887] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.908083][ T5887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  101.126201][ T5887] syzkaller0: tun_net_xmit 76
[  101.126278][ T8465] syzkaller0: create flow: hash 4091458339 index 1
[  101.128403][ T5887] syzkaller0: tun_net_xmit 48
[  101.147361][ T8464] syzkaller0: delete flow: hash 4091458339 index 1
[  101.954272][ T8474] netlink: 'syz.2.658': attribute type 5 has an invalid length.
[  101.957067][ T8474] __nla_validate_parse: 14 callbacks suppressed
[  101.957074][ T8474] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.658'.
[  102.708074][ T8502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.661'.
[  102.965611][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'.
[  103.217243][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.2.670'.
[  103.252954][ T8538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'.
[  103.276133][ T8538] bond7: entered promiscuous mode
[  103.278619][ T8538] 8021q: adding VLAN 0 to HW filter on device bond7
[  103.333898][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[  103.587859][ T8561] tc_dump_action: action bad kind
[  103.652993][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[  103.703271][ T8568] validate_nla: 1 callbacks suppressed
[  103.703283][ T8568] netlink: 'syz.2.681': attribute type 9 has an invalid length.
[  103.746696][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.682'.
[  103.770265][ T8572] bond4: entered promiscuous mode
[  103.772789][ T8572] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.830104][ T8572] bond4 (unregistering): Released all slaves
[  103.950707][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.958808][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.971095][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.979174][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.042564][ T8586] netlink: 'syz.0.688': attribute type 6 has an invalid length.
[  104.048990][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'.
[  104.111088][ T8592] netlink: 'syz.0.690': attribute type 9 has an invalid length.
[  104.113927][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'.
[  104.266858][ T8598] veth0_to_team: entered promiscuous mode
[  104.274999][ T8598] veth0_to_team: entered allmulticast mode
[  105.110992][ T8657] nft_compat: unsupported protocol 1
[  105.501671][ T8693] bond0 (unregistering): (slave bond2): Releasing backup interface
[  105.506622][ T8693] bond0 (unregistering): (slave gretap1): Releasing backup interface
[  105.511046][ T8693] bond0 (unregistering): Released all slaves
[  105.573171][ T8705] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.575951][ T8705] IPv6: NLM_F_CREATE should be set when creating new route
[  105.596464][ T8707] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.600482][ T8707] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.651551][ T8707] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.654802][ T8707] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.670731][ T8711] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  105.711636][ T8707] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.715229][ T8707] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.752609][ T8707] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.755986][ T8707] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  105.804159][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.807002][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  105.815600][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.819301][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  105.825940][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.829404][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  105.838034][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.841471][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  106.392592][ T8762] bridge_slave_1 (unregistering): left allmulticast mode
[  106.395864][ T8762] bridge_slave_1 (unregistering): left promiscuous mode
[  106.400164][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.474015][ T8773] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[  106.481568][ T8773] netlink: 'syz.0.739': attribute type 9 has an invalid length.
[  106.484192][ T8773] netlink: 'syz.0.739': attribute type 9 has an invalid length.
[  106.610991][ T8788] netlink: 'syz.1.742': attribute type 9 has an invalid length.
[  106.614881][ T8788] netlink: 'syz.1.742': attribute type 7 has an invalid length.
[  106.619772][ T8788] netlink: 'syz.1.742': attribute type 8 has an invalid length.
[  106.622534][ T8788] netlink: 'syz.1.742': attribute type 5 has an invalid length.
[  106.901711][ T8818] hsr0: entered allmulticast mode
[  106.903909][ T8818] hsr_slave_0: entered allmulticast mode
[  106.906312][ T8818] hsr_slave_1: entered allmulticast mode
[  107.169482][ T8843] __nla_validate_parse: 16 callbacks suppressed
[  107.169498][ T8843] netlink: 96 bytes leftover after parsing attributes in process `syz.1.753'.
[  107.205370][ T8843] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  107.206684][ T8846] netlink: 68 bytes leftover after parsing attributes in process `syz.2.755'.
[  107.407211][ T8857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.757'.
[  107.432473][ T8857] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.522103][ T8857] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.574606][ T8857] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.662408][ T8857] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.760156][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.762946][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.770532][ T5853] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.777603][ T5853] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.853649][ T8878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.762'.
[  107.916771][ T8880] netlink: 68 bytes leftover after parsing attributes in process `syz.0.763'.
[  107.961979][ T8889] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.766'.
