last executing test programs:

1.799894044s ago: executing program 2 (id=1515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000700751b900001000014622250112acd9fc868427b52b33070700000000004000000a"], 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}], 0x3}}], 0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4c22, 0x0, @private2, 0x8004}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0x2c, 0x0, 0x4}, 0x9c)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}, 0x64000000}], 0x1, 0x0)

1.539656852s ago: executing program 1 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000084)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000001030101000002000000000005ffffff"], 0x20}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1b80184}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c0}, 0x804)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x1, 0x0)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)
r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x60, 0x800)
getsockopt$nfc_llcp(r7, 0x118, 0x2, &(0x7f00000003c0)=""/4096, 0x1000)

919.588877ms ago: executing program 2 (id=1545):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x240000, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c00050004000002000002000800010003ffef0005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

919.447853ms ago: executing program 2 (id=1546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x28040010}, 0x820) (async)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x28040010}, 0x820)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x3)
ioctl$sock_bt_hci(r5, 0x800448d7, 0x0) (async)
ioctl$sock_bt_hci(r5, 0x800448d7, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x40)

918.463442ms ago: executing program 2 (id=1547):
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="71601bbb", @ANYRES16=r1, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x50)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto$inet(r2, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0)

870.089295ms ago: executing program 2 (id=1548):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40001}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="a77578727246381db3a9e602eec592b5", @ANYRESOCT, @ANYRES8=r0], 0x50)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044891}, 0x84)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$netlink(r5, &(0x7f00000001c0), &(0x7f00000003c0)=0xc)
setsockopt$inet_int(r3, 0x0, 0x7, 0x0, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4)
recvmmsg(r3, &(0x7f0000004280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/113, 0x71}, 0x28}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)=""/36, 0x24}], 0x1}, 0x9}, {{&(0x7f0000000a80)=@phonet, 0x80, 0x0}, 0x6ade}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xd}], 0x5, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000000c0)={0x81, {{0x2, 0x4e22, @private=0xa010101}}}, 0x88)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000736cfe", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500230800003c0012800b000100697036746e6c00002c0002801400030000000000000000000000ff1de100000214000200fe"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000e80)={0x0, "75f00e0f5decf66c787ecd69a0f59933"})

669.137424ms ago: executing program 1 (id=1552):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4783814f03a2fdd2ecb3030969af52d19cec70d799e14f86a7a881f199ace13611f470dab7086ea0fb04602f667b205af47cd34cd010cd79161b8711d5ad6760bcbf18ddb63d2dd1c78bd68cad0fe5e3a592f502d0821b800e4582dfed830ad21bf6ddd0ac4c76ea0c5d71ff9fc83cf3d862a403e55ac667484eb5ee918c652b57", @ANYRES16=r3, @ANYBLOB="000128bd7000fedbdf25430000000c00580045000000000000000c0058007e000000000000000c00580002000000000000000c0058003a000000000000000c0058005f000000000000000c00580031000000000000000c00580018000000000000000c00580017000000000000000c00580000000000000000000c0058002400000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40050}, 0x40000)
bind$bt_hci(r2, &(0x7f0000000040), 0x6)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYRES16=r0], 0x38}}, 0x20008800)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x34502, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x2a, 0x5, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
sendmsg$IPSET_CMD_RENAME(r12, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x80)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x70bd2a, 0x25dfd9fd, {0x0, 0x0, 0x0, r11, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)

598.809275ms ago: executing program 1 (id=1557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000007b0001000000000000000000000008000100"/36], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)

598.50637ms ago: executing program 1 (id=1558):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x1a2}]}}, &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1c, 0x4}}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0xc005)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000003a40)={'veth1_macvtap\x00', &(0x7f0000003a00)=@ethtool_cmd={0x4e, 0x99, 0xfffffffd, 0x2, 0xff, 0x2, 0x8, 0x2, 0xcb, 0x3, 0x5, 0xffff8001, 0x5, 0x3, 0x2, 0x5a, [0x4, 0x400]}})
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f0000000000))
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800}, 0xc)
close(0x3)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10)
write(r2, &(0x7f0000000000)="240000001a005f1114f9f407000901000000004000000002000000000800040001000000", 0x24)
r6 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd70d"]}]}, 0x28}}, 0x0)

549.577559ms ago: executing program 1 (id=1560):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r1, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r2, 0x4}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x28048040}, 0x44894)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080003400000000005000200890000000800014000e90009080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

489.267903ms ago: executing program 1 (id=1562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="002c00885404b835941cd4fdc292ec4040"], 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x2)
connect$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647", 0x2}], 0x1}}], 0x1, 0x40408c1)
recvmmsg(r1, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}], 0x1}, 0x80}], 0x1, 0x10002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11030000ff7f00000f0000000008000023401a00c5472788c31471346d8d213000100000e154e8375859a724f4a405d4b249c2c2e3abfbdca1c61358121800", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f0000000100)="d5f2647ccc7a6de1d45fc2d8c40f5ee7f3b3bd35e90607d7d3ae332d8d5d86c2eb150e523ecdd3c3d73c2c44f7eddb567034835eb088eee1208fa729fa1ea0f7e7ecaf4df01127b863b28c4b1dc9efccfbc8310b4a82eb84d5fc87e89e00a089e472acca74a64d6a37e28f3b61042929423ab64b9526a5627f263bc9642402601da38b8613c57340613e45c4a2ad49c49729718e3f8e4c3813afef4a96b8e92718f99e63e4186a2113454828732700376c92fac2117c3ad7cbd10ba3205713e6e4bcc28d568fc2934a38983d4db8ccaf3212d20ef33b5420d768"}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket(0x400000000010, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f00000000c0), 0x2)
syz_emit_ethernet(0x1e, &(0x7f0000000340)={@multicast, @empty, @void, {@can={0xc, {{0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "c086d444692b8aab"}}}}, &(0x7f0000000380)={0x1, 0x4, [0xa2c, 0xf8c, 0xe53, 0x60]})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0)

418.415627ms ago: executing program 0 (id=1565):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_buf(r1, 0x810, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

418.105595ms ago: executing program 0 (id=1566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4) (async)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
r7 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001}) (async)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x2004})
epoll_wait(r10, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) (async)
epoll_wait(r10, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r11)
socket$unix(0x1, 0x1, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x4}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

199.993389ms ago: executing program 0 (id=1567):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003ff", @ANYRES32=r2, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x0)

149.393492ms ago: executing program 0 (id=1568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x1, 0x6, 0x41f, 0x8, @dev={0xfe, 0x80, '\x00', 0x11}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x10, 0x2, 0xffff9d6a}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x72}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @generic={0x7, 0x2, 0x9, 0xffff, 0x7fffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', r1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@getchain={0x5c, 0x66, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0x4, 0x8}, {0x4, 0x8}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

148.835461ms ago: executing program 0 (id=1569):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280))
sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x1010}}, 0x20000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f0000000a80)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {&(0x7f0000000e40)}], 0x2}}], 0x2, 0x4000001)
r4 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)='/proc/net\x00\x00t4/c+\x0fG\xf9\xe1K\fX\a0\x04\x00\x00\x82D\x80\xa2EZ\xad}\\-\xd1\x96R\x91\xd7x\xb5\xfb\xc4N\xc7\xb3+\xb3qW\xa9\x83\x9b\x84\xbc\xe9\xc6$\x9b/\xda\x9d=P\xd1Xzk\xb5\x95\x18\xd7\xa8\xcc\x99v\x84hQ\xf1fZ\n\xb6\x02\xd5\xf1\xb4b\xa6\aM+\xc1\xe8\"\x0f\x89\xba\xb3\x06:a\xd335^x\xaf\x14\x82'}, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000100), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000005c0)={@tipc=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, {&(0x7f0000000440)=""/180, 0xb4}, &(0x7f0000000180), 0x71}, 0xa0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000420000000e0001006e657464657673696d0000000f0002006e657464656a73696d3000000d0087006c325f64726f70730000000008008e000000"], 0x4c}}, 0x0)

381.382µs ago: executing program 2 (id=1570):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) (rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0xe, @local, 0x2}], 0x1c) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r2, 0x917}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x0)

