last executing test programs:

1.170883684s ago: executing program 1 (id=871):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000271127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.169086993s ago: executing program 1 (id=872):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0x9}, {0xb, 0x10}, {0xffff, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2efb, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r4, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x300}}}}}}}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003147df8fdfffffff9dbdf250900020073797a320000000008004100734f770014003300627269646765300000"], 0x38}, 0x1, 0x0, 0x0, 0x44810}, 0x200040c0)
connect$caif(r0, &(0x7f00000000c0), 0x18)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
sendmsg$inet6(r8, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0)

978.727272ms ago: executing program 2 (id=876):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304000000a767a1644da8eaec00", @ANYRES32=0x0, @ANYBLOB="aa230200028a000014000300766972745f776966693000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async, rerun: 32)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r3, 0x0) (async, rerun: 64)
r4 = accept(r3, 0x0, 0x0) (rerun: 64)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000380)={0x0, 0xffffffffffffffff}) (async)
connect$inet(r4, 0x0, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5e8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x14c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00eb8530654e316056a3d6000065089a1012a5020010080001000100000022731d62997bb8c64460e702b7e2a14bac0c3c93becb6a6021a5ff43306d6da98c3bd4d9e4c3eef260d2b521f8431ee7ffcea2"], 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x50, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x29, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0x2, 0x4}, @value=@ver_80211n={0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @addba_resp={0x3, 0x1, {0x3, 0x26, {0x0, 0x0, 0xe, 0x4}, 0x2}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, 0x0, 0x4008000) (async, rerun: 64)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000001c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x54, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xbf}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4e}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000800}, 0x4051) (rerun: 64)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20044084}, 0x800)

900.261165ms ago: executing program 2 (id=877):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 64)
socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64)
r3 = accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)={0x2a0, r6, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xe4, 0x12}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x194, 0x2a, [@measure_req={0x26, 0x66, {0xe, 0x5, 0x8, "99a47a5eb8f14e87203029a858cd54a284ecc54a5b1dfacb9803cfc3bcae771941f807f02b8c2f73980773577b6226f4183f585262d12ad4630d601a7847906ad5a28a9456448d2cd986ded1f67a9d07f38f55cf419d722ac3eb2e61646ad2fe7e13b0"}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b}}, @measure_req={0x26, 0xf3, {0x7, 0x79, 0x6, "164caf5f3a711b6afbe608226b328e2fccd67b643913b8aed8b02020cc3b2d2f64d3e7bbb99ad200582e0763d8c425890abbeb182b9c2ce49c9e70f2e9401b89e6ff0aa1bf97468c07bd9c3f4083ebfd8c8de1b81699ab58507acdff3e60232c21d11e1abcc54213f8df0e8e93e5e72dba93b647d338419a861f0a29adf8fb53406510f8735bd7eea38c330d07af9b0d160095ad05c27b828aa73d90f9f0874839f2282df9a1c0284a631b47fce3c513a3ca4ed648dea842cf1682a8d70b2e5b1f04929e59e5cbcc57df7c56a30c855a5b25115bca92fa8ebb479fff8cd37f042ee90a0757576f4781addf0c2ee718b2"}}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x6, 0xa, @broadcast, 0xffffffaf, 0x901, 0x5}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0xcc, 0x2a, [@challenge={0x10, 0x1, 0x2c}, @fast_bss_trans={0x37, 0xb1, {0x4, 0x4, "db3256abb6fbadfe0c59a6ffbc787474", "f923b222fc6027d5df46023e213a9b0c7dbc8150ab8b9268bd7024ab97d4d330", "b0db1c3a3693b1cdb7160a271f67778c7d319ea40ec4c2a969e7200ef78fa05e", [{0x4, 0x8, "641f877af0385710"}, {0x4, 0x1e, "4ce1df5d9fd098d57d56897ea888f4dcbf41a7d4a81ea59eb3d1363ad74a"}, {0x2, 0x11, "cd096f046c807e3bbd45f289ab0045f0b2"}, {0x4, 0x20, "838c8ff41ca1cb657c787810feabd5614deb239f694f1b4b1ff9227b9cab1969"}]}}, @supported_rates={0x1, 0x8, [{0x6c, 0x1}, {0x6c, 0x1}, {0x30, 0x1}, {0x36}, {0xc}, {0x1b}, {0x5}, {0xc, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async)
socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f03000004000011020000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x4)
socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0x5e, &(0x7f00000002c0)={&(0x7f0000000800)={0x1a4, r9, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1163}, @NL80211_ATTR_TX_NO_CCK_RATE, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x0, 0xa0, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xfffffffffffffcef}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r10 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}}}, 0x84) (async)
setsockopt$inet6_int(r10, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4)

899.474196ms ago: executing program 2 (id=878):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000010271127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

817.995405ms ago: executing program 2 (id=879):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0d3328bd7000fedbdf256b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020020000000000000000007000000040000"], 0x0, 0x26}, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a3200e369799b00010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r8 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x4, 0x8, 0x779, 0xa000, 0xffffffffffffffff, 0x9, '\x00', 0x0, r6, 0x5, 0x3, 0x1, 0x2, @value=r6}, 0x50)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1, 0x100000000, 0xca8}, {0x3}, 0xff, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x4d5, 0x3c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d3, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@local, 0x2, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x4, 0x0, 0x81, 0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x80)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000003071392"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', <r11=>0x0, 0x8000, 0x40, 0x22, 0x1, {{0x1c, 0x4, 0x1, 0xf, 0x70, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@rr={0x7, 0xf, 0xcb, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x34, 0xcb, 0x3, 0x5, [{@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@multicast2, 0x7}, {@remote, 0x1}, {@loopback, 0x9}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0x1, [0xffff, 0x21, 0x0, 0x5, 0x6]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180080040000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r12], 0x54}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r5, 0x0, 0xfaf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000240)=0x2, 0x4)

690.275553ms ago: executing program 2 (id=880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x4000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20001}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7}]}, 0x2c}}, 0x0)

685.392734ms ago: executing program 2 (id=881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r2}, 0x40000000000000, 0x0, 0x7fffffff})
close(r0)

