last executing test programs:

25.590463224s ago: executing program 0 (id=1163):
r0 = socket(0x1, 0x803, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/24, 0x18}], 0x1}, 0x9}], 0x1, 0x400000a0, 0x0)
sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c049", 0x2}], 0x1, 0x0, 0x0, 0x4000004}, 0xc0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x17, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6gretap0\x00', &(0x7f0000000b40)=@ethtool_dump={0x3e, 0x1}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r3], 0x0, 0x4c, 0x0, 0x1}, 0x28)

25.51715798s ago: executing program 0 (id=1164):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800000227bd7000fea51dd9ed000100000800030000000000000000", @ANYRES32=r2, @ANYBLOB="0c001680050004000200000008000f00008000000800060000800000"], 0x40}, 0x1, 0x0, 0x0, 0x88000}, 0x1894)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffc5}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

20.271391153s ago: executing program 0 (id=1164):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800000227bd7000fea51dd9ed000100000800030000000000000000", @ANYRES32=r2, @ANYBLOB="0c001680050004000200000008000f00008000000800060000800000"], 0x40}, 0x1, 0x0, 0x0, 0x88000}, 0x1894)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffc5}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

14.990315279s ago: executing program 0 (id=1164):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800000227bd7000fea51dd9ed000100000800030000000000000000", @ANYRES32=r2, @ANYBLOB="0c001680050004000200000008000f00008000000800060000800000"], 0x40}, 0x1, 0x0, 0x0, 0x88000}, 0x1894)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffc5}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

8.981416282s ago: executing program 0 (id=1164):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800000227bd7000fea51dd9ed000100000800030000000000000000", @ANYRES32=r2, @ANYBLOB="0c001680050004000200000008000f00008000000800060000800000"], 0x40}, 0x1, 0x0, 0x0, 0x88000}, 0x1894)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffc5}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

1.980685136s ago: executing program 0 (id=1164):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800880}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001800000227bd7000fea51dd9ed000100000800030000000000000000", @ANYRES32=r2, @ANYBLOB="0c001680050004000200000008000f00008000000800060000800000"], 0x40}, 0x1, 0x0, 0x0, 0x88000}, 0x1894)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffffc5}}]}, 0x34}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791240000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

1.232125864s ago: executing program 1 (id=1462):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0)
sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b032851897cee7054e7e1e0702321a402356d2f7728fc212abddf577e94277f3d9ceea00b26d2cd0dc790b14423d5766bfd60897fa6b4a3e5bec0e118bc0934219dc3b4a8dce9c5223696b152635e6ca4761490d5832d84c80176a3b48e27cb64d7498ce458ec00afb5ceb41e55ee19e6ecdf", 0x7f}], 0x4}], 0x1, 0x840)
recvmsg(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000300)=""/149, 0x95}], 0x2}, 0x10001)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000c30000000001000095"], &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)

1.151382603s ago: executing program 1 (id=1463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b25, &(0x7f0000000000)={'wlan1\x00'})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000001080)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x5, 0x148, 0x0, 0x0, 0x260, 0x2a8, 0x2a8, 0x260, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x0, 0x65}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x581b, 0x0, 0x3, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x3, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'xfrm0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@addrtype={{0x30}, {0x100, 0x949, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0xffff, 0x1, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1)
setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x1e)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54051}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
unshare(0x8000000)

1.04005992s ago: executing program 1 (id=1464):
r0 = socket(0x23, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$inet(0x2, 0x3, 0x8)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2)
write(r1, &(0x7f0000000000), 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private2, <r9=>0x0}, &(0x7f0000000040)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r10}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="110000001900010000000000000000001d01"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x8004)

1.039265985s ago: executing program 1 (id=1465):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='afs_call\x00', r0, 0x0, 0x7}, 0x18)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xc}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000005c0)='afs_call\x00', r0, 0x0, 0x7}, 0x18) (async)
unshare(0x62040200) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

781.855897ms ago: executing program 1 (id=1470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000891214000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc}, 0x94) (async, rerun: 32)
r1 = socket$inet6(0xa, 0x3, 0x103) (rerun: 32)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0) (async, rerun: 32)
recvfrom(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x162, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x80) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

711.337104ms ago: executing program 1 (id=1472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r2, &(0x7f0000003040)=[{&(0x7f0000000280)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="5d8a4f", 0x3}], 0x1, 0x0, 0x0, 0x8084}], 0x1, 0x24000894)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r2, 0xda90)
accept4(r2, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket(0xf, 0x3, 0xf)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r7, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x800, 0x70bd2d, 0x0, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)

660.368988ms ago: executing program 2 (id=1475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000c40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000070000380680000800800034000000002"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

581.688728ms ago: executing program 2 (id=1476):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000ac0)=[{0x5000000000000, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="55b6b0da3835253b57d3248f1cea8db5d45fce197572a8189f7786eb147a97dc76e994f4fbd646f7833beb606bf1780142bdcf0ff6cf8559a6c8d713ea9dca8f1b8b880d4f319f7b7b32cb428f9caa6e8337f345c744abc18e2a34f26d16478eab27dbd724995bd48b8829239f6c42300f98536b85f2ca10491dd26a0356a9fc55c4b410b4402af0c608097e3dd50baeff05ddac98c68f62aa550f8bddd79478a7bf43e60de0b70f57021ce5b2364afdd6f6f0c00ba2cf8dfe91", 0xba}, {&(0x7f0000000280)="ae3be89a2732ae5b71554a609e0126f4d890758198f7faaf89513ebe94d4fd9739c22a1a76b9ec3e7540435bebad37ab046a275210c513eab8aee51aea164a35e0b5d72e481d4ef1533542648589922af4e8bf0b596f98245571772a01b630d01e367125de5570fe30d4", 0x6a}, {&(0x7f0000000380)="7bef1bf693454c3b39a2f017ca1f815893a38ddbca72d6462dc43b96c526ead14adfbc745c7243d11cb624d11ddc9c855ba67ed8041173a8261798767a3a5855b89766bb6abd5b462c6c8fd47f802e681d11f0c22f", 0x55}, {&(0x7f0000000400)="5235ee5e43cef294e6771fba413575a8f0dd3aeb340ceec58939551f250e0a52d8d9c8d5ca25d321a08decf89b0404a3a505c1b36fe1ce887cb960ed0d5c9ad046b9bbe7f72abc42370be5d0483b7c78332aa1182a12ac88764a4c034226724386ed1c3ceb49f58a9ba74e155bd9ac7a4cfa6a367311d76bb3d1104d861b", 0x7e}, {&(0x7f0000000480)="e98b40b2ae519f5e4355c56fc5e7efa53c9105bc5eac985fc9adbdf852a955e0b9a8822992bd9a3aabf56ee32dcdadf937a55e2367f6dfd6a8b5a0a80c244a092cd6600548a6e9b54628bb4aea48762bc26941e172853cc3cc2a5b2eb128f4ac55eb4a0c75afc01477910c8dd87142c29b89418e19b2df40cd12fd97e0a7ef3b2842d6cb02bc19c8890268c472a0b78d490473b7ea97c9a8d015ea4a5cc1feb63f0fda67b03fb90818d6008ea945fd989f1d739659500813", 0xb8}], 0x5, &(0x7f00000005c0)=[@op={0x18}, @iv={0x110, 0x117, 0x2, 0xf8, "ab1c26a31d1cf5ee3ccbab86f841488fad3a628ecd9eff3188e86bcb09f11ab607b42058b1422b4fef1fb4ac9f969e0515787fe28e0398f0615ada2246ca14f35066075b4a5c127fd2c48b5aceb040bda2c8f190ad09ec199e00aee74f1cfcadbe54a13d3279eba1508f43fac0e8269298d2e4b798fea4879a37ade6a27e53a41681ac20c7fa1ce95df4e485462032bd33eb27de92783266c51c169f8445f70eceeec0131b3a0b978cd0ab5dc1377765f1e496c77db2b7c6b2c0cc5d44e16f2dce5bc3a542e31ce1912c3f0df64d5b50bc5664ccdb9bb8cd7cc9dfca9aa2bbe1a96445715d8e2edeb4da112cb603359a6087f1da1102526c"}, @assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x140, 0x8000}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)="55ead52e06ccf5a3c34246ef0ec3d49fd8f7b6a3ef5dd34566bb950428b8f47fd172b73f9202711be792a63ef6220d4a04145390adb15314b7e42c58388eab82858af378c988983acc298120433f19d9f9fca573f70b57e463a4bc728e6ccc2e43b672c23ae7e740914579f081056d21f879ea067527cf323c570cd5d2e934973397bf900189b096a37968d7a25622d2fd30de57d77babb966c590eb513553d4ef7ed2b110e6527af54b60b0fe581fefc53ac045d584fc6cb1672e260d688c45559d361197e511afb62312e490e50bc13c1fdf7faed4bf74238582da33a0241da266c34a12f2937eb3834414079f71", 0xef}, {&(0x7f0000000840)="ceeed5b17761ef99d2c9808ee16a215acf2c110c04a3c825bd2990289ee2d9edb47dff1bb740008541fc2f1d9d3b5017b1bfbcc65d62efacb92da4462c8ad8217acb4d3637f86213722108953f95456f0dfeacd4547031acd26824e415a4c4cd", 0x60}, {&(0x7f00000008c0)="2b1665d9cb5a0a09ae0b22ca14b2ad27176309268ff3ac9143196cc5e2bb873bb9c976432a35da4a5c27b3eb0c6d3b6d7c83198e4ed7df995d43034874546258f31a5e9f909206d7513e71effadd9cac79b9dd325166e17b953013bc15116a84f59deb7899d2fae7ab3ec16e18ded7c781a4c466ce508c1af2edd265875b6afcbec4a427e989d701a6848f06342ead6d6fe7daaf2e1d0fabdffde55519cbb42fa8ba11316b4af6d4d3fdb586208d9d4a9957ba", 0xb3}], 0x3, &(0x7f0000000980), 0x0, 0x8044}, {0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a00)="29dbef6bbe2ca7b3dd4ba9f716998b2ada76cdf4f6934ed36b8e99fb206da9cfdaa81fbb69cddd4ee31a81b7a20afb5dcac5bb941c6586c2eade7c224e8aacd4b108ea68", 0x44}], 0x1, 0x0, 0x0, 0x41}], 0x3, 0x4004010)

579.166308ms ago: executing program 2 (id=1477):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_int(r2, 0x0, 0x16, 0x0, &(0x7f0000000200))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a3100000000050001"], 0x58}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03000000000000000000070000000900010073797a30000000006c400000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2800128024000180090001006d65746100000000140002800800034000000012080002400000000fac3b3a4000000110140000001000010000000000000000000384000a"], 0xb4}}, 0x20050800)

