last executing test programs:

566.64686ms ago: executing program 1 (id=1169):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)

498.776304ms ago: executing program 1 (id=1167):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) (async)
write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0xfffffffe, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0xfffffffe, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005401c02000008000640"], 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000102050000000000000000000a0000003c0001800c00028005000500000000002c00018014000300fc010000000000000000000000000000140004"], 0x50}}, 0x0)

390.361938ms ago: executing program 1 (id=1168):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="180000000000000000000000040000ee841100006000000095000000000000008585e2af514dd9ca8fe2dac895f0eaa17d9ba34340ea03c3efc82ecfd8dc9dc510c9d287670715c4b0948676bc6322cdaa189004b89cd175922851336dbf480149af58456ae716ecdbc70640035e491f6fc5"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x301}, 0x94)

387.563223ms ago: executing program 2 (id=1170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01011600000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450)

384.424406ms ago: executing program 1 (id=1171):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x73e1}}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x10d4, 0x30, 0x9, 0x0, 0x0, {}, [{0x10c0, 0x1, [@m_ctinfo={0x4c, 0x21, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0xa1b}, @TCA_CTINFO_ACT={0x0, 0x3, {0x6, 0x9, 0x0, 0x1de, 0x8}}, @TCA_CTINFO_ZONE={0x0, 0x4, 0x84f}]}, {0x20, 0x6, "7ac7029d8a5c9b267ad5c6e482b6b798df710b1ec7c47292066daf26"}, {0x5c, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x0, 0x9, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x0, 0x1, {{0xffffff5a, 0x4, 0x6, 0xfffffffd, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x4c, 0xcc, 0x5, 0x8, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x81, 0x2, 0x4, 0x4, 0x77fcd4d5}, 0x6}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x1, 0x4, 0x6, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x8000, 0xbaf, 0x2, 0x4, 0x9}, 0x10}}]}, {0x0, 0x6, "85b285b1059cb4c3c9828fee685738f425fc60b3ea1741bc8e74e7844ce9e3686601cd608235641257045020704bd243f6b49cb9f01cab363e19957facd49889f33a69b02c5192f609d4f99f57e2279c2adfdad5423d48df4f4e39e5d95c3f4bf4b891d34f27abee0eac810820db6545516f7ca116c1d304f6713c04f32b01642c407c2259c5b0e2899853f7a6ef08e31df20c0f5fbe1eb1318d177df35ab5d7a60995419add51cff2e4dab07c2d59eeac59f64cd48ed2aba801dbe2cc1541eaa6996236cb2c68efabe4e54e77747078982b788538818952f9caf2ba48474190"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x10d4}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x14000044)
setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f00000001c0)="aee2ed425caef0e5a542822d568461c4debe489511b9c15a12d78163a8dcfe12603460511e5b2bbac3628553804390feac55f77502e34b9a8beccf33f83d4808808b8f2aac4049f7e8e5664def2b4eee49", 0x51)

328.776004ms ago: executing program 2 (id=1172):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r2, 0x2)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x1, @bcast, @bpq0, 0x86, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]})

328.480677ms ago: executing program 1 (id=1173):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @rand_addr=0x64010102, @random="7fe61ebe06b9", @local}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)='%+9llu \x00'}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8f93}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x1f, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @ldst={0x0, 0x2, 0x2, 0x7, 0x2, 0x50, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xc2, &(0x7f0000000340)=""/194, 0x41100, 0x12, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[r5], &(0x7f0000000480)=[{0x5, 0x3, 0x7, 0x4}, {0x5, 0x3, 0x5, 0xb}, {0x4, 0x5, 0xa, 0xc}, {0x5, 0x5, 0xe, 0x6}, {0x4, 0x3, 0x3, 0x4}], 0x10, 0x1}, 0x94)

310.887524ms ago: executing program 2 (id=1175):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
unshare(0x22020400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='mm_vmscan_node_reclaim_begin\x00', r0}, 0x18)
read(r3, 0x0, 0x0)
r4 = socket$kcm(0x2a, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)="680816677bc49d39f79dd223dc0d6044ae26bf548b256409a96d5cfa3aead53b4fbb4174a2528df9a32679d742c30c503d3024c49bc0f91a64c2d24ab1570a9a5a5fd61503d1cce76d010f89ce14cd82bd53aaa98acbe4ea83ed6e08331d37770de22477d7259a4e0ce087104484bbebb87326bde15ac0ede68c3e40121e204a1b2e0056bfc0e29c", 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x7a05, 0x1700)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000140), 0x10)
sendmmsg$sock(r8, &(0x7f0000003180)=[{{&(0x7f0000000a40)=@isdn={0x22, 0x8a, 0x9, 0x0, 0x7}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="e7a1f6ad", 0x4}, {&(0x7f0000000480)="b8cd70f58771523f636f6b59e479ad128316f2aaa7e83738654ac6c89c2e2628258b7f153dfe8999362a1036893a209b351ac3bf01d87d64eb8ec34553efb7e2339c5f93ae5943ab65915c332a72cbc91e6445f7ec6a1df8bafc2e2ac820e66ef099dfd9146045fe7f816b5a1486c3674b80d208fe78bcc80a356f872cc7156da39799814456c6adf1a7ca99dce1eb9d71f07008c3f172d45c566957b15de9facd3466d16f8e69fc1d557f5ca182560863e1fa4f971ea212ccd7328f35a1971280bcc4f8cf2bfe", 0xc7}, {&(0x7f0000000680)="08716485e9b8e1b41e3fd2a35c045b28f32c5fb459968b69117f6091012a14c9f23e25e748d73964199444827a4e807bfeb69bc69874bcd880ca09943b96eab1285af86688c4f9daf5a137e54cadd781fd78852d46d7addaf30da7f034cbc176e5fe2d1887dd35d6865308caacc226f114fd704c948ec070c796d1927d25c2f17addb495e162a4eb9dd351f9bcef7d6a0186bfefa529b73938665323d0b6f956fe646a9d7539a7226197aabcebee8b7b4fb236f3d7e088ad5b882a5146eca21d5ebeef286fdad150b704906633778fcfd1b310", 0xd3}, {&(0x7f0000000ac0)="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", 0x207}, {&(0x7f0000000580)="a938e36156d5af93e9328cd3007ee9ed35d30b08c36ed46e66ae3a72cfdd7e4bcfa2d2d6568c5f4185745b5fbf79bc46d53b26dd4e4c9988cdc5b357bd43eb09d35a70d6e74eaa5115510d947ebdf5f03d89ad272a442f16ff7d9be4f89222e1813c2c36b5e15d8a773e4788f4d19d5ca3e22fc155c9c5008105dfe828030f5d9a3015e12544a4381f5fe9c4e6006d012840aae3e04f8a5c3500bf1f9a9391c69ac526379f95345521", 0xa9}, {&(0x7f0000000780)="d9ed578e0dfa4c6c5d60a8b5327b6662b2aea60aa37631e4655dd4129809ec02fc26db4958a0e5ad9f4a9061a5ffffb0fecb6d0af8357030f2b8d9ef33d0376682466fe174191841a8f27166189fce05ea67f128ceebd87e2bbcc7237a28658b9cf699af1b9aa9ec25484883f03f9be4845d67e4ba6a39dc7851d7d08cbb2d9614513486aeb09d216d742e720d5ca7ea946011cfc692ff1ead794bcc14a0ce25bb432ca4eb8878afa98aabafac3e453af432", 0xb2}, {&(0x7f0000000840)="a69b2c87bc46592ac86fda09e0dbf91be556c07b375cac0af33cfd23bb6a12197b63f9caea045ceb332d39e18e8bd3577525b6180a91520fa05c6249134645af0333b88bd084561dabe6bd4cb21a6efb714b7a3f6a42f77c132d99232681e54f7dc2e23eefddce7824f54317488f08af8f1405365e19c48f030a72c2", 0x7c}, {&(0x7f0000000400)="0192d94c", 0x4}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="3d83ac79f93156f82a81f56848c77cf86113de1fa15bfc9eeca439317e7ab5cb0b7dafa99f0fe282447cbc54078f657da47bafa3263221a46d7ab0a79adaf95babf6749b2ccdaa75cf8f65d516ea59dbde380be663389ccc708db64c7eaece3d60a33bb0709e91d526f4a1513a70e3", 0x6f}, {&(0x7f0000001d80)="9997d94cc5ffa0940fca07f2d2b811c6c845d5bad22353f063590f69af383e6b74deb7e7ff0e51c7b004ac9e148627c564ebc9f725eaf9ce58f6bebdc1bcfa958cc41269ab725973c54904a467430af360b82924b7901f766ab86fe80cc561b6bb2b730131ab38127740bc25fbc1b62e13a941b9e8ece1575daa9ac30fd374b53140f6c8e317c4fd04131194f2cd170e0dbc9ecc953c9326426a002e906d", 0x9e}], 0xc, 0x0, 0xffffffa7}}], 0x1, 0x200000c1)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100)=0x2)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0)
ioctl$PPPIOCATTACH(r10, 0x4004743d, &(0x7f0000000040)=0x3)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b37, &(0x7f0000000000)={'wlan1\x00'})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
splice(r5, 0x0, r8, &(0x7f00000002c0)=0x2e8, 0x6, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0)