0s ago: executing program 0 (id=1571):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in=@local, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x101, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33505' (ED25519) to the list of known hosts.
syzkaller login: [   40.841636][ T5771] cgroup: Unknown subsys name 'net'
[   40.949020][ T5771] cgroup: Unknown subsys name 'cpuset'
[   40.953280][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.188223][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.540169][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.544632][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.547753][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.551516][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.554908][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.571028][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.573605][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.577512][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.580009][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.583141][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.585581][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.607405][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.610393][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.613864][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.620698][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.851382][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   45.905255][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   45.913284][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   45.968025][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.970606][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.973132][ T5847] bridge_slave_0: entered allmulticast mode
[   45.976877][ T5847] bridge_slave_0: entered promiscuous mode
[   46.002272][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.004652][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.007607][ T5847] bridge_slave_1: entered allmulticast mode
[   46.010403][ T5847] bridge_slave_1: entered promiscuous mode
[   46.052837][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.055321][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.058526][ T5843] bridge_slave_0: entered allmulticast mode
[   46.061308][ T5843] bridge_slave_0: entered promiscuous mode
[   46.088105][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.091281][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.093704][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.096928][ T5843] bridge_slave_1: entered allmulticast mode
[   46.099667][ T5843] bridge_slave_1: entered promiscuous mode
[   46.102458][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.104794][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.107534][ T5848] bridge_slave_0: entered allmulticast mode
[   46.110271][ T5848] bridge_slave_0: entered promiscuous mode
[   46.114689][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.132373][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.134798][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.137498][ T5848] bridge_slave_1: entered allmulticast mode
[   46.140291][ T5848] bridge_slave_1: entered promiscuous mode
[   46.152315][ T5847] team0: Port device team_slave_0 added
[   46.155667][ T5847] team0: Port device team_slave_1 added
[   46.186881][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.190593][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.192849][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.201518][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.214135][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.218588][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.229641][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.231936][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.240579][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.245442][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.268499][ T5843] team0: Port device team_slave_0 added
[   46.286665][ T5843] team0: Port device team_slave_1 added
[   46.289644][ T5848] team0: Port device team_slave_0 added
[   46.305925][ T5848] team0: Port device team_slave_1 added
[   46.315674][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.319115][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.327580][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.334110][ T5847] hsr_slave_0: entered promiscuous mode
[   46.337676][ T5847] hsr_slave_1: entered promiscuous mode
[   46.347801][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.350184][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.359046][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.392431][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.394770][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.403436][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.412147][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.414461][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.423048][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.457185][ T5843] hsr_slave_0: entered promiscuous mode
[   46.459526][ T5843] hsr_slave_1: entered promiscuous mode
[   46.461714][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   46.463690][ T5843] Cannot create hsr debugfs directory
[   46.519904][ T5848] hsr_slave_0: entered promiscuous mode
[   46.522320][ T5848] hsr_slave_1: entered promiscuous mode
[   46.524547][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   46.527111][ T5848] Cannot create hsr debugfs directory
[   46.633823][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.640154][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.648885][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.663001][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.715565][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.718113][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.720987][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.723453][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.733754][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.742498][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.748863][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.753958][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.807874][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.810181][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.812690][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.815046][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.820075][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.824792][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.831030][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.834260][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.838560][   T86] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.841979][   T86] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.858114][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.865117][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.901747][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.922638][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   46.937663][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.940010][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.945968][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.955230][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.957740][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.988068][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.004160][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.006700][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.015371][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.027453][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.029867][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.044162][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   47.059877][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.062335][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.065855][ T3585] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.068216][ T3585] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.130617][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.134750][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.172054][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.229048][ T5847] veth0_vlan: entered promiscuous mode
[   47.234933][ T5847] veth1_vlan: entered promiscuous mode
[   47.242252][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.258369][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.270177][ T5847] veth0_macvtap: entered promiscuous mode
[   47.274544][ T5847] veth1_macvtap: entered promiscuous mode
[   47.292703][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.312623][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.320410][ T5843] veth0_vlan: entered promiscuous mode
[   47.333974][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.341580][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.344526][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.350628][ T5848] veth0_vlan: entered promiscuous mode
[   47.359695][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.365767][ T5843] veth1_vlan: entered promiscuous mode
[   47.382062][ T5848] veth1_vlan: entered promiscuous mode
[   47.410397][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.413058][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.443696][ T5843] veth0_macvtap: entered promiscuous mode
[   47.450069][ T5848] veth0_macvtap: entered promiscuous mode
[   47.455433][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.456043][ T5848] veth1_macvtap: entered promiscuous mode
[   47.461016][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.463897][ T5843] veth1_macvtap: entered promiscuous mode
[   47.483262][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.488601][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.494776][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.502060][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.504166][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.513946][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.517613][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.520588][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.530657][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.559675][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.575766][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.579670][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.582784][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.616799][ T5850] Bluetooth: hci0: command tx timeout
[   47.638031][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.640661][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.684565][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.687573][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.701661][ T5917] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   47.701893][   T53] Bluetooth: hci1: command tx timeout
[   47.705915][ T5850] Bluetooth: hci2: command tx timeout
[   47.727063][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.731598][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.761679][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.765427][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.833269][ T5921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   47.862717][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.899390][ T5915] IPVS: starting estimator thread 0...