329.764358ms ago: executing program 0 (id=886):
r0 = socket(0x10, 0x803, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xfffffd15, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x70, 0x32, 0x53b, 0x70bd2b, 0x25dfdbfb, {0x9}}, 0x70}, 0x1, 0x0, 0x0, 0x3000c891}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff}) (async)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async, rerun: 64)
shutdown(r5, 0x1) (async, rerun: 64)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r7, 0xffffffff}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={r7, @in6={{0xa, 0x4e21, 0xffffffff, @remote, 0x81}}, 0x120000, 0x6, 0x2, 0x1, 0x7ff}, &(0x7f0000000040)=0x98) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x558, 0xffffffff, 0x2a8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x4c0, 0x4c0, 0x4c0, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@broadcast, @broadcast, 0x0, 0xffffff00, 'bond_slave_1\x00', 'xfrm0\x00', {}, {}, 0x5c}, 0x0, 0xb0, 0x1d8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x1, 0x0, 0x0, 0x2], 0x1, 0x4}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'system_u:object_r:user_cron_spool_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x1, 0x0, 0x5, 0x1, 0x6], 0x3, 0x2}, {0x3, [0x8d2eb01acdb71d72, 0x2, 0x4, 0x2, 0x6, 0xe1c83a00dc810be8], 0x3, 0x2}}}}, {{@uncond, 0x0, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffff00, 0x800000ff, 0x0, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d2, 0x3504, 0x88, 0x0, 0x8ae203e08ad9a253, 0x12}, {@ipv4=@private=0xa010101, [0xff000000, 0xff000000, 0x0, 0xff], @ipv6=@remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 0x4d4, 0x3503, 0x5c, 0x1, 0x10, 0x1}, {@ipv6=@mcast1, [0xff000000, 0xff, 0xff000000, 0xffffffff], @ipv6=@loopback, [0xffffff00, 0x0, 0xff000000, 0xff000000], 0x4d4, 0x3503, 0x88, 0x1, 0x0, 0xb}, {@ipv4=@multicast2, [0xff000000, 0xffffff], @ipv6=@mcast2, [0xff000000, 0x0, 0x0, 0xffffff00], 0x4d3, 0x3505, 0x2e, 0x0, 0x12}], 0x3, 0x1}}, @common=@ttl={{0x28}, {0x3, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) (async, rerun: 64)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0x7}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x4, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x84}}, 0x24040084) (rerun: 64)

280.668998ms ago: executing program 1 (id=887):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket(0x10, 0x803, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000e, 0x2010, r1, 0x8d262000) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x2, 0x68de}, 0xc)
socket(0x3, 0x80805, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="650a00000000000061119a00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020673f3010200000000000000000000000a05000100070000000900020073797a30000000000500050005000000050004000000000012000300686173683a6e65cf742c706f72740000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

279.943255ms ago: executing program 1 (id=888):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={0x14, r1, 0x2}, 0x14}}, 0x44080)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r0) (async)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={0x14, r1, 0x2}, 0x14}}, 0x44080) (async)

277.270778ms ago: executing program 0 (id=889):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703001b00000000850000000c000000b70000000000000018200000", @ANYRES32, @ANYBLOB="00000000100008009500000000000000950000000000810000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xffffffff, 0x0, 0xfffffffd}, 0x10}, 0x94)

200.545671ms ago: executing program 0 (id=890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a3200"], 0xd4}}, 0x40880)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4)
sendto$inet6(r2, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xc, 0x8000, 0xb, 0x401, <r3=>0x0}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000300)={r3, 0xd1, 0x0, 0x3, 0xffffffff00000000}, &(0x7f0000000340)=0x18)
recvmmsg(r2, &(0x7f0000005640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/145, 0x91}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x7ffffffe}, 0x8}, 0x94)

200.194237ms ago: executing program 1 (id=891):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000014)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

199.800648ms ago: executing program 0 (id=892):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000010371127a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

199.102498ms ago: executing program 1 (id=893):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0x4, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r2, 0x1)
unshare(0x62040200)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
pipe(0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x4c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}, @typed={0xc, 0xb7, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x9, 0x0, 0x0, @str='rcu_utilization\x00'}]}, 0x4c}}, 0x40)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x1, 0x0, @empty}}, 0x5c)
r5 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xd44263be89ee4aba}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x7}, 0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000000300000000000000000004000f60030002000000850000008900000018010003696c6c2500000000002020207b1af8ff00000000bfa10000c720030000000007010000f8ffffffb702000008000000b70300000900000085000000060000001835000004000000000000000000000095"], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x2, 0x1d1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

110.297843ms ago: executing program 0 (id=894):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100fcffffff000000000100"], 0x30}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, @in6={0xa, 0x4e24, 0x6, @remote, 0x10}], 0x3c)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r5 = socket(0x10, 0x800, 0x5)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x24000000)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x54, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000080}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1008100}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