308.808582ms ago: executing program 1 (id=1176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000000000008400130000000000000000000000e53fb77a000000000000000000000000000000000000000000000000000000000000000000000000000000000000007900"/160], 0xa0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001840)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xdce, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/3560], 0x0)
recvmmsg(r5, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0xe}, {0xa, 0x10}, {0x8, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x291}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xcd8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=ANY=[@ANYBLOB="00000000111e86a3dbb318c882feb6721201a16453737cd24f57c83ce2e11868cef2b640f7b28f5705a67ad57a3ab6d108bcc961fbad8b3551bc7c408a8a7077155104ab02d07a05d805acc909b347d2347f91c52dd319363f656fdfc6859b64989d9b882d3c28c68cd070f90d6838786dab3c07f72810850e744ed038872f7ad4c8baf8eadf152c743c05f7ce69da81aa6aae422774d1020b8fb4513c5fb618ed5baefa52879f3eb7cc192df75cfaabac16af0e6d59450bda98b8dbc329efcbf5b09ecb77657f99826f421ee375d87a46", @ANYRES16=r7, @ANYBLOB="010000000000000000001c0000000800010001000000"], 0x1c}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8)
sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40c500", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf250100000008000100030000000800020002000000080002000200000008000100030000000800010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010025970c00ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, 0x0, 0x8015)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, 0x0)
write$tun(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x2fe)

210.046518ms ago: executing program 2 (id=1177):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (async)
socket$l2tp6(0xa, 0x2, 0x73) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x3}}}, 0x90)

209.806149ms ago: executing program 0 (id=1178):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="180000000000000000000000040000ee841100006000000095000000000000008585e2af514dd9ca8fe2dac895f0eaa17d9ba34340ea03c3efc82ecfd8dc9dc510c9d287670715c4b0948676bc6322cdaa189004b89cd175922851336dbf480149af58456ae716ecdbc70640035e491f6fc5"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x500}, 0x94)

209.487934ms ago: executing program 0 (id=1179):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/185, 0xb9}, {&(0x7f0000000180)=""/146, 0x92}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x7)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0xb5d6)

209.433929ms ago: executing program 2 (id=1180):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a0101f400000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450)

204.08931ms ago: executing program 0 (id=1181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x20044000}, 0x4091)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xc0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0xffff4f82}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x21, 0x1, 0x1, 0x0, 0xb22601b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7f0e}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}]}, @CTA_ID={0x0, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7, 0x80]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x46}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2d82}, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0xd}, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x5d2}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_ISN={0xfffffffffffffe47, 0x1, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_ITS={0x0, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_TSOFF={0x0, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x20040000)

140.349167ms ago: executing program 2 (id=1182):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r4, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, <r5=>0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000)
r6 = socket$inet6(0xa, 0x80002, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0)
setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0062df9c87000000"], 0x8)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000e9d90794dbf957000000070000000000001000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000400000018200000", @ANYRES32=r7, @ANYRES8=r1], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='rxrpc_call\x00', r3, 0x0, 0x3}, 0x18)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x38, r11, 0x1, 0xffffffff, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3b9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)

128.950884ms ago: executing program 0 (id=1183):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x69}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r1, &(0x7f0000000000)="f7a439fac5c7588c74138c4729dd7b4d5d346e9116d0ef3295d679e3fcb2e8d84a33134d07039f26d7fdf53f84ef3e7565e08682b87fbe452e8157218328d1a53ce2234c2c0a93abbc387d718231e195039f69b6c293910d6fa6fcd408ceb97db26d160a9f9b4e8e0cb4685af736e55efd753ba016323a1d14063075c1e396b70d7bf16abafce7b8f088f6", 0x8b, 0x4010, 0x0, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x1, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0x8, [@null, @null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

128.854061ms ago: executing program 0 (id=1184):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000000010073797a30000000005c000000090a0104000000000000000f0700000008000a40000000000900020073797a3100000000090001001e6a7a3000000000080005400000000d08000640ffffff00080003400000000810001180090001"], 0xe4}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}]}, 0x48}}, 0x4040014) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000001400058008000240000000ce07"], 0xa0}}, 0x14b6deac033214c2) (rerun: 32)

