last executing test programs:

1.885620991s ago: executing program 2 (id=740):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x118)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x152)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/99)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x0)
ioctl$TUNGETVNETLE(r6, 0x4010744d, &(0x7f0000000180))
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r9, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4053, 0xfd5}, {&(0x7f00000006c0)=""/92, 0x5c}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000240)=""/188, 0xbc}, {&(0x7f0000000740)=""/95, 0x5f}], 0x9}, 0x2}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)}, 0x9}, {{0x0, 0x0, 0x0}, 0xb68f}], 0x9, 0x40002000, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', <r10=>0x0, 0x700, 0x8, 0x80000001, 0x4, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0x26, 0x2, [{0x2, 0x12, "1f43985ab9858597792dae1795c27e86"}, {0x1, 0xe, "cbe076df7caaab2b426c11a6"}]}]}}}}})
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109005000108049000000990d59906040c6226d83b3dd9fa584140a972beb7bb2e6afdd6ee1b52f5b7186508ea84b4900077fd8998d20bae80da358cd54297825c2d1c678d77df25140553e000000ba"], 0x64}}, 0x0)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000080000000b000000000000010000000043005e040a0000000000000202000000040000000000000c030000001000000003000006040000000a000000060000000000000063280000040000000a0000000f0000000000001105000000ffffffff030000000000000a05000000000000000000000300000000040000000400000003001b000c0000000000001102000000040000000030302e30303000"], &(0x7f0000000700)=""/203, 0xb0, 0xcb, 0x1, 0x5}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r2, 0x20, &(0x7f0000000a00)={&(0x7f0000000840)=""/132, 0x84, <r13=>0x0, &(0x7f0000000900)=""/251, 0xfb}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc48}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x93e8dc9db548586d}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', r10, @fallback=0x4, r12, 0x8, &(0x7f0000000800)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, r13, r5, 0x0, &(0x7f0000000a80)=[r3, r3, r3, r6, r3], 0x0, 0x10, 0x3}, 0x94)

1.49788991s ago: executing program 2 (id=744):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0xa, 0xb, 0xfffffffffffffff8, 0x8}, @call={0x85, 0x0, 0x0, 0xc7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x9, 0x97c6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r1, 0xffffffffffffffff, 0x1, r0], &(0x7f0000000480), 0x10, 0x100}, 0x94)

1.444542271s ago: executing program 2 (id=745):
r0 = socket(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) (async)
shutdown(r3, 0x1) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000840) (async)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={r5}, &(0x7f0000000140)=0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0}) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x7, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) (async)
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001440)=ANY=[@ANYBLOB="010000004008000000000000000000004a631186a5abf6b65cb2bcdf9f45", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000001400)={&(0x7f0000001180)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001300)=[{&(0x7f00000011c0)="59ebd46adb388459a6b6a168cc058a1ed7838c4de0fd318aa9c37e73241a02e1afffa2339b3ee84fa908efa9f4120d19eaca08730f5e874dbe0ed395eca32769dd964c8b277a145b1d32c5db919d90c5ed2221da757d71c09b8e6fceeb03513edd11023a31997d6ec5101641f1f290d5d3f9a14e596a544f059b4f208fcefdc26235", 0x82}, {&(0x7f0000001280)="d9de043317053836bb3ff41c2706c4", 0xf}, {&(0x7f00000012c0)="8cc725ca8e297a", 0x7}], 0x3, &(0x7f0000001340)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x88, 0x2}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f3a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x64}}], 0x98}, 0x40094)
sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bind$inet(r0, &(0x7f0000001140)={0x2, 0x4e24, @multicast2}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001000)={0x0, @in6={{0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, '\x00', 0xc}, 0x2}}, 0x4, 0x7, 0xfffffffb, 0x8, 0x1}, &(0x7f0000000180)=0x98)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r10 = accept4(r9, 0x0, 0x0, 0x80000)
sendmmsg$alg(r10, &(0x7f0000003380)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8dce3", 0x3}, {&(0x7f0000000740)="82c3e4bcb7f281fc88adf1f43af0987360043158aa9507e4be5d96e5cc", 0x1d}], 0x2, &(0x7f0000003440)=ANY=[], 0x118, 0x20000004}], 0x1, 0x20004000)

1.288360391s ago: executing program 2 (id=749):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f"], 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)='A(', 0x2}], 0x1}}], 0x1, 0xc010)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x26, 0x4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x3}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x5}, {0x7fff, 0x1, 0x8, 0x0, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'geneve0\x00'}}, 0x1e)

1.098513612s ago: executing program 0 (id=751):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x50044)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r5], 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r9, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c2300004c82ae577bba9855fa1c56517dc28600bd7c67c67a7a2403aed27deb9e234f3a0f27cf4358f02f20908adc4bce9549cc2c753399019600dac84a92fc5dd4483d35994f538140da223b111db404c3f9258405191f7042f87dd5cd4fea3d8ab4930d9a8ff2af36670fc5e7cfdf0a667699d7d75c4f0a3b5c216f03c8fcbcea0ab61325e192c20277b973f7beaba82d55200c515490a3bea388e5176961f6484608b5258fa102f40939b95160f731e68397bfb4ad724518fef9f3fa36ee99909819c4425d8f789053635ce88d825051", @ANYRES16=r2, @ANYBLOB="00022cbd7000fddbdf257f00000008000300", @ANYRES32=r10, @ANYBLOB="0c009900050000001c000000140055005b6cfd0a42383040883d8d85ec01cbbf0a00f500ffffffffffff000006004800190000000a00f500eff535b40b000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24008040}, 0x1)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000532533ecb68770010000009cfeff71622d8dbdf3d9abe872b7d524", @ANYRES16=r7, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRESOCT, @ANYBLOB="0c00990002000000250000000800a0009e09000008009f00030000000800260080090000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x40000)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\v\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf257f00000008000300", @ANYRES32=r6, @ANYBLOB="0c009900070000001b0000000a00f500f64372d133b200001400550031d325303717d72a2ce022b5e9fe6b83"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0xc010)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000400)=0x110494)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="38000000100003053bbd700000000010548536a5", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="87"], 0x38}}, 0x800)

905.836941ms ago: executing program 0 (id=754):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4000)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x40)
unshare(0x40000)

828.622852ms ago: executing program 0 (id=755):
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={<r2=>0x0, 0xac}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2, 0x0, 0x2, 0x4}, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000300)={<r8=>r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200005, 0x3, 0x8, 0x5, 0x3}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x7, 0x3, 0x4, 0x400, 0x520, 0x0, 0x10, 0x3, r8}, 0x20)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000040000b6191dea0b64eff6f000300000008000200070000000600018000000000"], 0x24}}, 0x4040080)
r9 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc)
setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4)
socket(0x2000000000000021, 0x2, 0x10000000000002)

738.969066ms ago: executing program 1 (id=757):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050004000200000016aab296fdadbbb3c44df80cacfb6f5a34072c9157a0db5843145798565e589959e769735228d91d75b10194bc6453402da096535db0841bdf2b2c8211ae8e126c0f4dda2e8927003ee1"], 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', <r6=>0x0, 0x3423341f5cbb803a, 0x0, 0x0, 0x4, 0x6, @loopback, @private2, 0x700, 0x8000, 0xffffff33, 0x7}})
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, 'lo\x00'}}, 0x1e)

539.080824ms ago: executing program 1 (id=758):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @remote, 'ip6tnl0\x00'}}, 0x1e) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (rerun: 64)
bind$netlink(r1, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x15, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@jmp={0x5, 0x1, 0xed1860385ce00fd8, 0xb, 0x6, 0x18, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x8, 0x0, 0x3a}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async, rerun: 64)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async, rerun: 64)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x91e7}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r5}]}]}, 0x44}}, 0x0) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000580)={'dvmrp0\x00', {0x2, 0x4e23, @remote}}) (async, rerun: 64)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0xb8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xa}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x40)