[   47.902379][ T5921] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   47.923398][ T5921] tipc: Failed to remove unknown binding: 66,1,1/0:1752921115/1752921117
[   47.931848][ T5921] tipc: Failed to remove unknown binding: 66,1,1/0:1752921115/1752921117
[   47.935960][ T5921] tipc: Failed to remove unknown binding: 66,1,1/0:1752921115/1752921117
[   47.940985][ T5921] netlink: 788 bytes leftover after parsing attributes in process `syz.1.5'.
[   47.986779][ T5925] IPVS: using max 79 ests per chain, 189600 per kthread
[   48.032240][ T5930] netlink: 'syz.1.6': attribute type 4 has an invalid length.
[   48.262200][ T5933] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7'.
[   48.373440][ T5939] netlink: 348 bytes leftover after parsing attributes in process `syz.1.9'.
[   48.378355][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'.
[   48.408143][ T5941] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10'.
[   49.088621][ T5947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.093207][ T5947] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   49.153715][ T5949] netlink: 788 bytes leftover after parsing attributes in process `syz.1.12'.
[   49.651593][ T5953] Zero length message leads to an empty skb
[   49.675198][ T5957] netlink: 168 bytes leftover after parsing attributes in process `syz.2.15'.
[   49.696551][ T5850] Bluetooth: hci0: command tx timeout
[   49.777279][ T5850] Bluetooth: hci2: command tx timeout
[   49.778739][   T53] Bluetooth: hci1: command tx timeout
[   49.784651][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   49.801448][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17'.
[   50.773100][ T5986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.832988][ T5986] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   50.833143][   T10] IPVS: starting estimator thread 0...
[   50.926457][ T5988] IPVS: using max 78 ests per chain, 187200 per kthread
[   51.038465][ T6001] Bluetooth: MGMT ver 1.23
[   51.214709][ T6019] nftables ruleset with unbound set
[   51.225548][ T6022] openvswitch: netlink: Message has 24 unknown bytes.
[   51.234333][ T6022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.487633][ T6053] netlink: 'syz.1.45': attribute type 1 has an invalid length.
[   51.776328][   T53] Bluetooth: hci0: command tx timeout
[   51.856737][   T53] Bluetooth: hci2: command tx timeout
[   51.857683][ T5850] Bluetooth: hci1: command tx timeout
[   52.051233][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.107231][ T6055] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   52.109813][    T9] IPVS: starting estimator thread 0...
[   52.204587][ T6057] IPVS: using max 78 ests per chain, 187200 per kthread
[   52.290072][ T6062] netlink: 'syz.2.48': attribute type 3 has an invalid length.
[   52.700483][ T6102] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.708070][ T6102] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.921836][ T6122] __nla_validate_parse: 16 callbacks suppressed
[   52.921847][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'.
[   53.124550][ T6138] net_ratelimit: 2 callbacks suppressed
[   53.124561][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.133313][ T6138] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   53.140967][ T6138] netlink: 788 bytes leftover after parsing attributes in process `syz.2.74'.
[   53.173383][ T6141] netlink: 240 bytes leftover after parsing attributes in process `syz.0.75'.
[   53.257096][ T6149] netlink: 168 bytes leftover after parsing attributes in process `syz.2.77'.
[   53.328601][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'.
[   53.359411][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'.
[   53.412532][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.418899][ T6170] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   53.427973][ T6170] netlink: 788 bytes leftover after parsing attributes in process `syz.1.84'.
[   53.465095][ T6173] netlink: 'syz.2.86': attribute type 2 has an invalid length.
[   53.476504][ T6173] netlink: 164 bytes leftover after parsing attributes in process `syz.2.86'.
[   53.482850][ T6179] netlink: 48 bytes leftover after parsing attributes in process `syz.0.87'.
[   53.537740][ T6184] netlink: 348 bytes leftover after parsing attributes in process `syz.0.89'.
[   53.856884][ T5850] Bluetooth: hci0: command tx timeout
[   53.881071][ T6228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.884957][ T6228] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   53.937415][ T5850] Bluetooth: hci1: command tx timeout
[   53.951927][ T5850] Bluetooth: hci2: command tx timeout
[   54.099731][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   54.105100][ T6248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.274914][ T6262] netlink: 'syz.2.113': attribute type 25 has an invalid length.
[   55.278595][ T6262] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   55.281164][ T6262] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.544356][ T6266] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   55.642307][ T6284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.646105][ T6284] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   55.869967][ T6307] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.883016][ T6307] bond1: entered promiscuous mode
[   55.884921][ T6307] macvlan0: entered promiscuous mode
[   55.887231][ T6307] macvlan0: entered allmulticast mode
[   55.889540][ T6307] bond1: entered allmulticast mode
[   55.891598][ T6307] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   56.864159][    C0] IPv4: Oversized IP packet from 127.0.6.0
[   56.870949][ T6356] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.905409][ T6358] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   56.909125][ T6358] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   57.192147][ T6373] netlink: 'syz.1.153': attribute type 4 has an invalid length.
[   57.254341][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.257503][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.364511][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.383747][ T6373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.496353][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.514927][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.527846][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.537989][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.648612][ T6396] netlink: 'syz.0.158': attribute type 21 has an invalid length.
[   57.787816][ T5850] Bluetooth: hci2: command tx timeout
[   58.070134][ T6423] netlink: 'syz.2.167': attribute type 4 has an invalid length.
[   58.176262][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.179025][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.242358][ T6429] netlink: 'syz.1.170': attribute type 4 has an invalid length.
[   58.367390][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.399110][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.519004][ T6432] __nla_validate_parse: 24 callbacks suppressed
[   58.519015][ T6432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[   58.673526][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.690746][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.693915][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.721862][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.860388][ T6437] netlink: 'syz.1.171': attribute type 30 has an invalid length.
[   58.876945][ T6437] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   58.921715][ T6446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.174'.
[   59.043725][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'.
[   59.053161][ T6460] net_ratelimit: 2 callbacks suppressed
[   59.053172][ T6460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.061091][ T6460] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   59.065488][ T6460] netlink: 788 bytes leftover after parsing attributes in process `syz.2.180'.
[   59.089755][ T6462] netlink: 52 bytes leftover after parsing attributes in process `syz.1.181'.
[   59.117272][ T6465] sctp: [Deprecated]: syz.2.183 (pid 6465) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.117272][ T6465] Use struct sctp_sack_info instead
[   59.124471][ T6467] sctp: [Deprecated]: syz.2.183 (pid 6467) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.124471][ T6467] Use struct sctp_sack_info instead
[   59.164782][ T6471] netlink: 40 bytes leftover after parsing attributes in process `syz.1.185'.
[   59.222594][ T6480] sctp: [Deprecated]: syz.2.186 (pid 6480) Use of struct sctp_assoc_value in delayed_ack socket option.
[   59.222594][ T6480] Use struct sctp_sack_info instead
[   59.261648][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   59.312424][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.190'.
[   59.364075][ T6494] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   59.587366][ T6515] netlink: 'syz.0.198': attribute type 1 has an invalid length.
[   59.591896][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.198'.
[   59.760526][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'.
[   59.765808][ T6528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.049681][ T6612] netlink: 'syz.0.210': attribute type 4 has an invalid length.
[   61.089678][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.092417][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.146475][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.152513][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.205190][ T6612] bond1: left promiscuous mode
[   61.215670][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.230661][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.237867][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.240889][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.337245][ T6637] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   61.374124][ T6632] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   61.444001][ T6650] netlink: 'syz.2.227': attribute type 14 has an invalid length.
[   61.615962][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   62.460963][ T6691] sctp: [Deprecated]: syz.2.238 (pid 6691) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.460963][ T6691] Use struct sctp_sack_info instead
[   62.461866][ T6694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.472967][ T6694] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   62.637703][ T6718] netlink: 'syz.2.250': attribute type 13 has an invalid length.
[   62.640251][ T6718] netlink: 'syz.2.250': attribute type 17 has an invalid length.
[   62.703735][ T6718] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.708785][ T6718] 8021q: adding VLAN 0 to HW filter on device team0
[   62.714234][ T6718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.848641][ T6728] syzkaller1: entered promiscuous mode
[   62.850574][ T6728] syzkaller1: entered allmulticast mode
[   63.971245][ T6772] netlink: 'syz.2.270': attribute type 10 has an invalid length.
[   63.979311][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[   63.986864][ T6772] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.991912][ T6772] __nla_validate_parse: 75 callbacks suppressed
[   63.991920][ T6772] netlink: 156 bytes leftover after parsing attributes in process `syz.2.270'.
[   63.998644][ T6774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.998783][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.270'.