0s ago: executing program 0 (id=895):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21893' (ED25519) to the list of known hosts.
syzkaller login: [   47.303552][ T5760] cgroup: Unknown subsys name 'net'
[   47.414931][ T5760] cgroup: Unknown subsys name 'cpuset'
[   47.419097][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.084609][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.745837][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.749240][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.752250][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.755005][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.757546][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.834427][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.838163][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.840639][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.844921][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.847742][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.864285][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.870328][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.874133][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.877356][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.880386][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.083005][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.208772][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   54.297638][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.300614][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.305047][ T5828] bridge_slave_0: entered allmulticast mode
[   54.309036][ T5828] bridge_slave_0: entered promiscuous mode
[   54.342956][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.345397][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.347643][ T5828] bridge_slave_1: entered allmulticast mode
[   54.350330][ T5828] bridge_slave_1: entered promiscuous mode
[   54.388130][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.391528][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.427173][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.463241][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.465719][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.467925][ T5835] bridge_slave_0: entered allmulticast mode
[   54.470609][ T5835] bridge_slave_0: entered promiscuous mode
[   54.477196][ T5828] team0: Port device team_slave_0 added
[   54.484209][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.486912][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.489303][ T5835] bridge_slave_1: entered allmulticast mode
[   54.494261][ T5835] bridge_slave_1: entered promiscuous mode
[   54.508079][ T5828] team0: Port device team_slave_1 added
[   54.556299][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.573453][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.575672][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.577877][ T5833] bridge_slave_0: entered allmulticast mode
[   54.580631][ T5833] bridge_slave_0: entered promiscuous mode
[   54.584614][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.586894][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.589221][ T5833] bridge_slave_1: entered allmulticast mode
[   54.592678][ T5833] bridge_slave_1: entered promiscuous mode
[   54.596828][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.600638][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.604889][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.615446][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.658349][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.661093][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.672887][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.679513][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.686107][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.730344][ T5835] team0: Port device team_slave_0 added
[   54.736396][ T5835] team0: Port device team_slave_1 added
[   54.740926][ T5833] team0: Port device team_slave_0 added
[   54.746537][ T5833] team0: Port device team_slave_1 added
[   54.838910][ T5828] hsr_slave_0: entered promiscuous mode
[   54.843452][ T5828] hsr_slave_1: entered promiscuous mode
[   54.847650][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.850422][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.863179][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.868448][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.872058][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.880516][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.886041][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.888230][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.897523][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.903454][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.905824][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.915696][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.966366][ T5835] hsr_slave_0: entered promiscuous mode
[   54.969438][ T5835] hsr_slave_1: entered promiscuous mode
[   54.973018][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.976229][ T5835] Cannot create hsr debugfs directory
[   55.052902][ T5833] hsr_slave_0: entered promiscuous mode
[   55.055705][ T5833] hsr_slave_1: entered promiscuous mode
[   55.057867][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.060551][ T5833] Cannot create hsr debugfs directory
[   55.303683][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.314891][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.336619][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.343589][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.379011][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.404220][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.410530][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.419453][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.464768][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.470374][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.478567][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.487265][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.558160][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.595110][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.608956][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.612347][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.636264][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.638654][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.664342][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.714890][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   55.724031][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.739007][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.742201][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.760738][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.763676][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.774137][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   55.797621][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.800508][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.823154][ T5221] Bluetooth: hci0: command tx timeout
[   55.845187][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.847888][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.902108][ T5221] Bluetooth: hci2: command tx timeout
[   55.902327][ T5830] Bluetooth: hci1: command tx timeout
[   56.019333][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.036955][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.105454][ T5833] veth0_vlan: entered promiscuous mode
[   56.110054][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.118817][ T5828] veth0_vlan: entered promiscuous mode
[   56.122390][ T5833] veth1_vlan: entered promiscuous mode
[   56.136420][ T5828] veth1_vlan: entered promiscuous mode
[   56.170409][ T5828] veth0_macvtap: entered promiscuous mode
[   56.175087][ T5833] veth0_macvtap: entered promiscuous mode
[   56.183430][ T5828] veth1_macvtap: entered promiscuous mode
[   56.190856][ T5833] veth1_macvtap: entered promiscuous mode
[   56.218971][ T5835] veth0_vlan: entered promiscuous mode
[   56.227327][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.235219][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.243585][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.254927][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.259872][ T5835] veth1_vlan: entered promiscuous mode
[   56.268634][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.271961][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.275107][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.278250][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.286197][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.289564][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.293774][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.297244][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.421354][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.424517][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.438782][ T5835] veth0_macvtap: entered promiscuous mode