459.14941ms ago: executing program 1 (id=759):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000002c0)={<r1=>0x0, 0x2, 0x6}) (rerun: 64)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={r1, 0x40, 0x0, [0x100, 0x1, 0xcea, 0x7, 0x8], [0x1, 0x2, 0x1, 0x180000, 0x7, 0x4, 0x1, 0x3, 0xd, 0x8, 0x0, 0x20, 0x0, 0x7fffffffffffffff, 0x66, 0x9b22, 0x6, 0xc2, 0xfffffffffffffffc, 0x2, 0x7, 0x6, 0xa5, 0x0, 0x8, 0x5, 0x984d, 0xfffffffffffffffb, 0x4, 0x3, 0x74f, 0x0, 0x7, 0x6a5, 0xb8b7, 0xa880, 0x1, 0xf0, 0x7a, 0x8, 0x4, 0xf66, 0xb4b, 0x8, 0x5, 0x6, 0x7c, 0x9, 0x3, 0x1, 0x2, 0x5, 0x5, 0x5, 0xfffffffffffffff9, 0x10000, 0x7, 0x1, 0x2, 0x9, 0x33, 0x2, 0x309955c3, 0x9, 0x6, 0x3ff, 0x8, 0x2, 0xc52, 0x5, 0x0, 0xffffffff, 0x80, 0xffffffffffffff35, 0x0, 0x0, 0xb3e9, 0xa9, 0x9, 0x2, 0x0, 0x6, 0x3, 0x1, 0x8000000000000000, 0x40, 0x0, 0x75, 0xffff, 0x2c000, 0x10000, 0x5, 0x8001, 0x400, 0x4, 0xe, 0x8, 0x4, 0x7ff, 0x8000000000000000, 0x0, 0x8000000000000001, 0x9, 0x10, 0x9, 0x2, 0x7, 0xaac, 0x6, 0x200, 0x3d3, 0x8, 0x1, 0x40, 0x10000, 0xf7, 0x2, 0x1e0, 0x2, 0xad6, 0x27]})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000082514873ef002000010327bd7000ffdbdf2502000000000000001e000000080017"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async, rerun: 32)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) (async)
r7 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64)
ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x730) (rerun: 64)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r8}, 0x18) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

458.756887ms ago: executing program 1 (id=760):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r3)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r5=>0x0})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={<r6=>0x0, 0x7c, &(0x7f0000001040)=[@in6={0xa, 0x4e22, 0x1, @local, 0x21f2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000010c0)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={r6, @in6={{0xa, 0x4e20, 0x9, @local, 0x1000}}, 0x9, 0x9}, 0x90)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
recvfrom$packet(r0, &(0x7f00000011c0)=""/116, 0x74, 0x40020061, &(0x7f0000001240)={0x11, 0xf7, r5, 0x1, 0x40}, 0x14)
bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r9, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc)
r10 = openat$cgroup_procs(r8, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
preadv(r10, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3)
sendfile(r9, r9, 0x0, 0x10001)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r11, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0xfffffe4d)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f80)=ANY=[@ANYBLOB="0100331b6d0e20fb1770e5ebbebebd882a0aa6fec4adc4ec802443c93de05c67006bb6000000000000f1433ce3574d5ac2a5745565441e2c6b9922e8da876049d46a52d5f3db2b84a22ada", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000ce2a4fa7a0aa108b"], 0x48}}, 0x40884)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0)
close(0x4)

406.926573ms ago: executing program 0 (id=761):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}}, 0x0)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000800)="00214705c4e7b3591fe6b7c1f36099a9268140fbf39f", 0x16}], 0x1, 0x8, 0x1)

406.546141ms ago: executing program 2 (id=762):
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0xffffffff) (async)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8001}]}) (async)
write$ppp(r0, &(0x7f0000000000)="2cd6", 0x2)

218.636987ms ago: executing program 2 (id=763):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071106d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000200)=0xffffffff, 0xffffffffffffff41)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa)
sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121342, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rcu_utilization\x00', r4}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000200000000000020"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="0001be3838000000", @ANYRES32=0x0, @ANYBLOB="216800000800000014001280090001007866726d0000000004000280140035006d6163766c616e300000000000000000"], 0x48}}, 0x8000)
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f00000003c0)=[{r1, 0x1000}, {r0, 0xc003}], 0x2, &(0x7f0000000440)={r6, r7+10000000}, &(0x7f0000000480)={[0x37b]}, 0x8)
socket(0x1, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000100)="866ac6839ca725a49d658addbe191d3645a79b79e71c930373ac62a02768f61b8fd2", 0x22}, 0x1, 0x0, 0x0, 0x4000}, 0x20000801)

216.538552ms ago: executing program 0 (id=764):
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x8001}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711060000000000006000000004700009500000000000000"], 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)

216.094643ms ago: executing program 1 (id=765):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x40006}, {0x6, 0x0, 0xff, 0x2}]})
write$ppp(r2, &(0x7f0000000200)="620f", 0x2)

8.4773ms ago: executing program 0 (id=766):
unshare(0x26020500)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x1c881}, 0x0)
unshare(0x40000200)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
unshare(0x62040200)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x2}, 0x8)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x84c290d764bc66d4}, 0x18)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10, r4}, 0xff21)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x1b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x7, 0x2, 0x0, 0x1, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x94, 0x7, 0xc, 0x80, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x74}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @alu={0x4, 0x1, 0x8, 0x2, 0x8, 0x80, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10a}}}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0xb5, &(0x7f0000000580)=""/181, 0x41100, 0x3a, '\x00', 0x0, @fallback=0xc, r8, 0x8, &(0x7f0000000380)={0x8000000a, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x2, 0x5, 0xffffffff}, 0x10, 0x0, r9, 0x0, &(0x7f0000000940)=[r10], 0x0, 0x10, 0xfffffffb}, 0x94)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGUNIT(r12, 0x80047456, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xa0, 0x2, 0x1, 0x101, 0x0, 0x0, {0x9ae7134691264ff0, 0x0, 0xa}, [@CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x80000001, 0x400, 0x0]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000840}, 0x10)
r13 = socket$kcm(0x10, 0x1, 0x10)
sendmsg$kcm(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4052, 0xfd4}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000380)=""/34, 0x22}], 0x3}, 0x12000)
close(r2)