[   64.008707][ T6774] netlink: 788 bytes leftover after parsing attributes in process `syz.0.271'.
[   64.095388][ T6785] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   64.099374][ T6785] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:0
[   64.103508][ T6785] netlink: 788 bytes leftover after parsing attributes in process `syz.1.275'.
[   64.185898][ T6808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.281'.
[   64.289924][ T6821] netlink: 844 bytes leftover after parsing attributes in process `syz.2.287'.
[   64.303231][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   64.336087][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'.
[   64.353100][ T6827] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   64.394496][ T6827] syz.2.288 (6827) used greatest stack depth: 19432 bytes left
[   64.678795][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.295'.
[   64.744490][ T6864] netlink: 48 bytes leftover after parsing attributes in process `syz.2.298'.
[   64.784104][ T6866] IPv6: NLM_F_CREATE should be specified when creating new route
[   64.787079][ T6866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   64.789844][ T6866] IPv6: NLM_F_CREATE should be set when creating new route
[   64.792322][ T6866] IPv6: NLM_F_CREATE should be set when creating new route
[   64.794730][ T6866] IPv6: NLM_F_CREATE should be set when creating new route
[   65.105543][ T6879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.110941][ T6879] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   65.182886][ T6888] netlink: 'syz.0.305': attribute type 21 has an invalid length.
[   66.381544][ T6939] tipc: Started in network mode
[   66.383232][ T6939] tipc: Node identity ac14140f, cluster identity 4711
[   66.386337][ T6939] tipc: New replicast peer: 255.127.0.0
[   66.388360][ T6939] tipc: Enabled bearer <udp:s>, priority 10
[   66.394653][ T6950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.400044][ T6950] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   66.437161][ T6952] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   66.451029][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.454640][ T6954] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   66.538432][ T6963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.543298][ T6962] tipc: Disabling bearer <eth:syzkaller0>
[   66.551557][ T6957] netlink: 'syz.1.326': attribute type 4 has an invalid length.
[   66.610704][ T6970] netlink: 'syz.1.330': attribute type 83 has an invalid length.
[   66.789616][ T6998] tipc: Started in network mode
[   66.791435][ T6998] tipc: Node identity c, cluster identity 4711
[   66.793581][ T6998] tipc: Node number set to 12
[   66.821264][ T7004] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   66.823955][ T7004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.865031][ T7011] TCP: TCP_TX_DELAY enabled
[   67.647402][ T5912] tipc: Node number set to 2886997007
[   67.730497][ T7022] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   67.813045][ T7036] netlink: 'syz.1.353': attribute type 10 has an invalid length.
[   67.815887][ T7036] dummy0: entered promiscuous mode
[   67.819541][ T7036] bridge0: port 3(dummy0) entered blocking state
[   67.824110][ T7036] bridge0: port 3(dummy0) entered disabled state
[   67.827523][ T7036] dummy0: entered allmulticast mode
[   68.444383][ T7111] netlink: 'syz.1.380': attribute type 39 has an invalid length.
[   68.764628][ T7114] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   68.769380][ T7114] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[   69.558414][ T7129] netlink: 'syz.0.385': attribute type 10 has an invalid length.
[   69.561114][ T7129] __nla_validate_parse: 23 callbacks suppressed
[   69.561122][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'.
[   69.568215][ T7129] dummy0: entered promiscuous mode
[   69.569115][ T7131] net_ratelimit: 2 callbacks suppressed
[   69.569124][ T7131] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   69.571284][ T7129] bridge0: port 3(dummy0) entered blocking state
[   69.577399][ T7129] bridge0: port 3(dummy0) entered disabled state
[   69.579706][ T7129] dummy0: entered allmulticast mode
[   69.646885][ T7133] bridge0: port 3(dummy0) entered blocking state
[   69.649257][ T7133] bridge0: port 3(dummy0) entered forwarding state
[   69.653459][ T7133] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.656097][ T7133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.097499][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'.
[   70.321627][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'.
[   70.358687][ T7150] netlink: 'syz.2.394': attribute type 10 has an invalid length.
[   70.361308][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.394'.
[   70.364346][ T7150] dummy0: entered promiscuous mode
[   70.366668][ T7150] bridge0: port 3(dummy0) entered blocking state
[   70.368994][ T7150] bridge0: port 3(dummy0) entered disabled state
[   70.371232][ T7150] dummy0: entered allmulticast mode
[   70.374082][ T7150] bridge0: port 3(dummy0) entered blocking state
[   70.376373][ T7150] bridge0: port 3(dummy0) entered forwarding state
[   70.410428][ T7152] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.395'.
[   70.626356][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'.
[   70.665614][ T7183] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.670644][ T7183] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   70.678371][ T7183] netlink: 788 bytes leftover after parsing attributes in process `syz.2.404'.
[   70.723343][ T7190] netlink: 'syz.2.408': attribute type 1 has an invalid length.
[   70.725945][ T7190] netlink: 'syz.2.408': attribute type 4 has an invalid length.
[   70.748010][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   70.759443][ T7195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.410'.
[   70.760082][ T7192] netlink: 'syz.0.407': attribute type 1 has an invalid length.
[   70.778563][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[   70.818757][ T7192] IPv6: NLM_F_CREATE should be specified when creating new route
[   70.821317][ T7192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   70.823691][ T7192] IPv6: NLM_F_CREATE should be set when creating new route
[   70.826242][ T7192] IPv6: NLM_F_CREATE should be set when creating new route
[   70.828641][ T7192] IPv6: NLM_F_CREATE should be set when creating new route
[   70.885053][ T7208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.890119][ T7208] tipc: Resetting bearer <eth:syzkaller0>
[   70.899729][ T7207] tipc: Disabling bearer <eth:syzkaller0>
[   70.910578][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.135780][ T7252] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   71.488344][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.492075][ T7287] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   71.663520][ T7296] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[   71.666587][ T7296] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[   71.669232][ T7296] netlink: 'syz.0.442': attribute type 2 has an invalid length.
[   71.716001][ T7302] trusted_key: syz.0.445 sent an empty control message without MSG_MORE.
[   71.772967][ T7307] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   71.779173][ T7307] netlink: 'syz.0.445': attribute type 1 has an invalid length.
[   71.782466][ T7307] netlink: 'syz.0.445': attribute type 2 has an invalid length.
[   72.441560][ T7335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.610636][ T7353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.614702][ T7353] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   74.570931][ T7453] Illegal XDP return value 16128 on prog  (id 61) dev syz_tun, expect packet loss!
[   74.913307][ T7461] __nla_validate_parse: 27 callbacks suppressed
[   74.913320][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[   74.927684][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.927732][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'.
[   74.931079][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.939234][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.942707][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.013020][ T7469] net_ratelimit: 3 callbacks suppressed
[   75.013033][ T7469] openvswitch: netlink: Key type 30 is not supported
[   75.040318][ T7476] validate_nla: 3 callbacks suppressed
[   75.040328][ T7476] netlink: 'syz.0.505': attribute type 3 has an invalid length.
[   75.312336][ T7501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.321875][ T7501] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   75.328579][ T7501] netlink: 788 bytes leftover after parsing attributes in process `syz.2.517'.
[   75.413911][ T7505] netlink: 348 bytes leftover after parsing attributes in process `syz.2.519'.
[   75.435310][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'.
[   75.445202][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.452564][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.455434][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.459605][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.493213][ T7515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.502323][ T7515] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   75.513185][ T7515] netlink: 788 bytes leftover after parsing attributes in process `syz.1.521'.
[   75.577564][ T7523] netlink: 'syz.2.524': attribute type 21 has an invalid length.
[   75.580260][ T7524] netlink: 'syz.2.524': attribute type 21 has an invalid length.
[   75.582869][ T7524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.524'.
[   75.585863][ T7524] netlink: 3 bytes leftover after parsing attributes in process `syz.2.524'.
[   75.588156][ T7523] netlink: 128 bytes leftover after parsing attributes in process `syz.2.524'.
[   75.592905][ T7523] netlink: 3 bytes leftover after parsing attributes in process `syz.2.524'.
[   76.395911][ T7551] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   76.474473][ T7555] netlink: 'syz.1.535': attribute type 64 has an invalid length.
[   76.477842][ T7555] netlink: 'syz.1.535': attribute type 4 has an invalid length.
[   76.784482][ T7591] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[   76.804202][ T7592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.813178][ T7592] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   76.889571][ T7603] openvswitch: netlink: Actions may not be safe on all matching packets
[   76.903332][ T7605] veth3: entered promiscuous mode
[   77.169495][ T7640] netlink: 'syz.2.569': attribute type 4 has an invalid length.
[   77.178778][ T7644] netlink: 'syz.2.569': attribute type 4 has an invalid length.
[   77.183148][ T7644] netlink: 'syz.2.569': attribute type 4 has an invalid length.
[   77.185880][ T7644] netlink: 'syz.2.569': attribute type 4 has an invalid length.
[   77.497272][ T7662] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.681053][ T7671] openvswitch: netlink: IPv4 tun info is not correct
[   77.965356][ T7691] bridge_slave_1: left allmulticast mode
[   77.976306][ T7691] bridge_slave_1: left promiscuous mode
[   77.978358][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.186266][ T7698] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   78.291095][ T7710] batadv_slave_1: entered promiscuous mode
[   78.299556][ T7710] batadv_slave_1: left promiscuous mode
[   78.341103][ T7716] vxcan3: entered allmulticast mode