[   56.456809][ T5835] veth1_macvtap: entered promiscuous mode
[   56.472566][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.475939][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.494799][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.497859][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.503313][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.516470][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.552152][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.555361][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.558154][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.560828][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.566239][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.579923][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.585829][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.659189][ T5893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.669722][ T5893] netlink: 'syz.1.2': attribute type 12 has an invalid length.
[   56.673283][ T5893] netlink: 'syz.1.2': attribute type 29 has an invalid length.
[   56.676174][ T5893] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.679079][ T5893] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   56.682027][ T5893] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2'.
[   56.684959][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.687293][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.691496][ T5893] Zero length message leads to an empty skb
[   56.724096][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.726472][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.840552][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.913474][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.040797][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.045456][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.087894][ T5924] unsupported nlmsg_type 40
[   57.111407][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.383220][ T5939] geneve0: entered promiscuous mode
[   57.389235][ T5945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'.
[   57.409472][ T5945] netlink: 'syz.1.15': attribute type 1 has an invalid length.
[   57.466975][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   57.547424][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'.
[   57.658954][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   57.847378][ T5971] netlink: 'syz.0.25': attribute type 9 has an invalid length.
[   57.901627][ T5221] Bluetooth: hci0: command tx timeout
[   57.986421][ T5221] Bluetooth: hci1: command tx timeout
[   57.991641][ T5221] Bluetooth: hci2: command tx timeout
[   58.367555][ T6011] netlink: 'syz.2.35': attribute type 2 has an invalid length.
[   58.372394][ T6011] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   58.593606][ T6031] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[   58.610680][ T6024] gretap1: entered promiscuous mode
[   58.887592][ T6052] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET)
[   59.236775][ T6075] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.982743][ T5221] Bluetooth: hci0: command tx timeout
[   60.062786][ T5221] Bluetooth: hci2: command 0x040f tx timeout
[   60.065784][ T5221] Bluetooth: hci1: command tx timeout
[   60.417737][    T9] IPVS: starting estimator thread 0...
[   60.420465][ T6135] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   60.502071][ T6137] IPVS: using max 39 ests per chain, 93600 per kthread
[   60.641394][ T6143] nbd2: detected capacity change from 0 to 63
[   60.647779][ T6146] block nbd2: NBD_DISCONNECT
[   60.650103][ T6146] block nbd2: Disconnected due to user request.
[   60.654041][ T6146] block nbd2: shutting down sockets
[   60.659960][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.662982][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   60.668416][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.671506][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   60.673981][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.677225][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   60.679845][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.682985][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   60.687792][ T6073] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.691022][ T6073] Buffer I/O error on dev nbd2, logical block 0, async page read
[   60.695092][ T6073] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.698689][ T6073] Buffer I/O error on dev nbd2, logical block 1, async page read
[   60.704913][ T6073] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.712625][ T6073] Buffer I/O error on dev nbd2, logical block 2, async page read
[   60.719684][ T6073] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.735375][ T6073] Buffer I/O error on dev nbd2, logical block 3, async page read
[   60.739593][ T6073] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.742629][ T6073] Buffer I/O error on dev nbd2, logical block 0, async page read
[   60.745213][ T6073] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   60.748056][ T6073] Buffer I/O error on dev nbd2, logical block 1, async page read
[   60.754282][ T6073] ldm_validate_partition_table(): Disk read failed.
[   60.763922][ T6073] Dev nbd2: unable to read RDB block 0
[   60.768617][ T6073]  nbd2: unable to read partition table
[   60.778139][ T6073] ldm_validate_partition_table(): Disk read failed.
[   60.787800][ T6073] Dev nbd2: unable to read RDB block 0
[   60.791677][ T6073]  nbd2: unable to read partition table
[   60.897164][ T6163] netlink: 'syz.2.71': attribute type 13 has an invalid length.
[   61.384828][ T5280] udevd[5280]: worker [6073] terminated by signal 33 (Unknown signal 33)
[   61.388206][ T5280] udevd[5280]: worker [6073] failed while handling '/devices/virtual/block/loop1'
[   61.662939][ T6173] openvswitch: netlink: Multiple metadata blocks provided
[   61.829684][ T6183] xt_hashlimit: max too large, truncated to 1048576
[   61.829748][ T6182] xt_hashlimit: overflow, rate too high: 0
[   61.841770][ T6183] xt_hashlimit: overflow, rate too high: 0
[   62.071331][ T6133] Bluetooth: hci0: command tx timeout
[   62.141440][ T6133] Bluetooth: hci2: command 0x040f tx timeout
[   62.143424][ T6133] Bluetooth: hci1: command tx timeout
[   62.331291][ T6206] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   62.427423][ T6215] __nla_validate_parse: 15 callbacks suppressed
[   62.427435][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   62.438110][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   62.460987][ T6218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.88'.
[   62.466431][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'.
[   62.734675][ T6232] delete_channel: no stack
[   63.356748][ T6247] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.97'.
[   63.460599][ T6251] netlink: 240 bytes leftover after parsing attributes in process `syz.0.100'.
[   63.466775][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.100'.
[   63.658861][ T6262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.664607][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[   64.221369][   T53] Bluetooth: hci2: command 0x040f tx timeout
[   64.587026][ T6281] netlink: 88 bytes leftover after parsing attributes in process `syz.1.110'.
[   64.738720][ T6281] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   64.748585][ T6281] netlink: 784 bytes leftover after parsing attributes in process `syz.1.110'.
[   65.538927][ T6312] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   65.554726][ T6312] bond2: entered promiscuous mode
[   65.556609][ T6312] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.774983][ T6327] openvswitch: netlink: IP tunnel dst address not specified
[   65.848815][ T6331] x_tables: duplicate underflow at hook 3
[   65.888396][ T6329] IPv6: sit1: Disabled Multicast RS
[   65.975219][ T6333] netlink: 'syz.1.126': attribute type 1 has an invalid length.
[   67.000983][ T6366] netlink: 'syz.1.137': attribute type 1 has an invalid length.
[   67.211496][ T6378] xt_CT: No such helper "pptp"
[   67.676935][ T6395] tipc: Started in network mode
[   67.679382][ T6395] tipc: Node identity ac14142a, cluster identity 4711
[   67.686007][ T6395] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.956369][ T6407] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   68.312417][ T6412] __nla_validate_parse: 2 callbacks suppressed
[   68.312429][ T6412] netlink: 248 bytes leftover after parsing attributes in process `syz.0.154'.