0s ago: executing program 0 (id=1185):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c000d0700100000001400000060ec970006d03c00fe8000000000000000000000400000aaff020000000000000000000000000001"], 0xffe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53617' (ED25519) to the list of known hosts.
syzkaller login: [   56.105882][ T5828] cgroup: Unknown subsys name 'net'
[   56.227687][ T5828] cgroup: Unknown subsys name 'cpuset'
[   56.232334][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.061038][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.845168][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.848051][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.851015][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.855086][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.857789][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.967999][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.972042][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.979261][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.983246][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.987024][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.025841][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.029495][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.032668][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.036995][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.040430][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.050930][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   63.134333][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.136976][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.139887][ T5844] bridge_slave_0: entered allmulticast mode
[   63.143714][ T5844] bridge_slave_0: entered promiscuous mode
[   63.151854][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.155230][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.158139][ T5844] bridge_slave_1: entered allmulticast mode
[   63.161844][ T5844] bridge_slave_1: entered promiscuous mode
[   63.217862][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.229453][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.281509][ T5844] team0: Port device team_slave_0 added
[   63.289731][ T5844] team0: Port device team_slave_1 added
[   63.328321][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.330957][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.340380][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.346282][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.348468][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.357576][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.447153][ T5844] hsr_slave_0: entered promiscuous mode
[   63.450066][ T5844] hsr_slave_1: entered promiscuous mode
[   63.530757][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   63.559421][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   63.709306][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.711691][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.714204][ T5852] bridge_slave_0: entered allmulticast mode
[   63.716935][ T5852] bridge_slave_0: entered promiscuous mode
[   63.734907][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.737778][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.740792][ T5852] bridge_slave_1: entered allmulticast mode
[   63.753765][ T5852] bridge_slave_1: entered promiscuous mode
[   63.758803][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.761650][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.764638][ T5854] bridge_slave_0: entered allmulticast mode
[   63.767329][ T5854] bridge_slave_0: entered promiscuous mode
[   63.770549][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.772916][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.775303][ T5854] bridge_slave_1: entered allmulticast mode
[   63.777947][ T5854] bridge_slave_1: entered promiscuous mode
[   63.837499][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.843571][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.859328][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.873032][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.920763][ T5852] team0: Port device team_slave_0 added
[   63.938589][ T5852] team0: Port device team_slave_1 added
[   63.942614][ T5854] team0: Port device team_slave_0 added
[   63.946803][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.968205][ T5854] team0: Port device team_slave_1 added
[   63.983052][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.990136][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.992695][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.002597][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.021539][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.027107][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.029295][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.037619][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.041817][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.044562][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.053205][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.059158][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.071863][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.074414][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.082124][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.151122][ T5854] hsr_slave_0: entered promiscuous mode
[   64.153711][ T5854] hsr_slave_1: entered promiscuous mode
[   64.156722][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   64.159039][ T5854] Cannot create hsr debugfs directory
[   64.167177][ T5852] hsr_slave_0: entered promiscuous mode
[   64.170131][ T5852] hsr_slave_1: entered promiscuous mode
[   64.172853][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   64.175618][ T5852] Cannot create hsr debugfs directory
[   64.392764][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.403334][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.408329][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.413636][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.489536][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.499003][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.508403][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.518098][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.526312][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.572205][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   64.591063][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.593454][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.602825][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.605086][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.631379][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.677139][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   64.688945][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.691761][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.703785][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.706183][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.723280][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.728410][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.773465][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.788080][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   64.798214][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.800378][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.817711][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.820126][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.834181][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.892959][ T5844] veth0_vlan: entered promiscuous mode
[   64.902572][ T5844] veth1_vlan: entered promiscuous mode
[   64.924126][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.926694][ T5855] Bluetooth: hci0: command tx timeout
[   64.930269][ T5844] veth0_macvtap: entered promiscuous mode
[   64.939930][ T5844] veth1_macvtap: entered promiscuous mode
[   64.968427][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.975774][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.988742][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.997969][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.003242][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.014910][ T5855] Bluetooth: hci1: command tx timeout
[   65.024103][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.050494][ T5852] veth0_vlan: entered promiscuous mode
[   65.082940][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.086160][ T5855] Bluetooth: hci2: command tx timeout
[   65.096613][ T5852] veth1_vlan: entered promiscuous mode
[   65.129397][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.132596][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.166099][ T5852] veth0_macvtap: entered promiscuous mode
[   65.183803][ T5852] veth1_macvtap: entered promiscuous mode
[   65.190044][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.193231][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.236668][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.237118][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.247986][ T5854] veth0_vlan: entered promiscuous mode
[   65.264636][ T5854] veth1_vlan: entered promiscuous mode
[   65.275977][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.305614][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.320416][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.324937][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.328486][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.356621][ T5854] veth0_macvtap: entered promiscuous mode
[   65.389214][ T5854] veth1_macvtap: entered promiscuous mode
[   65.424193][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.427419][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.440636][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.497840][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.510448][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.515873][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.544031][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.547841][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.551323][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.556647][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.667911][ T3632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.670420][ T3632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.713546][ T5929] sock: sock_set_timeout: `syz.0.1' (pid 5929) tries to set negative timeout
[   65.719080][  T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.723125][  T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.815020][ T5931] Zero length message leads to an empty skb
[   66.188967][ T5949] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   66.195871][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'.
[   66.202012][ T5949] netlink: 'syz.1.12': attribute type 39 has an invalid length.