291.375355ms ago: executing program 2 (id=1478):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
socket$rds(0x15, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x8)
socket$kcm(0x2, 0x3, 0x2)
write$tun(0xffffffffffffffff, 0x0, 0xfce)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, 0x8)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, @bcast, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x2000c000)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

161.710422ms ago: executing program 2 (id=1479):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_TTL={0x5, 0x8, 0xb}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

0s ago: executing program 2 (id=1480):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
accept(r9, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r10=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000540)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r12=>0xffffffffffffffff})
r13 = accept(r4, &(0x7f0000000280)=@rc, &(0x7f0000000300)=0x80)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r14=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={<r15=>r3, 0xffff, 0x8, 0x7})
socketpair(0x26, 0x80000, 0xd2f4, &(0x7f00000003c0)={<r16=>0xffffffffffffffff})
r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r17, 0x40086602, &(0x7f0000000040)=0x40)
write$cgroup_pid(r17, &(0x7f00000008c0), 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r18=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="00010000", @ANYRES16=r6, @ANYBLOB="000829bd7000fddbdf2502000000400007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c000400070000000000000008000a002f7b402d4c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="0a000a00776c616e30000000400007800c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="0c00018008000100", @ANYRES32=r17, @ANYBLOB="0c00018008000100", @ANYRES32=r18, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4804)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33749' (ED25519) to the list of known hosts.
syzkaller login: [   41.183220][ T5789] cgroup: Unknown subsys name 'net'
[   41.316197][ T5789] cgroup: Unknown subsys name 'cpuset'
[   41.320380][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.620796][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.837594][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.840422][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.842838][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.845654][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.848405][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.885979][ T5223] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.888759][ T5223] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.891121][ T5223] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.894190][ T5223] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.896753][ T5223] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.926893][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.929587][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.931960][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.937389][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.940122][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.040476][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.137329][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.139598][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.141953][ T5831] bridge_slave_0: entered allmulticast mode
[   46.144978][ T5831] bridge_slave_0: entered promiscuous mode
[   46.161028][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.163711][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.165915][ T5831] bridge_slave_1: entered allmulticast mode
[   46.168626][ T5831] bridge_slave_1: entered promiscuous mode
[   46.178006][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.224268][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.227370][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   46.232977][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.275550][ T5831] team0: Port device team_slave_0 added
[   46.283958][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.286203][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.288561][ T5836] bridge_slave_0: entered allmulticast mode
[   46.291244][ T5836] bridge_slave_0: entered promiscuous mode
[   46.294709][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.297000][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.299322][ T5836] bridge_slave_1: entered allmulticast mode
[   46.301931][ T5836] bridge_slave_1: entered promiscuous mode
[   46.305873][ T5831] team0: Port device team_slave_1 added
[   46.344639][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.346811][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.355619][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.361019][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.371549][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.374569][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.382446][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.391016][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.416053][ T5836] team0: Port device team_slave_0 added
[   46.418055][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.420425][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.422774][ T5838] bridge_slave_0: entered allmulticast mode
[   46.426028][ T5838] bridge_slave_0: entered promiscuous mode
[   46.429651][ T5836] team0: Port device team_slave_1 added
[   46.450966][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.453237][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.455855][ T5838] bridge_slave_1: entered allmulticast mode
[   46.458457][ T5838] bridge_slave_1: entered promiscuous mode
[   46.476858][ T5831] hsr_slave_0: entered promiscuous mode
[   46.479103][ T5831] hsr_slave_1: entered promiscuous mode
[   46.488070][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.490218][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.498646][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.504572][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.508048][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.510199][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.518610][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.523751][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.555210][ T5838] team0: Port device team_slave_0 added
[   46.558384][ T5838] team0: Port device team_slave_1 added
[   46.615824][ T5836] hsr_slave_0: entered promiscuous mode
[   46.618095][ T5836] hsr_slave_1: entered promiscuous mode
[   46.620132][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.622521][ T5836] Cannot create hsr debugfs directory
[   46.625094][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.627340][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.635544][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.653681][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.655930][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.664018][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.727023][ T5838] hsr_slave_0: entered promiscuous mode
[   46.729235][ T5838] hsr_slave_1: entered promiscuous mode
[   46.731313][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.733795][ T5838] Cannot create hsr debugfs directory
[   46.786228][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.791853][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.805847][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.816425][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.879360][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.884697][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.890366][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.892690][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.895358][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.897607][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.905634][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.910112][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.948801][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.957324][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.959694][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.962141][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.964457][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.968022][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.972824][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.982761][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.024944][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.027255][ T5838] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.029648][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.031781][ T5838] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.038123][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.041262][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.046162][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.048751][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.052145][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.055820][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.066824][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.071902][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.088240][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.092037][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   47.101129][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.103468][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.107838][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.110162][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.121995][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.124356][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.130885][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.133091][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.186976][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.209105][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   47.215660][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.217920][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.240404][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.242644][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.266985][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.270193][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.303239][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.316695][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.348023][ T5831] veth0_vlan: entered promiscuous mode
[   47.352621][ T5831] veth1_vlan: entered promiscuous mode
[   47.386302][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.388671][ T5836] veth0_vlan: entered promiscuous mode
[   47.402700][ T5831] veth0_macvtap: entered promiscuous mode
[   47.407214][ T5836] veth1_vlan: entered promiscuous mode
[   47.411396][ T5831] veth1_macvtap: entered promiscuous mode
[   47.443550][ T5838] veth0_vlan: entered promiscuous mode
[   47.448738][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.454713][ T5836] veth0_macvtap: entered promiscuous mode
[   47.457742][ T5838] veth1_vlan: entered promiscuous mode
[   47.464868][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.469998][ T5836] veth1_macvtap: entered promiscuous mode
[   47.477690][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.480560][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.485872][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.488627][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.505873][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.509001][ T5838] veth0_macvtap: entered promiscuous mode
[   47.518566][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.524372][ T5838] veth1_macvtap: entered promiscuous mode
[   47.530711][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.535164][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.537972][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.540731][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.566786][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.580887][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.601292][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.606053][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.609007][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.611693][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.627576][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.630107][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.650378][ T4222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.661582][ T4222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.671663][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.677434][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.687923][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.690415][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.717177][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.724824][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.735753][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.743208][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.747330][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.805065][ T5895] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.807870][ T5895] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3'.
[   47.842385][ T5894] Zero length message leads to an empty skb
[   47.914184][ T5841] Bluetooth: hci1: command tx timeout
[   47.914296][ T5223] Bluetooth: hci0: command tx timeout
[   47.934922][ T5907] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   47.938571][ T5907] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.994605][ T5223] Bluetooth: hci2: command tx timeout
[   48.027210][ T5916] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10'.
[   48.030162][ T5916] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10'.
[   48.062466][ T5919] netlink: 172 bytes leftover after parsing attributes in process `syz.1.13'.
[   48.087756][ T5920] netlink: 172 bytes leftover after parsing attributes in process `syz.1.13'.