[   68.432829][ T6442] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   68.440658][ T6442] netlink: 'syz.2.160': attribute type 11 has an invalid length.
[   68.454343][ T6442] netlink: 220 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.495374][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'.
[   68.573511][ T6453] netlink: 277 bytes leftover after parsing attributes in process `syz.2.162'.
[   68.583492][ T6453] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   68.634503][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'.
[   68.802221][    T9] tipc: Node number set to 2886997034
[   69.484830][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'.
[   69.529132][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[   69.575483][ T6494] batadv_slave_1: entered promiscuous mode
[   69.598059][ T6493] batadv_slave_1: left promiscuous mode
[   69.639377][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'.
[   69.816777][ T6509] batman_adv: batadv0: Adding interface: dummy0
[   69.818902][ T6509] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.831629][ T6509] batman_adv: batadv0: Interface activated: dummy0
[   69.883950][ T6511] netem: change failed
[   69.889476][ T6511] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   69.907243][ T6513] netlink: 'syz.2.177': attribute type 16 has an invalid length.
[   69.909683][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.177'.
[   69.923126][ T6513] netlink: 56 bytes leftover after parsing attributes in process `syz.2.177'.
[   70.454285][ T6550] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   70.500681][ T6550] tipc: Resetting bearer <eth:syzkaller0>
[   70.542058][ T6549] tipc: Resetting bearer <eth:syzkaller0>
[   70.567284][ T6558] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   70.949399][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.952283][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.511864][ T6549] tipc: Disabling bearer <eth:syzkaller0>
[   71.519115][ T6556] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   71.530433][    C1] Unknown status report in ack skb
[   71.656709][ T6574] netlink: 'syz.0.196': attribute type 1 has an invalid length.
[   71.744122][ T6582] netlink: 'syz.0.199': attribute type 21 has an invalid length.
[   72.016238][ T6605] netlink: 'syz.0.206': attribute type 3 has an invalid length.
[   72.018922][ T6605] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[   72.423789][ T6626] team0: Port device team_slave_0 removed
[   72.693729][ T6642] lo speed is unknown, defaulting to 1000
[   72.695966][ T6642] lo speed is unknown, defaulting to 1000
[   72.700079][ T6642] lo speed is unknown, defaulting to 1000
[   72.709847][ T6642] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   72.721367][ T6642] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.744320][ T6642] lo speed is unknown, defaulting to 1000
[   72.747795][ T6642] lo speed is unknown, defaulting to 1000
[   72.752124][ T6642] lo speed is unknown, defaulting to 1000
[   73.608103][ T6670] Cannot find add_set index 3 as target
[   73.622655][ T6671] Bluetooth: MGMT ver 1.23
[   73.713126][ T6671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.724685][ T6682] __nla_validate_parse: 13 callbacks suppressed
[   73.724697][ T6682] netlink: 196 bytes leftover after parsing attributes in process `syz.0.233'.
[   73.787698][ T6671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.795564][ T6683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'.
[   73.866496][ T6671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.934852][ T6671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.042018][ T6671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.053575][ T6671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.056785][ T6714] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   74.062852][ T6714] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   74.069445][ T6714] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   74.074774][ T6714] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   74.077873][ T6671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.093748][ T6671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.136985][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'.
[   74.296357][ T6743] xt_TCPMSS: Only works on TCP SYN packets
[   74.485902][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'.
[   74.515747][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.258'.
[   74.519179][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.258'.
[   74.553809][ T6765] ipvlan2: entered promiscuous mode
[   74.560750][ T6765] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   74.565203][ T6765] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   74.568083][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.259'.
[   74.575160][ T6769] openvswitch: netlink: Flow actions attr not present in new flow.
[   74.687965][ T6771] batman_adv: batadv0: Interface deactivated: dummy0
[   74.690793][ T6771] batman_adv: batadv0: Removing interface: dummy0
[   74.699892][ T6771] bridge_slave_0: left allmulticast mode
[   74.700772][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'.
[   74.704813][ T6771] bridge_slave_0: left promiscuous mode
[   74.708788][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.724706][ T6771] bridge_slave_1: left allmulticast mode
[   74.727100][ T6771] bridge_slave_1: left promiscuous mode
[   74.730361][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.743259][ T6771] bond0: (slave bond_slave_0): Releasing backup interface
[   74.754614][ T6771] bond0: (slave bond_slave_1): Releasing backup interface
[   74.778484][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[   74.779277][ T6771] team0: Port device team_slave_1 removed
[   74.783768][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.263'.
[   74.790744][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.795814][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.800229][ T6771] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.803845][ T6771] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.850567][ T6783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.909243][ T6786] syzkaller1: entered promiscuous mode
[   74.921686][ T6786] syzkaller1: entered allmulticast mode
[   75.194838][ T6802] netlink: 'syz.0.268': attribute type 3 has an invalid length.
[   75.316875][ T6812] pim6reg1: entered promiscuous mode
[   75.319051][ T6812] pim6reg1: entered allmulticast mode
[   75.592368][ T6824] Illegal XDP return value 4294967274 on prog  (id 72) dev N/A, expect packet loss!
[   75.649074][ T6826] Bluetooth: MGMT ver 1.23
[   75.826530][ T6835] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.900375][ T6835] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.966313][ T6835] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.019007][ T6835] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.099373][ T6835] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.113696][ T6835] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.125584][ T6835] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.139903][ T6835] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.485434][ T6872] bridge_slave_0: left allmulticast mode
[   76.487188][ T6872] bridge_slave_0: left promiscuous mode
[   76.488985][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.493459][ T6872] bridge_slave_1: left allmulticast mode
[   76.495397][ T6872] bridge_slave_1: left promiscuous mode
[   76.497234][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.508731][ T6872] bond0: (slave bond_slave_0): Releasing backup interface
[   76.516648][ T6872] bond0: (slave bond_slave_1): Releasing backup interface
[   76.533654][ T6872] team0: Port device team_slave_0 removed
[   76.538646][ T6872] team0: Port device team_slave_1 removed
[   76.542103][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.544457][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.547583][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.549937][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.559493][    T9] lo speed is unknown, defaulting to 1000
[   76.677470][ T6886] netlink: 'syz.0.294': attribute type 1 has an invalid length.
[   76.916658][ T5878] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[   76.921801][ T5878] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   77.112167][ T6927] syzkaller0: entered allmulticast mode
[   78.320555][ T6943] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   78.330684][ T6943] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.397770][ T6946] lo speed is unknown, defaulting to 1000
[   78.915086][ T6961] lo speed is unknown, defaulting to 1000
[   79.388325][ T6971] tipc: Started in network mode
[   79.389872][ T6971] tipc: Node identity ee6dcd534492, cluster identity 4711