0s ago: executing program 1 (id=767):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="246c0000002000010327bd7000ffdbdf2502000000000000001e000000080017004e20fbbcd94e"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}, @mark={0xc, 0x15, {0x35075a, 0x5}}]}, 0x10c}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, 0x0, 0x20000040)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
unshare(0x6a040000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff3, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15138' (ED25519) to the list of known hosts.
syzkaller login: [   49.487594][ T5785] cgroup: Unknown subsys name 'net'
[   49.615080][ T5785] cgroup: Unknown subsys name 'cpuset'
[   49.619278][ T5785] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.055071][ T5785] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.109951][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.113829][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.117037][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.120955][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.125887][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.129032][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.132911][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.136518][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.154121][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.156829][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.159983][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.164000][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.166576][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.174775][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.177443][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.437030][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   56.450254][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   56.540760][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   56.576087][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.579105][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.581544][ T5825] bridge_slave_0: entered allmulticast mode
[   56.584713][ T5825] bridge_slave_0: entered promiscuous mode
[   56.607350][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.609657][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.612003][ T5825] bridge_slave_1: entered allmulticast mode
[   56.615405][ T5825] bridge_slave_1: entered promiscuous mode
[   56.618446][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.620883][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.623489][ T5817] bridge_slave_0: entered allmulticast mode
[   56.626233][ T5817] bridge_slave_0: entered promiscuous mode
[   56.630464][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.633155][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.635559][ T5817] bridge_slave_1: entered allmulticast mode
[   56.638199][ T5817] bridge_slave_1: entered promiscuous mode
[   56.670933][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.710741][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.719140][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.725474][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.729140][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.734697][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.737760][ T5821] bridge_slave_0: entered allmulticast mode
[   56.741611][ T5821] bridge_slave_0: entered promiscuous mode
[   56.746314][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.749384][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.753119][ T5821] bridge_slave_1: entered allmulticast mode
[   56.757014][ T5821] bridge_slave_1: entered promiscuous mode
[   56.818670][ T5825] team0: Port device team_slave_0 added
[   56.824281][ T5825] team0: Port device team_slave_1 added
[   56.828567][ T5817] team0: Port device team_slave_0 added
[   56.854273][ T5817] team0: Port device team_slave_1 added
[   56.859278][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.890973][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.920634][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.923877][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.934701][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.940389][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.943793][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.954806][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.960830][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.963930][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.975135][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.992913][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.995880][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.006591][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.020033][ T5821] team0: Port device team_slave_0 added
[   57.025384][ T5821] team0: Port device team_slave_1 added
[   57.076392][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.078749][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.087782][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.105217][ T5825] hsr_slave_0: entered promiscuous mode
[   57.108325][ T5825] hsr_slave_1: entered promiscuous mode
[   57.124181][ T5817] hsr_slave_0: entered promiscuous mode
[   57.127143][ T5817] hsr_slave_1: entered promiscuous mode
[   57.129746][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[   57.131666][ T5817] Cannot create hsr debugfs directory
[   57.134143][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.136465][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.146311][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.245915][ T5821] hsr_slave_0: entered promiscuous mode
[   57.248538][ T5821] hsr_slave_1: entered promiscuous mode
[   57.251022][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   57.254208][ T5821] Cannot create hsr debugfs directory
[   57.446322][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.454653][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.466095][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.476177][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.501583][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.513751][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.527164][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.534006][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.581843][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.589005][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.595490][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.605385][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.709155][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.719939][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.735500][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   57.745208][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.748505][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.761194][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.767489][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.770315][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.795780][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   57.812099][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.815081][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.822951][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   57.834700][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.837335][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.856088][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.859787][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.865079][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.867484][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.873131][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.876061][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.991813][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.064625][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.086882][ T5821] veth0_vlan: entered promiscuous mode
[   58.097634][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.116217][ T5821] veth1_vlan: entered promiscuous mode
[   58.121018][ T5825] veth0_vlan: entered promiscuous mode
[   58.145588][ T5825] veth1_vlan: entered promiscuous mode
[   58.173750][ T5822] Bluetooth: hci0: command tx timeout
[   58.185097][ T5825] veth0_macvtap: entered promiscuous mode
[   58.192251][ T5817] veth0_vlan: entered promiscuous mode
[   58.199811][ T5825] veth1_macvtap: entered promiscuous mode
[   58.207025][ T5821] veth0_macvtap: entered promiscuous mode
[   58.211364][ T5817] veth1_vlan: entered promiscuous mode
[   58.219050][ T5821] veth1_macvtap: entered promiscuous mode
[   58.241519][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.245325][ T5822] Bluetooth: hci2: command tx timeout
[   58.252795][ T5822] Bluetooth: hci1: command tx timeout
[   58.260736][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.270616][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.285004][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.290396][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.295977][ T5817] veth0_macvtap: entered promiscuous mode
[   58.300995][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.309759][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.326246][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.341937][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.346660][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.350514][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.355801][ T5817] veth1_macvtap: entered promiscuous mode
[   58.360938][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.406759][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.433708][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.439800][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.446833][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.461123][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.471755][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.476299][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.479398][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.527917][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.533258][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.546225][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.548898][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.574080][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.579128][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.606314][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.609509][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.609537][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.665495][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.668335][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.825174][ T5899] netlink: 'syz.2.4': attribute type 5 has an invalid length.