[   48.425629][ T5945] netlink: 92 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.428542][ T5945] netlink: 92 bytes leftover after parsing attributes in process `syz.2.18'.
[   48.595836][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'.
[   48.628677][ T5969] batadv_slave_1: entered promiscuous mode
[   48.632655][ T5968] batadv_slave_1: left promiscuous mode
[   48.727944][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'.
[   48.802926][ T5984] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET)
[   48.808281][ T5984] netlink: 'syz.2.28': attribute type 4 has an invalid length.
[   49.176911][ T6007] syzkaller0: entered promiscuous mode
[   49.178702][ T6007] syzkaller0: entered allmulticast mode
[   49.993960][ T5223] Bluetooth: hci1: command tx timeout
[   49.993979][ T5841] Bluetooth: hci0: command tx timeout
[   50.083424][ T5841] Bluetooth: hci2: command tx timeout
[   50.126415][ T6021] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96
[   50.340925][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.078721][ T6066] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   51.081339][ T6066] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   51.277307][ T6079] Cannot find add_set index 0 as target
[   51.360097][ T6085] tipc: Started in network mode
[   51.361724][ T6085] tipc: Node identity 06325f60f32b, cluster identity 4711
[   51.365917][ T6085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.389821][ T6086] tipc: Disabling bearer <eth:syzkaller0>
[   51.461004][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   51.468769][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   51.471448][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   51.671342][ T6089] infiniband syz2: set active
[   51.674108][   T47] vxcan1 speed is unknown, defaulting to 1000
[   51.677065][ T6089] infiniband syz2: added vxcan1
[   51.685202][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.731295][ T6089] RDS/IB: syz2: added
[   51.737152][ T6089] smc: adding ib device syz2 with port count 1
[   51.740317][ T6089] smc:    ib device syz2 port 1 has pnetid 
[   51.743048][    T9] vxcan1 speed is unknown, defaulting to 1000
[   51.749636][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   51.883443][ T6113] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   51.895875][ T6113] bond1: entered promiscuous mode
[   51.897652][ T6113] bond1: entered allmulticast mode
[   51.905661][ T6113] bridge1: the hash_elasticity option has been deprecated and is always 16
[   51.911557][ T6113] bond1: (slave bridge1): making interface the new active one
[   51.914675][ T6113] bridge1: entered promiscuous mode
[   51.916659][ T6113] bridge1: entered allmulticast mode
[   51.919074][ T6113] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   51.922011][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   52.051274][ T6120] team0 (unregistering): Port device team_slave_0 removed
[   52.056998][ T6120] team0 (unregistering): Port device team_slave_1 removed
[   52.066373][ T6121] netlink: 'syz.1.80': attribute type 10 has an invalid length.
[   52.071173][ T6089] vxcan1 speed is unknown, defaulting to 1000
[   52.073408][ T5841] Bluetooth: hci0: command tx timeout
[   52.074912][ T5223] Bluetooth: hci1: command tx timeout
[   52.087072][ T6121] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   52.155508][ T5223] Bluetooth: hci2: command tx timeout
[   52.275010][ T6138] xt_hashlimit: max too large, truncated to 1048576
[   52.277420][ T6138] xt_hashlimit: overflow, rate too high: 0
[   52.281342][ T6138] netlink: 'syz.0.87': attribute type 21 has an invalid length.
[   52.285187][ T6138] netlink: 'syz.0.87': attribute type 22 has an invalid length.
[   52.287796][ T6138] netlink: 'syz.0.87': attribute type 23 has an invalid length.
[   52.290387][ T6138] netlink: 'syz.0.87': attribute type 25 has an invalid length.
[   52.295177][ T6138] veth0_to_bond: entered allmulticast mode
[   52.769659][ T6165] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   52.772437][   T24] IPVS: starting estimator thread 0...
[   52.884641][ T6168] IPVS: using max 77 ests per chain, 184800 per kthread
[   53.427313][ T6190] bridge0: port 3(erspan0) entered blocking state
[   53.429703][ T6190] bridge0: port 3(erspan0) entered disabled state
[   53.432389][ T6190] erspan0: entered allmulticast mode
[   53.436451][ T6190] erspan0: entered promiscuous mode
[   53.438818][ T6190] bridge0: port 3(erspan0) entered blocking state
[   53.441074][ T6190] bridge0: port 3(erspan0) entered forwarding state
[   53.447433][ T6190] erspan0: left allmulticast mode
[   53.449616][ T6190] erspan0: left promiscuous mode
[   53.451607][ T6190] bridge0: port 3(erspan0) entered disabled state
[   53.459791][ T6190] x_tables: unsorted underflow at hook 4
[   53.466846][ T6190] __nla_validate_parse: 53 callbacks suppressed
[   53.466854][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'.
[   53.472075][ T6190] IPVS: Error joining to the multicast group
[   53.505975][ T6192] netlink: 180 bytes leftover after parsing attributes in process `syz.0.102'.
[   53.582528][ T6200] bond0: option lp_interval: invalid value (18446744073709551604)
[   53.589112][ T6200] bond0: option lp_interval: allowed values 1 - 2147483647
[   53.591692][ T6200] openvswitch: netlink: Flow key attr not present in new flow.
[   53.617270][ T6205] netlink: 92 bytes leftover after parsing attributes in process `syz.0.106'.
[   53.620275][ T6205] netlink: 92 bytes leftover after parsing attributes in process `syz.0.106'.
[   53.749703][ T6220] Cannot find add_set index 0 as target
[   53.915121][ T6224] pimreg: entered allmulticast mode
[   53.927375][ T6224] pimreg: left allmulticast mode
[   53.974963][ T6222] openvswitch: netlink: IP tunnel dst address not specified
[   54.153538][ T5223] Bluetooth: hci0: command tx timeout
[   54.153590][ T5841] Bluetooth: hci1: command tx timeout
[   54.233563][ T5841] Bluetooth: hci2: command tx timeout
[   54.579663][ T6220] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   54.581878][ T6221] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   54.676334][ T6240] macvlan2: entered promiscuous mode
[   54.678703][ T6240] macvlan2: entered allmulticast mode
[   54.720131][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'.
[   54.736919][  T219] smc: removing ib device syz2
[   54.749075][   T47] vxcan1 speed is unknown, defaulting to 1000
[   54.752306][   T47] syz2: Port: 1 Link DOWN
[   55.226367][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   55.276104][ T6268] ip6t_rpfilter: unknown options
[   55.284182][ T6268] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   55.287160][ T6268] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   55.812650][ T6286] tipc: Started in network mode
[   55.816348][ T6286] tipc: Node identity e2e636b351a8, cluster identity 4711
[   55.818714][ T6286] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   55.845370][ T6286] tipc: Resetting bearer <eth:syzkaller0>
[   55.857580][ T6285] tipc: Resetting bearer <eth:syzkaller0>
[   56.142769][ T6301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.133'.
[   56.198387][ T6303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.133'.
[   56.605957][ T6285] tipc: Disabling bearer <eth:syzkaller0>
[   56.689088][ T6308] IPv6: sit1: Disabled Multicast RS
[   56.695975][ T6308] netlink: 'syz.2.135': attribute type 5 has an invalid length.
[   56.708024][ T6310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.136'.
[   56.748092][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'.
[   56.882484][ T6360] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   57.716243][ T6384] Cannot find del_set index 1 as target
[   57.925538][ T6405] pim6reg1: entered allmulticast mode
[   57.929298][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.949718][ T6407] tipc: Can't bind to reserved service type 0
[   58.006579][ T6411] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   58.096406][ T6417] xt_TCPMSS: Only works on TCP SYN packets
[   58.671367][ T6455] __nla_validate_parse: 1 callbacks suppressed
[   58.671376][ T6455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.174'.
[   58.747282][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'.
[   58.759538][ T6463] : renamed from pim6reg1
[   58.864147][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   58.871945][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   58.988098][ T6488] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   58.990820][ T6488] netlink: 'syz.0.188': attribute type 2 has an invalid length.
[   58.993936][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'.
[   58.998560][ T6490] team_slave_0: entered promiscuous mode
[   59.000460][ T6490] team_slave_1: entered promiscuous mode
[   59.003754][ T6490] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   59.006237][ T6490] team0: Device macvtap1 is already an upper device of the team interface
[   59.009988][ T6490] team_slave_0: left promiscuous mode
[   59.012022][ T6490] team_slave_1: left promiscuous mode
[   59.182830][ T6508] netlink: 'syz.2.195': attribute type 4 has an invalid length.
[   59.186705][ T6508] netlink: 17 bytes leftover after parsing attributes in process `syz.2.195'.
[   59.197870][ T6508] Bluetooth: MGMT ver 1.23
[   59.199531][ T6510] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   59.204015][ T6510] macsec1: entered promiscuous mode
[   59.206267][ T6510] macsec1: entered allmulticast mode
[   59.208088][ T6510] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   59.210456][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'.
[   59.246680][ T6514] netlink: 92 bytes leftover after parsing attributes in process `syz.0.197'.
[   59.252292][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'.
[   59.356676][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'.
[   59.488559][ T6542] 8021q: VLANs not supported on vxcan0
[   59.632759][ T6550] ip6gretap0: entered promiscuous mode
[   59.637407][ T6550] ip6gretap0: left promiscuous mode
[   59.798397][ T6565] netlink: 'syz.0.217': attribute type 1 has an invalid length.
[   59.812018][ T6565] bond1: entered promiscuous mode
[   59.815195][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.827289][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.830386][ T6565] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   59.834130][ T6565] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   59.839035][ T6565] bond1: (slave vcan1): making interface the new active one
[   59.841590][ T6565] vcan1: entered promiscuous mode
[   59.844308][ T6565] bond1: (slave vcan1): Enslaving as an active interface with an up link
[   60.125067][ T6594] erspan0: entered promiscuous mode
[   60.128118][ T6594] erspan0: left promiscuous mode
[   60.214603][ T6598] batadv_slave_0: entered promiscuous mode
[   60.216969][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.237881][ T6598] batadv_slave_0 (unregistering): left promiscuous mode
[   60.240576][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.682743][ T6632] Cannot find del_set index 4 as target
[   61.273796][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   61.378240][ T6685] netlink: 'syz.1.260': attribute type 16 has an invalid length.
[   61.595504][ T6704] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   61.944094][ T6714] xt_time: invalid argument - start or stop time greater than 23:59:59
[   62.599786][ T6765] IPVS: length: 8 != 446622349272
[   63.419422][ T6841] veth1_to_team: entered promiscuous mode
[   63.421426][ T6841] macvtap0: entered allmulticast mode
[   63.423278][ T6841] veth1_to_team: entered allmulticast mode
[   63.428569][ T6841] 8021q: VLANs not supported on wg0
[   63.467782][ T6848] xt_nfacct: accounting object `syz1' does not exists
[   63.497032][ T6851] netlink: 'syz.2.322': attribute type 5 has an invalid length.
[   63.682763][ T6874] __nla_validate_parse: 55 callbacks suppressed
[   63.682773][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   63.833928][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   63.981845][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'.
[   64.107694][ T6921] bridge4: entered allmulticast mode
[   64.145957][ T6924] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   64.157854][ T6926] geneve2: entered promiscuous mode
[   64.200996][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'.
[   64.281696][ T6938] ieee802154 phy0 wpan0: encryption failed: -22
[   64.432443][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'.
[   64.460233][ T6953] netlink: 92 bytes leftover after parsing attributes in process `syz.1.357'.
[   64.509905][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'.
[   64.546701][ T6960] netlink: 92 bytes leftover after parsing attributes in process `syz.2.359'.
[   64.607345][ T6973] netlink: 'syz.0.362': attribute type 4 has an invalid length.
[   64.619777][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'.
[   64.660656][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'.
[   64.848367][ T7009] netlink: 'syz.2.373': attribute type 4 has an invalid length.
[   64.851112][ T7009] netlink: 'syz.2.373': attribute type 21 has an invalid length.
[   64.854041][ T7009] netlink: 'syz.2.373': attribute type 7 has an invalid length.
[   64.856628][ T7009] netlink: 'syz.2.373': attribute type 8 has an invalid length.
[   64.869524][ T7009] gretap0: entered promiscuous mode
[   64.871743][ T7009] batadv_slave_1: entered promiscuous mode
[   64.875602][ T7009] erspan0: entered promiscuous mode
[   65.031800][ T7030] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[   65.054782][ T7030] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.064898][ T7029] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.067357][ T7029] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   65.071432][ T7029] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   65.112614][ T7030] gretap1: entered promiscuous mode
[   65.116414][ T7030] bond2: (slave gretap1): making interface the new active one