[   79.392336][ T6971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.395662][ T6971] syzkaller0: entered promiscuous mode
[   79.397919][ T6971] syzkaller0: entered allmulticast mode
[   79.460422][ T6971] tipc: Resetting bearer <eth:syzkaller0>
[   79.468852][ T6970] tipc: Resetting bearer <eth:syzkaller0>
[   79.490662][ T6970] tipc: Disabling bearer <eth:syzkaller0>
[   79.593381][ T6983] netlink: 'syz.1.325': attribute type 21 has an invalid length.
[   79.596565][ T6983] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.554741][ T7021] __nla_validate_parse: 19 callbacks suppressed
[   80.554754][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'.
[   80.630600][ T7027] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   80.908769][ T7054] netlink: 'syz.1.348': attribute type 10 has an invalid length.
[   80.916392][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.945063][ T7054] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   80.950015][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'.
[   81.356456][   T60] cfg80211: failed to load regulatory.db
[   81.438594][ T7081] netlink: 'syz.1.357': attribute type 1 has an invalid length.
[   81.442011][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[   81.560922][ T7092] netlink: 'syz.2.360': attribute type 10 has an invalid length.
[   81.695001][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'.
[   81.713961][ T7100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.361'.
[   81.748166][ T7100] lo speed is unknown, defaulting to 1000
[   81.830359][ T7114] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   81.886697][ T7117] netlink: 148 bytes leftover after parsing attributes in process `syz.2.366'.
[   81.889726][ T7117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   81.980530][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'.
[   82.026981][ T7125] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.030357][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.371'.
[   82.039192][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[   82.045993][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.369'.
[   82.221604][ T7148] gtp0: entered promiscuous mode
[   82.224001][ T7148] gtp0: entered allmulticast mode
[   82.605062][ T7183] veth1: entered promiscuous mode
[   82.610176][ T7183] veth1: left promiscuous mode
[   82.719656][ T7191] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34)
[   83.234296][ T7204] bond0 (unregistering): Released all slaves
[   83.370985][ T7215] netlink: 'syz.0.392': attribute type 1 has an invalid length.
[   83.374302][ T7215] netlink: 'syz.0.392': attribute type 3 has an invalid length.
[   83.377241][ T7215] NCSI netlink: No device for ifindex 246
[   83.990467][ T7273] tipc: Started in network mode
[   83.993360][ T7273] tipc: Node identity 1e7443bf1b9b, cluster identity 4711
[   83.996600][ T7273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.999220][ T7272] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   84.154268][ T7273] syzkaller0: entered promiscuous mode
[   84.156193][ T7273] syzkaller0: entered allmulticast mode
[   84.158656][ T7273] tipc: Resetting bearer <eth:syzkaller0>
[   84.204902][ T1086] tipc: Resetting bearer <eth:syzkaller0>
[   84.210290][ T7271] tipc: Resetting bearer <eth:syzkaller0>
[   84.259858][ T7284] netlink: 'syz.0.411': attribute type 11 has an invalid length.
[   85.052159][    T9] tipc: Node number set to 99566527
[   85.154864][ T7271] tipc: Disabling bearer <eth:syzkaller0>
[   85.237102][ T7292] x_tables: duplicate underflow at hook 2
[   85.344421][ T7305] xt_TCPMSS: Only works on TCP SYN packets
[   85.346883][ T7305] netlink: 'syz.1.418': attribute type 2 has an invalid length.
[   85.349682][ T7305] netlink: 'syz.1.418': attribute type 9 has an invalid length.
[   85.596652][ T7320] __nla_validate_parse: 9 callbacks suppressed
[   85.596664][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'.
[   85.824172][ T7332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.428'.
[   85.929689][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'.
[   85.976595][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   86.822910][ T7382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.441'.
[   86.878183][ T7388] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   86.886483][ T7387] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.444'.
[   86.927508][ T7395] netlink: 'syz.0.445': attribute type 5 has an invalid length.
[   86.934037][ T7395] netlink: 'syz.0.445': attribute type 10 has an invalid length.
[   86.964606][ T7395] veth0_vlan: left promiscuous mode
[   86.969796][ T7395] veth0_vlan: entered promiscuous mode
[   86.976046][ T7395] team0: Device veth0_vlan failed to register rx_handler
[   86.994169][ T7397] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.446'.
[   87.010326][ T7395] syz.0.445 (7395) used greatest stack depth: 18312 bytes left
[   87.032735][   T33] audit: type=1107 audit(1752095880.979:2): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[   87.288426][ T7414] netlink: 'syz.0.451': attribute type 4 has an invalid length.
[   87.308121][ T7414] netlink: 'syz.0.451': attribute type 4 has an invalid length.
[   87.580709][ T7444] netlink: 'syz.0.460': attribute type 9 has an invalid length.
[   87.587161][ T7444] netlink: 'syz.0.460': attribute type 6 has an invalid length.
[   87.610141][   T33] audit: type=1107 audit(1752095881.559:3): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',˺WcnH2bgrKTO
[   87.610141][   T33] _><y\(~?j͇0L9۴ȸ&}k7TkmVdڂb[
[   87.610141][   T33] ٛ5I%Q+'
[   87.633411][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[   87.636497][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'.
[   87.640403][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[   87.643722][ T7449] openvswitch: netlink: Missing key (keys=40, expected=100)
[   88.259821][ T7489] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   88.442240][ T7493] xt_hashlimit: size too large, truncated to 1048576
[   88.781720][   T53] Bluetooth: hci2: command 0x040f tx timeout
[   89.058606][ T7539] trusted_key: syz.1.491 sent an empty control message without MSG_MORE.
[   89.370031][ T7561] netlink: 'syz.1.498': attribute type 7 has an invalid length.
[   89.442825][ T7565] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   89.459306][ T7565] bridge0: port 1(veth0_to_bridge) entered blocking state
[   89.472359][ T7565] bridge0: port 1(veth0_to_bridge) entered disabled state
[   89.475533][ T7565] veth0_to_bridge: entered allmulticast mode
[   89.479466][ T7565] veth0_to_bridge: entered promiscuous mode
[   89.482568][ T7565] bridge0: port 1(veth0_to_bridge) entered blocking state
[   89.484970][ T7565] bridge0: port 1(veth0_to_bridge) entered forwarding state
[   89.629774][ T7574] lo speed is unknown, defaulting to 1000
[   89.826062][ T7591] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   89.911074][ T7614] x_tables: duplicate underflow at hook 1
[   89.934819][ T7616] netlink: 'syz.0.515': attribute type 11 has an invalid length.
[   89.937948][ T7616] x_tables: duplicate underflow at hook 1
[   89.992525][ T7621] netlink: 'syz.0.516': attribute type 12 has an invalid length.
[   89.997278][ T7621] netlink: 'syz.0.516': attribute type 29 has an invalid length.
[   90.066217][ T7627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.070610][ T7627] syzkaller0: entered promiscuous mode
[   90.076287][ T7627] syzkaller0: entered allmulticast mode
[   90.330359][ T7646] sctp: [Deprecated]: syz.1.527 (pid 7646) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.330359][ T7646] Use struct sctp_sack_info instead
[   93.553454][ T7670] validate_nla: 3 callbacks suppressed
[   93.553498][ T7670] netlink: 'syz.2.533': attribute type 39 has an invalid length.
[   93.587630][ T7673] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.625559][ T7677] __nla_validate_parse: 51 callbacks suppressed
[   93.625573][ T7677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.535'.
[   93.654665][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.535'.
[   93.737334][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[   93.808462][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'.
[   93.952578][ T7724] syzkaller0: left promiscuous mode
[   93.954474][ T7724] syzkaller0: left allmulticast mode
[   94.029262][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   94.047306][ T5856] tipc: Subscription rejected, illegal request
[   94.117673][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.555'.
[   94.416773][ T7765] geneve2: entered promiscuous mode
[   94.536492][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'.
[   94.613355][ T7781] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[   94.676286][ T7781] bond0: (slave bridge3): making interface the new active one