[   58.827995][ T5899] netlink: 'syz.2.4': attribute type 7 has an invalid length.
[   58.887599][ T5899] : entered promiscuous mode
[   59.070584][ T5904] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6'.
[   59.120228][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   59.234099][ T5913] netlink: 'syz.1.6': attribute type 13 has an invalid length.
[   59.236584][ T5913] netlink: 'syz.1.6': attribute type 17 has an invalid length.
[   59.304727][ T5913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.453039][ T5925] netlink: 'syz.2.8': attribute type 29 has an invalid length.
[   59.459100][ T5925] netlink: 'syz.2.8': attribute type 13 has an invalid length.
[   59.461712][ T5925] netlink: 'syz.2.8': attribute type 17 has an invalid length.
[   59.565047][ T5925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.799528][ T5938] netlink: 192 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.803758][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.999611][ T5941] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET)
[   60.242839][ T5822] Bluetooth: hci0: command tx timeout
[   60.266696][ T5950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'.
[   60.277100][ T5950] Zero length message leads to an empty skb
[   60.323066][ T5822] Bluetooth: hci1: command tx timeout
[   60.325414][ T5822] Bluetooth: hci2: command tx timeout
[   60.638757][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.149187][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.153144][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.217731][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.224335][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.361652][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.367218][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.370180][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.377268][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.475359][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   61.478078][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   61.716072][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   61.730861][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   61.742575][ T6001] netlink: 'syz.1.26': attribute type 7 has an invalid length.
[   62.322619][ T5822] Bluetooth: hci0: command tx timeout
[   62.405108][ T5822] Bluetooth: hci2: command tx timeout
[   62.407363][ T5822] Bluetooth: hci1: command tx timeout
[   62.516702][ T6030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   62.867978][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.38'.
[   62.981461][ T6058] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   62.987133][ T6058] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   63.660640][ T6090] syzkaller1: entered promiscuous mode
[   63.667992][ T6090] syzkaller1: entered allmulticast mode
[   64.135963][ T6120] netlink: 188 bytes leftover after parsing attributes in process `syz.2.53'.
[   64.140097][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   64.403617][   T55] Bluetooth: hci0: command tx timeout
[   64.484313][   T55] Bluetooth: hci1: command tx timeout
[   64.487122][   T55] Bluetooth: hci2: command tx timeout
[   64.798574][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.57'.
[   64.831991][ T6155] netlink: 192 bytes leftover after parsing attributes in process `syz.1.56'.
[   64.837957][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'.
[   65.416715][ T6203] netlink: 'syz.0.65': attribute type 13 has an invalid length.
[   65.426787][ T6203] netlink: 'syz.0.65': attribute type 17 has an invalid length.
[   65.534611][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.540341][ T6203] 8021q: adding VLAN 0 to HW filter on device team0
[   65.548928][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.560839][ T6203] syz.0.65 (6203) used greatest stack depth: 19928 bytes left
[   66.211355][ T6226] netlink: 'syz.2.70': attribute type 8 has an invalid length.
[   66.561641][ T6246] netlink: 192 bytes leftover after parsing attributes in process `syz.1.73'.
[   66.582861][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   67.058778][ T6270] vxcan3: entered allmulticast mode
[   67.396840][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'.
[   68.071910][ T6324] netlink: 192 bytes leftover after parsing attributes in process `syz.2.89'.
[   68.187451][ T6318] netlink: 'syz.0.88': attribute type 13 has an invalid length.
[   68.189992][ T6318] netlink: 'syz.0.88': attribute type 17 has an invalid length.
[   68.199131][ T6318] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   68.700675][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'.
[   69.199204][ T6384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.716154][ T6391] netlink: 'syz.1.104': attribute type 13 has an invalid length.
[   69.720118][ T6391] netlink: 'syz.1.104': attribute type 17 has an invalid length.
[   69.734118][ T6391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.865361][ T6395] __nla_validate_parse: 2 callbacks suppressed
[   69.865375][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'.
[   70.067134][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   70.071058][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'.
[   70.157928][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'.
[   70.217885][ T6415] netlink: 192 bytes leftover after parsing attributes in process `syz.0.111'.
[   70.221665][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[   70.368052][ T6421] netlink: 364 bytes leftover after parsing attributes in process `syz.0.112'.
[   70.371508][ T6421] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   70.418531][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'.
[   70.421964][ T6421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.112'.
[   70.429880][ T6421] netlink: 228 bytes leftover after parsing attributes in process `syz.0.112'.
[   70.477026][ T6433] netlink: 'syz.0.115': attribute type 13 has an invalid length.
[   70.480557][ T6433] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   70.921092][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.923861][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.033206][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.042156][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.050047][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.053440][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.194564][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.199405][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.206743][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.224456][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.605845][ T6489] netlink: 'syz.1.128': attribute type 1 has an invalid length.
[   71.609226][ T6489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.811250][ T6496] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   71.867638][ T6495] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   71.889620][ T6495] netlink: 'syz.0.130': attribute type 10 has an invalid length.
[   71.929011][ T6495] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   72.029215][ T6503] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.870035][ T6543] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   73.299144][ T6559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   74.185307][ T6594] netlink: 'syz.1.156': attribute type 11 has an invalid length.
[   74.397209][ T6601] bpq0: entered promiscuous mode
[   74.399447][ T6601] bpq0: entered allmulticast mode
[   74.620759][ T6606] netlink: 'syz.0.160': attribute type 13 has an invalid length.
[   74.632144][ T6606] netlink: 'syz.0.160': attribute type 17 has an invalid length.
[   74.638332][ T6617] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   74.652222][ T6606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.678622][ T6617] bond1: entered promiscuous mode
[   74.680983][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.710859][ T6617] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.715394][ T6617] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[   74.721339][ T6617] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   74.741336][ T6617] bond1: (slave wireguard0): making interface the new active one
[   74.745690][ T6617] wireguard0: entered promiscuous mode
[   74.749343][ T6617] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[   74.922253][ T6622] __nla_validate_parse: 16 callbacks suppressed
[   74.922268][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.164'.
[   75.123605][ T6637] dvmrp1: entered allmulticast mode
[   75.597836][ T6662] netlink: 'syz.2.174': attribute type 1 has an invalid length.
[   75.601075][ T6662] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.174'.
[   76.004034][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.182'.
[   76.020022][ T6701] bond0: Unable to set down delay as MII monitoring is disabled
[   76.060023][ T6698] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   76.067048][ T6698] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   78.354674][ T6764] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002
[   78.979476][ T6794] netlink: 'syz.2.205': attribute type 13 has an invalid length.
[   78.983430][ T6794] netlink: 'syz.2.205': attribute type 17 has an invalid length.
[   78.995170][ T6794] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   79.879453][ T6835] netlink: 192 bytes leftover after parsing attributes in process `syz.1.214'.
[   79.961119][ T6844] netlink: 256 bytes leftover after parsing attributes in process `syz.1.215'.
[   79.965759][ T6848] netlink: 'syz.0.213': attribute type 13 has an invalid length.
[   79.969141][ T6848] netlink: 'syz.0.213': attribute type 17 has an invalid length.
[   79.989461][ T6848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.294805][   T10] cfg80211: failed to load regulatory.db
[   81.381450][ T6883] netlink: 64 bytes leftover after parsing attributes in process `syz.1.223'.
[   81.945120][ T6904] netlink: 228 bytes leftover after parsing attributes in process `syz.2.227'.
[   82.439471][ T6931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.528694][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.532141][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.554901][ T6938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.235'.