[   65.119168][ T7030] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   65.132520][ T7030] macvlan2: entered promiscuous mode
[   65.134745][ T7030] macvlan2: entered allmulticast mode
[   65.136907][ T7030] bond2: entered promiscuous mode
[   65.139168][ T7030] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   65.142800][ T7030] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   65.148471][ T7030] bond2: left promiscuous mode
[   65.328873][ T7038] gtp0: entered promiscuous mode
[   65.330596][ T7038] gtp0: entered allmulticast mode
[   65.672873][ T7051] netdevsim netdevsim1: Direct firmware load for 2Q failed with error -2
[   65.676150][ T7051] netdevsim netdevsim1: Falling back to sysfs fallback for: 2Q
[   65.816566][ T7063] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   65.853149][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.862801][ T7063] bond1: (slave bridge1): making interface the new active one
[   65.873036][ T7063] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   65.891155][ T7063] gretap1: entered promiscuous mode
[   65.904236][ T7063] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   65.912308][ T7063] macvlan2: entered promiscuous mode
[   65.917198][ T7063] macvlan2: entered allmulticast mode
[   65.965765][ T7068] tipc: New replicast peer: 255.255.255.255
[   65.968093][ T7068] tipc: Enabled bearer <udp:syz2>, priority 10
[   66.416171][ T7088] sctp: [Deprecated]: syz.1.398 (pid 7088) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.416171][ T7088] Use struct sctp_sack_info instead
[   66.424717][ T7087] tunl0: entered promiscuous mode
[   66.427410][ T7087] netlink: 'syz.1.398': attribute type 4 has an invalid length.
[   66.466383][ T7012] Set syz1 is full, maxelem 65536 reached
[   66.589698][ T7104] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003
[   66.667433][ T7111] ip6gretap0: entered promiscuous mode
[   67.085364][   T47] tipc: Node number set to 3008247475
[   67.279833][ T7177] sctp: [Deprecated]: syz.0.429 (pid 7177) Use of int in maxseg socket option.
[   67.279833][ T7177] Use struct sctp_assoc_value instead
[   67.718424][ T7183] bridge0: port 3(erspan0) entered blocking state
[   67.720623][ T7183] bridge0: port 3(erspan0) entered disabled state
[   67.722724][ T7183] erspan0: entered allmulticast mode
[   67.729227][ T7183] erspan0: entered promiscuous mode
[   67.731156][ T7183] bridge0: port 3(erspan0) entered blocking state
[   67.733182][ T7183] bridge0: port 3(erspan0) entered forwarding state
[   67.736805][ T7183] erspan0: left allmulticast mode
[   67.738396][ T7183] erspan0: left promiscuous mode
[   67.740048][ T7183] bridge0: port 3(erspan0) entered disabled state
[   68.024580][ T7199] syz_tun: entered allmulticast mode
[   68.026985][ T7200] syz_tun: left allmulticast mode
[   68.074624][ T7196] : entered promiscuous mode
[   68.089177][ T7195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.710733][   T13] nci: nci_rx_work: unknown MT 0x1
[   69.442743][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.445605][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.562950][ T7266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.594571][ T7276] __nla_validate_parse: 42 callbacks suppressed
[   69.594580][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[   69.646692][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'.
[   69.655648][ T7266] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.658519][ T7266] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.661268][ T7266] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.665214][ T7266] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.791001][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'.
[   69.840771][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[   69.896014][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.473'.
[   69.900865][ T7309] syzkaller0: entered promiscuous mode
[   69.903044][ T7309] syzkaller0: entered allmulticast mode
[   69.970286][ T7314] syzkaller1: entered promiscuous mode
[   69.972628][ T7314] syzkaller1: entered allmulticast mode
[   70.075364][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   70.259991][ T7347] netlink: 92 bytes leftover after parsing attributes in process `syz.1.484'.
[   70.262911][ T7347] netlink: 92 bytes leftover after parsing attributes in process `syz.1.484'.
[   70.304992][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'.
[   70.369643][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'.
[   70.400201][ T7361] bridge0: entered promiscuous mode
[   70.551672][ T7374] netlink: 'syz.0.494': attribute type 6 has an invalid length.
[   70.726669][ T7395] sctp: [Deprecated]: syz.0.500 (pid 7395) Use of struct sctp_assoc_value in delayed_ack socket option.
[   70.726669][ T7395] Use struct sctp_sack_info instead
[   70.795795][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.798014][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.851341][ T7404] netlink: 'syz.0.503': attribute type 4 has an invalid length.
[   70.858926][ T7404] netlink: 'syz.0.503': attribute type 4 has an invalid length.
[   71.092556][ T7428] netlink: 'syz.2.510': attribute type 6 has an invalid length.
[   71.116538][ T7431] openvswitch: netlink: Flow key attr not present in new flow.
[   71.123860][ T7428] Cannot find del_set index 286 as target
[   71.551026][ T7471] netlink: 'syz.0.521': attribute type 4 has an invalid length.
[   71.739484][ T7486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.742327][ T7486] IPv6: NLM_F_CREATE should be set when creating new route
[   71.744909][ T7486] IPv6: NLM_F_CREATE should be set when creating new route
[   71.747463][ T7486] IPv6: NLM_F_CREATE should be set when creating new route
[   71.760778][ T7481] 8021q: adding VLAN 0 to HW filter on device batadv1
[   71.763660][ T7486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.766639][ T7481] team0: Port device batadv1 added
[   71.822394][ T7490] veth2: entered allmulticast mode
[   71.883560][ T7502] netlink: 'syz.2.533': attribute type 5 has an invalid length.
[   71.888291][ T7488] netlink: 'syz.0.529': attribute type 12 has an invalid length.
[   71.904375][ T7502] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.907296][ T7502] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.910088][ T7502] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.912898][ T7502] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.917279][ T7502] vxlan0: entered promiscuous mode
[   71.919290][ T7502] vxlan0: entered allmulticast mode
[   71.922648][ T7488] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20000
[   71.982171][ T7505] veth3: entered allmulticast mode
[   72.029843][ T7507] dvmrp0: entered allmulticast mode
[   72.049092][ T7509] bridge_slave_1: left allmulticast mode
[   72.050829][ T7509] bridge_slave_1: left promiscuous mode
[   72.052692][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.075222][ T7509] bridge_slave_0: left allmulticast mode
[   72.077349][ T7509] bridge_slave_0: left promiscuous mode
[   72.079338][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.228929][ T7520] xt_policy: output policy not valid in PREROUTING and INPUT
[   72.306864][ T7522] No such timeout policy "syz1"
[   72.362673][ T7530] netlink: 'syz.2.543': attribute type 25 has an invalid length.
[   72.510055][ T7540] x_tables: ip6_tables: udplite match: only valid for protocol 136
[   72.564563][ T7544] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.818024][ T7561] tipc: New replicast peer: 255.255.255.255
[   72.820391][ T7561] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.874837][ T7567] netlink: 'syz.2.558': attribute type 15 has an invalid length.
[   73.035161][ T7575] : renamed from pim6reg1
[   73.141345][ T7584] bridge_slave_1: left allmulticast mode
[   73.143247][ T7584] bridge_slave_1: left promiscuous mode
[   73.148672][ T7584] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.154605][ T7584] bridge_slave_0: left allmulticast mode
[   73.156473][ T7584] bridge_slave_0: left promiscuous mode
[   73.158371][ T7584] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.211802][ T7583] tipc: Started in network mode
[   73.213698][ T7583] tipc: Node identity fc02, cluster identity 4711
[   73.215727][ T7583] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   73.477508][ T7605] syzkaller0: entered allmulticast mode
[   73.547261][ T7605] syzkaller0 (unregistering): left allmulticast mode
[   73.587141][ T7627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.687081][ T7627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.740531][ T7627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.802045][ T7627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.835034][  T974] tipc: Node number set to 4112080736
[   73.904363][ T7627] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.914938][ T7627] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.924494][ T7627] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.935615][ T7627] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.020279][ T7674] sctp: [Deprecated]: syz.0.589 (pid 7674) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.020279][ T7674] Use struct sctp_sack_info instead
[   74.035078][ T7676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.039659][ T7676] netlink: 'syz.2.590': attribute type 21 has an invalid length.
[   74.100272][ T7684] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   74.111473][ T7683] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   74.114145][ T7683] gretap1: left promiscuous mode
[   74.115964][ T7683] macvlan2: left promiscuous mode
[   74.121807][ T7683] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.124751][ T7683] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.127454][ T7683] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.130163][ T7683] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   74.134597][ T7683] vxlan0: left promiscuous mode
[   74.156479][ T7687] tipc: New replicast peer: 255.255.255.255
[   74.159286][ T7687] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.197330][ T7683] bridge: RTM_NEWNEIGH with invalid state 0x31
[   74.355661][ T7708] 8021q: adding VLAN 0 to HW filter on device bond2
[   74.431278][ T7715] IPVS: length: 62 != 8
[   74.516554][ T7728] xt_CT: No such helper "pptp"
[   75.153485][  T974] tipc: Node number set to 4227989504
[   75.646636][ T7785] __nla_validate_parse: 39 callbacks suppressed
[   75.646646][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[   75.653955][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[   75.658679][ T7785] xt_ecn: cannot match TCP bits for non-tcp packets
[   75.662230][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'.
[   75.714252][ T7799] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20003
[   75.733195][ T7801] netlink: 124 bytes leftover after parsing attributes in process `syz.2.632'.
[   75.734624][ T7803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.633'.
[   75.739918][ T7803] netlink: 76 bytes leftover after parsing attributes in process `syz.1.633'.
[   75.775454][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'.
[   75.884702][ T7823] validate_nla: 1 callbacks suppressed
[   75.884716][ T7823] netlink: 'syz.0.637': attribute type 1 has an invalid length.
[   75.890344][ T7823] netlink: 232 bytes leftover after parsing attributes in process `syz.0.637'.
[   75.893702][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[   76.849140][ T7842] netlink: 92 bytes leftover after parsing attributes in process `syz.1.648'.
[   77.244942][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.247547][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.250067][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.252565][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.256603][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.259162][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.261658][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.266273][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.269228][ T7883] netlink: 'syz.1.659': attribute type 10 has an invalid length.
[   77.751727][ T7927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.764431][ T7927] syzkaller0: entered promiscuous mode
[   77.766512][ T7927] syzkaller0: entered allmulticast mode
[   77.772589][ T7926] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   77.802260][ T7926] tipc: Resetting bearer <eth:syzkaller0>
[   77.805233][ T7924] tipc: Resetting bearer <eth:syzkaller0>
[   77.816705][ T7924] tipc: Disabling bearer <eth:syzkaller0>
[   77.850782][ T7933] openvswitch: netlink: IP tunnel TTL not specified.
[   77.931763][ T7946] xfrm1: entered promiscuous mode
[   77.937649][ T7946] xfrm1: entered allmulticast mode
[   78.051183][ T7951] Cannot find del_set index 4 as target
[   78.338148][ T7987] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   78.549399][ T7999] x_tables: duplicate underflow at hook 4
[   79.277062][   T10] cfg80211: failed to load regulatory.db
[   79.756333][ T8058] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.759798][ T8058] bond0: (slave bond2): Enslaving as an active interface with an up link
[   80.342026][ T8082] dvmrp8: entered allmulticast mode
[   80.518911][ T8110] nbd: must specify an index to disconnect
[   80.524944][ T8110] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   80.527487][ T8110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.553696][ T8117] sctp: [Deprecated]: syz.0.740 (pid 8117) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.553696][ T8117] Use struct sctp_sack_info instead
[   80.576644][ T8119] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   80.617510][ T8124] sch_fq: defrate 0 ignored.
[   80.809836][ T8137] __nla_validate_parse: 55 callbacks suppressed
[   80.809845][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.747'.
[   80.841718][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'.
[   80.886081][ T8152] Driver unsupported XDP return value 0 on prog  (id 155) dev N/A, expect packet loss!
[   80.898388][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.0.749'.