[   66.517291][ T5951] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   66.554318][ T5953] netlink: 'syz.0.14': attribute type 1 has an invalid length.
[   66.589994][ T5955] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[   66.716729][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'.
[   66.858814][ T5963] tun0: tun_chr_ioctl cmd 1074025675
[   66.860725][ T5963] tun0: persist enabled
[   66.862619][ T5963] tun0: tun_chr_ioctl cmd 1074025675
[   66.867295][ T5963] tun0: persist disabled
[   67.004676][ T5855] Bluetooth: hci0: command tx timeout
[   67.084095][ T5855] Bluetooth: hci1: command tx timeout
[   67.164267][ T5855] Bluetooth: hci2: command tx timeout
[   67.753515][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   67.780863][ T5984] xfrm1: entered promiscuous mode
[   67.783096][ T5984] xfrm1: entered allmulticast mode
[   67.901140][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.916694][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.920247][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   67.929469][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.932997][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.942274][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.127395][ T6008] Bluetooth: MGMT ver 1.23
[   68.216472][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'.
[   68.231235][ T6002] ipvlan2: entered promiscuous mode
[   68.390252][ T6027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.456626][ T6031] netlink: 'syz.2.35': attribute type 1 has an invalid length.
[   68.459770][ T6031] Bluetooth: MGMT ver 1.23
[   68.500543][ T6035] IPv6: NLM_F_REPLACE set, but no existing node found!
[   68.602545][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.610669][ T6041] batadv_slave_0: entered promiscuous mode
[   69.084046][ T5855] Bluetooth: hci0: command tx timeout
[   69.164072][ T5855] Bluetooth: hci1: command tx timeout
[   69.169122][ T6072] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   69.178205][ T6072] warning: `syz.1.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.185343][ T6072] netlink: 'syz.1.54': attribute type 10 has an invalid length.
[   69.190329][ T6072] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   69.246997][   T55] Bluetooth: hci2: command tx timeout
[   69.461002][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.61'.
[   69.502193][ T6091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.62'.
[   69.571075][ T6095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'.
[   69.697247][ T6102] ieee802154 phy0 wpan0: encryption failed: -22
[   69.728717][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.67'.
[   70.750905][ T6170] tipc: Started in network mode
[   70.752857][ T6170] tipc: Node identity c607ad3b4cf3, cluster identity 4711
[   70.760801][ T6170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.766826][ T6171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.771759][ T6170] syzkaller0: entered promiscuous mode
[   70.786904][ T6170] syzkaller0: entered allmulticast mode
[   70.793067][ T6170] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   70.812532][ T6170] tipc: Resetting bearer <eth:syzkaller0>
[   70.830553][ T6178] !: renamed from dummy0 (while UP)
[   70.840165][ T6170] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   70.858586][ T6169] tipc: Resetting bearer <eth:syzkaller0>
[   70.866575][ T6169] tipc: Disabling bearer <eth:syzkaller0>
[   71.255761][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.260914][   T55] Bluetooth: hci1: command tx timeout
[   71.334405][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   71.825257][ T6243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.952753][ T6243] syzkaller0: entered promiscuous mode
[   71.956871][ T6243] syzkaller0: entered allmulticast mode
[   71.995420][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   72.003398][ T6241] tipc: Resetting bearer <eth:syzkaller0>
[   72.018903][ T6241] tipc: Disabling bearer <eth:syzkaller0>
[   72.154930][ T6276] batadv_slave_1: entered promiscuous mode
[   72.177544][ T6278] __nla_validate_parse: 3 callbacks suppressed
[   72.177557][ T6278] netlink: 364 bytes leftover after parsing attributes in process `syz.0.108'.
[   72.186484][ T6278] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   72.199639][ T6275] batadv_slave_1: left promiscuous mode
[   72.202774][ T6278] syzkaller1: entered promiscuous mode
[   72.205652][ T6278] syzkaller1: entered allmulticast mode
[   72.218509][ T6278] syzkaller1: left promiscuous mode
[   72.220754][ T6278] syzkaller1: left allmulticast mode
[   72.401714][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.282817][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   73.405106][ T5855] Bluetooth: hci2: command 0x0419 tx timeout
[   73.502391][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.149'.
[   73.546603][ T6390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'.
[   73.579637][ T6392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.585122][ T6390] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'.
[   73.588912][ T6392] syzkaller0: entered promiscuous mode
[   73.591009][ T6392] syzkaller0: entered allmulticast mode
[   73.607026][ T6392] tipc: Resetting bearer <eth:syzkaller0>
[   73.610649][ T6391] tipc: Resetting bearer <eth:syzkaller0>
[   73.619559][ T6391] tipc: Disabling bearer <eth:syzkaller0>
[   73.708027][ T6399] syzkaller1: entered promiscuous mode
[   73.709798][ T6399] syzkaller1: entered allmulticast mode
[   73.725386][ T6399] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   73.733999][ T6399] netlink: 15 bytes leftover after parsing attributes in process `syz.0.154'.
[   73.871888][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.876373][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.075501][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[   74.732962][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802663d000: rx timeout, send abort
[   74.736707][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802663d000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   74.859944][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'.
[   74.862688][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.171'.
[   74.917339][   T47] IPVS: starting estimator thread 0...
[   74.937022][ T6448] vlan2: entered allmulticast mode
[   74.939902][ T6448] veth1: entered allmulticast mode
[   75.015725][ T6447] IPVS: using max 44 ests per chain, 105600 per kthread
[   75.092759][ T6446] netlink: 304 bytes leftover after parsing attributes in process `syz.2.170'.
[   75.823614][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.875734][ T6482] netlink: 'syz.1.178': attribute type 1 has an invalid length.
[   76.119074][ T6496] can: request_module (can-proto-0) failed.
[   76.122336][ T6494] netlink: 'syz.1.180': attribute type 1 has an invalid length.
[   76.161953][ T6501] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   76.201544][ T6501] syzkaller0: entered promiscuous mode
[   76.203821][ T6501] syzkaller0: entered allmulticast mode
[   76.318468][ T6511] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   76.611507][ T6535] tipc: Started in network mode
[   76.613577][ T6535] tipc: Node identity 32fe96773524, cluster identity 4711
[   76.618668][ T6535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.629761][ T6535] syzkaller0: entered promiscuous mode
[   76.638051][ T6535] syzkaller0: entered allmulticast mode
[   76.651930][ T6535] tipc: Resetting bearer <eth:syzkaller0>
[   76.662039][ T6534] tipc: Resetting bearer <eth:syzkaller0>
[   76.682351][ T6534] tipc: Disabling bearer <eth:syzkaller0>
[   76.791183][ T6545] netlink: 'syz.0.198': attribute type 42 has an invalid length.
[   76.802552][ T6545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.810688][ T6545] bridge_slave_1: left allmulticast mode
[   76.813113][ T6545] bridge_slave_1: left promiscuous mode
[   76.815746][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.821859][ T6545] bridge_slave_0: left allmulticast mode
[   76.825822][ T6545] bridge_slave_0: left promiscuous mode
[   76.829504][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.958150][ T6553] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   77.009856][ T6555] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   77.013209][ T6555] openvswitch: netlink: Duplicate key (type 0).
[   77.080671][ T6557] netlink: 'syz.2.202': attribute type 4 has an invalid length.
[   77.409913][ T6573] netlink: 'syz.2.207': attribute type 6 has an invalid length.
[   77.416892][ T6573] netlink: 'syz.2.207': attribute type 10 has an invalid length.
[   77.926931][ T6607] __nla_validate_parse: 3 callbacks suppressed
[   77.926944][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   77.938279][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   77.943157][ T6607] netlink: 'syz.2.218': attribute type 7 has an invalid length.
[   77.979758][ T6603] sctp: [Deprecated]: syz.1.217 (pid 6603) Use of int in max_burst socket option deprecated.
[   77.979758][ T6603] Use struct sctp_assoc_value instead
[   78.127937][ T6624] netlink: 68 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.131289][ T6623] netlink: 68 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.132466][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.146867][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.158748][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.162285][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   78.183161][ T6628] netlink: 'syz.1.226': attribute type 4 has an invalid length.
[   78.289631][ T6631] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   78.293536][ T5761] IPVS: starting estimator thread 0...
[   78.293610][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.227'.
[   78.384734][ T6636] IPVS: using max 82 ests per chain, 196800 per kthread
[   79.321861][ T6657] netlink: 'syz.1.236': attribute type 1 has an invalid length.
[   79.381468][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   79.392510][ T6657] bond1: (slave geneve2): making interface the new active one
[   79.397569][ T6657] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   79.411229][ T5908] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   79.419391][ T5908] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   79.422916][ T5908] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   79.440676][ T5908] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   80.031986][ T6706] ieee802154 phy0 wpan0: encryption failed: -22
[   80.653484][ T6743] bridge_slave_1: left allmulticast mode
[   80.657081][ T6743] bridge_slave_1: left promiscuous mode
[   80.659883][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.667090][ T6743] bridge_slave_0: left allmulticast mode
[   80.669540][ T6743] bridge_slave_0: left promiscuous mode
[   80.672057][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.770022][ T6751] kthread_run failed with err -4
[   81.056583][ T6786] gretap0: entered promiscuous mode