[   82.596037][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.604537][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.712368][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.715283][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.718521][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.721579][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.237999][ T6997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.248'.
[   83.547362][ T7031] netlink: 'syz.0.253': attribute type 17 has an invalid length.
[   83.550926][ T7031] lo: entered promiscuous mode
[   83.554184][ T7031] lo: entered allmulticast mode
[   83.557916][ T7031] tunl0: entered promiscuous mode
[   83.560074][ T7031] tunl0: entered allmulticast mode
[   83.563797][ T7031] gre0: entered promiscuous mode
[   83.565716][ T7031] gre0: entered allmulticast mode
[   83.575457][ T7031] gretap0: entered promiscuous mode
[   83.577457][ T7031] gretap0: entered allmulticast mode
[   83.583588][ T7031] erspan0: entered promiscuous mode
[   83.585503][ T7031] erspan0: entered allmulticast mode
[   83.589016][ T7031] ip_vti0: entered promiscuous mode
[   83.591150][ T7031] ip_vti0: entered allmulticast mode
[   83.595820][ T7031] ip6_vti0: entered promiscuous mode
[   83.598143][ T7031] ip6_vti0: entered allmulticast mode
[   83.605242][ T7031] sit0: entered promiscuous mode
[   83.607674][ T7031] sit0: entered allmulticast mode
[   83.611067][ T7034] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   83.620438][ T7031] ip6tnl0: entered promiscuous mode
[   83.623367][ T7031] ip6tnl0: entered allmulticast mode
[   83.626124][ T7025] netlink: 'syz.1.255': attribute type 13 has an invalid length.
[   83.629258][ T7025] netlink: 'syz.1.255': attribute type 17 has an invalid length.
[   83.634170][ T7031] ip6gre0: entered promiscuous mode
[   83.636073][ T7031] ip6gre0: entered allmulticast mode
[   83.638416][ T7031] syz_tun: entered promiscuous mode
[   83.640037][ T7031] syz_tun: entered allmulticast mode
[   83.642769][ T7031] ip6gretap0: entered promiscuous mode
[   83.644589][ T7031] ip6gretap0: entered allmulticast mode
[   83.647384][ T7031] bridge0: entered promiscuous mode
[   83.648999][ T7031] bridge0: entered allmulticast mode
[   83.651247][ T7031] vcan0: entered promiscuous mode
[   83.653078][ T7031] vcan0: entered allmulticast mode
[   83.655191][ T7031] bond0: entered promiscuous mode
[   83.656902][ T7031] bond_slave_0: entered promiscuous mode
[   83.658781][ T7031] bond_slave_1: entered promiscuous mode
[   83.660668][ T7031] dummy0: entered promiscuous mode
[   83.663085][ T7031] bond0: entered allmulticast mode
[   83.665150][ T7031] bond_slave_0: entered allmulticast mode
[   83.667599][ T7031] bond_slave_1: entered allmulticast mode
[   83.669936][ T7031] dummy0: entered allmulticast mode
[   83.675275][ T7031] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.679198][ T7031] team0: entered promiscuous mode
[   83.681456][ T7031] team_slave_0: entered promiscuous mode
[   83.684460][ T7031] team_slave_1: entered promiscuous mode
[   83.686456][ T7031] team0: entered allmulticast mode
[   83.688133][ T7031] team_slave_0: entered allmulticast mode
[   83.690051][ T7031] team_slave_1: entered allmulticast mode
[   83.692404][ T7031] 8021q: adding VLAN 0 to HW filter on device team0
[   83.696727][ T7031] nlmon0: entered promiscuous mode
[   83.698905][ T7031] nlmon0: entered allmulticast mode
[   83.701413][ T7031] caif0: entered promiscuous mode
[   83.703590][ T7031] caif0: entered allmulticast mode
[   83.705304][ T7031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.756468][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.759243][ T7025] 8021q: adding VLAN 0 to HW filter on device team0
[   83.772018][ T7025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.781315][ T7025] syz.1.255 (7025) used greatest stack depth: 19768 bytes left
[   83.797674][ T7035] bond2: (slave geneve2): making interface the new active one
[   83.801598][ T7035] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   83.814198][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   83.823845][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   83.828070][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   83.891821][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   84.337947][ T7058] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   84.371306][ T7060] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.400951][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[   84.484516][ T7075] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   84.488459][ T7075] netlink: 'syz.1.266': attribute type 2 has an invalid length.
[   84.557216][ T7060] netlink: 192 bytes leftover after parsing attributes in process `syz.0.262'.
[   84.562414][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'.
[   84.708666][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[   84.748776][ T7089] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.766855][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'.
[   84.770829][ T7090] openvswitch: netlink: Flow key attr not present in new flow.
[  102.558848][ T7121] bond0: option xmit_hash_policy: invalid value (8)
[  102.747285][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.279'.
[  102.869963][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'.
[  102.966507][ T7142] netlink: 192 bytes leftover after parsing attributes in process `syz.1.280'.
[  103.178402][ T7148] dvmrp1: entered allmulticast mode
[  103.217126][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'.
[  103.550628][ T7163] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  103.551069][ T7162] IPVS: stopping backup sync thread 7163 ...
[  104.329183][ T7178] ksmbd: Unknown IPC event: 6, ignore.
[  104.837921][ T7184] netlink: 165 bytes leftover after parsing attributes in process `syz.2.293'.
[  105.074887][ T7196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.296'.
[  105.105495][ T7199] openvswitch: netlink: IP tunnel dst address not specified
[  105.187751][ T7206] trusted_key: syz.0.298 sent an empty control message without MSG_MORE.
[  105.335959][ T7213] lo: left promiscuous mode
[  105.337932][ T7213] lo: left allmulticast mode
[  105.348913][ T7213] tunl0: left promiscuous mode
[  105.351002][ T7213] tunl0: left allmulticast mode
[  105.359572][ T7213] gre0: left promiscuous mode
[  105.361593][ T7213] gre0: left allmulticast mode
[  105.369935][ T7213] gretap0: left promiscuous mode
[  105.372155][ T7213] gretap0: left allmulticast mode
[  105.383573][ T7213] erspan0: left promiscuous mode
[  105.386839][ T7213] erspan0: left allmulticast mode
[  105.391071][ T7213] ip_vti0: left promiscuous mode
[  105.394813][ T7213] ip_vti0: left allmulticast mode
[  105.398893][ T7213] ip6_vti0: left promiscuous mode
[  105.401179][ T7213] ip6_vti0: left allmulticast mode
[  105.409808][ T7213] sit0: left promiscuous mode
[  105.411953][ T7213] sit0: left allmulticast mode
[  105.420032][ T7213] ip6tnl0: left promiscuous mode
[  105.424411][ T7213] ip6tnl0: left allmulticast mode
[  105.429612][ T7213] ip6gre0: left promiscuous mode
[  105.432626][ T7213] ip6gre0: left allmulticast mode
[  105.440444][ T7213] syz_tun: left promiscuous mode
[  105.447182][ T7213] ip6gretap0: left promiscuous mode
[  105.449315][ T7213] ip6gretap0: left allmulticast mode
[  105.456624][ T7213] bridge0: left promiscuous mode
[  105.458691][ T7213] bridge0: left allmulticast mode
[  106.119008][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'.
[  106.122127][ T7257] netlink: 'syz.1.311': attribute type 2 has an invalid length.
[  106.125402][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'.
[  106.128902][ T7257] netlink: 52 bytes leftover after parsing attributes in process `syz.1.311'.
[  106.143407][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'.
[  106.187198][ T7270] vlan0: entered promiscuous mode
[  127.798965][ T7303] __nla_validate_parse: 6 callbacks suppressed
[  127.798975][ T7303] netlink: 192 bytes leftover after parsing attributes in process `syz.1.321'.
[  128.265459][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'.
[  128.514587][   T56] block nbd0: Receive control failed (result -104)
[  128.566653][ T7330] netlink: 'syz.1.331': attribute type 13 has an invalid length.
[  128.569916][ T7330] netlink: 'syz.1.331': attribute type 17 has an invalid length.
[  128.633913][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.636957][ T7330] 8021q: adding VLAN 0 to HW filter on device team0
[  128.645586][ T7330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.667697][ T7330] syz.1.331 (7330) used greatest stack depth: 18816 bytes left
[  129.551726][ T7389] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[  129.562077][ T7389] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.345'.
[  129.685253][ T7394] netlink: 'syz.1.346': attribute type 13 has an invalid length.
[  129.688350][ T7394] netlink: 'syz.1.346': attribute type 17 has an invalid length.
[  129.708434][ T7403] netlink: 'syz.1.346': attribute type 13 has an invalid length.
[  129.714344][ T7394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.715499][ T7403] netlink: 'syz.1.346': attribute type 17 has an invalid length.
[  129.729897][ T7401] Bluetooth: MGMT ver 1.23
[  129.753372][ T7403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.031246][ T7411] netlink: 348 bytes leftover after parsing attributes in process `syz.0.348'.
[  131.918294][ T7432] netlink: 'syz.0.353': attribute type 1 has an invalid length.
[  131.921332][ T7432] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.353'.
[  132.084619][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'.
[  132.479836][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.2.359'.
[  132.488556][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.491081][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.552089][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  132.659784][ T7466] netlink: 192 bytes leftover after parsing attributes in process `syz.2.361'.
[  132.663955][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.361'.
[  132.677903][ T7470] delete_channel: no stack
[  132.800971][ T7480] netlink: 'syz.0.363': attribute type 13 has an invalid length.
[  132.812707][ T7480] netlink: 'syz.0.363': attribute type 17 has an invalid length.
[  132.848697][ T7480] vcan0: left promiscuous mode
[  132.850542][ T7480] vcan0: left allmulticast mode
[  132.854447][ T7480] bond0: left promiscuous mode
[  132.856195][ T7480] bond_slave_0: left promiscuous mode