[   80.948993][ T8162] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   80.997434][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'.
[   81.012495][ T8170] vxcan1: entered allmulticast mode
[   81.016137][ T8170] vxcan1: left allmulticast mode
[   81.028556][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'.
[   81.054434][ T8173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[   81.057629][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'.
[   81.060357][ T8173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[   81.063122][ T8173] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[   81.159732][ T8184] validate_nla: 65 callbacks suppressed
[   81.159741][ T8184] netlink: 'syz.2.764': attribute type 13 has an invalid length.
[   81.164638][ T8184] netlink: 'syz.2.764': attribute type 17 has an invalid length.
[   81.201283][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.205082][ T8184] 8021q: adding VLAN 0 to HW filter on device team0
[   81.210069][ T8184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.274612][ T8190] openvswitch: netlink: Message has 24 unknown bytes.
[   81.277051][ T8190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.281619][ T8184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.286625][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'.
[   81.337954][ T8187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.473189][ T8314] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[   83.136738][ T8329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.384094][ T8345] : entered promiscuous mode
[   83.697883][ T8364] x_tables: duplicate underflow at hook 1
[   83.714430][ T8364] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.847768][ T8374] dvmrp8: entered allmulticast mode
[   83.870134][ T8377] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   83.875270][ T8376] IPVS: stopping master sync thread 8377 ...
[   83.905751][ T8381] netlink: 'syz.0.803': attribute type 1 has an invalid length.
[   83.909667][ T8381] netlink: 'syz.0.803': attribute type 1 has an invalid length.
[   83.986802][ T8385] netlink: 'syz.0.805': attribute type 39 has an invalid length.
[   84.302803][ T8408] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[   84.417058][ T8421] netlink: 'syz.1.816': attribute type 10 has an invalid length.
[   84.426677][ T8421] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.430040][ T8421] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.663014][ T8441] netlink: 'syz.1.822': attribute type 4 has an invalid length.
[   84.881840][ T8465] syzkaller0: entered promiscuous mode
[   84.892868][ T8465] syzkaller0: entered allmulticast mode
[   85.191195][ T8494] sctp: [Deprecated]: syz.1.838 (pid 8494) Use of int in max_burst socket option deprecated.
[   85.191195][ T8494] Use struct sctp_assoc_value instead
[   85.755921][ T8496] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.768318][ T8496] macvlan3: entered promiscuous mode
[   85.770185][ T8496] macvlan3: entered allmulticast mode
[   85.772488][ T8496] bond3: entered promiscuous mode
[   85.775807][ T8496] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   85.779558][ T8496] bond3: left promiscuous mode
[   85.890919][ T8514] __nla_validate_parse: 19 callbacks suppressed
[   85.890928][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[   85.897411][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'.
[   85.900250][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[   85.903047][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'.
[   85.935018][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[   85.940983][ T8517] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   85.943739][ T8517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.950305][ T8513] netlink: 124 bytes leftover after parsing attributes in process `syz.0.844'.
[   85.988619][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[   86.010597][ T8524] netlink: 132 bytes leftover after parsing attributes in process `syz.0.850'.
[   86.171309][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[   86.217184][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[   86.818915][ T8614] xt_bpf: check failed: parse error
[   86.839652][ T8617] nbd: couldn't find device at index 536870912
[   87.559543][ T8698] IPVS: Error joining to the multicast group
[   87.566568][   T34] audit: type=1800 audit(1752535459.341:2): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.901" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1666 res=0 errno=0
[   87.585087][ T8700] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[   87.698796][ T8709] syzkaller0: entered promiscuous mode
[   87.700596][ T8709] syzkaller0: entered allmulticast mode
[   88.399832][ T8717] netlink: 'syz.2.905': attribute type 4 has an invalid length.
[   88.793545][ T5841] Bluetooth: hci2: command tx timeout
[   89.387586][ T8744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.390404][ T8744] syzkaller0: entered promiscuous mode
[   89.392343][ T8744] syzkaller0: entered allmulticast mode
[   89.398277][ T8744] tipc: Resetting bearer <eth:syzkaller0>
[   89.401050][ T8743] tipc: Resetting bearer <eth:syzkaller0>
[   89.411173][ T8743] tipc: Disabling bearer <eth:syzkaller0>
[   89.670793][ T8764] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20003
[   89.842835][ T8774] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[   90.328222][ T8758] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   90.403244][ T8798] trusted_key: syz.1.932 sent an empty control message without MSG_MORE.
[   90.408361][ T8798] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   90.510537][ T8807] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   90.814986][ T8829] pim6reg1: entered promiscuous mode
[   90.816899][ T8829] pim6reg1: entered allmulticast mode
[   91.111304][ T8853] __nla_validate_parse: 29 callbacks suppressed
[   91.111314][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[   91.316561][ T8862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.321230][ T8862] tipc: Resetting bearer <eth:syzkaller0>
[   91.326624][ T8861] tipc: Disabling bearer <eth:syzkaller0>
[   91.376691][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[   91.411323][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'.
[   91.483429][ T8880] netlink: 'syz.1.962': attribute type 3 has an invalid length.
[   91.485956][ T8880] netlink: 'syz.1.962': attribute type 3 has an invalid length.
[   91.488528][ T8880] netlink: 'syz.1.962': attribute type 3 has an invalid length.
[   91.529768][ T8885] netlink: 'syz.1.963': attribute type 4 has an invalid length.
[   91.532759][ T8885] netlink: 'syz.1.963': attribute type 4 has an invalid length.
[   91.538369][ T8884] delete_channel: no stack
[   91.622294][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'.
[   91.704442][ T8899] netlink: 'syz.1.968': attribute type 1 has an invalid length.
[   91.717359][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[   91.731748][ T8899] 8021q: adding VLAN 0 to HW filter on device team0
[   91.745540][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'.
[   91.751201][ T8901] netlink: 248 bytes leftover after parsing attributes in process `syz.0.969'.
[   91.817701][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'.
[   91.969062][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'.
[   92.175007][ T8946] syz.1.980: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   92.180659][ T8946] CPU: 1 UID: 0 PID: 8946 Comm: syz.1.980 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   92.180671][ T8946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.180676][ T8946] Call Trace:
[   92.180680][ T8946]  <TASK>
[   92.180684][ T8946]  dump_stack_lvl+0x189/0x250
[   92.180701][ T8946]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.180712][ T8946]  ? __pfx__printk+0x10/0x10
[   92.180724][ T8946]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.180737][ T8946]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   92.180748][ T8946]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   92.180759][ T8946]  warn_alloc+0x214/0x310
[   92.180772][ T8946]  ? stack_depot_save_flags+0x40/0x900
[   92.180785][ T8946]  ? __pfx_warn_alloc+0x10/0x10
[   92.180796][ T8946]  ? kasan_save_track+0x4f/0x80
[   92.180804][ T8946]  ? xskq_create+0x56/0x170
[   92.180817][ T8946]  ? xsk_init_queue+0xb0/0x110
[   92.180827][ T8946]  ? xsk_setsockopt+0x43f/0x710
[   92.180841][ T8946]  ? do_sock_setsockopt+0x25a/0x3e0
[   92.180855][ T8946]  ? __x64_sys_setsockopt+0x18b/0x220
[   92.180867][ T8946]  ? do_syscall_64+0xfa/0x3b0
[   92.180876][ T8946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.180888][ T8946]  __vmalloc_node_range_noprof+0x125/0x12f0
[   92.180934][ T8946]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   92.180949][ T8946]  ? __kasan_kmalloc+0x93/0xb0
[   92.180961][ T8946]  vmalloc_user_noprof+0xad/0xf0
[   92.180973][ T8946]  ? xskq_create+0xbf/0x170
[   92.180985][ T8946]  xskq_create+0xbf/0x170
[   92.180998][ T8946]  xsk_init_queue+0xb0/0x110
[   92.181011][ T8946]  xsk_setsockopt+0x43f/0x710
[   92.181024][ T8946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.181034][ T8946]  ? __lock_acquire+0xab9/0xd20
[   92.181048][ T8946]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   92.181060][ T8946]  ? __pfx_xsk_setsockopt+0x10/0x10
[   92.181071][ T8946]  do_sock_setsockopt+0x25a/0x3e0
[   92.181081][ T8946]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   92.181092][ T8946]  ? __fget_files+0x2a/0x420
[   92.181105][ T8946]  __x64_sys_setsockopt+0x18b/0x220
[   92.181117][ T8946]  do_syscall_64+0xfa/0x3b0
[   92.181123][ T8946]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.181142][ T8946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.181150][ T8946]  ? exc_page_fault+0x9f/0xf0
[   92.181163][ T8946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.181171][ T8946] RIP: 0033:0x7f1c12b8e929
[   92.181179][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   92.181187][ T8946] RSP: 002b:00007f1c13ac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   92.181196][ T8946] RAX: ffffffffffffffda RBX: 00007f1c12db5fa0 RCX: 00007f1c12b8e929
[   92.181202][ T8946] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[   92.181208][ T8946] RBP: 00007f1c12c10b39 R08: 0000000000000004 R09: 0000000000000000
[   92.181213][ T8946] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.181218][ T8946] R13: 0000000000000000 R14: 00007f1c12db5fa0 R15: 00007ffe3bf10488
[   92.181230][ T8946]  </TASK>
[   92.181234][ T8946] Mem-Info:
[   92.291885][ T8946] active_anon:5519 inactive_anon:0 isolated_anon:0
[   92.291885][ T8946]  active_file:1060 inactive_file:38222 isolated_file:0
[   92.291885][ T8946]  unevictable:1768 dirty:192 writeback:0
[   92.291885][ T8946]  slab_reclaimable:9432 slab_unreclaimable:69680
[   92.291885][ T8946]  mapped:18262 shmem:2442 pagetables:999
[   92.291885][ T8946]  sec_pagetables:0 bounce:0
[   92.291885][ T8946]  kernel_misc_reclaimable:0
[   92.291885][ T8946]  free:287448 free_pcp:16444 free_cma:0
[   92.307454][ T8946] Node 0 active_anon:13072kB inactive_anon:0kB active_file:2688kB inactive_file:147868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38220kB dirty:372kB writeback:0kB shmem:4964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5088kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.321557][ T8946] Node 1 active_anon:9004kB inactive_anon:0kB active_file:1552kB inactive_file:5020kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:396kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7660kB pagetables:1896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.335657][ T8946] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.345847][ T8946] lowmem_reserve[]: 0 812 812 812 812
[   92.347836][ T8946] Node 0 DMA32 free:287428kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13080kB inactive_anon:0kB active_file:2688kB inactive_file:147868kB unevictable:3536kB writepending:380kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:29940kB local_pcp:17052kB free_cma:0kB
[   92.360619][ T8946] lowmem_reserve[]: 0 0 0 0 0
[   92.362398][ T8946] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.383099][ T8946] lowmem_reserve[]: 0 0 854 854 854
[   92.384928][ T8946] Node 1 Normal free:384300kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8952kB inactive_anon:0kB active_file:1552kB inactive_file:5020kB unevictable:3536kB writepending:396kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38108kB local_pcp:18516kB free_cma:0kB
[   92.396279][ T8946] lowmem_reserve[]: 0 0 0 0 0
[   92.399058][ T8946] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   92.402996][ T8946] Node 0 DMA32: 863*4kB (UME) 143*8kB (UME) 211*16kB (UME) 381*32kB (UME) 108*64kB (UM) 26*128kB (UME) 26*256kB (UME) 9*512kB (UM) 8*1024kB (UME) 4*2048kB (UME) 56*4096kB (UM) = 287428kB
[   92.435887][ T8946] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   92.449110][ T8946] Node 1 Normal: 213*4kB (UME) 301*8kB (ME) 115*16kB (UME) 148*32kB (UME) 272*64kB (UME) 114*128kB (UM) 39*256kB (UM) 11*512kB (UM) 5*1024kB (UM) 3*2048kB (UME) 77*4096kB (UM) = 384108kB
[   92.458844][ T8946] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.462073][ T8946] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.467054][ T8946] 41727 total pagecache pages
[   92.468737][ T8946] 0 pages in swap cache
[   92.470272][ T8946] Free swap  = 124996kB
[   92.471757][ T8946] Total swap = 124996kB
[   92.477662][ T8946] 786301 pages RAM
[   92.480538][ T8946] 0 pages HighMem/MovableOnly
[   92.482024][ T8946] 241085 pages reserved
[   92.485823][ T8946] 0 pages cma reserved
[   92.607803][ T8970] netlink: 788 bytes leftover after parsing attributes in process `syz.1.985'.
[   92.631396][ T8972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.933876][ T9005] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   93.305580][ T9033] netlink: 'syz.1.1008': attribute type 1 has an invalid length.
[   93.365577][ T9033] netlink: 'syz.1.1008': attribute type 4 has an invalid length.
[   93.389338][ T9033] netlink: 'syz.1.1008': attribute type 4 has an invalid length.