[   81.060960][ T6784] Bluetooth: MGMT ver 1.23
[   81.090867][ T6786] 0{X: renamed from gretap0
[   81.095568][ T6786] 0{X: left promiscuous mode
[   81.103323][ T6786] 0{X: entered allmulticast mode
[   81.119173][ T6786] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   81.127404][ T6792] 0{X: entered promiscuous mode
[   81.129701][ T6792] 0{X: left allmulticast mode
[   81.146229][ T6786] 1{X: renamed from 30{X
[   81.151486][ T6786] 1{X: left promiscuous mode
[   81.153160][ T6786] 1{X: entered allmulticast mode
[   81.156363][ T6786] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[   81.196481][ T6799] netlink: 'syz.1.279': attribute type 1 has an invalid length.
[   81.202320][ T6799] sctp: [Deprecated]: syz.1.279 (pid 6799) Use of int in max_burst socket option deprecated.
[   81.202320][ T6799] Use struct sctp_assoc_value instead
[   81.279935][ T6806] tap0: tun_chr_ioctl cmd 1074025678
[   81.281723][ T6806] tap0: group set to 0
[   81.362566][ T6811] netlink: 'syz.2.285': attribute type 41 has an invalid length.
[   81.752001][ T6835] bridge_slave_0: left allmulticast mode
[   81.755820][ T6835] bridge_slave_0: left promiscuous mode
[   81.758739][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.776411][ T6835] bridge_slave_1: left allmulticast mode
[   81.780092][ T6835] bridge_slave_1: left promiscuous mode
[   81.782671][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.790167][ T6835] bond0: (slave bond_slave_0): Releasing backup interface
[   81.801200][ T6835] bond0: (slave bond_slave_1): Releasing backup interface
[   81.813493][ T6835] team0: Port device team_slave_0 removed
[   81.823038][ T6835] team0: Port device team_slave_1 removed
[   81.826738][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.829521][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.834990][ T6835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.838090][ T6835] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.850773][ T6835] bond1: (slave geneve2): Releasing active interface
[   81.866995][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   81.870556][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   81.882578][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   81.888669][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   82.155718][ T6856] syz.1.299 uses old SIOCAX25GETINFO
[   82.643016][ T6891] netlink: 'syz.1.310': attribute type 11 has an invalid length.
[   82.645901][ T6891] netlink: 'syz.1.310': attribute type 4 has an invalid length.
[   83.075828][ T6900] netlink: 'syz.2.313': attribute type 9 has an invalid length.
[   83.299244][   T33] audit: type=1800 audit(1755533692.079:2): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.317" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=626 res=0 errno=0
[   83.387929][ T6913] __nla_validate_parse: 20 callbacks suppressed
[   83.387942][ T6913] netlink: 676 bytes leftover after parsing attributes in process `syz.2.320'.
[   83.397241][ T6913] netlink: 676 bytes leftover after parsing attributes in process `syz.2.320'.
[   83.401004][ T6916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.319'.
[   83.402254][ T6914] netlink: 14 bytes leftover after parsing attributes in process `syz.2.320'.
[   83.409028][ T6917] netlink: 14 bytes leftover after parsing attributes in process `syz.2.320'.
[   83.471300][ T6917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.477669][ T6917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.482764][ T6917] bond0 (unregistering): Released all slaves
[   83.584841][ T6919] nbd0: detected capacity change from 0 to 127
[   83.590844][   T57] block nbd0: Receive control failed (result -32)
[   83.591736][ T5849] block nbd0: Send control failed (result -32)
[   83.596768][ T5849] block nbd0: Request send failed, requeueing
[   83.601086][   T11] block nbd0: Dead connection, failed to find a fallback
[   83.605976][   T11] block nbd0: shutting down sockets
[   83.608286][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.611995][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.616425][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.620270][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.627206][ T5849] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.636692][ T5849] Buffer I/O error on dev nbd0, logical block 2, async page read
[   83.640109][ T5849] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.646518][ T5849] Buffer I/O error on dev nbd0, logical block 3, async page read
[   83.650829][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.656259][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.660105][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.664273][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.668597][ T5849] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.672244][ T5849] Buffer I/O error on dev nbd0, logical block 2, async page read
[   83.675754][ T5849] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.679462][ T5849] Buffer I/O error on dev nbd0, logical block 3, async page read
[   83.683102][ T5849] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.687809][ T5849] Buffer I/O error on dev nbd0, logical block 0, async page read
[   83.691059][ T5849] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   83.694995][ T5849] Buffer I/O error on dev nbd0, logical block 1, async page read
[   83.700710][ T5849] ldm_validate_partition_table(): Disk read failed.
[   83.706109][ T5849] Dev nbd0: unable to read RDB block 0
[   83.709899][ T5849]  nbd0: unable to read partition table
[   83.720412][ T5849] ldm_validate_partition_table(): Disk read failed.
[   83.726764][ T5849] Dev nbd0: unable to read RDB block 0
[   83.736899][ T5849]  nbd0: unable to read partition table
[   84.097124][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.100865][ T6951] netlink: 34 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.113729][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.118791][ T6950] pim6reg0: tun_chr_ioctl cmd 1074025677
[   84.121246][ T6950] pim6reg0: linktype set to 768
[   84.133785][ T6950] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   84.136834][ T6950] IPv6: NLM_F_CREATE should be set when creating new route
[   85.139437][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   85.419206][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   85.584851][ T7016] netlink: 'syz.0.361': attribute type 3 has an invalid length.
[   85.905400][ T7042] netlink: 'syz.0.371': attribute type 2 has an invalid length.
[   86.967818][   T10] cfg80211: failed to load regulatory.db
[   88.035303][ T7120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   88.038263][ T7120] IPv6: NLM_F_CREATE should be set when creating new route
[   88.151819][ T7131] tipc: Started in network mode
[   88.164171][ T7131] tipc: Node identity ac14140f, cluster identity 4711
[   88.167392][ T7131] tipc: New replicast peer: 255.255.255.255
[   88.175279][ T7131] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.181426][ T7130] tipc: Disabling bearer <udp:syz2>
[   88.223546][ T7135] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080
[   88.266504][ T7139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.270826][ T7138] tipc: Disabling bearer <eth:syzkaller0>
[   88.401889][ T7153] __nla_validate_parse: 10 callbacks suppressed
[   88.401898][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'.
[   88.450736][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.398'.
[   88.456487][ T7153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.718242][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'.
[   88.722385][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[   88.727023][ T7176] netlink: 'syz.2.406': attribute type 6 has an invalid length.
[   88.730090][ T7176] netlink: 'syz.2.406': attribute type 11 has an invalid length.
[   88.791338][ T7180] netlink: 'syz.0.408': attribute type 6 has an invalid length.
[   88.802248][ T7180] netlink: 'syz.0.408': attribute type 7 has an invalid length.
[   88.807907][ T7180] netlink: 'syz.0.408': attribute type 8 has an invalid length.
[   89.161313][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.416'.
[   89.262313][ T7208] bridge_slave_0: invalid flags given to default FDB implementation
[   89.286940][ T7212] netlink: 108 bytes leftover after parsing attributes in process `syz.0.420'.
[   89.417594][ T7227] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   89.462687][ T7229] ip6erspan0: entered allmulticast mode
[   89.540052][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.426'.
[   89.545578][ T7235] netlink: 'syz.0.428': attribute type 4 has an invalid length.
[   89.556560][ T7235] netlink: 'syz.0.428': attribute type 4 has an invalid length.
[   89.722696][ T7255] netlink: 'syz.1.436': attribute type 7 has an invalid length.
[   89.920926][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'.
[   89.925961][ T7274] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   90.136766][ T7289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.139572][ T7289] syzkaller0: entered promiscuous mode
[   90.141405][ T7289] syzkaller0: entered allmulticast mode
[   90.159564][ T7289] tipc: Resetting bearer <eth:syzkaller0>
[   90.163655][ T7288] tipc: Resetting bearer <eth:syzkaller0>
[   90.171886][ T7288] tipc: Disabling bearer <eth:syzkaller0>
[   90.246770][ T7295] netlink: 224 bytes leftover after parsing attributes in process `syz.0.453'.
[   90.258882][ T7295] netlink: 256 bytes leftover after parsing attributes in process `syz.0.453'.
[   90.391206][ T7306] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.158392][ T7338] TCP: TCP_TX_DELAY enabled
[   91.276351][ T7350] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   91.279444][ T7350] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   91.282472][ T7350] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   92.583541][ T7405] validate_nla: 1 callbacks suppressed
[   92.583553][ T7405] netlink: 'syz.2.490': attribute type 1 has an invalid length.
[   92.829232][ T7435] netlink: 'syz.2.498': attribute type 2 has an invalid length.
[   92.832567][ T7435] netlink: 'syz.2.498': attribute type 2 has an invalid length.
[   92.882873][ T7442] netlink: 'syz.0.501': attribute type 1 has an invalid length.
[   93.033013][ T7375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.043029][ T7375] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   93.130100][ T7464] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.264691][ T7468] netlink: 'syz.0.509': attribute type 30 has an invalid length.
[   93.268033][ T7468] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   93.271639][ T7468] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   93.564230][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[   93.567190][ T7375] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.569859][ T7375] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   93.869131][ T7510] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   93.907093][ T5908] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96