[   78.549328][ T7745] veth1: entered promiscuous mode
[   78.554470][ T7745] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   78.580972][ T7745] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.584431][ T7745] syzkaller0: entered promiscuous mode
[   78.586381][ T7745] syzkaller0: entered allmulticast mode
[   78.616976][ T7743] tipc: Resetting bearer <eth:syzkaller0>
[   78.624015][ T7743] tipc: Disabling bearer <eth:syzkaller0>
[   79.687131][ T7795] veth1: entered promiscuous mode
[   79.689520][ T7795] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   79.715284][ T7795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.719873][ T7795] syzkaller0: entered promiscuous mode
[   79.721792][ T7795] syzkaller0: entered allmulticast mode
[   79.760878][ T7794] tipc: Resetting bearer <eth:syzkaller0>
[   79.772514][ T7794] tipc: Disabling bearer <eth:syzkaller0>
[   79.951826][ T7810] __nla_validate_parse: 29 callbacks suppressed
[   79.951838][ T7810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.635'.
[   79.970044][ T7810] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.978084][ T7810] bond2: entered promiscuous mode
[   79.980006][ T7810] macvlan0: entered promiscuous mode
[   79.981864][ T7810] macvlan0: entered allmulticast mode
[   79.983731][ T7810] bond2: entered allmulticast mode
[   79.985717][ T7810] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   80.315635][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.643'.
[   80.320074][ T7829] validate_nla: 33 callbacks suppressed
[   80.320083][ T7829] netlink: 'syz.2.643': attribute type 3 has an invalid length.
[   80.336959][ T7833] net_ratelimit: 7 callbacks suppressed
[   80.336971][ T7833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.343697][ T7833] netlink: 788 bytes leftover after parsing attributes in process `syz.0.644'.
[   80.528196][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'.
[   80.532614][ T7855] netlink: 92 bytes leftover after parsing attributes in process `syz.0.653'.
[   80.535624][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'.
[   80.542521][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.653'.
[   80.601136][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.0.658'.
[   80.652364][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'.
[   80.693029][ T7872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'.
[   80.890967][ T7891] batadv2: entered promiscuous mode
[   81.044411][ T7898] netlink: 'syz.0.672': attribute type 2 has an invalid length.
[   81.048111][ T7898] netlink: 'syz.0.672': attribute type 2 has an invalid length.
[   81.051406][ T7898] netlink: 'syz.0.672': attribute type 2 has an invalid length.
[   81.145216][   T60] cfg80211: failed to load regulatory.db
[   81.353123][ T7906] dummy0: left allmulticast mode
[   81.354999][ T7906] bridge0: port 3(dummy0) entered disabled state
[   81.358526][ T7906] bridge_slave_0: left allmulticast mode
[   81.360435][ T7906] bridge_slave_0: left promiscuous mode
[   81.362407][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.470116][ T7909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.732198][ T7938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.742252][ T7938] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   82.039295][ T7964] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   82.434652][ T8021] syz_tun: entered promiscuous mode
[   82.438020][ T8021] syz_tun: entered allmulticast mode
[   82.512975][ T8030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.519849][ T8030] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   82.657260][ T8039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.661276][ T8039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.665155][ T8039] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   82.671892][ T8039] bond0 (unregistering): Released all slaves
[   82.828160][ T8050] tipc: Enabled bearer <eth:gre0>, priority 10
[   82.835869][ T8050] tap0: tun_chr_ioctl cmd 1074025676
[   82.838438][ T8050] tap0: owner set to 0
[   82.957405][ T8065] openvswitch: netlink: Duplicate or invalid key (type 0).
[   82.960721][ T8066] lo speed is unknown, defaulting to 1000
[   82.962690][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.963069][ T8066] lo speed is unknown, defaulting to 1000
[   82.969655][ T8066] lo speed is unknown, defaulting to 1000
[   82.974060][ T8066] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.981567][ T8066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   82.999532][ T8066] lo speed is unknown, defaulting to 1000
[   83.002362][ T8066] lo speed is unknown, defaulting to 1000
[   83.004899][ T8066] lo speed is unknown, defaulting to 1000
[   83.060221][ T8071] openvswitch: netlink: Flow key attr not present in new flow.
[   83.206540][ T8081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.209201][ T8081] syzkaller0: entered promiscuous mode
[   83.211123][ T8081] syzkaller0: entered allmulticast mode
[   83.227872][ T8081] tipc: Resetting bearer <eth:syzkaller0>
[   83.235019][ T8081] tipc: Disabling bearer <eth:syzkaller0>
[   83.814244][ T8129] netlink: 'syz.1.764': attribute type 13 has an invalid length.
[   83.817297][ T8129] netlink: 'syz.1.764': attribute type 17 has an invalid length.
[   83.821200][ T8129] netlink: 'syz.1.764': attribute type 27 has an invalid length.
[   84.203721][ T8155] netlink: 'syz.1.773': attribute type 30 has an invalid length.
[   84.260739][ T8166] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.748881][ T8216] tipc: Started in network mode
[   84.750648][ T8216] tipc: Node identity b6d31b62483a, cluster identity 4711
[   84.753182][ T8216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.755735][ T8216] syzkaller0: entered promiscuous mode
[   84.758213][ T8216] syzkaller0: entered allmulticast mode
[   84.767689][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[   84.771363][ T8215] tipc: Resetting bearer <eth:syzkaller0>
[   84.778912][ T8215] tipc: Disabling bearer <eth:syzkaller0>
[   85.028011][ T8230] gre3: entered allmulticast mode
[   85.232273][ T8236] __nla_validate_parse: 47 callbacks suppressed
[   85.232284][ T8236] netlink: 172 bytes leftover after parsing attributes in process `syz.1.802'.
[   85.300583][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'.
[   85.377122][ T8248] netlink: 96 bytes leftover after parsing attributes in process `syz.1.806'.
[   85.383155][ T8248] netlink: 68 bytes leftover after parsing attributes in process `syz.1.806'.
[   85.387622][ T8248] netlink: 'syz.1.806': attribute type 10 has an invalid length.
[   85.391535][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.394566][ T8248] team0: Port device bond0 added
[   85.752449][ T8251] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   85.897411][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'.
[   86.984684][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.823'.
[   87.018442][ T8297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.022403][ T8297] syzkaller0: entered promiscuous mode
[   87.026672][ T8297] syzkaller0: entered allmulticast mode
[   87.032793][ T8297] tipc: Resetting bearer <eth:syzkaller0>
[   87.035372][ T8297] netlink: 'syz.1.821': attribute type 21 has an invalid length.
[   87.039160][ T8297] netlink: 128 bytes leftover after parsing attributes in process `syz.1.821'.
[   87.042128][ T8297] netlink: 'syz.1.821': attribute type 4 has an invalid length.
[   87.044569][ T8297] netlink: 'syz.1.821': attribute type 3 has an invalid length.
[   87.047552][ T8297] netlink: 3 bytes leftover after parsing attributes in process `syz.1.821'.
[   87.421517][ T8331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.424290][ T8332] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.565747][ T8336] net_ratelimit: 4 callbacks suppressed
[   87.565757][ T8336] netlink: del zone limit has 4 unknown bytes
[   87.597776][ T8336] sock: sock_timestamping_bind_phc: sock not bind to device
[   87.601935][ T8336] netlink: 76 bytes leftover after parsing attributes in process `syz.0.838'.
[   87.791503][ T8287] tipc: Resetting bearer <eth:syzkaller0>
[   87.798202][ T8287] tipc: Disabling bearer <eth:syzkaller0>
[   88.018141][ T8357] netlink: 'syz.1.846': attribute type 1 has an invalid length.
[   88.020716][ T8357] netlink: 'syz.1.846': attribute type 4 has an invalid length.
[   88.023311][ T8357] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.846'.
[   88.029572][ T8357] IPVS: length: 215 != 1686264
[   88.114448][ T8365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.119781][ T8365] syzkaller0: entered promiscuous mode
[   88.121575][ T8365] syzkaller0: entered allmulticast mode
[   88.132170][ T8365] tipc: Resetting bearer <eth:syzkaller0>
[   88.139658][ T8364] tipc: Resetting bearer <eth:syzkaller0>
[   88.145447][ T8364] tipc: Disabling bearer <eth:syzkaller0>
[   88.505192][ T8370] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.509201][ T8370] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   88.880421][ T8390] ip6tnl0: mtu less than device minimum
[   89.109967][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.542851][ T8438] lo speed is unknown, defaulting to 1000
[   89.893229][ T8457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.897339][ T8457] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   89.961370][ T8464] veth1_to_bond: entered allmulticast mode
[   89.990115][ T8464] veth1_to_bond (unregistering): left allmulticast mode
[   90.302063][ T8498] __nla_validate_parse: 10 callbacks suppressed
[   90.302073][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[   90.326159][ T8500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.897'.
[   90.352830][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.898'.
[   91.074022][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[   91.098317][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'.
[   91.101435][ T8517] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   91.103916][ T8517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.202155][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[   91.238189][ T8532] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[   91.241054][ T8532] netlink: 'syz.1.909': attribute type 10 has an invalid length.
[   91.243621][ T8532] netlink: 236 bytes leftover after parsing attributes in process `syz.1.909'.
[   91.262560][ T8537] netlink: 204700 bytes leftover after parsing attributes in process `syz.0.910'.
[   92.118538][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'.
[   92.129397][ T8549] geneve3: entered promiscuous mode
[   92.133798][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'.
[   92.142100][ T8549] netlink: 'syz.1.915': attribute type 1 has an invalid length.
[   92.654634][ T8591] netlink: 'syz.1.931': attribute type 13 has an invalid length.
[   92.657620][ T8591] netlink: 'syz.1.931': attribute type 17 has an invalid length.
[   92.680110][ T8591] syz_tun: left promiscuous mode
[   92.681867][ T8591] syz_tun: left allmulticast mode
[   92.695410][ T8591] 8021q: adding VLAN 0 to HW filter on device team0
[   92.699529][ T8591] dummy0: left promiscuous mode
[   92.705518][ T8591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.733607][ T8591] lo speed is unknown, defaulting to 1000
[   92.771817][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.827763][ T8591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.082062][ T8606] netlink: 'syz.2.933': attribute type 21 has an invalid length.