[  132.858232][ T7480] bond_slave_1: left promiscuous mode
[  132.860566][ T7480] bond0: left allmulticast mode
[  132.862862][ T7480] bond_slave_0: left allmulticast mode
[  132.864934][ T7480] bond_slave_1: left allmulticast mode
[  132.867247][ T7480] team0: left promiscuous mode
[  132.868973][ T7480] team_slave_0: left promiscuous mode
[  132.870949][ T7480] team_slave_1: left promiscuous mode
[  132.873611][ T7480] team0: left allmulticast mode
[  132.875341][ T7480] team_slave_0: left allmulticast mode
[  132.877237][ T7480] team_slave_1: left allmulticast mode
[  132.879539][ T7480] dummy0: left promiscuous mode
[  132.881345][ T7480] dummy0: left allmulticast mode
[  132.884344][ T7480] nlmon0: left promiscuous mode
[  132.886253][ T7480] nlmon0: left allmulticast mode
[  132.889445][ T7480] caif0: left promiscuous mode
[  132.891255][ T7480] caif0: left allmulticast mode
[  132.893424][ T7480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.399414][ T7505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.370'.
[  134.581187][  T792] IPVS: starting estimator thread 0...
[  134.589111][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.376'.
[  134.685499][ T7540] IPVS: using max 80 ests per chain, 192000 per kthread
[  134.975425][ T7044] IPVS: stop unused estimator thread 0...
[  134.986860][ T7564] netlink: 'syz.1.383': attribute type 1 has an invalid length.
[  134.990459][ T7564] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.383'.
[  135.055326][ T7567] netlink: 'syz.2.384': attribute type 13 has an invalid length.
[  135.058275][ T7567] netlink: 'syz.2.384': attribute type 17 has an invalid length.
[  135.063533][ T7569] netlink: 'syz.2.384': attribute type 13 has an invalid length.
[  135.066311][ T7569] netlink: 'syz.2.384': attribute type 17 has an invalid length.
[  135.114655][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.117676][ T7569] 8021q: adding VLAN 0 to HW filter on device team0
[  135.121434][ T7569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.132137][ T7567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.344808][ T7581] netlink: 'syz.0.386': attribute type 13 has an invalid length.
[  135.353570][ T7581] netlink: 'syz.0.386': attribute type 17 has an invalid length.
[  135.371081][ T7581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.554514][ T7584] bond0: Unable to set up delay as MII monitoring is disabled
[  135.745612][ T7595] netlink: 192 bytes leftover after parsing attributes in process `syz.0.390'.
[  135.755166][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'.
[  136.843689][ T7648] tipc: Started in network mode
[  136.846413][ T7648] tipc: Node identity b6d22b0e372f, cluster identity 4711
[  136.849821][ T7648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.853975][ T7648] syzkaller0: entered promiscuous mode
[  136.856627][ T7648] syzkaller0: entered allmulticast mode
[  136.870526][ T7648] tipc: Resetting bearer <eth:syzkaller0>
[  137.129528][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  137.140415][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  137.148354][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  137.152255][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  137.315781][ T7665] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[  137.318566][ T7665] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.406'.
[  137.465693][ T7677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.847391][ T7693] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.411'.
[  137.863132][  T792] tipc: Node number set to 2180852494
[  137.970903][ T7696] netlink: 'syz.1.410': attribute type 1 has an invalid length.
[  137.974469][ T7696] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.410'.
[  138.090783][ T7712] netlink: 'syz.1.415': attribute type 6 has an invalid length.
[  138.094753][ T7712] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.415'.
[  138.266406][ T7720] tipc: Resetting bearer <eth:syzkaller0>
[  138.269581][  T791] IPVS: starting estimator thread 0...
[  138.372400][ T7729] IPVS: using max 78 ests per chain, 187200 per kthread
[  138.381256][ T7737] netlink: 192 bytes leftover after parsing attributes in process `syz.1.420'.
[  138.481539][ T7741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.632778][ T7745] __nla_validate_parse: 1 callbacks suppressed
[  138.632787][ T7745] netlink: 192 bytes leftover after parsing attributes in process `syz.1.424'.
[  138.668964][ T7753] bpq0: left allmulticast mode
[  138.871032][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'.
[  139.014451][ T7786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'.
[  139.177094][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.437'.
[  139.404812][ T7809] openvswitch: netlink: IPv4 tun info is not correct
[  140.201130][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[  140.621999][ T7858] validate_nla: 5 callbacks suppressed
[  140.622013][ T7858] netlink: 'syz.1.450': attribute type 12 has an invalid length.
[  141.166068][ T7883] delete_channel: no stack
[  141.210331][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[  141.257642][ T7895] openvswitch: netlink: Key type 251 is out of range max 32
[  141.324621][ T7898] team0: Device gtp0 is of different type
[  141.328475][ T7899] openvswitch: netlink: Duplicate or invalid key (type 0).
[  141.336927][ T7899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.479021][ T5884] IPVS: starting estimator thread 0...
[  141.562428][ T7914] IPVS: using max 79 ests per chain, 189600 per kthread
[  141.629735][ T7921] netlink: 44 bytes leftover after parsing attributes in process `syz.1.468'.
[  141.634383][ T7921] netlink: 43 bytes leftover after parsing attributes in process `syz.1.468'.
[  141.637692][ T7921] netlink: 'syz.1.468': attribute type 5 has an invalid length.
[  141.640336][ T7921] netlink: 43 bytes leftover after parsing attributes in process `syz.1.468'.
[  141.711247][ T7924] netlink: 192 bytes leftover after parsing attributes in process `syz.1.468'.
[  142.061522][ T7940] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[  142.844916][ T7968] netlink: 'syz.0.480': attribute type 21 has an invalid length.
[  143.409492][ T8021] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  143.414193][ T8021] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[  143.850989][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.188708][ T8052] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.658159][ T8065] __nla_validate_parse: 8 callbacks suppressed
[  144.658168][ T8065] netlink: 260 bytes leftover after parsing attributes in process `syz.2.497'.
[  144.664415][ T8065] netlink: 260 bytes leftover after parsing attributes in process `syz.2.497'.
[  144.694362][ T8067] netlink: 4208 bytes leftover after parsing attributes in process `syz.2.498'.
[  144.743525][ T8069] netlink: 192 bytes leftover after parsing attributes in process `syz.2.499'.
[  144.746375][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'.
[  144.854779][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  144.857810][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  145.143196][   T57] block nbd1: Receive control failed (result -32)
[  145.157194][ T8082] netlink: 248 bytes leftover after parsing attributes in process `syz.2.505'.
[  145.194166][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.505'.
[  145.430168][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'.
[  145.450994][ T8102] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  145.457598][ T8102] team0: Device ipvlan0 is already an upper device of the team interface
[  145.499712][ T8094] netlink: 'syz.1.508': attribute type 4 has an invalid length.
[  145.503780][ T8109] !: renamed from dummy0
[  145.878791][ T8130] tipc: Enabled bearer <eth:gre0>, priority 10
[  145.960269][ T8139] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001
[  147.310295][ T8197] netlink: 'syz.1.529': attribute type 1 has an invalid length.
[  147.379453][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.380469][ T8295] netlink: 'syz.2.549': attribute type 13 has an invalid length.
[  149.383892][ T8295] netlink: 'syz.2.549': attribute type 17 has an invalid length.
[  149.427423][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.432150][ T8295] 8021q: adding VLAN 0 to HW filter on device team0
[  149.438666][ T8295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.591085][ T8302] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[  150.289546][ T8332] __nla_validate_parse: 12 callbacks suppressed
[  150.289555][ T8332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'.
[  150.736806][ T8353] 8021q: VLANs not supported on syzkaller1
[  150.757864][ T8353] syzkaller0: Caught tx_queue_len zero misconfig
[  150.767203][ T8353] syzkaller1: entered promiscuous mode
[  150.769894][ T8353] syzkaller1: entered allmulticast mode
[  151.499411][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'.
[  152.039021][ T8400] netlink: 64 bytes leftover after parsing attributes in process `syz.0.576'.
[  152.223879][ T8415] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  152.329206][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'.
[  152.444266][ T8430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.582'.
[  152.448195][ T8431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.582'.
[  152.648183][ T8445] netlink: 'syz.0.585': attribute type 13 has an invalid length.
[  152.651572][ T8445] netlink: 'syz.0.585': attribute type 17 has an invalid length.
[  152.655922][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.586'.
[  152.680544][ T8445] vlan0: left promiscuous mode
[  152.998590][ T8462] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  153.001110][ T8462] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  153.124580][ T8467] netlink: 192 bytes leftover after parsing attributes in process `syz.2.591'.
[  153.128030][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[  153.261941][ T8478] netlink: 192 bytes leftover after parsing attributes in process `syz.2.592'.
[  153.476547][ T8486] sctp: [Deprecated]: syz.2.596 (pid 8486) Use of int in maxseg socket option.
[  153.476547][ T8486] Use struct sctp_assoc_value instead
[  153.739466][ T8503] netlink: 'syz.0.600': attribute type 4 has an invalid length.
[  155.270938][ T8572] Driver unsupported XDP return value 0 on prog  (id 244) dev N/A, expect packet loss!
[  155.796165][ T8586] __nla_validate_parse: 3 callbacks suppressed
[  155.796174][ T8586] netlink: 192 bytes leftover after parsing attributes in process `syz.2.617'.
[  155.801946][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[  156.289691][ T8603] can: request_module (can-proto-0) failed.