[   94.357182][ T9127] netlink: 'syz.2.1024': attribute type 19 has an invalid length.
[   94.655964][ T9155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.685509][ T9159] delete_channel: no stack
[   94.746156][ T9164] syzkaller0: entered promiscuous mode
[   94.748053][ T9164] syzkaller0: entered allmulticast mode
[   95.418112][ T9178] xt_cluster: node mask cannot exceed total number of nodes
[   95.559598][ T9187] syzkaller0: entered promiscuous mode
[   95.561567][ T9187] syzkaller0: entered allmulticast mode
[   95.606112][ T9193] netlink: 'syz.0.1043': attribute type 5 has an invalid length.
[   96.067056][ T9236] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[   96.092168][ T9236] 8021q: adding VLAN 0 to HW filter on device bond3
[   96.263713][ T9259] __nla_validate_parse: 23 callbacks suppressed
[   96.263725][ T9259] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1064'.
[   96.274604][ T9259] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1064'.
[   96.330793][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[   96.332730][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'.
[   96.367241][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[   96.367242][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[   96.372183][ T9273] netlink: 'syz.2.1069': attribute type 10 has an invalid length.
[   96.378426][ T9273] team0: Device ipvlan1 failed to register rx_handler
[   96.403785][ T9273] syz.2.1069 (9273) used greatest stack depth: 19896 bytes left
[   96.435782][ T9278] x_tables: duplicate underflow at hook 1
[   96.436359][ T9280] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1072'.
[   96.440578][ T9280] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1072'.
[   96.523653][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'.
[   96.608136][ T9293] vlan2: entered promiscuous mode
[   96.610014][ T9293] vlan2: entered allmulticast mode
[   96.611715][ T9293] hsr_slave_1: entered allmulticast mode
[   96.690347][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1077'.
[   96.784858][ T9302] atomic_op ffff8880390c0198 conn xmit_atomic 0000000000000000
[   96.788276][ T9304] atomic_op ffff8880390c0998 conn xmit_atomic 0000000000000000
[   97.129102][ T9333] netlink: 'syz.0.1089': attribute type 1 has an invalid length.
[   97.201373][ T5243] IPVS: starting estimator thread 0...
[   97.235604][ T9344] pimreg: entered allmulticast mode
[   97.238537][ T9344] pimreg: left allmulticast mode
[   97.293590][ T9341] IPVS: using max 79 ests per chain, 189600 per kthread
[   97.501969][ T9358] ieee802154 phy0 wpan0: encryption failed: -22
[   97.553836][ T9367] netlink: 'syz.0.1099': attribute type 10 has an invalid length.
[   97.906508][ T9399] bridge7: entered promiscuous mode
[   97.908426][ T9399] bridge7: entered allmulticast mode
[   97.913047][ T9399] team0: Port device bridge7 added
[   97.952669][ T9403] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[   98.014798][ T9399] infiniband syz1: set active
[   98.016547][ T9399] infiniband syz1: added macvlan1
[   98.048912][ T9399] RDS/IB: syz1: added
[   98.050558][ T9399] smc: adding ib device syz1 with port count 1
[   98.052698][ T9399] smc:    ib device syz1 port 1 has pnetid SYZ1 (user defined)
[   98.373719][ T9430] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   98.728255][ T9469] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   98.827272][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.833271][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.867728][ T9473] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.870846][ T9473] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.874442][ T9473] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.877315][ T9473] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.906612][   T10] syz1: Port: 1 Link DOWN
[   98.915961][ T9476] bond0: (slave bond_slave_0): Releasing backup interface
[   98.923268][ T9476] bond0: (slave bond_slave_1): Releasing backup interface
[   98.938295][ T9476] team0: Port device team_slave_0 removed
[   98.944051][ T9476] team0: Port device team_slave_1 removed
[   98.950566][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.952882][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.957027][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.959555][ T9476] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.969524][ T9476] bond1: (slave vcan1): Releasing backup interface
[   98.971916][ T9476] vcan1: left promiscuous mode
[   99.297019][ T9486] validate_nla: 1 callbacks suppressed
[   99.297030][ T9486] netlink: 'syz.2.1138': attribute type 1 has an invalid length.
[   99.320589][ T9486] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[   99.325504][ T9486] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   99.332754][ T9486] bond5: (slave vti0): making interface the new active one
[   99.336962][ T9486] bond5: (slave vti0): Enslaving as an active interface with an up link
[   99.692141][ T9524] netlink: 'syz.2.1148': attribute type 7 has an invalid length.
[   99.811764][ T9534] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  100.354240][ T9571] netlink: 'syz.1.1160': attribute type 6 has an invalid length.
[  100.356941][ T9571] netlink: 'syz.1.1160': attribute type 6 has an invalid length.
[  100.614708][ T8775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.688324][ T8775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.752987][ T8775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.827334][ T8775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.837120][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  100.840545][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  100.844214][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  100.848063][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  100.851133][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  101.339101][ T8775] bond0 (unregistering): Released all slaves
[  101.391037][ T8775] bond1 (unregistering): Released all slaves
[  101.441887][ T8775] bond2 (unregistering): Released all slaves
[  101.491760][ T8775] bond3 (unregistering): Released all slaves
[  101.501368][ T9580] __nla_validate_parse: 34 callbacks suppressed
[  101.501377][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'.
[  101.567728][ T8775] : left promiscuous mode
[  101.669436][ T8775] tipc: Disabling bearer <udp:syz2>
[  101.675199][ T8775] tipc: Left network mode
[  101.683228][ T9575] chnl_net:caif_netlink_parms(): no params data found
[  101.775990][ T9607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1172'.
[  101.864771][ T8775] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode
[  101.887819][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.890148][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.892467][ T9575] bridge_slave_0: entered allmulticast mode
[  101.898035][ T9575] bridge_slave_0: entered promiscuous mode
[  101.904793][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.907402][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.909671][ T9575] bridge_slave_1: entered allmulticast mode
[  101.912379][ T9575] bridge_slave_1: entered promiscuous mode
[  101.949562][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.961008][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.020117][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1175'.
[  102.027006][ T9575] team0: Port device team_slave_0 added
[  102.050195][ T9622] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  102.069437][ T9575] team0: Port device team_slave_1 added
[  102.099591][ T8775] hsr_slave_0: left promiscuous mode
[  102.102260][ T8775] hsr_slave_1: left promiscuous mode
[  102.111791][ T8775] veth1_macvtap: left promiscuous mode
[  102.114079][ T8775] veth0_macvtap: left promiscuous mode
[  102.116084][ T8775] veth1_vlan: left promiscuous mode
[  102.117883][ T8775] veth0_vlan: left promiscuous mode
[  102.577992][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.580850][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.591558][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.596848][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  102.599033][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.609530][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  102.646681][ T9575] hsr_slave_0: entered promiscuous mode
[  102.648966][ T9575] hsr_slave_1: entered promiscuous mode
[  102.651012][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.654269][ T9575] Cannot create hsr debugfs directory
[  102.766496][ T9633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1176'.
[  102.773957][ T9633] netlink: 'syz.1.1176': attribute type 29 has an invalid length.
[  102.813909][ T8775] IPVS: stop unused estimator thread 0...
[  102.878203][ T5223] Bluetooth: hci2: command tx timeout
[  102.899510][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'.
[  103.215404][ T9668] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1182'.
[  103.261271][ T9673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.268785][ T9673] syzkaller0: entered promiscuous mode
[  103.272782][ T9673] syzkaller0: entered allmulticast mode
[  103.284495][ T9673] tipc: Resetting bearer <eth:syzkaller0>
[  103.302574][ T9672] tipc: Resetting bearer <eth:syzkaller0>
[  103.310250][ T9672] tipc: Disabling bearer <eth:syzkaller0>
[  103.330501][ T9575] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  103.335031][ T9575] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  103.339154][ T9575] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  103.345219][ T9575] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  103.428482][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.440653][ T9575] 8021q: adding VLAN 0 to HW filter on device team0
[  103.446037][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.448282][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.459055][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.461304][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.565498][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.599556][ T9575] veth0_vlan: entered promiscuous mode
[  103.607050][ T9575] veth1_vlan: entered promiscuous mode
[  103.628376][ T9575] veth0_macvtap: entered promiscuous mode
[  103.632629][ T9575] veth1_macvtap: entered promiscuous mode
[  103.643229][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.651479][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.656124][ T9575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.661375][ T9575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.666679][ T9575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.670113][ T9575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.670174][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'.
[  103.730905][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.740408][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.758585][ T6350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.762097][ T6350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.957927][ T9722] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1189'.
[  104.057468][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1193'.
[  104.118114][ T9737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1195'.
[  104.283013][ T9748] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  104.287070][ T9748] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  104.289543][ T9748] netlink: 'syz.1.1197': attribute type 3 has an invalid length.
[  105.058333][ T9753] sctp: [Deprecated]: syz.2.1200 (pid 9753) Use of int in max_burst socket option deprecated.
[  105.058333][ T9753] Use struct sctp_assoc_value instead
[  105.226677][ T9771] IPVS: Unknown mcast interface: vcan0
[  105.432066][ T9789] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  105.826133][ T9803] netlink: 'syz.2.1216': attribute type 3 has an invalid length.
[  105.907711][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.015815][ T9811] x_tables: duplicate underflow at hook 3
[  106.138343][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.141738][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.145030][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.148217][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  106.151117][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  106.340543][ T9821] chnl_net:caif_netlink_parms(): no params data found
[  106.429854][ T9821] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.432228][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.434652][ T9821] bridge_slave_0: entered allmulticast mode
[  106.437491][ T9821] bridge_slave_0: entered promiscuous mode
[  106.440761][ T9821] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.443180][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.446894][ T9821] bridge_slave_1: entered allmulticast mode
[  106.449916][ T9821] bridge_slave_1: entered promiscuous mode
[  106.474429][ T9821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.479191][ T9821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.535355][ T9821] team0: Port device team_slave_0 added
[  106.539388][ T9821] team0: Port device team_slave_1 added
[  106.556359][ T9821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.558659][ T9821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.567040][ T9821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  106.570775][ T9848] __nla_validate_parse: 10 callbacks suppressed
[  106.570815][ T9848] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1229'.
[  106.579925][ T9821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  106.582231][ T9821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.591253][ T9821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.623534][ T9821] hsr_slave_0: entered promiscuous mode
[  106.626014][ T9821] hsr_slave_1: entered promiscuous mode
[  106.628296][ T9821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.630879][ T9821] Cannot create hsr debugfs directory