[   94.681666][ T7781] bond0: (slave bridge3): Enslaving as an active interface with an up link
[   94.917676][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'.
[   94.923236][ T7803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.572'.
[   94.929370][ T7803] ieee802154 phy0 wpan0: encryption failed: -22
[   94.936456][ T7805] netlink: 'syz.2.573': attribute type 2 has an invalid length.
[   95.110515][ T7822] netlink: 'syz.2.580': attribute type 1 has an invalid length.
[   95.246786][ T7831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.583'.
[   95.258060][ T7831] bond0: entered promiscuous mode
[   95.259678][ T7831] bridge3: entered promiscuous mode
[   95.263004][ T7831] bond0: left promiscuous mode
[   95.264616][ T7831] bridge3: left promiscuous mode
[   95.360417][ T7835] x_tables: unsorted underflow at hook 4
[   95.607545][ T7842] netlink: 'syz.2.587': attribute type 7 has an invalid length.
[   95.609961][ T7842] netlink: 'syz.2.587': attribute type 8 has an invalid length.
[   95.829086][ T7856] bond1: entered promiscuous mode
[   95.830965][ T7856] bond1: entered allmulticast mode
[   95.833396][ T7856] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.878411][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.883911][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.930346][ T7862] ip6tnl1: entered promiscuous mode
[   95.933873][ T7862] ip6tnl1: entered allmulticast mode
[   96.154831][ T7877] netlink: 'syz.0.600': attribute type 12 has an invalid length.
[   96.158205][ T7877] netlink: 'syz.0.600': attribute type 29 has an invalid length.
[   96.243947][ T7880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.887343][ T7893] netlink: 'syz.1.605': attribute type 15 has an invalid length.
[   96.897257][ T7893] netlink: 'syz.1.605': attribute type 5 has an invalid length.
[   96.991818][ T7897] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   97.126337][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.633208][ T7933] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   98.362024][ T7979] bridge_slave_1: left allmulticast mode
[   98.363836][ T7979] bridge_slave_1: left promiscuous mode
[   98.365686][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.375612][ T7979] bridge_slave_0: left allmulticast mode
[   98.377413][ T7979] bridge_slave_0: left promiscuous mode
[   98.379285][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.634770][ T8007] __nla_validate_parse: 18 callbacks suppressed
[   98.634783][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.642'.
[   98.644817][ T8012] validate_nla: 2 callbacks suppressed
[   98.644827][ T8012] netlink: 'syz.2.643': attribute type 1 has an invalid length.
[   98.648913][ T8012] netlink: 172 bytes leftover after parsing attributes in process `syz.2.643'.
[   98.672215][ T8007] 8021q: adding VLAN 0 to HW filter on device team1
[   99.027892][ T8065] ip6t_srh: unknown srh invflags 4000
[   99.511981][ T8108] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   99.555167][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'.
[   99.583309][ T8111] bond0: (slave batadv0): Releasing backup interface
[   99.733579][ T8116] lo speed is unknown, defaulting to 1000
[   99.925610][ T8127] bridge0: port 1(veth0_to_bridge) entered disabled state
[  100.194897][ T8127] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.198287][ T8127] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.202331][ T8127] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.205229][ T8127] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.224156][ T8127] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  100.249841][ T8127] bond1: left promiscuous mode
[  100.253812][ T8127] bond1: left allmulticast mode
[  100.402798][ T8147] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.677'.
[  100.556032][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'.
[  100.694383][ T8164] netlink: 'syz.2.683': attribute type 4 has an invalid length.
[  100.734125][ T8166] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  101.006886][ T8188] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.692'.
[  101.043253][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'.
[  101.068348][ T8193] netem: change failed
[  101.119745][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.694'.
[  101.142482][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'.
[  101.223016][ T8203] openvswitch: netlink: Unknown key attributes 2
[  101.709901][ T8231] tipc: Can't bind to reserved service type 0
[  101.713496][ T8231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.708'.
[  101.946593][ T8245] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  101.960904][ T8248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.419762][ T8289] macsec1: entered promiscuous mode
[  102.423369][ T8289] dummy0: entered promiscuous mode
[  102.426675][ T8289] macsec1: entered allmulticast mode
[  102.428480][ T8289] dummy0: entered allmulticast mode
[  102.438081][ T8289] dummy0: left allmulticast mode
[  102.439732][ T8289] dummy0: left promiscuous mode
[  102.529346][ T8291] lo speed is unknown, defaulting to 1000
[  102.780367][ T8309] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  102.934279][ T8321] tap0: tun_chr_ioctl cmd 1074025677
[  102.936146][ T8321] tap0: linktype set to 776
[  103.085686][ T8328] netlink: 'syz.2.740': attribute type 58 has an invalid length.
[  103.091890][ T8328] bridge0: port 2(syz_tun) entered blocking state
[  103.096038][ T8328] bridge0: port 2(syz_tun) entered disabled state
[  103.098178][ T8328] syz_tun: entered allmulticast mode
[  103.100843][ T8328] syz_tun: entered promiscuous mode
[  103.146876][ T8338] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  103.216912][ T8337] x_tables: duplicate underflow at hook 1
[  103.258905][ T8346] netlink: 'syz.1.745': attribute type 29 has an invalid length.
[  103.269184][ T8346] netlink: 'syz.1.745': attribute type 29 has an invalid length.
[  103.454964][ T8360] netlink: 'syz.1.749': attribute type 2 has an invalid length.
[  103.457810][ T8360] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  103.963614][ T8372] SET target dimension over the limit!
[  104.018252][ T8377] __nla_validate_parse: 47 callbacks suppressed
[  104.018279][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'.
[  104.124698][ T8377] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  104.652728][ T8402] ip6erspan0: entered allmulticast mode
[  104.750722][ T8409] netlink: 'syz.1.768': attribute type 6 has an invalid length.
[  104.938553][ T8411] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  105.143003][ T8419] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[  105.146123][ T8419] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[  105.337625][ T8433] netlink: 'syz.2.776': attribute type 6 has an invalid length.
[  105.344188][ T8433] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.776'.
[  105.598244][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  105.611782][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'.
[  105.893863][ T8473] ip6gre0: entered promiscuous mode
[  105.908661][ T8472] ip6gre0: left promiscuous mode
[  106.285592][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.797'.
[  107.006225][ T8527] : renamed from dummy0 (while UP)
[  107.032099][ T8527] syzkaller1: entered promiscuous mode
[  107.034251][ T8527] syzkaller1: entered allmulticast mode
[  107.195283][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'.
[  107.208351][ T8539] netlink: 148 bytes leftover after parsing attributes in process `syz.1.813'.
[  107.451402][ T8554] netlink: 'syz.2.818': attribute type 1 has an invalid length.
[  107.458373][ T8554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.818'.
[  107.597675][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'.
[  107.738992][ T8575] vlan0: entered promiscuous mode
[  108.173413][ T8604] netlink: 27 bytes leftover after parsing attributes in process `syz.1.833'.
[  108.475741][ T8615] bond0 (unregistering): Released all slaves
[  108.622431][ T8626] ipvlan2: entered promiscuous mode
[  108.626010][ T8626] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  108.785710][ T8640] lo speed is unknown, defaulting to 1000
[  108.997380][ T8659] netlink: 'syz.0.852': attribute type 6 has an invalid length.
[  109.000587][ T8659] netlink: 'syz.0.852': attribute type 7 has an invalid length.
[  109.004541][ T8659] netlink: 'syz.0.852': attribute type 8 has an invalid length.
[  109.186172][ T8668] netem: change failed
[  109.366285][ T8682] netlink: 'syz.2.860': attribute type 1 has an invalid length.
[  109.377728][ T8683] vxcan3: entered promiscuous mode
[  109.390552][ T8682] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  109.402833][ T8684] gretap1: entered promiscuous mode
[  109.584470][ T8702] __nla_validate_parse: 2 callbacks suppressed