[   93.173782][ T8621] netlink: 'syz.0.940': attribute type 1 has an invalid length.
[   93.176815][ T8621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.495743][ T8661] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   93.498384][ T8661] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.596808][ T8663] nbd2: detected capacity change from 0 to 63
[   93.602564][ T8669] block nbd2: NBD_DISCONNECT
[   93.605021][ T8669] block nbd2: Disconnected due to user request.
[   93.609684][ T8669] block nbd2: shutting down sockets
[   93.615554][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.618803][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   93.621537][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.624637][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   93.627557][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.630671][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   93.633302][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.636450][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   93.640695][ T5857] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.644888][ T5857] Buffer I/O error on dev nbd2, logical block 0, async page read
[   93.648427][ T5857] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.651533][ T5857] Buffer I/O error on dev nbd2, logical block 1, async page read
[   93.654131][ T5857] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.660385][ T5857] Buffer I/O error on dev nbd2, logical block 2, async page read
[   93.665729][ T5857] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.670920][ T5857] Buffer I/O error on dev nbd2, logical block 3, async page read
[   93.674379][ T5857] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.688553][ T5857] Buffer I/O error on dev nbd2, logical block 0, async page read
[   93.692245][ T5857] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   93.695397][ T5857] Buffer I/O error on dev nbd2, logical block 1, async page read
[   93.701160][ T5857] ldm_validate_partition_table(): Disk read failed.
[   93.705080][ T5857] Dev nbd2: unable to read RDB block 0
[   93.717575][ T5857]  nbd2: unable to read partition table
[   93.733766][ T5857] ldm_validate_partition_table(): Disk read failed.
[   93.738403][ T5857] Dev nbd2: unable to read RDB block 0
[   93.747214][ T5857]  nbd2: unable to read partition table
[   93.780828][ T8683] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   93.898827][ T8691] netlink: 'syz.0.966': attribute type 1 has an invalid length.
[   93.920916][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.063495][ T8711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.069907][ T8710] tipc: Disabling bearer <eth:syzkaller0>
[   94.153019][ T8721] netlink: 'syz.1.975': attribute type 23 has an invalid length.
[   94.365543][ T8748] netlink: 'syz.0.986': attribute type 10 has an invalid length.
[   94.529263][ T8770] sit2: entered promiscuous mode
[   94.940735][ T8827] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.949364][ T8827] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   95.332613][ T8861] ip6gre2: entered allmulticast mode
[   95.344935][ T8864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.349054][ T8864] syzkaller0: entered promiscuous mode
[   95.350835][ T8864] syzkaller0: entered allmulticast mode
[   95.355634][ T8864] tipc: Resetting bearer <eth:syzkaller0>
[   95.366672][ T8864] __nla_validate_parse: 25 callbacks suppressed
[   95.366680][ T8864] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1026'.
[   95.375789][ T8863] tipc: Resetting bearer <eth:syzkaller0>
[   95.387661][ T8863] tipc: Disabling bearer <eth:syzkaller0>
[   95.388856][ T8873] openvswitch: netlink: Multiple metadata blocks provided
[   95.625200][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'.
[   95.654636][ T8904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1040'.
[   95.692811][ T8906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.747888][ T8906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.756097][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'.
[   95.759455][ T8917] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1045'.
[   95.762396][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1045'.
[   95.787537][ T8906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.824682][ T8906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.832148][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'.
[   95.850546][ T8922] bond2: entered promiscuous mode
[   95.852452][ T8922] bond2: entered allmulticast mode
[   95.861034][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'.
[   95.868532][ T8922] bridge3: the hash_elasticity option has been deprecated and is always 16
[   95.897587][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.907052][ T5878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.918960][ T5878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.925371][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'.
[   95.927802][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.042656][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'.
[   96.253197][ T8970] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[   96.266360][ T8970] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   96.270778][ T8970] bond3: (slave vti0): making interface the new active one
[   96.273930][ T8970] bond3: (slave vti0): Enslaving as an active interface with an up link
[   96.695866][ T9031] sctp: [Deprecated]: syz.1.1087 (pid 9031) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.695866][ T9031] Use struct sctp_sack_info instead
[   96.884548][ T9050] validate_nla: 5 callbacks suppressed
[   96.884559][ T9050] netlink: 'syz.1.1095': attribute type 1 has an invalid length.
[   96.970352][ T9058] sctp: [Deprecated]: syz.0.1098 (pid 9058) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.970352][ T9058] Use struct sctp_sack_info instead
[   97.030582][ T9062] tls_set_device_offload: netdev not found
[   97.045791][ T9062] syzkaller1: entered promiscuous mode
[   97.048113][ T9062] syzkaller1: entered allmulticast mode
[   97.329049][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   97.478498][ T9094] ieee802154 phy0 wpan0: encryption failed: -22
[   97.520863][ T9096] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   97.653997][ T9102] sctp: [Deprecated]: syz.2.1116 (pid 9102) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.653997][ T9102] Use struct sctp_sack_info instead
[   97.952588][ T9118] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   98.075566][ T9128] batman_adv: batadv0: Adding interface: ip6gretap1
[   98.078960][ T9128] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.082079][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888031b47800: rx timeout, send abort
[   98.091743][ T9128] batman_adv: batadv0: Interface activated: ip6gretap1
[   98.293463][ T9138] lo speed is unknown, defaulting to 1000
[   98.591429][    C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888031b47800: abort rx timeout. Force session deactivation
[   98.707217][ T9153] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   98.951940][ T9159] syzkaller1: entered promiscuous mode
[   98.963058][ T9159] syzkaller1: entered allmulticast mode
[   99.039265][ T9166] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.088733][ T9170] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   99.093193][ T9171] IPv6: Can't replace route, no match found
[   99.594472][ T9195] lo speed is unknown, defaulting to 1000
[  100.919437][ T9241] __nla_validate_parse: 21 callbacks suppressed
[  100.919448][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'.
[  101.090893][ T9252] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1177'.
[  101.123409][ T9256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.126035][ T9256] syzkaller0: entered promiscuous mode
[  101.130777][ T9256] syzkaller0: entered allmulticast mode
[  101.148886][ T9256] tipc: Resetting bearer <eth:syzkaller0>
[  101.152473][ T9255] tipc: Resetting bearer <eth:syzkaller0>
[  101.161545][ T9255] tipc: Disabling bearer <eth:syzkaller0>
[  101.184545][ T9260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.188134][ T9260] syzkaller0: entered promiscuous mode
[  101.190049][ T9260] syzkaller0: entered allmulticast mode
[  101.193959][ T9260] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  101.206037][ T9260] tipc: Resetting bearer <eth:syzkaller0>
[  101.208572][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  101.218665][ T9259] tipc: Resetting bearer <eth:syzkaller0>
[  101.229808][ T9259] tipc: Disabling bearer <eth:syzkaller0>
[  101.663314][ T9289] netlink: 'syz.0.1193': attribute type 1 has an invalid length.
[  101.670172][ T9289] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  101.720212][ T9293] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  101.760774][ T9297] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  101.765024][ T9297] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  101.769733][ T9297] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  101.831281][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  101.834571][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  101.844115][ T9297] gtp0: entered promiscuous mode
[  101.845781][ T9297] gtp0: entered allmulticast mode
[  101.885934][ T9308] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1201'.
[  102.183078][ T9324] netlink: 'syz.2.1204': attribute type 3 has an invalid length.
[  102.185784][ T9324] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1204'.
[  102.221815][ T9326] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  102.372970][ T9332] lo speed is unknown, defaulting to 1000
[  102.455020][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1210'.
[  102.459991][ T9338] block nbd0: not configured, cannot reconfigure
[  102.546059][ T9345] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  102.681283][ T9351] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  102.739013][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'.
[  102.742319][ T9357] netlink: 'syz.0.1218': attribute type 30 has an invalid length.
[  102.751275][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'.
[  102.758547][ T9357] netlink: 'syz.0.1218': attribute type 30 has an invalid length.
[  102.769795][ T5861] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.773297][ T5861] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.776108][ T5861] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.783875][ T5861] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.850640][ T9376] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  103.024775][ T9401] netlink: 'syz.1.1235': attribute type 1 has an invalid length.
[  103.027700][ T9401] netlink: 'syz.1.1235': attribute type 2 has an invalid length.
[  103.080767][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  103.083227][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  103.107832][  T792] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  103.274248][ T9416] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  103.748667][ T9437] netlink: 'syz.2.1246': attribute type 7 has an invalid length.
[  103.768718][ T9437] : entered promiscuous mode
[  103.772060][ T9437] netlink: 'syz.2.1246': attribute type 7 has an invalid length.
[  103.830326][ T9443] pim6reg1: entered promiscuous mode
[  103.832154][ T9443] pim6reg1: entered allmulticast mode
[  103.979467][ T9470] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  104.218753][ T9501] netlink: 'syz.2.1268': attribute type 4 has an invalid length.