[   93.969460][ T7517] __nla_validate_parse: 4 callbacks suppressed
[   93.969474][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.520'.
[   94.071769][ T7522] syzkaller1: entered promiscuous mode
[   94.075515][ T7522] syzkaller1: entered allmulticast mode
[   94.103703][ T7529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.523'.
[   94.461121][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'.
[   94.702174][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.538'.
[   94.882893][ T7589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.886845][ T7589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.031924][ T7594] IPVS: Error connecting to the multicast addr
[   95.221505][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'.
[   95.990083][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'.
[   96.464194][ T7650] Illegal XDP return value 4294967274 on prog  (id 142) dev N/A, expect packet loss!
[   96.805240][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'.
[   96.839541][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   96.842892][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'.
[   97.065806][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[   97.851506][ T7732] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   98.264689][ T7759] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   98.267089][ T7759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.049529][ T7830] __nla_validate_parse: 6 callbacks suppressed
[   99.049542][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'.
[   99.055999][ T7830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.619'.
[   99.058972][ T7830] openvswitch: netlink: Flow key attr not present in new flow.
[   99.068308][ T7830] IPv6: Can't replace route, no match found
[   99.443688][ T7842] syz_tun: entered promiscuous mode
[   99.515152][ T7844] ip6gretap0: entered promiscuous mode
[   99.585701][ T7852] pim6reg1: entered promiscuous mode
[   99.587919][ T7852] pim6reg1: entered allmulticast mode
[   99.679661][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[   99.690216][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.632'.
[   99.693294][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.698442][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.701754][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.705485][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.712598][ T7858] bridge_slave_0: invalid flags given to default FDB implementation
[  100.006163][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[  100.072046][ T7880] netlink: 'syz.2.638': attribute type 4 has an invalid length.
[  100.413470][ T7896] bridge_slave_0: invalid flags given to default FDB implementation
[  100.764253][ T7915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.775514][ T7915] syzkaller0: entered promiscuous mode
[  100.777949][ T7915] syzkaller0: entered allmulticast mode
[  100.793937][ T7915] tipc: Resetting bearer <eth:syzkaller0>
[  100.800439][ T7913] tipc: Resetting bearer <eth:syzkaller0>
[  100.812249][ T7913] tipc: Disabling bearer <eth:syzkaller0>
[  101.074664][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  101.096436][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  101.155225][ T7925] team1: entered promiscuous mode
[  101.157321][ T7925] team1: entered allmulticast mode
[  101.168587][ T7925] 8021q: adding VLAN 0 to HW filter on device team1
[  101.225659][ T7932] netlink: 'syz.0.654': attribute type 3 has an invalid length.
[  101.228088][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'.
[  101.448483][ T7949] ip6gretap0: entered promiscuous mode
[  101.450895][ T7949] macsec1: entered promiscuous mode
[  101.453102][ T7949] macsec1: entered allmulticast mode
[  101.455574][ T7949] ip6gretap0: entered allmulticast mode
[  101.497332][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'.
[  101.500520][ T7954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.566942][ T7958] bond0: (slave bond_slave_0): Releasing backup interface
[  101.572886][ T7958] bond0: (slave bond_slave_1): Releasing backup interface
[  101.582777][ T7958] team0: Port device team_slave_0 removed
[  101.598094][ T7958] team0: Port device team_slave_1 removed
[  101.601176][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.609206][ T7963] netlink: 'syz.0.664': attribute type 10 has an invalid length.
[  101.611601][ T7958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.615748][ T7958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.647870][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.650723][ T7963] bond0: (slave wlan1): Opening slave failed
[  122.150363][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'.
[  122.700597][ T7996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.749859][ T7996] syzkaller0: entered promiscuous mode
[  122.752360][ T7996] syzkaller0: entered allmulticast mode
[  122.765067][ T7996] tipc: Resetting bearer <eth:syzkaller0>
[  122.825795][ T7995] tipc: Resetting bearer <eth:syzkaller0>
[  123.364846][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.604792][ T7995] tipc: Disabling bearer <eth:syzkaller0>
[  123.845342][ T8015] openvswitch: netlink: IP tunnel dst address not specified
[  124.238225][ T8040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.691'.
[  124.407386][ T8052] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  124.908737][ T8082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.705'.
[  124.961490][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  125.082884][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'.
[  125.223269][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.711'.
[  125.227990][ T8103] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  125.558561][ T8117] sctp: [Deprecated]: syz.0.716 (pid 8117) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.558561][ T8117] Use struct sctp_sack_info instead
[  125.894963][ T8128] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  126.070317][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.728'.
[  126.316228][ T8169] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  126.331238][ T8169] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.364857][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  126.370629][ T8169] 8021q: adding VLAN 0 to HW filter on device bond2
[  126.373682][ T8169] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  126.379276][ T8169] bond2: (slave vcan1): Error -95 calling set_mac_address
[  126.413135][ T8172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.736'.
[  126.448089][ T8169] macvlan3: entered promiscuous mode
[  126.450334][ T8169] macvlan3: entered allmulticast mode
[  126.456821][ T8169] bond2: entered promiscuous mode
[  126.459837][ T8169] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  126.466927][ T8169] bond2: left promiscuous mode
[  126.495868][ T8175] netlink: 'syz.0.737': attribute type 12 has an invalid length.
[  126.560372][ T8179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  126.562932][ T8179] IPv6: NLM_F_CREATE should be set when creating new route
[  126.696282][ T8187] netlink: 'syz.1.743': attribute type 1 has an invalid length.
[  126.709508][ T8187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'.
[  127.467378][ T8221] __nla_validate_parse: 3 callbacks suppressed
[  127.467388][ T8221] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.754'.
[  127.505368][ T8225] macsec2: entered promiscuous mode
[  127.507343][ T8225] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  127.509830][ T8225] macsec2: entered allmulticast mode
[  127.511863][ T8225] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  127.661238][ T8236] Set syz0 is full, maxelem 0 reached
[  127.781763][ T8245] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.764'.
[  127.885567][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'.
[  127.922315][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'.
[  127.935137][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.771'.
[  127.991275][ T8269] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.773'.
[  128.065051][ T8278] netlink: 'syz.1.777': attribute type 5 has an invalid length.
[  128.137872][ T8282] netem: incorrect ge model size
[  128.140133][ T8282] netem: change failed
[  128.319388][ T8307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.326169][ T8307] syzkaller0: entered promiscuous mode
[  128.328195][ T8307] syzkaller0: entered allmulticast mode
[  128.337753][ T8307] tipc: Resetting bearer <eth:syzkaller0>
[  128.341873][ T8306] tipc: Resetting bearer <eth:syzkaller0>
[  128.352021][ T8306] tipc: Disabling bearer <eth:syzkaller0>
[  128.359117][ T8318] sctp: [Deprecated]: syz.2.788 (pid 8318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  128.359117][ T8318] Use struct sctp_sack_info instead
[  128.434802][ T8325] netlink: 'syz.0.790': attribute type 12 has an invalid length.
[  128.734834][ T8358] syzkaller0: entered promiscuous mode
[  128.746821][ T8358] syzkaller0: entered allmulticast mode
[  128.776731][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'.
[  128.780477][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'.
[  128.983694][ T8373] netlink: 'syz.0.805': attribute type 4 has an invalid length.
[  129.135298][ T8385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.252285][ T8397] netlink: 'syz.1.814': attribute type 11 has an invalid length.
[  129.438281][ T8422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  129.813049][ T8456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.817802][ T8456] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.883474][ T8466] sctp: [Deprecated]: syz.1.835 (pid 8466) Use of struct sctp_assoc_value in delayed_ack socket option.
[  129.883474][ T8466] Use struct sctp_sack_info instead
[  129.915160][ T8456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.926686][ T8456] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.990866][ T8456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  129.994272][ T8456] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.091234][ T8456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.108504][ T8456] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.129017][ T8476] netlink: 'syz.0.839': attribute type 16 has an invalid length.
[  130.132185][ T8476] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.839'.
[  130.214679][ T5908] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.220829][ T5908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.228827][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'.
[  130.232688][ T5908] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.236164][ T5908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.239495][ T5908] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.243380][ T5908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.264683][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.269189][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.688508][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  150.396719][ T8500] __nla_validate_parse: 1 callbacks suppressed