[  107.964960][ T8889] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  107.996271][ T8896] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.768'.
[  108.025994][ T8903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.770'.
[  108.216339][ T8913] netlink: 184 bytes leftover after parsing attributes in process `syz.0.773'.
[  108.313446][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'.
[  108.705942][ T8962] bridge0: port 4(erspan0) entered blocking state
[  108.710223][ T8962] bridge0: port 4(erspan0) entered disabled state
[  108.712882][ T8962] erspan0: entered allmulticast mode
[  108.716527][ T8962] erspan0: entered promiscuous mode
[  108.721966][ T8962] erspan0: left allmulticast mode
[  108.723585][ T8962] erspan0: left promiscuous mode
[  108.725733][ T8962] bridge0: port 4(erspan0) entered disabled state
[  108.770071][ T8961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.953316][ T8976] netlink: 'syz.2.797': attribute type 8 has an invalid length.
[  109.385682][ T9022] syzkaller1: entered promiscuous mode
[  109.388191][ T9022] syzkaller1: entered allmulticast mode
[  109.657629][ T9040] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.661276][ T9040] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  109.695327][ T9040] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.700080][ T9040] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  109.755278][ T9040] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.759072][ T9040] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  109.804998][ T9040] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.810422][ T9040] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  109.857796][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.861989][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  109.884199][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.887647][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  109.905029][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.908478][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  109.921959][ T5853] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.925496][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  109.970930][ T9048] netlink: zone id is out of range
[  109.974497][ T9048] netlink: zone id is out of range
[  109.977668][ T9048] netlink: zone id is out of range
[  109.986013][ T9048] netlink: zone id is out of range
[  109.988203][ T9048] netlink: zone id is out of range
[  109.992322][ T9048] netlink: zone id is out of range
[  109.996381][ T9048] netlink: zone id is out of range
[  110.024489][ T9048] netlink: zone id is out of range
[  110.026666][ T9048] netlink: zone id is out of range
[  110.034442][ T9054] netlink: 'syz.2.819': attribute type 1 has an invalid length.
[  110.468629][ T9095] netlink: 'syz.2.831': attribute type 21 has an invalid length.
[  110.526417][ T9098] netlink: 'syz.0.834': attribute type 15 has an invalid length.
[  110.609305][ T9102] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  110.844004][ T9134] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  110.912809][ T9137] Driver unsupported XDP return value 0 on prog  (id 134) dev N/A, expect packet loss!
[  111.713167][ T9156] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  111.716582][ T9155] IPVS: stopping backup sync thread 9156 ...
[  112.119332][ T9173] ipvlan1: entered allmulticast mode
[  112.121244][ T9173] veth0_vlan: entered allmulticast mode
[  112.281093][ T9183] __nla_validate_parse: 26 callbacks suppressed
[  112.281108][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'.
[  112.425177][ T9185] tipc: New replicast peer: 255.255.255.255
[  112.427973][ T9185] tipc: Enabled bearer <udp:syz2>, priority 10
[  112.501690][ T9195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.864'.
[  112.555607][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'.
[  112.563869][ T9202] xfrm1: entered promiscuous mode
[  112.565806][ T9202] xfrm1: entered allmulticast mode
[  112.668026][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[  112.742723][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'.
[  112.753253][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.871'.
[  112.786130][ T9219] netlink: 240 bytes leftover after parsing attributes in process `syz.2.871'.
[  112.812714][ T9223] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.816027][ T9223] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  112.824116][ T9225] netlink: 'syz.2.873': attribute type 5 has an invalid length.
[  112.904440][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'.
[  112.917895][ T9223] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.923600][ T9223] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.022828][ T9223] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.026264][ T9223] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.120484][ T9223] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.124246][ T9223] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.175165][ T9237] IPVS: Unknown mcast interface: bond0
[  113.180827][ T9237] netlink: 260 bytes leftover after parsing attributes in process `syz.0.875'.
[  113.186795][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.875'.