[  104.221647][ T9500] smc: net device bond0 applied user defined pnetid SYZ2
[  105.186925][ T9526] netlink: 'syz.0.1280': attribute type 1 has an invalid length.
[  105.190203][ T9526] block nbd0: shutting down sockets
[  105.299811][ T9540] syzkaller1: entered promiscuous mode
[  105.301755][ T9540] syzkaller1: entered allmulticast mode
[  105.398887][ T9545] openvswitch: netlink: Message has 8 unknown bytes.
[  105.399624][ T9544] openvswitch: netlink: Message has 8 unknown bytes.
[  106.185444][ T9562] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  106.566570][ T9583] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  106.831471][ T9599] __nla_validate_parse: 14 callbacks suppressed
[  106.831482][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'.
[  106.837098][ T9595] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.843676][ T9595] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.008567][ T9623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1316'.
[  107.011886][ T9623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1316'.
[  107.045600][ T9629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1318'.
[  107.080911][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'.
[  107.083928][ T9639] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1321'.
[  107.115520][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'.
[  107.345072][ T9663] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1328'.
[  107.384371][ T9665] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  108.120369][ T9699] validate_nla: 1 callbacks suppressed
[  108.120381][ T9699] netlink: 'syz.0.1340': attribute type 6 has an invalid length.
[  108.224970][ T9711] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1342'.
[  108.425333][ T9717] siw: device registration error -23
[  108.521772][ T9724] syzkaller0: entered promiscuous mode
[  108.523699][ T9724] syzkaller0: entered allmulticast mode
[  109.029492][ T9736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1350'.
[  109.058734][ T9746] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.283627][ T9771] bridge0: port 3(dummy0) entered disabled state
[  109.297958][ T9771] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  109.301737][ T9771] macvlan0: left promiscuous mode
[  109.303900][ T9771] macvlan0: left allmulticast mode
[  109.317571][ T9771] gre3: left allmulticast mode
[  109.331700][ T9771] sit2: left promiscuous mode
[  109.334991][ T9771] bond2: left promiscuous mode
[  109.337863][ T9771] bond2: left allmulticast mode
[  109.344619][ T9771] gtp0: left promiscuous mode
[  109.346341][ T9771] gtp0: left allmulticast mode
[  109.355635][ T5861] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.360228][ T5861] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.366111][ T5861] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.370089][ T5861] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.441416][ T9784] lo speed is unknown, defaulting to 1000
[  109.534952][ T9784] netlink: 'syz.0.1368': attribute type 13 has an invalid length.
[  109.559048][ T9784] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  109.663620][ T5850] Bluetooth: hci2: link tx timeout
[  109.665556][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  109.855247][ T9815] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  109.859187][ T9815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.959286][ T9824] sctp: [Deprecated]: syz.2.1382 (pid 9824) Use of int in maxseg socket option.
[  109.959286][ T9824] Use struct sctp_assoc_value instead
[  110.180534][ T9838] netlink: 'syz.2.1388': attribute type 13 has an invalid length.
[  110.184132][ T9839] netlink: 'syz.2.1388': attribute type 13 has an invalid length.
[  110.372274][ T9853] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001
[  110.451763][ T9857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.559457][ T9869] vlan0: entered promiscuous mode
[  110.561279][ T9869] gretap0: entered promiscuous mode
[  110.855186][ T9903] bridge0: port 1(veth0_to_bridge) entered blocking state
[  110.860726][ T9903] bridge0: port 1(veth0_to_bridge) entered disabled state
[  110.863154][ T9903] veth0_to_bridge: entered allmulticast mode
[  110.865847][ T9903] veth0_to_bridge: entered promiscuous mode
[  111.541575][T10012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.553129][T10012] syzkaller0: entered promiscuous mode
[  111.554946][T10012] syzkaller0: entered allmulticast mode
[  111.573573][T10012] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.586943][T10012] tipc: Resetting bearer <eth:syzkaller0>
[  111.589673][T10011] tipc: Resetting bearer <eth:syzkaller0>
[  111.600599][T10011] tipc: Disabling bearer <eth:syzkaller0>
[  111.664240][T10010] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  111.667468][T10010] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  111.696485][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  111.764347][T10033] sctp: [Deprecated]: syz.2.1454 (pid 10033) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.764347][T10033] Use struct sctp_sack_info instead
[  112.164321][T10083] __nla_validate_parse: 13 callbacks suppressed
[  112.164332][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1468'.
[  112.280661][T10101] netlink: 'syz.2.1471': attribute type 7 has an invalid length.
[  112.487197][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  112.523304][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'.
[  112.528440][T10132] IPVS: Error joining to the multicast group
[  112.659982][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'.
[  112.693994][T10132] vlan0: entered promiscuous mode
[  112.696021][T10132] gretap0: entered promiscuous mode
[  112.699538][T10132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1478'.
[  112.869019][T10171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1487'.
[  112.871945][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1487'.
[  113.038328][T10191] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1490'.
[  113.108691][T10196] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1493'.
[  113.199857][T10213] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  113.710503][T10240] netlink: 996 bytes leftover after parsing attributes in process `syz.2.1508'.
[  114.049253][T10266] bond0: Device is already in use.
[  114.190483][T10279] netlink: 'syz.0.1524': attribute type 21 has an invalid length.
[  114.193154][T10279] netlink: 'syz.0.1524': attribute type 22 has an invalid length.
[  114.195822][T10279] netlink: 'syz.0.1524': attribute type 23 has an invalid length.
[  114.198809][T10279] netlink: 'syz.0.1524': attribute type 25 has an invalid length.
[  114.302757][T10293] netlink: 'syz.0.1529': attribute type 142 has an invalid length.
[  114.589169][T10317] ieee802154 phy0 wpan0: encryption failed: -22
[  115.095207][T10354] netlink: 'syz.0.1553': attribute type 9 has an invalid length.
[  115.628384][   T33] audit: type=1107 audit(1754935387.516:2): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='OR,8
[  115.628384][   T33] $m1N[5P=.mL?sMGbyly	#)_~48	c٥LK=7x%
[  115.628384][   T33] tqɿA3W̫cj%{2ٝ~iNC%IBĤX7ZD,XoT(躀-wSn8uXuAy9eo1Yֹ-DɪK?	O~ro{ek7RyR$C146"F<ݿ N4,odrQ[jX} ȲWz?-$/לs?2`-pX	(7@pΔ~(ewҨc_yt\}٠[hj{}{«nnA܀K~>CPGGBlaod'
[  115.781327][T10408] ==================================================================
[  115.784027][T10408] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  115.786623][T10408] Read of size 1 at addr ffff88801f62d530 by task syz.0.1571/10408
[  115.789906][T10408] 
[  115.790728][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.0.1571 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  115.790739][T10408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.790745][T10408] Call Trace:
[  115.790750][T10408]  <TASK>
[  115.790753][T10408]  dump_stack_lvl+0x189/0x250
[  115.790766][T10408]  ? __kasan_check_byte+0x12/0x40
[  115.790801][T10408]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.790811][T10408]  ? lock_release+0x4b/0x3e0
[  115.790823][T10408]  ? __virt_addr_valid+0x4a5/0x5c0
[  115.790834][T10408]  print_report+0xca/0x240
[  115.790842][T10408]  ? xfrm_state_find+0x2cf2/0x5400
[  115.790853][T10408]  kasan_report+0x118/0x150
[  115.790867][T10408]  ? xfrm_state_find+0x2cf2/0x5400
[  115.790877][T10408]  xfrm_state_find+0x2cf2/0x5400
[  115.790887][T10408]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.790898][T10408]  ? xfrm_state_find+0x1da/0x5400
[  115.790909][T10408]  ? __pfx_xfrm_state_find+0x10/0x10
[  115.790919][T10408]  ? kasan_save_stack+0x4d/0x60
[  115.790927][T10408]  ? kasan_save_stack+0x3e/0x60
[  115.790935][T10408]  ? kasan_record_aux_stack+0xbd/0xd0
[  115.790942][T10408]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  115.790949][T10408]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  115.790961][T10408]  ? __ip4_datagram_connect+0x8f4/0x1270
[  115.790971][T10408]  ? __ip6_datagram_connect+0x9f0/0x1150
[  115.790979][T10408]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  115.790986][T10408]  ? __x64_sys_connect+0x7a/0x90
[  115.790996][T10408]  ? do_syscall_64+0xfa/0x3b0
[  115.791005][T10408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.791013][T10408]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  115.791025][T10408]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  115.791032][T10408]  ? __lock_acquire+0xab9/0xd20
[  115.791045][T10408]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  115.791054][T10408]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  115.791061][T10408]  ? xfrm_expand_policies+0x41f/0x6a0
[  115.791070][T10408]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  115.791078][T10408]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  115.791086][T10408]  ? rcuref_put+0x1b7/0x210
[  115.791093][T10408]  ? __pfx_rcuref_put+0x10/0x10
[  115.791101][T10408]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  115.791112][T10408]  xfrm_lookup_route+0x3c/0x1c0
[  115.791119][T10408]  __ip4_datagram_connect+0x9a5/0x1270
[  115.791132][T10408]  __ip6_datagram_connect+0x9f0/0x1150
[  115.791142][T10408]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  115.791149][T10408]  ? __local_bh_enable_ip+0x12d/0x1c0
[  115.791156][T10408]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  115.791164][T10408]  ip6_datagram_connect_v6_only+0x63/0xa0
[  115.791173][T10408]  __sys_connect+0x316/0x440
[  115.791182][T10408]  ? __pfx___sys_connect+0x10/0x10
[  115.791192][T10408]  ? rcu_is_watching+0x15/0xb0
[  115.791201][T10408]  __x64_sys_connect+0x7a/0x90
[  115.791209][T10408]  do_syscall_64+0xfa/0x3b0
[  115.791217][T10408]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.791225][T10408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.791232][T10408]  ? exc_page_fault+0x9f/0xf0
[  115.791240][T10408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.791247][T10408] RIP: 0033:0x7f0b2a98ebe9
[  115.791255][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.791262][T10408] RSP: 002b:00007f0b2b717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  115.791271][T10408] RAX: ffffffffffffffda RBX: 00007f0b2abb5fa0 RCX: 00007f0b2a98ebe9
[  115.791276][T10408] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005
[  115.791281][T10408] RBP: 00007f0b2aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  115.791285][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.791289][T10408] R13: 00007f0b2abb6038 R14: 00007f0b2abb5fa0 R15: 00007ffee3d32668