[  156.408554][ T8607] netlink: 'syz.1.622': attribute type 1 has an invalid length.
[  156.417831][ T8607] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.622'.
[  156.616911][ T8610] netlink: 192 bytes leftover after parsing attributes in process `syz.2.623'.
[  156.950773][ T8631] netlink: 144 bytes leftover after parsing attributes in process `syz.1.627'.
[  156.974943][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  157.271880][ T8648] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  157.547027][ T8658] netlink: 'syz.2.631': attribute type 1 has an invalid length.
[  157.556650][ T8658] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.631'.
[  157.586560][ T8657] netlink: 'syz.2.631': attribute type 3 has an invalid length.
[  157.684069][ T8669] tipc: Resetting bearer <eth:syzkaller0>
[  158.652864][ T8693] netlink: 'syz.0.640': attribute type 13 has an invalid length.
[  158.656164][ T8693] netlink: 'syz.0.640': attribute type 17 has an invalid length.
[  158.706390][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.712835][ T8693] 8021q: adding VLAN 0 to HW filter on device team0
[  158.717068][ T8693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.851772][ T8708] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  158.996847][ T8710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.644'.
[  159.000402][ T8710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.644'.
[  159.004488][ T8710] netlink: 'syz.1.644': attribute type 5 has an invalid length.
[  159.007839][ T8710] netlink: 43 bytes leftover after parsing attributes in process `syz.1.644'.
[  159.126632][ T8714] bridge0: port 3(macvlan2) entered blocking state
[  159.129797][ T8714] bridge0: port 3(macvlan2) entered disabled state
[  159.133909][ T8714] macvlan2: entered allmulticast mode
[  159.135737][ T8714] bridge0: entered allmulticast mode
[  159.138877][ T8714] macvlan2: left allmulticast mode
[  159.140861][ T8714] bridge0: left allmulticast mode
[  159.240821][ T8719] tipc: Started in network mode
[  159.243343][ T8719] tipc: Node identity 52905721d94b, cluster identity 4711
[  159.250302][ T8719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.276813][ T8719] syzkaller0: entered promiscuous mode
[  159.278904][ T8719] syzkaller0: entered allmulticast mode
[  159.319166][ T8719] tipc: Resetting bearer <eth:syzkaller0>
[  159.324566][ T8719] team0: No ports can be present during mode change
[  159.396955][ T8726] netlink: 'syz.2.649': attribute type 5 has an invalid length.
[  160.198354][ T8764] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[  160.201770][ T8764] netlink: 'syz.0.658': attribute type 2 has an invalid length.
[  160.205487][ T8764] netlink: 'syz.0.658': attribute type 2 has an invalid length.
[  160.209137][ T8764] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[  160.215951][ T8764] netlink: 'syz.0.658': attribute type 2 has an invalid length.
[  160.293098][  T792] tipc: Node number set to 2346407713
[  160.807307][ T8784] __nla_validate_parse: 6 callbacks suppressed
[  160.807321][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'.
[  161.353636][ T8801] netlink: 'syz.0.667': attribute type 5 has an invalid length.
[  161.365558][ T8801] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.667'.
[  161.827623][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.830671][ T8826] 8021q: adding VLAN 0 to HW filter on device team0
[  161.836002][ T8826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.213605][ T8845] netlink: 192 bytes leftover after parsing attributes in process `syz.1.676'.
[  162.218923][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[  162.244358][ T8846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.379191][ T8853] netlink: 68 bytes leftover after parsing attributes in process `syz.0.679'.
[  162.431508][ T8854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.754177][ T8873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.682'.
[  163.215766][ T8890] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  163.219049][ T8890] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  163.226229][ T8890] netlink: 830 bytes leftover after parsing attributes in process `syz.2.686'.
[  163.585543][ T8911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.615252][ T8916] ip6erspan0: entered allmulticast mode
[  163.659326][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'.
[  163.673409][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.676562][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.680121][ T7044] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.681699][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.696'.
[  163.688776][ T7044] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.739226][ T8925] validate_nla: 7 callbacks suppressed
[  163.739241][ T8925] netlink: 'syz.1.695': attribute type 13 has an invalid length.
[  163.748117][ T8925] netlink: 'syz.1.695': attribute type 17 has an invalid length.
[  163.775296][ T8925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.079130][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  164.409685][ T8947] IPVS: set_ctl: invalid protocol: 22 172.20.20.35:20002
[  164.557312][ T8964] syz.0.708: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  164.567349][ T8964] CPU: 0 UID: 0 PID: 8964 Comm: syz.0.708 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  164.567374][ T8964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.567381][ T8964] Call Trace:
[  164.567387][ T8964]  <TASK>
[  164.567392][ T8964]  dump_stack_lvl+0x189/0x250
[  164.567413][ T8964]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.567427][ T8964]  ? __pfx__printk+0x10/0x10
[  164.567441][ T8964]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.567455][ T8964]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.567469][ T8964]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  164.567484][ T8964]  warn_alloc+0x214/0x310
[  164.567497][ T8964]  ? stack_depot_save_flags+0x40/0x900
[  164.567512][ T8964]  ? __pfx_warn_alloc+0x10/0x10
[  164.567526][ T8964]  ? kasan_save_track+0x4f/0x80
[  164.567542][ T8964]  ? xskq_create+0x56/0x170
[  164.567556][ T8964]  ? xsk_init_queue+0xb0/0x110
[  164.567569][ T8964]  ? xsk_setsockopt+0x4dc/0x8d0
[  164.567582][ T8964]  ? do_sock_setsockopt+0x17c/0x1b0
[  164.567593][ T8964]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  164.567603][ T8964]  ? do_syscall_64+0xfa/0x3b0
[  164.567649][ T8964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.567667][ T8964]  __vmalloc_node_range_noprof+0x125/0x12f0
[  164.567700][ T8964]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  164.567717][ T8964]  ? __kasan_kmalloc+0x93/0xb0
[  164.567736][ T8964]  vmalloc_user_noprof+0xad/0xf0
[  164.567748][ T8964]  ? xskq_create+0xbf/0x170
[  164.567764][ T8964]  xskq_create+0xbf/0x170
[  164.567781][ T8964]  xsk_init_queue+0xb0/0x110
[  164.567798][ T8964]  xsk_setsockopt+0x4dc/0x8d0
[  164.567815][ T8964]  ? __pfx_xsk_setsockopt+0x10/0x10
[  164.567829][ T8964]  ? __pfx_aa_sk_perm+0x10/0x10
[  164.567846][ T8964]  ? aa_sock_opt_perm+0x74/0x110
[  164.567862][ T8964]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  164.567875][ T8964]  ? __pfx_xsk_setsockopt+0x10/0x10
[  164.567890][ T8964]  do_sock_setsockopt+0x17c/0x1b0
[  164.567905][ T8964]  __x64_sys_setsockopt+0x13f/0x1b0
[  164.567919][ T8964]  do_syscall_64+0xfa/0x3b0
[  164.567934][ T8964]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.567949][ T8964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.567960][ T8964]  ? exc_page_fault+0x9f/0xf0
[  164.567977][ T8964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.567988][ T8964] RIP: 0033:0x7fba1978ebe9
[  164.567999][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.568009][ T8964] RSP: 002b:00007fba1a540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  164.568023][ T8964] RAX: ffffffffffffffda RBX: 00007fba199b5fa0 RCX: 00007fba1978ebe9
[  164.568031][ T8964] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  164.568038][ T8964] RBP: 00007fba19811e19 R08: 0000000000000004 R09: 0000000000000000
[  164.568045][ T8964] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.568052][ T8964] R13: 00007fba199b6038 R14: 00007fba199b5fa0 R15: 00007ffe5ba4d018
[  164.568072][ T8964]  </TASK>
[  164.568077][ T8964] Mem-Info:
[  164.699635][ T8964] active_anon:5621 inactive_anon:0 isolated_anon:0
[  164.699635][ T8964]  active_file:1054 inactive_file:38242 isolated_file:0
[  164.699635][ T8964]  unevictable:1768 dirty:17 writeback:0
[  164.699635][ T8964]  slab_reclaimable:9795 slab_unreclaimable:104542
[  164.699635][ T8964]  mapped:18235 shmem:2459 pagetables:955
[  164.699635][ T8964]  sec_pagetables:0 bounce:0
[  164.699635][ T8964]  kernel_misc_reclaimable:0
[  164.699635][ T8964]  free:243527 free_pcp:17658 free_cma:0
[  164.745875][ T8964] Node 0 active_anon:13280kB inactive_anon:0kB active_file:3420kB inactive_file:147932kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37980kB dirty:36kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4576kB pagetables:2244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.760223][ T8964] Node 1 active_anon:9204kB inactive_anon:0kB active_file:796kB inactive_file:5036kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34960kB dirty:32kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7304kB pagetables:1576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.775065][ T8964] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  164.799581][ T8964] lowmem_reserve[]: 0 814 814 814 814
[  164.801994][ T8964] Node 0 DMA32 free:256744kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13280kB inactive_anon:0kB active_file:3420kB inactive_file:147932kB unevictable:3536kB writepending:36kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:33752kB local_pcp:19368kB free_cma:0kB
[  164.819595][ T8964] lowmem_reserve[]: 0 0 0 0 0
[  164.823659][ T8964] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  164.838366][ T8964] lowmem_reserve[]: 0 0 854 854 854
[  164.840765][ T8964] Node 1 Normal free:243512kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9068kB inactive_anon:0kB active_file:796kB inactive_file:5036kB unevictable:3536kB writepending:32kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37556kB local_pcp:21296kB free_cma:0kB
[  164.874113][ T8973] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  164.908573][ T8964] lowmem_reserve[]: 0 0 0 0 0
[  164.910680][ T8964] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  164.917744][ T8964] Node 0 DMA32: 1738*4kB (UME) 758*8kB (UME) 337*16kB (UME) 278*32kB (UM) 111*64kB (UME) 37*128kB (UME) 22*256kB (UM) 8*512kB (UM) 9*1024kB (UM) 7*2048kB (ME) 45*4096kB (UM) = 256744kB