[  150.396730][ T8500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.849'.
[  150.475242][ T8509] netlink: 240 bytes leftover after parsing attributes in process `syz.0.846'.
[  150.578850][ T8517] netem: change failed
[  151.066270][ T8549] nbd: must specify at least one socket
[  151.076196][ T8549] block nbd0: NBD_DISCONNECT
[  151.079117][ T8549] block nbd0: Send disconnect failed -32
[  151.293062][ T8556] geneve3: entered promiscuous mode
[  151.660162][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.877'.
[  151.663203][ T8585] netlink: 48 bytes leftover after parsing attributes in process `syz.2.877'.
[  151.672429][ T8585] netlink: 'syz.2.877': attribute type 20 has an invalid length.
[  151.937836][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'.
[  151.940895][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'.
[  151.963731][ T8605] veth5: entered allmulticast mode
[  151.994435][ T8603] bridge_slave_0: invalid flags given to default FDB implementation
[  152.040342][ T8611] netlink: 120 bytes leftover after parsing attributes in process `syz.0.887'.
[  152.128539][ T8619] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  152.165680][ T8619] netlink: 'syz.1.891': attribute type 10 has an invalid length.
[  152.168403][ T8619] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  152.180695][ T8619] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.184695][ T8619] bond0: (slave wlan1): Opening slave failed
[  152.245404][ T8626] netlink: 48 bytes leftover after parsing attributes in process `syz.0.895'.
[  152.537432][ T8651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.905'.
[  152.558046][ T8653] netlink: 'syz.0.906': attribute type 1 has an invalid length.
[  152.561292][ T8653] netlink: 'syz.0.906': attribute type 1 has an invalid length.
[  152.803638][ T8666] netlink: 'syz.0.912': attribute type 1 has an invalid length.
[  152.830976][ T8666] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.999123][ T8671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.444594][ T8678] macsec2: entered promiscuous mode
[  153.447060][ T8678] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  153.450296][ T8678] macsec2: entered allmulticast mode
[  153.452734][ T8678] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  153.627521][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.924'.
[  154.059446][ T8750] _Z`Ԁ@: entered promiscuous mode
[  154.096530][ T8756] netlink: 'syz.0.945': attribute type 2 has an invalid length.
[  154.196764][ T8760] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.240806][ T8768] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  154.326807][ T8771] netdevsim0: tun_chr_ioctl cmd 1074025675
[  154.330496][ T8771] netdevsim0: persist disabled
[  154.352750][ T8768] team0: Port device team_slave_0 removed
[  154.360263][ T8768] team0: Port device team_slave_1 removed
[  154.366888][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.369280][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.372936][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.375560][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.427267][ T8775] netem: unknown loss type 13
[  154.428967][ T8775] netem: change failed
[  154.432071][ T8775] smc: net device bond0 applied user defined pnetid SYZ2
[  154.441412][ T8775] smc: removing net device bond0 with user defined pnetid SYZ2
[  154.446887][ T8775] bond0 (unregistering): Released all slaves
[  154.681320][ T8790] netlink: 'syz.2.957': attribute type 3 has an invalid length.
[  154.816359][ T8816] delete_channel: no stack
[  155.008027][ T8829] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  155.068236][ T8836] netlink: 'syz.2.969': attribute type 1 has an invalid length.
[  155.100176][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.119750][ T8836] bond0: (slave gretap2): making interface the new active one
[  155.124260][ T8836] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  155.308210][ T8854] netlink: 'syz.1.976': attribute type 3 has an invalid length.
[  155.342183][ T8856] vlan3: entered promiscuous mode
[  155.344036][ T8856] 1{X: entered promiscuous mode
[  155.542687][ T8869] netlink: 'syz.1.981': attribute type 1 has an invalid length.
[  155.551284][ T8869] __nla_validate_parse: 16 callbacks suppressed
[  155.551293][ T8869] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.981'.
[  156.934069][ T8863] Set syz1 is full, maxelem 65536 reached
[  176.135909][ T8888] syzkaller1: entered promiscuous mode
[  176.144113][ T8888] syzkaller1: entered allmulticast mode
[  176.160137][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'.
[  176.257323][ T8897] openvswitch: netlink: Multiple metadata blocks provided
[  176.438369][ T8919] syzkaller1: entered promiscuous mode
[  176.440347][ T8919] syzkaller1: entered allmulticast mode
[  176.461422][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'.
[  176.607855][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'.
[  176.633667][ T8936] macsec1: entered promiscuous mode
[  176.635656][ T8936] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  176.638115][ T8936] macsec1: entered allmulticast mode
[  176.639992][ T8936] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  176.669350][ T8944] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.680393][ T8945] sit0: entered promiscuous mode
[  176.682197][ T8945] sit0: entered allmulticast mode
[  176.780695][ T8957] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  176.795669][ T8957] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  176.819349][ T8961] tap0: tun_chr_ioctl cmd 35111
[  176.924076][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'.
[  176.993282][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'.
[  177.026307][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1021'.
[  177.051090][ T8992] geneve4: entered promiscuous mode
[  177.112949][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'.
[  177.526152][ T9029] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1041'.
[  177.532069][ T9029] validate_nla: 2 callbacks suppressed
[  177.532076][ T9029] netlink: 'syz.0.1041': attribute type 1 has an invalid length.
[  177.547098][ T9029] smc: adding net device bond0 with user defined pnetid SYZ2
[  177.551038][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.558834][ T9029] bond0: (slave gretap1): making interface the new active one
[  177.562793][ T9029] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  177.606318][ T9034] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1043'.
[  177.800925][ T9046] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  177.996090][ T9057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'.
[  178.197625][ T9072] netlink: 'syz.0.1056': attribute type 10 has an invalid length.
[  178.451205][ T9097] netlink: 'syz.0.1065': attribute type 25 has an invalid length.
[  178.478066][ T9100] netlink: 'syz.0.1066': attribute type 3 has an invalid length.
[  178.506136][ T9102] xfrm2: entered allmulticast mode
[  178.833300][ T9129] netlink: 'syz.1.1075': attribute type 3 has an invalid length.
[  179.500878][ T9140] netlink: 'syz.0.1080': attribute type 21 has an invalid length.
[  179.656252][ T9150] netlink: 'syz.2.1085': attribute type 1 has an invalid length.
[  179.803619][ T9161] netlink: 'syz.0.1089': attribute type 13 has an invalid length.
[  179.812235][ T9161] netlink: 'syz.0.1089': attribute type 11 has an invalid length.
[  179.835645][ T9165] vlan4: entered promiscuous mode
[  179.837882][ T9165] bridge0: entered promiscuous mode
[  179.863087][ T9167] netlink: 'syz.2.1092': attribute type 11 has an invalid length.
[  180.071160][ T9186] team0: Mode "" not found
[  180.082693][ T9194] tipc: New replicast peer: 0.0.0.0
[  180.085853][ T9194] tipc: Enabled bearer <udp:syz2>, priority 26
[  180.089123][ T9194] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  180.705388][ T9238] !: renamed from dummy0 (while UP)
[  181.106283][ T6773] tipc: Node number set to 2886997007
[  181.270965][ T9272] __nla_validate_parse: 22 callbacks suppressed
[  181.270975][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1133'.
[  181.278100][ T9272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.326383][ T9278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.380917][ T9285] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  181.435525][ T9278] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.439342][ T9278] bond4: (slave bond5): making interface the new active one
[  181.441968][ T9278] bond4: (slave bond5): Enslaving as an active interface with an up link
[  181.458877][ T9278] bond4: (slave gretap2): Enslaving as a backup interface with an up link
[  181.626489][ T9316] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  181.633132][ T9316] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  182.082723][ T9358] : entered promiscuous mode
[  182.090764][ T9360] syzkaller1: entered promiscuous mode
[  182.092621][ T9360] syzkaller1: entered allmulticast mode
[  182.098027][ T9360] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  182.110208][ T9363] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1161'.
[  182.378697][ T9383] nbd: must specify at least one socket
[  182.397050][ T9390] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.1171'.
[  182.579477][ T9417] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1181'.
[  182.649830][ T9425] validate_nla: 16 callbacks suppressed
[  182.649842][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.660279][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.665267][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.669446][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.673756][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.678941][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.682809][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.688290][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.692164][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.697981][ T9425] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  182.702377][ T9426] nbd: must specify at least one socket
Connection to localhost closed by remote host.
[  183.019372][ T9427] syz_tun (unregistering): left promiscuous mode
[  183.136213][ T5908] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.139913][ T5908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.170729][ T5908] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.174130][ T5908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.227777][ T5908] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.231307][ T5908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.279965][ T5908] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.284376][ T5908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.442091][ T5908] ip6gretap0 (unregistering): left allmulticast mode