[  115.791297][T10408]  </TASK>
[  115.791300][T10408] 
[  115.917454][T10408] Allocated by task 7633:
[  115.918882][T10408]  kasan_save_track+0x3e/0x80
[  115.920452][T10408]  __kasan_slab_alloc+0x6c/0x80
[  115.922085][T10408]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  115.923889][T10408]  xfrm_state_alloc+0x24/0x2f0
[  115.925471][T10408]  __find_acq_core+0x8a7/0x1c00
[  115.927093][T10408]  xfrm_find_acq+0x78/0xa0
[  115.928591][T10408]  xfrm_alloc_userspi+0x6b3/0xc90
[  115.930243][T10408]  xfrm_user_rcv_msg+0x7a3/0xab0
[  115.931871][T10408]  netlink_rcv_skb+0x208/0x470
[  115.933444][T10408]  xfrm_netlink_rcv+0x79/0x90
[  115.935018][T10408]  netlink_unicast+0x82f/0x9e0
[  115.936595][T10408]  netlink_sendmsg+0x805/0xb30
[  115.938189][T10408]  __sock_sendmsg+0x21c/0x270
[  115.939750][T10408]  ____sys_sendmsg+0x505/0x830
[  115.941352][T10408]  ___sys_sendmsg+0x21f/0x2a0
[  115.942910][T10408]  __x64_sys_sendmsg+0x19b/0x260
[  115.944528][T10408]  do_syscall_64+0xfa/0x3b0
[  115.946027][T10408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.947985][T10408] 
[  115.948799][T10408] Freed by task 791:
[  115.950085][T10408]  kasan_save_track+0x3e/0x80
[  115.951629][T10408]  kasan_save_free_info+0x46/0x50
[  115.953323][T10408]  __kasan_slab_free+0x5b/0x80
[  115.954916][T10408]  kmem_cache_free+0x18f/0x400
[  115.956491][T10408]  xfrm_state_gc_task+0x52d/0x6b0
[  115.958147][T10408]  process_scheduled_works+0xae1/0x17b0
[  115.959984][T10408]  worker_thread+0x8a0/0xda0
[  115.961513][T10408]  kthread+0x711/0x8a0
[  115.962888][T10408]  ret_from_fork+0x3fc/0x770
[  115.964416][T10408]  ret_from_fork_asm+0x1a/0x30
[  115.966025][T10408] 
[  115.966841][T10408] The buggy address belongs to the object at ffff88801f62d200
[  115.966841][T10408]  which belongs to the cache xfrm_state of size 928
[  115.971309][T10408] The buggy address is located 816 bytes inside of
[  115.971309][T10408]  freed 928-byte region [ffff88801f62d200, ffff88801f62d5a0)
[  115.975729][T10408] 
[  115.976549][T10408] The buggy address belongs to the physical page:
[  115.978657][T10408] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801f62df80 pfn:0x1f62c
[  115.981895][T10408] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  115.984647][T10408] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  115.987148][T10408] page_type: f5(slab)
[  115.988506][T10408] raw: 00fff00000000040 ffff88801bbe8c80 dead000000000122 0000000000000000
[  115.991353][T10408] raw: ffff88801f62df80 00000000800e0009 00000000f5000000 0000000000000000
[  115.994181][T10408] head: 00fff00000000040 ffff88801bbe8c80 dead000000000122 0000000000000000
[  115.997029][T10408] head: ffff88801f62df80 00000000800e0009 00000000f5000000 0000000000000000
[  115.999888][T10408] head: 00fff00000000002 ffffea00007d8b01 00000000ffffffff 00000000ffffffff
[  116.002746][T10408] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  116.005641][T10408] page dumped because: kasan: bad access detected
[  116.007766][T10408] page_owner tracks the page as allocated
[  116.009683][T10408] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6500, tgid 6497 (syz.0.193), ts 59440551605, free_ts 58637826456
[  116.015798][T10408]  post_alloc_hook+0x240/0x2a0
[  116.017399][T10408]  get_page_from_freelist+0x21e4/0x22c0
[  116.019263][T10408]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.021227][T10408]  alloc_pages_mpol+0x232/0x4a0
[  116.022857][T10408]  allocate_slab+0x8a/0x370
[  116.024368][T10408]  ___slab_alloc+0xbeb/0x1410
[  116.025939][T10408]  kmem_cache_alloc_noprof+0x283/0x3c0
[  116.027735][T10408]  xfrm_state_alloc+0x24/0x2f0
[  116.029356][T10408]  xfrm_add_sa+0x17d1/0x4070
[  116.030891][T10408]  xfrm_user_rcv_msg+0x7a3/0xab0
[  116.032499][T10408]  netlink_rcv_skb+0x208/0x470
[  116.034100][T10408]  xfrm_netlink_rcv+0x79/0x90
[  116.035651][T10408]  netlink_unicast+0x82f/0x9e0
[  116.037248][T10408]  netlink_sendmsg+0x805/0xb30
[  116.038845][T10408]  __sock_sendmsg+0x21c/0x270
[  116.040393][T10408]  ____sys_sendmsg+0x505/0x830
[  116.042011][T10408] page last free pid 10 tgid 10 stack trace:
[  116.043969][T10408]  __free_frozen_pages+0xbc4/0xd30
[  116.045647][T10408]  __put_partials+0x156/0x1a0
[  116.047222][T10408]  put_cpu_partial+0x17c/0x250
[  116.048841][T10408]  __slab_free+0x2d5/0x3c0
[  116.050318][T10408]  qlist_free_all+0x97/0x140
[  116.051869][T10408]  kasan_quarantine_reduce+0x148/0x160
[  116.053663][T10408]  __kasan_slab_alloc+0x22/0x80
[  116.055284][T10408]  __kmalloc_cache_noprof+0x1be/0x3d0
[  116.057036][T10408]  nsim_fib_event_work+0x835/0x3180
[  116.058755][T10408]  process_scheduled_works+0xae1/0x17b0
[  116.060583][T10408]  worker_thread+0x8a0/0xda0
[  116.062114][T10408]  kthread+0x711/0x8a0
[  116.063474][T10408]  ret_from_fork+0x3fc/0x770
[  116.065008][T10408]  ret_from_fork_asm+0x1a/0x30
[  116.066594][T10408] 
[  116.067399][T10408] Memory state around the buggy address:
[  116.069259][T10408]  ffff88801f62d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.071889][T10408]  ffff88801f62d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.074489][T10408] >ffff88801f62d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.077100][T10408]                                      ^
[  116.078972][T10408]  ffff88801f62d580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  116.081575][T10408]  ffff88801f62d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  116.084204][T10408] ==================================================================
[  116.094649][T10408] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  116.097115][T10408] CPU: 1 UID: 0 PID: 10408 Comm: syz.0.1571 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  116.101587][T10408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.104980][T10408] Call Trace:
[  116.106129][T10408]  <TASK>
[  116.107155][T10408]  dump_stack_lvl+0x99/0x250
[  116.108737][T10408]  ? __asan_memcpy+0x40/0x70
[  116.110316][T10408]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.112094][T10408]  ? __pfx__printk+0x10/0x10
[  116.113654][T10408]  vpanic+0x281/0x750
[  116.115000][T10408]  ? preempt_schedule+0xae/0xc0
[  116.116640][T10408]  ? __pfx_vpanic+0x10/0x10
[  116.118201][T10408]  ? preempt_schedule_common+0x83/0xd0
[  116.120000][T10408]  ? preempt_schedule+0xae/0xc0
[  116.121618][T10408]  ? __pfx_preempt_schedule+0x10/0x10
[  116.123413][T10408]  panic+0xb9/0xc0
[  116.124670][T10408]  ? __pfx_panic+0x10/0x10
[  116.126145][T10408]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  116.128101][T10408]  ? xfrm_state_find+0x2cf2/0x5400
[  116.129872][T10408]  check_panic_on_warn+0x89/0xb0
[  116.131562][T10408]  ? xfrm_state_find+0x2cf2/0x5400
[  116.133453][T10408]  end_report+0x78/0x160
[  116.134922][T10408]  kasan_report+0x129/0x150
[  116.136472][T10408]  ? xfrm_state_find+0x2cf2/0x5400
[  116.138259][T10408]  xfrm_state_find+0x2cf2/0x5400
[  116.140033][T10408]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.142371][T10408]  ? xfrm_state_find+0x1da/0x5400
[  116.144137][T10408]  ? __pfx_xfrm_state_find+0x10/0x10
[  116.146029][T10408]  ? kasan_save_stack+0x4d/0x60
[  116.147833][T10408]  ? kasan_save_stack+0x3e/0x60
[  116.149552][T10408]  ? kasan_record_aux_stack+0xbd/0xd0
[  116.151387][T10408]  ? ip_route_output_key_hash_rcu+0x18eb/0x23d0
[  116.153665][T10408]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  116.155751][T10408]  ? __ip4_datagram_connect+0x8f4/0x1270
[  116.157670][T10408]  ? __ip6_datagram_connect+0x9f0/0x1150
[  116.159729][T10408]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  116.161888][T10408]  ? __x64_sys_connect+0x7a/0x90
[  116.163554][T10408]  ? do_syscall_64+0xfa/0x3b0
[  116.165113][T10408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.167122][T10408]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  116.169197][T10408]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  116.171372][T10408]  ? __lock_acquire+0xab9/0xd20
[  116.172991][T10408]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  116.174753][T10408]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  116.176545][T10408]  ? xfrm_expand_policies+0x41f/0x6a0
[  116.178328][T10408]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  116.180152][T10408]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  116.182115][T10408]  ? rcuref_put+0x1b7/0x210
[  116.183648][T10408]  ? __pfx_rcuref_put+0x10/0x10
[  116.185294][T10408]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  116.187076][T10408]  xfrm_lookup_route+0x3c/0x1c0
[  116.188716][T10408]  __ip4_datagram_connect+0x9a5/0x1270
[  116.190545][T10408]  __ip6_datagram_connect+0x9f0/0x1150
[  116.192351][T10408]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  116.194340][T10408]  ? __local_bh_enable_ip+0x12d/0x1c0
[  116.196155][T10408]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  116.198075][T10408]  ip6_datagram_connect_v6_only+0x63/0xa0
[  116.199983][T10408]  __sys_connect+0x316/0x440
[  116.201559][T10408]  ? __pfx___sys_connect+0x10/0x10
[  116.203305][T10408]  ? rcu_is_watching+0x15/0xb0
[  116.204938][T10408]  __x64_sys_connect+0x7a/0x90
[  116.206563][T10408]  do_syscall_64+0xfa/0x3b0
[  116.208133][T10408]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.209904][T10408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.211945][T10408]  ? exc_page_fault+0x9f/0xf0
[  116.213535][T10408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.215528][T10408] RIP: 0033:0x7f0b2a98ebe9
[  116.217045][T10408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.223420][T10408] RSP: 002b:00007f0b2b717038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  116.226172][T10408] RAX: ffffffffffffffda RBX: 00007f0b2abb5fa0 RCX: 00007f0b2a98ebe9
[  116.228820][T10408] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005
[  116.231398][T10408] RBP: 00007f0b2aa11e19 R08: 0000000000000000 R09: 0000000000000000
[  116.234006][T10408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.236604][T10408] R13: 00007f0b2abb6038 R14: 00007f0b2abb5fa0 R15: 00007ffee3d32668
[  116.239234][T10408]  </TASK>
[  116.240921][T10408] Kernel Offset: disabled
[  116.242349][T10408] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:03:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88810f5ab980 RCX=0000000080000000 RDX=0000000000000007
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc9000370f108 RSP=ffffc9000370eff8
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=dffffc0000000000 R13=0000000000000a06 R14=ffffffff8216adf2 R15=1ffff920006e1e0c
RIP=ffffffff8b78d1a9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f94de7316c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f94de751fc8 CR3=0000000122ef6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000160a RDI=000000000000160b RBP=00000000000003f8 RSP=ffffc900036eed10
R8 =ffff8880213d0237 R9 =1ffff1100427a046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48fa R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0b2b7176c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d758d CR3=000000010edea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0b2ab87498 00007f0b2ab87470 XMM03=00007f0b2ab874a8 00007f0b2ab874a0
XMM04=00007f0b2b6ed100 00007f0b2ab87460 XMM05=00007f0b2ab87478 00007f0b2ab874c0
XMM06=00007f0b2ab874b8 00007f0b2ab874b0 XMM07=00007f0b2ab874a8 00007f0b2ab874a0
XMM08=0000000000000000 00007f0b2aa12ee7 XMM09=0000000000000000 00007f0b2aa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