[  113.226545][ T5723] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.234767][ T5723] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  113.248389][ T5723] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.253867][ T5723] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  113.272895][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.277221][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  113.293706][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.296904][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  113.366871][ T9240] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.370484][ T9240] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.402436][ T9240] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.405746][ T9240] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.418866][   T10] tipc: Node number set to 4278977523
[  113.442456][ T9240] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.445655][ T9240] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  113.482556][ T9240] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.485607][ T9240] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  114.394735][ T9264] net_ratelimit: 102 callbacks suppressed
[  114.394747][ T9264] netlink: zone id is out of range
[  114.404002][ T9264] netlink: zone id is out of range
[  114.405901][ T9264] netlink: zone id is out of range
[  114.407969][ T9264] netlink: zone id is out of range
[  114.410811][ T9264] netlink: zone id is out of range
[  114.412508][ T9264] netlink: zone id is out of range
[  114.414547][ T9264] netlink: zone id is out of range
[  114.428387][ T9264] netlink: zone id is out of range
[  114.431733][ T9264] netlink: zone id is out of range
[  114.433388][ T9264] netlink: zone id is out of range
[  114.517888][ T5723] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.522466][ T5723] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  114.533866][ T5723] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.537415][ T5723] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  114.563334][ T5723] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.566744][ T5723] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  114.570732][ T5723] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.574084][ T5723] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  114.716661][ T9291] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.723488][ T9291] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  114.826766][ T9291] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.834215][ T9291] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  114.892309][ T9291] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.896152][ T9291] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  114.972100][ T9291] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.975330][ T9291] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  115.123946][ T9308] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  115.127417][ T9306] IPVS: stopping backup sync thread 9308 ...
[  115.611098][ T9326] netlink: 'syz.2.900': attribute type 1 has an invalid length.
[  115.856090][   T47] hid-generic 0005:0C45:FFF9.0002: item fetching failed at offset 0/1
[  115.864557][   T47] hid-generic 0005:0C45:FFF9.0002: probe with driver hid-generic failed with error -22
[  116.053087][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.058810][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  116.069738][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.072415][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  116.091945][ T5723] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.095172][ T5723] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  116.098450][ T5723] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.110511][ T5723] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  116.214682][ T9369] smc: adding net device bond0 with user defined pnetid SYZ2
[  116.217902][ T9369] bond0: entered promiscuous mode
[  116.221341][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.412050][ T9398] tipc: Enabling of bearer <et:g> rejected, media not registered
[  116.657269][ T9424] netlink: 'syz.0.930': attribute type 13 has an invalid length.
[  116.669564][ T9424] netlink: 'syz.0.930': attribute type 17 has an invalid length.
[  116.787047][ T9424] bridge0: port 3(dummy0) entered blocking state
[  116.789273][ T9424] bridge0: port 3(dummy0) entered listening state
[  116.791494][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.793688][ T9424] bridge0: port 2(bridge_slave_1) entered listening state
[  116.795993][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.798244][ T9424] bridge0: port 1(bridge_slave_0) entered listening state
[  116.856031][ T9424] 8021q: adding VLAN 0 to HW filter on device team0
[  117.148653][ T9464] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.199808][ T9464] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.255383][ T9464] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.279947][ T9478] netlink: 'syz.1.937': attribute type 28 has an invalid length.
[  117.284021][ T9476] netlink: 'syz.1.937': attribute type 3 has an invalid length.
[  117.305793][ T9464] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.394873][ T5723] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.400775][ T9480] vxlan1: entered promiscuous mode
[  117.402452][ T9480] vxlan1: entered allmulticast mode
[  117.410678][ T9481] vxlan1: entered promiscuous mode
[  117.412758][ T9481] vxlan1: entered allmulticast mode
[  117.423490][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.433220][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.444489][ T5723] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.527287][ T9489] netlink: 'syz.1.941': attribute type 7 has an invalid length.
[  117.532668][ T9489] netlink: 'syz.1.941': attribute type 8 has an invalid length.
[  117.535337][ T9489] __nla_validate_parse: 24 callbacks suppressed
[  117.535343][ T9489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.941'.
[  117.646979][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'.
Connection to localhost closed by remote host.