[  106.668921][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  106.805490][ T9862] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  106.812222][ T9863] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  106.817028][ T9863] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  106.820058][ T9862] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1235'.
[  107.326014][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.376468][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.407965][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.515213][ T5859] bridge_slave_1: left allmulticast mode
[  107.518149][ T5859] bridge_slave_1: left promiscuous mode
[  107.521399][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.528881][ T5859] bridge_slave_0: left allmulticast mode
[  107.530876][ T5859] bridge_slave_0: left promiscuous mode
[  107.532893][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.735465][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.739927][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.743927][ T5859] bond0 (unregistering): Released all slaves
[  108.052533][ T5859] hsr_slave_0: left promiscuous mode
[  108.056935][ T5859] hsr_slave_1: left promiscuous mode
[  108.059849][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.071302][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.074709][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.077315][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.087164][ T5859] veth1_macvtap: left promiscuous mode
[  108.089097][ T5859] veth0_macvtap: left promiscuous mode
[  108.090942][ T5859] veth1_vlan: left promiscuous mode
[  108.092728][ T5859] veth0_vlan: left promiscuous mode
[  108.219973][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1250'.
[  108.235845][ T5841] Bluetooth: hci2: command tx timeout
[  108.270944][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1250'.
[  108.346918][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  108.368007][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  108.641342][ T9821] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  108.656601][ T9821] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  108.661024][ T9821] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  108.667352][ T9821] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  108.728797][ T9821] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.746721][ T9821] 8021q: adding VLAN 0 to HW filter on device team0
[  108.753004][ T9936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'.
[  108.764646][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.767004][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.775925][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.778217][ T4244] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.819690][ T9821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.824288][ T9821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.864831][ T9944] netlink: 'syz.1.1251': attribute type 3 has an invalid length.
[  108.870100][ T9943] netlink: 'syz.2.1253': attribute type 13 has an invalid length.
[  108.872832][ T9943] netlink: 'syz.2.1253': attribute type 17 has an invalid length.
[  108.882304][ T9943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.903546][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1251'.
[  108.906494][ T9944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'.
[  108.911071][ T9944] netlink: 'syz.1.1251': attribute type 3 has an invalid length.
[  108.914237][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1251'.
[  108.921259][ T9944] netlink: 'syz.1.1251': attribute type 3 has an invalid length.
[  108.930305][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1251'.
[  108.945287][ T9821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.966216][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.975755][ T9821] veth0_vlan: entered promiscuous mode
[  108.981882][ T9821] veth1_vlan: entered promiscuous mode
[  108.999343][ T9821] veth0_macvtap: entered promiscuous mode
[  109.004180][ T9821] veth1_macvtap: entered promiscuous mode
[  109.013613][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.021002][ T9821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.027161][ T9821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.030128][ T9821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.033031][ T9821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.034419][ T9948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.038637][ T9821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.105007][ T9948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.120398][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.129482][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.150266][ T3389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.152899][ T3389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.730949][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.750169][ T9957] !E: renamed from dummy0 (while UP)
[  110.461489][T10016] SET target dimension over the limit!
[  110.779263][T10032] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  111.162886][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.418019][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  111.421045][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  111.423909][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.426495][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.428964][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.466196][T10056] sctp: [Deprecated]: syz.1.1272 (pid 10056) Use of int in maxseg socket option.
[  111.466196][T10056] Use struct sctp_assoc_value instead
[  111.615356][T10067] __nla_validate_parse: 7 callbacks suppressed
[  111.615368][T10067] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1275'.
[  111.664418][T10053] chnl_net:caif_netlink_parms(): no params data found
[  111.757577][T10053] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.763765][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.766049][T10053] bridge_slave_0: entered allmulticast mode
[  111.769021][T10053] bridge_slave_0: entered promiscuous mode
[  111.775564][T10053] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.777898][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.780167][T10053] bridge_slave_1: entered allmulticast mode
[  111.782829][T10053] bridge_slave_1: entered promiscuous mode
[  111.810895][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.815693][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.842676][T10053] team0: Port device team_slave_0 added
[  111.846706][T10053] team0: Port device team_slave_1 added
[  111.888443][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.893405][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.905183][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.919682][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.923687][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.931675][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.002096][T10053] hsr_slave_0: entered promiscuous mode
[  112.010048][T10053] hsr_slave_1: entered promiscuous mode
[  112.012291][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.017662][T10053] Cannot create hsr debugfs directory
[  112.127979][T10114] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  112.131262][T10114] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1289'.
[  112.135919][T10114] netlink: 'syz.2.1289': attribute type 2 has an invalid length.
[  112.138487][T10114] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  112.266472][T10126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'.
[  112.270692][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'.
[  112.279040][T10126] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1295'.
[  112.308851][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'.
[  112.534950][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1299'.
[  112.537840][T10144] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1299'.
[  112.568406][T10146] netlink: 'syz.1.1300': attribute type 11 has an invalid length.
[  112.571135][T10146] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1300'.
[  112.815721][T10169] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1308'.
[  112.986950][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.069378][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.185012][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.310187][ T5859] bridge_slave_1: left allmulticast mode
[  113.312042][ T5859] bridge_slave_1: left promiscuous mode
[  113.323585][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.338595][ T5859] bridge_slave_0: left allmulticast mode
[  113.340430][ T5859] bridge_slave_0: left promiscuous mode
[  113.342304][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.513568][ T5841] Bluetooth: hci2: command tx timeout
[  113.552794][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.557680][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.561255][ T5859] bond0 (unregistering): Released all slaves
[  113.962610][ T5859] hsr_slave_0: left promiscuous mode
[  113.975754][ T5859] hsr_slave_1: left promiscuous mode
[  113.977815][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.980144][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.991347][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.993934][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.010830][ T5859] veth1_macvtap: left promiscuous mode
[  114.012594][ T5859] veth0_macvtap: left promiscuous mode
[  114.014837][ T5859] veth1_vlan: left promiscuous mode
[  114.017067][ T5859] veth0_vlan: left promiscuous mode
[  114.330682][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  114.351992][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  114.623009][T10053] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  114.633975][T10053] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  114.639977][T10053] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  114.649760][T10053] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  114.752680][T10053] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.762773][T10053] 8021q: adding VLAN 0 to HW filter on device team0
[  114.772405][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.774777][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.779512][T10289] x_tables: duplicate underflow at hook 3
[  114.781125][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.783693][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.957418][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.000134][T10053] veth0_vlan: entered promiscuous mode
[  115.017416][T10053] veth1_vlan: entered promiscuous mode
[  115.042786][T10053] veth0_macvtap: entered promiscuous mode
[  115.049519][T10053] veth1_macvtap: entered promiscuous mode
[  115.058626][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.068239][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.074272][T10053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.077322][T10053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.080308][T10053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.088029][T10053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.174108][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.177086][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.219378][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.222260][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.287032][T10315] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20002
[  115.736114][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.738771][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.399730][T10348] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-xor(2)
[  116.429194][T10353] 8021q: VLANs not supported on ipvlan1
[  117.174881][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.697018][T10366] netlink: 'syz.2.1357': attribute type 3 has an invalid length.
[  117.699917][T10366] netlink: 'syz.2.1357': attribute type 3 has an invalid length.
[  117.726463][T10368] __nla_validate_parse: 21 callbacks suppressed
[  117.726474][T10368] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1358'.
[  117.731736][T10368] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1358'.
[  117.810396][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.819674][ T5223] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.822546][ T5223] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.825890][ T5223] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.828665][ T5223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  117.863959][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.959839][T10391] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1365'.
[  117.972191][T10391] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1365'.
[  118.103085][T10376] chnl_net:caif_netlink_parms(): no params data found
[  118.197535][T10418] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1371'.
[  118.219818][T10376] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.222481][T10376] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.229248][T10376] bridge_slave_0: entered allmulticast mode
[  118.232134][T10376] bridge_slave_0: entered promiscuous mode
[  118.241049][T10376] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.244006][T10376] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.246500][T10376] bridge_slave_1: entered allmulticast mode
[  118.249197][T10376] bridge_slave_1: entered promiscuous mode
[  118.273172][T10376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.281256][T10376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.301487][T10422] netlink: 'syz.1.1373': attribute type 4 has an invalid length.
[  118.304124][T10376] team0: Port device team_slave_0 added
[  118.307755][T10422] netlink: 'syz.1.1373': attribute type 4 has an invalid length.
[  118.308431][T10376] team0: Port device team_slave_1 added
[  118.352354][T10376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.355120][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.363430][T10376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.375307][T10376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.377781][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.393521][T10376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.425639][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1375'.