[  164.927723][ T8964] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  164.938309][ T8964] Node 1 Normal: 597*4kB (UE) 169*8kB (UE) 143*16kB (U) 392*32kB (UME) 430*64kB (UME) 134*128kB (UME) 53*256kB (UM) 15*512kB (UME) 7*1024kB (UME) 4*2048kB (UM) 35*4096kB (M) = 243212kB
[  164.947101][ T8964] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.950547][ T8964] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.954557][ T8964] 41755 total pagecache pages
[  164.956629][ T8964] 0 pages in swap cache
[  164.960442][ T8964] Free swap  = 124996kB
[  164.962173][ T8964] Total swap = 124996kB
[  164.964391][ T8964] 786301 pages RAM
[  164.965701][ T8964] 0 pages HighMem/MovableOnly
[  164.967278][ T8964] 240546 pages reserved
[  164.968726][ T8964] 0 pages cma reserved
[  165.568235][ T9014] netlink: 'syz.2.721': attribute type 13 has an invalid length.
[  165.573169][ T9014] netlink: 'syz.2.721': attribute type 17 has an invalid length.
[  165.593966][ T9014] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  165.599372][ T9016] netlink: 'syz.1.720': attribute type 3 has an invalid length.
[  167.296929][ T9086] netlink: 'syz.0.738': attribute type 13 has an invalid length.
[  167.300313][ T9086] netlink: 'syz.0.738': attribute type 17 has an invalid length.
[  167.461297][ T9086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.604911][ T9106] __nla_validate_parse: 6 callbacks suppressed
[  167.604989][ T9106] netlink: 192 bytes leftover after parsing attributes in process `syz.1.741'.
[  167.605027][ T9105] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  167.616355][ T9105] NCSI netlink: No device for ifindex 0
[  167.739312][ T9112] syzkaller1: entered promiscuous mode
[  167.741174][ T9112] syzkaller1: entered allmulticast mode
[  167.787483][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.746'.
[  168.028537][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  168.161225][ T9135] netlink: 44 bytes leftover after parsing attributes in process `syz.0.751'.
[  168.168051][ T9135] netlink: 428 bytes leftover after parsing attributes in process `syz.0.751'.
[  168.185297][ T9135] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'.
[  168.451819][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  168.510432][ T9151] pim6reg: entered allmulticast mode
[  168.529449][ T9151] pim6reg: left allmulticast mode
[  168.785250][ T9171] netlink: 48 bytes leftover after parsing attributes in process `syz.1.760'.
[  169.020683][ T9185] netlink: 'syz.0.764': attribute type 1 has an invalid length.
[  169.023896][ T9185] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.764'.
[  169.264867][ T9193] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  169.268800][ T9193] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  169.272652][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.1.767 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  169.277823][ T9193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.281966][ T9193] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  169.284329][ T9193] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 b6 b4 0a f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 7f b5 0a f8 4d 89 3e
[  169.292616][ T9193] RSP: 0018:ffffc90004e170e0 EFLAGS: 00010246
[  169.295256][ T9193] RAX: 0000000000000000 RBX: 1ffff11004d15896 RCX: dffffc0000000000
[  169.298713][ T9193] RDX: ffffc90008939000 RSI: 000000000000023c RDI: 000000000000023d
[  169.302155][ T9193] RBP: ffffc90004e17230 R08: ffff888108fd9cc0 R09: 0000000000000002
[  169.305636][ T9193] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11022be1096
[  169.309064][ T9193] R13: ffff8880268ac4b0 R14: 0000000000000000 R15: ffff8880268ac4a8
[  169.312510][ T9193] FS:  00007f1e6c2936c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  169.316273][ T9193] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.319069][ T9193] CR2: 000000110c3dce7c CR3: 0000000106e6a000 CR4: 00000000000006f0
[  169.322534][ T9193] Call Trace:
[  169.324028][ T9193]  <TASK>
[  169.325342][ T9193]  ? xfrm_alloc_spi+0x2a0/0xf30
[  169.327456][ T9193]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  169.329745][ T9193]  ? xfrm_find_acq+0x87/0xa0
[  169.331793][ T9193]  xfrm_alloc_userspi+0x70b/0xc90
[  169.334002][ T9193]  ? __pfx_aa_get_newest_label+0x10/0x10
[  169.336275][ T9193]  ? apparmor_capable+0x137/0x1b0
[  169.338421][ T9193]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  169.340706][ T9193]  ? __nla_parse+0x40/0x60
[  169.342479][ T9193]  xfrm_user_rcv_msg+0x7a3/0xab0
[  169.344496][ T9193]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.346541][ T9193]  ? __pfx___mutex_trylock_common+0x10/0x10
[  169.348981][ T9193]  ? rcu_is_watching+0x15/0xb0
[  169.351006][ T9193]  ? trace_contention_end+0x39/0x120
[  169.353229][ T9193]  ? __mutex_lock+0x335/0x1340
[  169.355311][ T9193]  netlink_rcv_skb+0x208/0x470
[  169.355546][ T9197] netlink: 'syz.1.767': attribute type 13 has an invalid length.
[  169.357260][ T9193]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  169.357276][ T9193]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  169.357296][ T9193]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.360864][ T9197] netlink: 'syz.1.767': attribute type 17 has an invalid length.
[  169.362893][ T9193]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.362918][ T9193]  xfrm_netlink_rcv+0x79/0x90
[  169.362934][ T9193]  netlink_unicast+0x82f/0x9e0
[  169.362952][ T9193]  ? __pfx_netlink_unicast+0x10/0x10
[  169.362969][ T9193]  ? netlink_sendmsg+0x642/0xb30
[  169.362987][ T9193]  ? skb_put+0x11b/0x210
[  169.369173][ T9197] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  169.370333][ T9193]  netlink_sendmsg+0x805/0xb30
[  169.370359][ T9193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.370377][ T9193]  ? aa_sock_msg_perm+0x94/0x160
[  169.395547][ T9193]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.397886][ T9193]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.400066][ T9193]  __sock_sendmsg+0x21c/0x270
[  169.402088][ T9193]  ____sys_sendmsg+0x505/0x830
[  169.404177][ T9193]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.406437][ T9193]  ? import_iovec+0x74/0xa0
[  169.408392][ T9193]  ___sys_sendmsg+0x21f/0x2a0
[  169.410464][ T9193]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.412651][ T9193]  ? __fget_files+0x2a/0x420
[  169.414490][ T9193]  ? __fget_files+0x3a0/0x420
[  169.416398][ T9193]  __x64_sys_sendmsg+0x19b/0x260
[  169.418517][ T9193]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.420879][ T9193]  ? rcu_is_watching+0x15/0xb0
[  169.422903][ T9193]  ? do_syscall_64+0xbe/0x3b0
[  169.424893][ T9193]  do_syscall_64+0xfa/0x3b0
[  169.426868][ T9193]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.429098][ T9193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.431590][ T9193]  ? exc_page_fault+0x9f/0xf0
[  169.433609][ T9193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.436170][ T9193] RIP: 0033:0x7f1e6b38ebe9
[  169.438088][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.445297][ T9193] RSP: 002b:00007f1e6c293038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.448344][ T9193] RAX: ffffffffffffffda RBX: 00007f1e6b5b5fa0 RCX: 00007f1e6b38ebe9
[  169.451642][ T9193] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[  169.455053][ T9193] RBP: 00007f1e6b411e19 R08: 0000000000000000 R09: 0000000000000000
[  169.457659][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.460518][ T9193] R13: 00007f1e6b5b6038 R14: 00007f1e6b5b5fa0 R15: 00007fff2905dcc8
[  169.463759][ T9193]  </TASK>
[  169.465036][ T9193] Modules linked in:
[  169.466884][ T9193] ---[ end trace 0000000000000000 ]---
[  169.469108][ T9193] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  169.471347][ T9193] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 b6 b4 0a f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 7f b5 0a f8 4d 89 3e
[  169.479194][ T9193] RSP: 0018:ffffc90004e170e0 EFLAGS: 00010246
[  169.481692][ T9193] RAX: 0000000000000000 RBX: 1ffff11004d15896 RCX: dffffc0000000000
[  169.484775][ T9193] RDX: ffffc90008939000 RSI: 000000000000023c RDI: 000000000000023d
[  169.487476][ T9193] RBP: ffffc90004e17230 R08: ffff888108fd9cc0 R09: 0000000000000002
[  169.490474][ T9193] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff11022be1096
[  169.493356][ T9193] R13: ffff8880268ac4b0 R14: 0000000000000000 R15: ffff8880268ac4a8
[  169.495960][ T9193] FS:  00007f1e6c2936c0(0000) GS:ffff8880b8680000(0000) knlGS:0000000000000000
[  169.498711][ T9193] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  169.500826][ T9193] CR2: 000000110c3dce7c CR3: 0000000106e6a000 CR4: 00000000000006f0
[  169.503498][ T9193] Kernel panic - not syncing: Fatal exception in interrupt
[  169.506382][ T9193] Kernel Offset: disabled
[  169.508191][ T9193] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:19:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000e23 RDI=0000000000000e24 RBP=00000000000003f8 RSP=ffffc90004e16910
R8 =ffff888107ee0237 R9 =1ffff11020fdc046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95931 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1e6c2936c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3dce7c CR3=0000000106e6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1e6b587498 00007f1e6b587470 XMM03=00007f1e6b5874a8 00007f1e6b5874a0
XMM04=00007f1e6c0ed100 00007f1e6b587460 XMM05=00007f1e6b587478 00007f1e6b5874c0
XMM06=00007f1e6b5874b8 00007f1e6b5874b0 XMM07=00007f1e6b5874a8 00007f1e6b5874a0
XMM08=0000000000000000 00007f1e6b412ee7 XMM09=0000000000000000 00007f1e6b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81ae5748 RBX=7fffffffffffffff RCX=ffff888105fe9cc0 RDX=0000000000010000
RSI=0000000000000002 RDI=0000000000000002 RBP=ffff888136627ce8 RSP=ffffc90004d3fd70
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff81725a00
R12=0000002756bb890d R13=0000002760ef87a8 R14=ffff888136627ce8 R15=0000000000007e10
RIP=ffffffff81ae580e RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555894ff500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c6109 CR3=0000000027c3c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000000000a1bf 00000000fff81a7b XMM03=00000008000002b7 fffffff800000107
XMM04=0085000000000000 03b7000000080000 XMM05=02b7fffffff80000 0107000000000000
XMM06=a1bf00000000fff8 1a7b000000000000 XMM07=0000000020200000 0118000000000000
XMM08=0000000000000000 00007fba19812ee7 XMM09=0000000000000000 00007fba19812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