[  118.164609][ T9343] ==================================================================
[  118.167322][ T9343] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7f9/0x1340
[  118.169882][ T9343] Read of size 8 at addr ffff8881082bc0a0 by task khidpd_0c45fff9/9343
[  118.173296][ T9343] 
[  118.174084][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: khidpd_0c45fff9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  118.174095][ T9343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.174101][ T9343] Call Trace:
[  118.174105][ T9343]  <TASK>
[  118.174109][ T9343]  dump_stack_lvl+0x189/0x250
[  118.174142][ T9343]  ? __kasan_check_byte+0x12/0x40
[  118.174155][ T9343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.174162][ T9343]  ? lock_release+0x4b/0x3e0
[  118.174173][ T9343]  ? __virt_addr_valid+0x4a5/0x5c0
[  118.174183][ T9343]  print_report+0xca/0x240
[  118.174194][ T9343]  ? __mutex_lock+0x7f9/0x1340
[  118.174205][ T9343]  kasan_report+0x118/0x150
[  118.174215][ T9343]  ? __mutex_lock+0x7f9/0x1340
[  118.174226][ T9343]  __mutex_lock+0x7f9/0x1340
[  118.174237][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.174248][ T9343]  ? __mutex_lock+0x5b6/0x1340
[  118.174258][ T9343]  ? l2cap_unregister_user+0x6a/0x1b0
[  118.174268][ T9343]  ? __pfx___mutex_lock+0x10/0x10
[  118.174279][ T9343]  ? __pfx___timer_delete_sync+0x10/0x10
[  118.174290][ T9343]  l2cap_unregister_user+0x6a/0x1b0
[  118.174299][ T9343]  hidp_session_thread+0x3c9/0x410
[  118.174309][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  118.174317][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  118.174326][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  118.174335][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  118.174344][ T9343]  ? __kthread_parkme+0x7b/0x200
[  118.174351][ T9343]  ? __kthread_parkme+0x1a1/0x200
[  118.174358][ T9343]  kthread+0x711/0x8a0
[  118.174367][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  118.174375][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.174382][ T9343]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.174391][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.174400][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.174407][ T9343]  ret_from_fork+0x3fc/0x770
[  118.174419][ T9343]  ? __pfx_ret_from_fork+0x10/0x10
[  118.174430][ T9343]  ? __switch_to_asm+0x39/0x70
[  118.174438][ T9343]  ? __switch_to_asm+0x33/0x70
[  118.174445][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.174453][ T9343]  ret_from_fork_asm+0x1a/0x30
[  118.174463][ T9343]  </TASK>
[  118.174466][ T9343] 
[  118.243501][ T9343] Allocated by task 5833:
[  118.244991][ T9343]  kasan_save_track+0x3e/0x80
[  118.246543][ T9343]  __kasan_kmalloc+0x93/0xb0
[  118.248047][ T9343]  __kmalloc_noprof+0x27a/0x4f0
[  118.249607][ T9343]  hci_alloc_dev_priv+0x28/0x2060
[  118.251291][ T9343]  vhci_create_device+0x120/0x6e0
[  118.252980][ T9343]  vhci_write+0x3ce/0x4a0
[  118.254439][ T9343]  vfs_write+0x54b/0xa90
[  118.255840][ T9343]  ksys_write+0x145/0x250
[  118.257327][ T9343]  do_syscall_64+0xfa/0x3b0
[  118.258840][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.260744][ T9343] 
[  118.261555][ T9343] Freed by task 9501:
[  118.262890][ T9343]  kasan_save_track+0x3e/0x80
[  118.264456][ T9343]  kasan_save_free_info+0x46/0x50
[  118.266135][ T9343]  __kasan_slab_free+0x62/0x70
[  118.267730][ T9343]  kfree+0x18e/0x440
[  118.269037][ T9343]  bt_host_release+0x82/0x90
[  118.270582][ T9343]  device_release+0x9c/0x1c0
[  118.272139][ T9343]  kobject_put+0x22b/0x480
[  118.273632][ T9343]  vhci_release+0x88/0xd0
[  118.275006][ T9343]  __fput+0x44c/0xa70
[  118.276338][ T9343]  task_work_run+0x1d4/0x260
[  118.278050][ T9343]  do_exit+0x6b5/0x22e0
[  118.279619][ T9343]  do_group_exit+0x21c/0x2d0
[  118.281368][ T9343]  get_signal+0x1286/0x1340
[  118.283195][ T9343]  arch_do_signal_or_restart+0x9a/0x750
[  118.285378][ T9343]  exit_to_user_mode_loop+0x75/0x110
[  118.287456][ T9343]  do_syscall_64+0x2bd/0x3b0
[  118.289285][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.291642][ T9343] 
[  118.292614][ T9343] Last potentially related work creation:
[  118.294874][ T9343]  kasan_save_stack+0x3e/0x60
[  118.296831][ T9343]  kasan_record_aux_stack+0xbd/0xd0