[  183.522888][ T5908] bond0 (unregistering): (slave gretap2): Releasing active interface
[  183.673880][ T5908] bond0 (unregistering): Released all slaves
[  183.752129][ T5908] tipc: Disabling bearer <udp:syz2>
[  183.758103][ T5908] tipc: Left network mode
[  183.785099][ T5908] IPVS: stopping backup sync thread 7510 ...
[  183.859256][ T5908] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  183.862324][ T5908] mac80211_hwsim hwsim2 wlan0 (unregistering): left promiscuous mode
[  183.918052][ T5908] hsr_slave_0: left promiscuous mode
[  183.921808][ T5908] hsr_slave_1: left promiscuous mode
[  183.930999][ T5908] veth1_macvtap: left promiscuous mode
[  183.932962][ T5908] veth0_macvtap: left promiscuous mode
[  183.940559][ T5908] veth1_vlan: left promiscuous mode
[  183.942701][ T5908] veth0_vlan: left promiscuous mode
[  184.741680][ T5908] IPVS: stop unused estimator thread 0...
[  185.068956][ T5908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.109784][ T5908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.169107][ T5908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.239610][ T5908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.353074][ T5908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.357498][ T5908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.395022][ T5908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.398448][ T5908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.454597][ T5908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.458647][ T5908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.505842][ T5908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  185.509413][ T5908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.740006][ T5908] bond0 (unregistering): (slave gretap1): Releasing active interface
[  185.752891][ T5908] bond4 (unregistering): (slave gretap2): Releasing backup interface
[  185.936327][ T5908] bond1 (unregistering): Released all slaves
[  185.942817][ T5908] bond2 (unregistering): Released all slaves
[  185.994537][ T5908] bond3 (unregistering): Released all slaves
[  186.045376][ T5908] smc: removing net device bond0 with user defined pnetid SYZ2
[  186.048130][ T5908] bond0 (unregistering): Released all slaves
[  186.055013][ T5908] bond4 (unregistering): (slave bond5): Releasing backup interface
[  186.057990][ T5908] bond4 (unregistering): Released all slaves
[  186.110236][ T5908] bond5 (unregistering): Released all slaves
[  186.379748][ T5908] bond0 (unregistering): Released all slaves
[  186.386517][ T5908] bond1 (unregistering): Released all slaves
[  186.441747][ T5908] bond2 (unregistering): Released all slaves
[  186.547834][ T5908] _Z`Ԁ@: left promiscuous mode
[  186.588261][ T5908] : left promiscuous mode
[  186.630432][ T5908] tipc: Left network mode
[  186.636569][ T5908] tipc: Left network mode
[  186.782464][ T5908] mac80211_hwsim hwsim4 wlan0 (unregistering): left allmulticast mode
[  186.997515][ T5908] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode
[  187.000224][ T5908] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode
[  187.114807][ T5908] hsr_slave_0: left promiscuous mode
[  187.117107][ T5908] hsr_slave_1: left promiscuous mode
[  187.121371][ T5908] hsr_slave_0: left promiscuous mode
[  187.123510][ T5908] hsr_slave_1: left promiscuous mode
[  187.136186][ T5908] veth1_macvtap: left promiscuous mode
[  187.138062][ T5908] veth0_macvtap: left promiscuous mode
[  187.140538][ T5908] veth1_macvtap: left promiscuous mode
[  187.142678][ T5908] veth0_macvtap: left promiscuous mode
[  187.145254][ T5908] veth1_vlan: left promiscuous mode
[  187.147039][ T5908] veth0_vlan: left promiscuous mode
[  188.549000][ T5908] ------------[ cut here ]------------
[  188.551177][ T5908] WARNING: CPU: 0 PID: 5908 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  188.555007][ T5908] Modules linked in:
[  188.556476][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  188.561466][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.564816][ T5908] Workqueue: netns cleanup_net
[  188.566589][ T5908] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  188.568522][ T5908] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  188.574806][ T5908] RSP: 0018:ffffc9000447f8b0 EFLAGS: 00010293
[  188.577001][ T5908] RAX: ffffffff8a43935d RBX: ffff8881102e4000 RCX: ffff8881070b1cc0
[  188.579636][ T5908] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8881102e40b8
[  188.582253][ T5908] RBP: ffffc9000447f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  188.584965][ T5908] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8881102e4000
[  188.587839][ T5908] R13: 00000000000000b8 R14: ffff888021b4a440 R15: dffffc0000000000
[  188.591087][ T5908] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  188.594811][ T5908] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  188.597489][ T5908] CR2: 000055f7c85eea18 CR3: 000000000df36000 CR4: 00000000000006f0
[  188.600727][ T5908] Call Trace:
[  188.602133][ T5908]  <TASK>
[  188.603354][ T5908]  ops_undo_list+0x49a/0x990
[  188.605407][ T5908]  ? __pfx_ops_undo_list+0x10/0x10
[  188.607511][ T5908]  ? do_raw_spin_unlock+0x4d/0x240
[  188.609631][ T5908]  cleanup_net+0x4c5/0x800
[  188.611495][ T5908]  ? __pfx_cleanup_net+0x10/0x10
[  188.613348][ T5908]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.615214][ T5908]  ? process_scheduled_works+0x9ef/0x17b0
[  188.617532][ T5908]  ? process_scheduled_works+0x9ef/0x17b0
[  188.619579][ T5908]  process_scheduled_works+0xae1/0x17b0
[  188.621417][ T5908]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.623382][ T5908]  worker_thread+0x8a0/0xda0
[  188.625045][ T5908]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.627409][ T5908]  ? __kthread_parkme+0x7b/0x200
[  188.629297][ T5908]  kthread+0x711/0x8a0
[  188.630866][ T5908]  ? __pfx_worker_thread+0x10/0x10
[  188.632790][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.634678][ T5908]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.636877][ T5908]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.638999][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.640913][ T5908]  ret_from_fork+0x3fc/0x770
[  188.642636][ T5908]  ? __pfx_ret_from_fork+0x10/0x10
[  188.644561][ T5908]  ? __switch_to_asm+0x39/0x70
[  188.646390][ T5908]  ? __switch_to_asm+0x33/0x70
[  188.648359][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.650157][ T5908]  ret_from_fork_asm+0x1a/0x30
[  188.651732][ T5908]  </TASK>
[  188.652780][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  188.655476][ T5908] CPU: 0 UID: 0 PID: 5908 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  188.659560][ T5908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.662896][ T5908] Workqueue: netns cleanup_net
[  188.664557][ T5908] Call Trace:
[  188.665676][ T5908]  <TASK>
[  188.666651][ T5908]  dump_stack_lvl+0x99/0x250
[  188.668226][ T5908]  ? __asan_memcpy+0x40/0x70
[  188.669785][ T5908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.671528][ T5908]  ? __pfx__printk+0x10/0x10
[  188.673082][ T5908]  vpanic+0x281/0x750
[  188.674448][ T5908]  ? __pfx__printk+0x10/0x10
[  188.675992][ T5908]  ? __pfx_vpanic+0x10/0x10
[  188.677696][ T5908]  ? is_bpf_text_address+0x292/0x2b0
[  188.679486][ T5908]  panic+0xb9/0xc0
[  188.680758][ T5908]  ? __pfx_panic+0x10/0x10
[  188.682243][ T5908]  __warn+0x31b/0x4b0
[  188.683575][ T5908]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.685354][ T5908]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.687060][ T5908]  report_bug+0x2be/0x4f0
[  188.688512][ T5908]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.690303][ T5908]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  188.692074][ T5908]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  188.693888][ T5908]  handle_bug+0x84/0x160
[  188.695293][ T5908]  exc_invalid_op+0x1a/0x50
[  188.696797][ T5908]  asm_exc_invalid_op+0x1a/0x20
[  188.698423][ T5908] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  188.700478][ T5908] Code: a8 81 df f7 4b 83 3c 2c 00 75 19 e8 4c 18 7c f7 49 81 fd f8 07 00 00 74 1d e8 3e 18 7c f7 49 83 c5 08 eb c9 e8 33 18 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  188.707510][ T5908] RSP: 0018:ffffc9000447f8b0 EFLAGS: 00010293
[  188.709495][ T5908] RAX: ffffffff8a43935d RBX: ffff8881102e4000 RCX: ffff8881070b1cc0
[  188.712327][ T5908] RDX: 0000000000000000 RSI: ffffffff8dba6151 RDI: ffff8881102e40b8
[  188.715674][ T5908] RBP: ffffc9000447f9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  188.718522][ T5908] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8881102e4000
[  188.721099][ T5908] R13: 00000000000000b8 R14: ffff888021b4a440 R15: dffffc0000000000
[  188.723697][ T5908]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  188.725496][ T5908]  ops_undo_list+0x49a/0x990
[  188.727075][ T5908]  ? __pfx_ops_undo_list+0x10/0x10
[  188.728822][ T5908]  ? do_raw_spin_unlock+0x4d/0x240
[  188.730579][ T5908]  cleanup_net+0x4c5/0x800
[  188.732484][ T5908]  ? __pfx_cleanup_net+0x10/0x10
[  188.734851][ T5908]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.736849][ T5908]  ? process_scheduled_works+0x9ef/0x17b0
[  188.738697][ T5908]  ? process_scheduled_works+0x9ef/0x17b0
[  188.740611][ T5908]  process_scheduled_works+0xae1/0x17b0
[  188.742437][ T5908]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.744438][ T5908]  worker_thread+0x8a0/0xda0
[  188.746016][ T5908]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.748129][ T5908]  ? __kthread_parkme+0x7b/0x200
[  188.750017][ T5908]  kthread+0x711/0x8a0
[  188.751481][ T5908]  ? __pfx_worker_thread+0x10/0x10
[  188.753169][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.754842][ T5908]  ? _raw_spin_unlock_irq+0x23/0x50
[  188.756790][ T5908]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.758765][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.760503][ T5908]  ret_from_fork+0x3fc/0x770
[  188.762265][ T5908]  ? __pfx_ret_from_fork+0x10/0x10
[  188.764216][ T5908]  ? __switch_to_asm+0x39/0x70
[  188.765999][ T5908]  ? __switch_to_asm+0x33/0x70
[  188.767814][ T5908]  ? __pfx_kthread+0x10/0x10
[  188.769562][ T5908]  ret_from_fork_asm+0x1a/0x30
[  188.771364][ T5908]  </TASK>
[  188.773236][ T5908] Kernel Offset: disabled
[  188.774680][ T5908] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:16:37  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000447f050
R8 =ffff88801fc98237 R9 =1ffff11003f93046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98dd R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f7c85eea18 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000ff0000000000 XMM03=00000000000000ff 0000ffff00000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=85d2014c1f83af00 RBX=ffffffff81968308 RCX=85d2014c1f83af00 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556db511ca18 CR3=000000010e61c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000040000006a 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00316e6170772f74 656e2f317968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