[  109.584488][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'.
[  109.622506][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.867'.
[  109.631890][ T8704] No such timeout policy "syz0"
[  109.704311][ T8710] netlink: 'syz.2.869': attribute type 1 has an invalid length.
[  109.706961][ T8710] netlink: 'syz.2.869': attribute type 4 has an invalid length.
[  109.709780][ T8710] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.869'.
[  110.256107][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.259524][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.264554][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.267997][ T8739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.273338][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.278953][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.380302][ T8741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.383433][ T8741] IPv6: NLM_F_CREATE should be set when creating new route
[  110.691623][ T8753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'.
[  110.695360][ T8753] netlink: 'syz.0.884': attribute type 2 has an invalid length.
[  110.698390][ T8753] netlink: 'syz.0.884': attribute type 1 has an invalid length.
[  110.879525][ T8775] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.068003][ T8783] lo speed is unknown, defaulting to 1000
[  111.068293][ T8785] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  111.083984][ T8785] syzkaller0: entered promiscuous mode
[  111.085658][ T8785] syzkaller0: entered allmulticast mode
[  111.116549][ T8785] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  111.120136][ T8785] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  111.122873][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.0.895 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  111.127220][ T8785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.130107][ T8785] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  111.132332][ T8785] Code: 89 ef e8 80 60 ab f8 4d 89 ef 85 db 74 0d e8 b4 dc 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 49 60 ab f8 48 8b
[  111.139229][ T8785] RSP: 0018:ffffc90006e970c8 EFLAGS: 00010202
[  111.141468][ T8785] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  111.144446][ T8785] RDX: ffff8880292a9cc0 RSI: 0000000000000000 RDI: 0000000000000000
[  111.147432][ T8785] RBP: 0000000000000000 R08: ffff8880292a9cc0 R09: 0000000000000002
[  111.150208][ T8785] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  111.152672][ T8785] R13: ffff8880253c5000 R14: dffffc0000000000 R15: ffff8880253c5000
[  111.155078][ T8785] FS:  00007fdcc28926c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  111.157786][ T8785] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.159814][ T8785] CR2: 000020000000a038 CR3: 000000002a03e000 CR4: 00000000000006f0
[  111.162408][ T8785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  111.165397][ T8785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  111.168440][ T8785] Call Trace:
[  111.169794][ T8785]  <TASK>
[  111.171005][ T8785]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  111.173214][ T8785]  pie_change+0x96d/0xca0
[  111.174593][ T8785]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  111.176427][ T8785]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.178071][ T8785]  ? __pfx_pie_change+0x10/0x10
[  111.179543][ T8785]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  111.181449][ T8785]  ? timer_init_key+0x171/0x2d0
[  111.183285][ T8785]  ? __pfx_pie_init+0x10/0x10
[  111.185126][ T8785]  pie_init+0x2a3/0x3f0
[  111.186644][ T8785]  qdisc_create+0x7ac/0xea0
[  111.188002][ T8785]  tc_modify_qdisc+0x1426/0x2010
[  111.189443][ T8785]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  111.190990][ T8785]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  111.192793][ T8785]  rtnetlink_rcv_msg+0x77c/0xb70
[  111.194458][ T8785]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  111.196418][ T8785]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.198553][ T8785]  ? ref_tracker_free+0x63a/0x7d0
[  111.200530][ T8785]  ? __copy_skb_header+0xa7/0x550
[  111.202501][ T8785]  ? __pfx_ref_tracker_free+0x10/0x10
[  111.204639][ T8785]  ? __skb_clone+0x63/0x7a0
[  111.206469][ T8785]  netlink_rcv_skb+0x208/0x470
[  111.208449][ T8785]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.210538][ T8785]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.212592][ T8785]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.214715][ T8785]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.216733][ T8785]  netlink_unicast+0x75b/0x8d0
[  111.218592][ T8785]  netlink_sendmsg+0x805/0xb30
[  111.220470][ T8785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.222550][ T8785]  ? aa_sock_msg_perm+0x94/0x160
[  111.224510][ T8785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  111.226545][ T8785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.228655][ T8785]  __sock_sendmsg+0x21c/0x270
[  111.230460][ T8785]  ____sys_sendmsg+0x505/0x830
[  111.232178][ T8785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.233727][ T8785]  ? import_iovec+0x74/0xa0
[  111.235088][ T8785]  ___sys_sendmsg+0x21f/0x2a0
[  111.236558][ T8785]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.238129][ T8785]  ? __fget_files+0x2a/0x420
[  111.239515][ T8785]  ? __fget_files+0x3a0/0x420
[  111.240968][ T8785]  __x64_sys_sendmsg+0x19b/0x260
[  111.242799][ T8785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.244901][ T8785]  ? rcu_is_watching+0x15/0xb0
[  111.246459][ T8785]  ? do_syscall_64+0xbe/0x3b0
[  111.247891][ T8785]  do_syscall_64+0xfa/0x3b0
[  111.249245][ T8785]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.250800][ T8785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.252691][ T8785]  ? exc_page_fault+0x9f/0xf0
[  111.254446][ T8785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.256783][ T8785] RIP: 0033:0x7fdcc198e929
[  111.258531][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.265737][ T8785] RSP: 002b:00007fdcc2892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.268941][ T8785] RAX: ffffffffffffffda RBX: 00007fdcc1bb5fa0 RCX: 00007fdcc198e929
[  111.271969][ T8785] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000006
[  111.275100][ T8785] RBP: 00007fdcc1a10b39 R08: 0000000000000000 R09: 0000000000000000
[  111.278109][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.281154][ T8785] R13: 0000000000000000 R14: 00007fdcc1bb5fa0 R15: 00007fffbbedd068
[  111.284160][ T8785]  </TASK>
[  111.285328][ T8785] Modules linked in:
[  111.287031][ T8785] ---[ end trace 0000000000000000 ]---
[  111.288754][ T8785] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  111.290734][ T8785] Code: 89 ef e8 80 60 ab f8 4d 89 ef 85 db 74 0d e8 b4 dc 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 49 60 ab f8 48 8b
[  111.298107][ T8785] RSP: 0018:ffffc90006e970c8 EFLAGS: 00010202
[  111.300474][ T8785] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  111.303541][ T8785] RDX: ffff8880292a9cc0 RSI: 0000000000000000 RDI: 0000000000000000
[  111.306525][ T8785] RBP: 0000000000000000 R08: ffff8880292a9cc0 R09: 0000000000000002
[  111.309566][ T8785] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  111.312711][ T8785] R13: ffff8880253c5000 R14: dffffc0000000000 R15: ffff8880253c5000
[  111.315761][ T8785] FS:  00007fdcc28926c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  111.319147][ T8785] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.321350][ T8785] CR2: 000020000000a038 CR3: 000000002a03e000 CR4: 00000000000006f0
[  111.324122][ T8785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  111.327119][ T8785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  111.329841][ T8785] Kernel panic - not syncing: Fatal exception in interrupt
[  111.332963][ T8785] Kernel Offset: disabled
[  111.334689][ T8785] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:18:25  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001969 RDI=000000000000196a RBP=ffffffff99dfc9f0 RSP=ffffc90006e967f0
R8 =ffff888020fe0237 R9 =1ffff110041fc046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdcc28926c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000a038 CR3=000000002a03e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fdcc1a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2d5d148795bbfe00 RBX=ffffffff81975d58 RCX=2d5d148795bbfe00 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005582ddc007e8 CR3=00000001083ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000014 000000000001df8a
XMM02=616b7a797301ffff ffffffffffffdf08 XMM03=0180030004000008 0004800401c71000
XMM04=0000000000000000 0000000000000000 XMM05=000055558bd9de66 000055558bd9da70
XMM06=0000000000000000 0000000000000000 XMM07=616b7a797301ffff ffffffffffffdf08
XMM08=01018a800404a4c4 0800010000080806 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