[  118.298975][ T9343]  insert_work+0x3d/0x330
[  118.300657][ T9343]  __queue_work+0xbd9/0xfe0
[  118.302174][ T9343]  queue_work_on+0x181/0x270
[  118.303698][ T9343]  process_scheduled_works+0xae1/0x17b0
[  118.305592][ T9343]  worker_thread+0x8a0/0xda0
[  118.307142][ T9343]  kthread+0x711/0x8a0
[  118.308505][ T9343]  ret_from_fork+0x3fc/0x770
[  118.310150][ T9343]  ret_from_fork_asm+0x1a/0x30
[  118.312102][ T9343] 
[  118.313094][ T9343] Second to last potentially related work creation:
[  118.315865][ T9343]  kasan_save_stack+0x3e/0x60
[  118.317817][ T9343]  kasan_record_aux_stack+0xbd/0xd0
[  118.319957][ T9343]  insert_work+0x3d/0x330
[  118.321763][ T9343]  __queue_work+0xcfc/0xfe0
[  118.323633][ T9343]  call_timer_fn+0x17e/0x5f0
[  118.325532][ T9343]  __run_timer_base+0x646/0x860
[  118.327532][ T9343]  run_timer_softirq+0xb7/0x180
[  118.329544][ T9343]  handle_softirqs+0x286/0x870
[  118.331377][ T9343]  __irq_exit_rcu+0xca/0x1f0
[  118.332946][ T9343]  irq_exit_rcu+0x9/0x30
[  118.334378][ T9343]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  118.336204][ T9343]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  118.338445][ T9343] 
[  118.339379][ T9343] The buggy address belongs to the object at ffff8881082bc000
[  118.339379][ T9343]  which belongs to the cache kmalloc-8k of size 8192
[  118.344395][ T9343] The buggy address is located 160 bytes inside of
[  118.344395][ T9343]  freed 8192-byte region [ffff8881082bc000, ffff8881082be000)
[  118.349136][ T9343] 
[  118.350040][ T9343] The buggy address belongs to the physical page:
[  118.352511][ T9343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1082b8
[  118.355907][ T9343] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  118.358980][ T9343] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  118.361602][ T9343] page_type: f5(slab)
[  118.362897][ T9343] raw: 057ff00000000040 ffff88801a442280 ffffea0000a57000 0000000000000003
[  118.365573][ T9343] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  118.368304][ T9343] head: 057ff00000000040 ffff88801a442280 ffffea0000a57000 0000000000000003
[  118.371180][ T9343] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  118.373905][ T9343] head: 057ff00000000003 ffffea000420ae01 00000000ffffffff 00000000ffffffff
[  118.376593][ T9343] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  118.379318][ T9343] page dumped because: kasan: bad access detected
[  118.381320][ T9343] page_owner tracks the page as allocated
[  118.383087][ T9343] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5567, tgid 5567 (dhcpcd), ts 29183140664, free_ts 27781666213
[  118.389522][ T9343]  post_alloc_hook+0x240/0x2a0
[  118.391070][ T9343]  get_page_from_freelist+0x21e4/0x22c0
[  118.392831][ T9343]  __alloc_frozen_pages_noprof+0x181/0x370
[  118.394711][ T9343]  alloc_pages_mpol+0x232/0x4a0
[  118.396290][ T9343]  allocate_slab+0x8a/0x3b0
[  118.397741][ T9343]  ___slab_alloc+0xbfc/0x1480
[  118.399245][ T9343]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  118.401279][ T9343]  kmalloc_reserve+0x136/0x290
[  118.402826][ T9343]  __alloc_skb+0x142/0x2d0
[  118.404289][ T9343]  netlink_dump+0x167/0xe90
[  118.405798][ T9343]  netlink_recvmsg+0x676/0xa30
[  118.407341][ T9343]  sock_recvmsg+0x22c/0x270
[  118.408896][ T9343]  ____sys_recvmsg+0x1c9/0x460
[  118.410733][ T9343]  ___sys_recvmsg+0x1b5/0x510
[  118.412275][ T9343]  __x64_sys_recvmsg+0x198/0x260
[  118.413875][ T9343]  do_syscall_64+0xfa/0x3b0
[  118.415392][ T9343] page last free pid 5567 tgid 5567 stack trace:
[  118.417530][ T9343]  __free_frozen_pages+0xc71/0xe70
[  118.419231][ T9343]  __slab_free+0x326/0x400
[  118.420712][ T9343]  qlist_free_all+0x97/0x140
[  118.422333][ T9343]  kasan_quarantine_reduce+0x148/0x160
[  118.424224][ T9343]  __kasan_slab_alloc+0x22/0x80
[  118.425857][ T9343]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  118.427660][ T9343]  getname_flags+0xb8/0x540
[  118.429385][ T9343]  vfs_fstatat+0x43/0x170
[  118.430947][ T9343]  __x64_sys_newfstatat+0x116/0x190
[  118.432714][ T9343]  do_syscall_64+0xfa/0x3b0
[  118.434170][ T9343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.436000][ T9343] 
[  118.436839][ T9343] Memory state around the buggy address:
[  118.438817][ T9343]  ffff8881082bbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  118.441783][ T9343]  ffff8881082bc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.444527][ T9343] >ffff8881082bc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.447207][ T9343]                                ^
[  118.448832][ T9343]  ffff8881082bc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.451341][ T9343]  ffff8881082bc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  118.453892][ T9343] ==================================================================
[  118.457586][ T9343] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  118.460012][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: khidpd_0c45fff9 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  118.464067][ T9343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.467453][ T9343] Call Trace:
[  118.468528][ T9343]  <TASK>
[  118.469486][ T9343]  dump_stack_lvl+0x99/0x250
[  118.470963][ T9343]  ? __asan_memcpy+0x40/0x70
[  118.472630][ T9343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.474345][ T9343]  ? __pfx__printk+0x10/0x10
[  118.476081][ T9343]  panic+0x2db/0x790
[  118.477650][ T9343]  ? __pfx_panic+0x10/0x10
[  118.479217][ T9343]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  118.481480][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  118.483909][ T9343]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  118.486288][ T9343]  ? print_memory_metadata+0x314/0x400
[  118.488343][ T9343]  ? __mutex_lock+0x7f9/0x1340
[  118.489933][ T9343]  check_panic_on_warn+0x89/0xb0
[  118.491594][ T9343]  ? __mutex_lock+0x7f9/0x1340
[  118.493269][ T9343]  end_report+0x78/0x160
[  118.494774][ T9343]  kasan_report+0x129/0x150
[  118.496327][ T9343]  ? __mutex_lock+0x7f9/0x1340
[  118.498077][ T9343]  __mutex_lock+0x7f9/0x1340
[  118.499818][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.501827][ T9343]  ? __mutex_lock+0x5b6/0x1340
[  118.503526][ T9343]  ? l2cap_unregister_user+0x6a/0x1b0
[  118.505405][ T9343]  ? __pfx___mutex_lock+0x10/0x10
[  118.507360][ T9343]  ? __pfx___timer_delete_sync+0x10/0x10
[  118.509674][ T9343]  l2cap_unregister_user+0x6a/0x1b0
[  118.511523][ T9343]  hidp_session_thread+0x3c9/0x410
[  118.513192][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  118.514994][ T9343]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  118.516927][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  118.518975][ T9343]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  118.521028][ T9343]  ? __kthread_parkme+0x7b/0x200
[  118.522675][ T9343]  ? __kthread_parkme+0x1a1/0x200
[  118.524354][ T9343]  kthread+0x711/0x8a0
[  118.525708][ T9343]  ? __pfx_hidp_session_thread+0x10/0x10
[  118.527560][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.529087][ T9343]  ? _raw_spin_unlock_irq+0x23/0x50
[  118.530814][ T9343]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.532546][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.534010][ T9343]  ret_from_fork+0x3fc/0x770
[  118.535549][ T9343]  ? __pfx_ret_from_fork+0x10/0x10
[  118.537251][ T9343]  ? __switch_to_asm+0x39/0x70
[  118.538818][ T9343]  ? __switch_to_asm+0x33/0x70
[  118.540359][ T9343]  ? __pfx_kthread+0x10/0x10
[  118.541831][ T9343]  ret_from_fork_asm+0x1a/0x30
[  118.543425][ T9343]  </TASK>
[  118.545140][ T9343] Kernel Offset: disabled
[  118.546570][ T9343] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:26:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000263f370
R8 =ffff88801fbc0237 R9 =1ffff11003f78046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591d R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9c88e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fd889e12e17
XMM06=0000000000000000 00007fd889e12e11 XMM07=0000000000000000 00007fd889e12e25
XMM08=0000000000000000 00007fd889e12eab XMM09=0000000000000000 00007fd889e12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=28a8cf5f516eb700 RBX=ffffffff81969b18 RCX=28a8cf5f516eb700 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07af0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd88ac8cfb8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=1a00280000000000 1900050000000000
XMM06=00000000000080c7 2f58c818bc0f0000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f5eda212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