[  118.447660][T10376] hsr_slave_0: entered promiscuous mode
[  118.450131][T10376] hsr_slave_1: entered promiscuous mode
[  118.453779][T10376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.458647][T10376] Cannot create hsr debugfs directory
[  118.712237][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'.
[  118.728930][T10456] 8021q: adding VLAN 0 to HW filter on device bond6
[  118.757476][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'.
[  118.760507][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  118.764349][T10464] netlink: 'syz.1.1387': attribute type 1 has an invalid length.
[  118.766831][T10464] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1387'.
[  118.969992][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.985480][T10486] dvmrp0: left allmulticast mode
[  118.987139][T10486] dvmrp8: left allmulticast mode
[  119.058202][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.151213][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.160017][T10502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.162821][T10502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.174380][T10502] bond0: (slave batadv0): Releasing backup interface
[  119.270146][ T5859] bridge_slave_1: left allmulticast mode
[  119.272004][ T5859] bridge_slave_1: left promiscuous mode
[  119.275439][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.281443][ T5859] bridge_slave_0: left allmulticast mode
[  119.283252][ T5859] bridge_slave_0: left promiscuous mode
[  119.287123][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.566576][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  119.571369][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  119.574324][T10524] netlink: 'syz.2.1400': attribute type 1 has an invalid length.
[  119.577784][ T5859] bond0 (unregistering): Released all slaves
[  119.628671][T10524] 8021q: adding VLAN 0 to HW filter on device bond7
[  119.923772][ T5223] Bluetooth: hci2: command tx timeout
[  120.013499][ T5859] hsr_slave_0: left promiscuous mode
[  120.016380][ T5859] hsr_slave_1: left promiscuous mode
[  120.018398][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.020719][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.033259][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.037317][ T5859] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.052943][ T5859] veth1_macvtap: left promiscuous mode
[  120.055561][ T5859] veth0_macvtap: left promiscuous mode
[  120.057566][ T5859] veth1_vlan: left promiscuous mode
[  120.059324][ T5859] veth0_vlan: left promiscuous mode
[  120.311509][ T5859] team0 (unregistering): Port device team_slave_1 removed
[  120.331774][ T5859] team0 (unregistering): Port device team_slave_0 removed
[  120.630353][T10376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  120.660418][T10376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  120.713095][T10376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  120.728302][T10376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  120.828589][T10376] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.849463][T10376] 8021q: adding VLAN 0 to HW filter on device team0
[  120.861728][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.864096][ T6350] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.886417][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.888721][ T6350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.899201][T10376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.902426][T10376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  121.006382][T10376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.053167][T10376] veth0_vlan: entered promiscuous mode
[  121.059082][T10376] veth1_vlan: entered promiscuous mode
[  121.091127][T10376] veth0_macvtap: entered promiscuous mode
[  121.108098][T10376] veth1_macvtap: entered promiscuous mode
[  121.119797][T10376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.126312][T10376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.132960][T10376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.137070][T10376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.139827][T10376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.142571][T10376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.248326][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.251505][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.279990][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.282505][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.436173][T10613] bridge12: entered allmulticast mode
[  121.707902][T10632] openvswitch: netlink: IP tunnel dst address not specified
[  121.774922][T10634] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  121.777143][T10634] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  121.983225][T10641] netlink: 'syz.2.1427': attribute type 1 has an invalid length.
[  122.055872][T10641] 8021q: adding VLAN 0 to HW filter on device bond8
[  122.650801][T10675] netlink: 'syz.2.1438': attribute type 10 has an invalid length.
[  122.654582][T10675] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.657226][T10675] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.659962][T10675] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.662523][T10675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.668453][T10675] team0: Port device geneve0 added
[  122.711971][T10678] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  122.949486][T10702] __nla_validate_parse: 15 callbacks suppressed
[  122.949496][T10702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1447'.
[  123.032692][T10706] SET target dimension over the limit!
[  123.955751][T10716] netlink: 'syz.2.1452': attribute type 13 has an invalid length.
[  123.959196][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1452'.
[  124.010935][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1454'.
[  124.021240][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1454'.
[  124.196436][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.803597][T10741] nbd: couldn't find device at index 536870912
[  124.944873][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.948595][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.951449][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.954869][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.957755][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  124.984929][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'.
[  124.993510][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'.
[  125.007696][T10749] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  125.158836][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.185909][T10763] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1467'.
[  125.201249][T10763] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1467'.
[  125.241744][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.304305][T10772] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1469'.
[  125.312076][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.321313][T10770] netlink: 'syz.2.1469': attribute type 29 has an invalid length.
[  125.327287][T10771] netlink: 'syz.2.1469': attribute type 29 has an invalid length.
[  125.330153][T10746] chnl_net:caif_netlink_parms(): no params data found
[  125.421237][T10746] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.433500][T10746] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.435854][T10746] bridge_slave_0: entered allmulticast mode
[  125.439925][T10746] bridge_slave_0: entered promiscuous mode
[  125.465953][T10746] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.468228][T10746] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.472168][T10746] bridge_slave_1: entered allmulticast mode
[  125.478082][T10746] bridge_slave_1: entered promiscuous mode
[  125.482491][T10794] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1475'.
[  125.527702][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.532961][ T5859] bridge_slave_1: left allmulticast mode
[  125.537183][ T5859] bridge_slave_1: left promiscuous mode
[  125.539205][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.543882][ T5859] bridge_slave_0: left allmulticast mode
[  125.545783][ T5859] bridge_slave_0: left promiscuous mode
[  125.547653][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.759832][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.765231][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.769356][ T5859] bond0 (unregistering): Released all slaves
[  125.780257][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.784549][T10799] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  125.830454][T10746] team0: Port device team_slave_0 added
[  125.852260][T10746] team0: Port device team_slave_1 added
[  125.898968][T10811] bpq0: entered allmulticast mode
[  125.915299][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.917675][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.931521][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.945104][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.949031][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.958417][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.979428][T10815] netlink: 'syz.2.1479': attribute type 1 has an invalid length.
[  126.013186][T10815] bond9: entered promiscuous mode
[  126.017146][T10815] 8021q: adding VLAN 0 to HW filter on device bond9
[  126.042804][T10815] 8021q: adding VLAN 0 to HW filter on device bond9
[  126.045449][T10815] bond9: (slave gre1): The slave device specified does not support setting the MAC address
[  126.048715][T10815] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  126.054606][T10815] bond9: (slave gre1): making interface the new active one
[  126.057600][T10815] gre1: entered promiscuous mode
[  126.060046][T10815] bond9: (slave gre1): Enslaving as an active interface with an up link
[  126.118319][T10746] hsr_slave_0: entered promiscuous mode
[  126.122593][T10746] hsr_slave_1: entered promiscuous mode
[  126.125783][T10746] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.128775][T10746] Cannot create hsr debugfs directory
[  126.133830][   T47] skbuff: skb_under_panic: text:ffffffff8a0596c7 len:-1823553568 put:-1823553644 head:ffff888120afd000 data:ffff88808d61092c tail:0x10c end:0x6c0 dev:bond9
[  126.145105][   T47] ------------[ cut here ]------------
[  126.147076][   T47] kernel BUG at net/core/skbuff.c:211!
[  126.149417][   T47] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  126.152874][   T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  126.157904][   T47] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.162127][   T47] Workqueue: mld mld_ifc_work
[  126.164204][   T47] RIP: 0010:skb_panic+0x157/0x160
[  126.166294][   T47] Code: c7 60 ae 92 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 3e 31 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90
[  126.174149][   T47] RSP: 0018:ffffc9000075f418 EFLAGS: 00010286
[  126.176609][   T47] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: e4e9f9cf036d9c00
[  126.179837][   T47] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  126.182970][   T47] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004
[  126.185915][   T47] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88810ee06a90
[  126.188441][   T47] R13: ffff888120afd000 R14: ffff88808d61092c R15: 000000000000010c
[  126.191119][   T47] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  126.194590][   T47] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.197184][   T47] CR2: 00007fc0edb74980 CR3: 000000002336a000 CR4: 00000000000006f0
[  126.200008][   T47] Call Trace:
[  126.201117][   T47]  <TASK>
[  126.202180][   T47]  ? ipgre_header+0x67/0x290
[  126.203693][   T47]  ? ipgre_header+0x67/0x290
[  126.205200][   T47]  skb_push+0xc3/0xe0
[  126.206492][   T47]  ipgre_header+0x67/0x290
[  126.207968][   T47]  ? __pfx_ipgre_header+0x10/0x10
[  126.209602][   T47]  neigh_connected_output+0x286/0x460
[  126.211341][   T47]  ip6_finish_output2+0x11fe/0x16a0
[  126.212997][   T47]  ? ip6_finish_output2+0x701/0x16a0
[  126.214679][   T47]  ? __pfx_ip6_finish_output2+0x10/0x10
[  126.216424][   T47]  ? ip6_mtu+0x7d/0x3f0
[  126.217793][   T47]  ? ip6_mtu+0x7d/0x3f0
[  126.219151][   T47]  ip6_finish_output+0x234/0x7d0
[  126.220745][   T47]  NF_HOOK+0x9e/0x380
[  126.222025][   T47]  ? NF_HOOK+0x101/0x380
[  126.223401][   T47]  ? __pfx_NF_HOOK+0x10/0x10
[  126.224945][   T47]  ? __pfx_dst_output+0x10/0x10
[  126.226483][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  126.228084][   T47]  ? icmp6_dst_alloc+0x3a5/0x420
[  126.229713][   T47]  mld_sendpack+0x800/0xd80
[  126.231183][   T47]  ? mld_sendpack+0x1de/0xd80
[  126.232694][   T47]  ? __pfx_mld_sendpack+0x10/0x10
[  126.234315][   T47]  mld_ifc_work+0x835/0xde0
[  126.235771][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.237436][   T47]  ? process_scheduled_works+0x9ef/0x17b0
[  126.239318][   T47]  process_scheduled_works+0xae1/0x17b0
[  126.241236][   T47]  ? __pfx_process_scheduled_works+0x10/0x10
[  126.243170][   T47]  worker_thread+0x8a0/0xda0
[  126.244681][   T47]  kthread+0x711/0x8a0
[  126.245993][   T47]  ? __pfx_worker_thread+0x10/0x10
[  126.247654][   T47]  ? __pfx_kthread+0x10/0x10
[  126.249136][   T47]  ? _raw_spin_unlock_irq+0x23/0x50
[  126.250837][   T47]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.252508][   T47]  ? __pfx_kthread+0x10/0x10
[  126.254044][   T47]  ret_from_fork+0x3fc/0x770
[  126.255570][   T47]  ? __pfx_ret_from_fork+0x10/0x10
[  126.257240][   T47]  ? __switch_to_asm+0x39/0x70
[  126.258777][   T47]  ? __switch_to_asm+0x33/0x70
[  126.260321][   T47]  ? __pfx_kthread+0x10/0x10
[  126.261844][   T47]  ret_from_fork_asm+0x1a/0x30
[  126.263443][   T47]  </TASK>
[  126.264498][   T47] Modules linked in:
[  126.266501][   T47] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  126.306923][   T47] RIP: 0010:skb_panic+0x157/0x160
[  126.308620][   T47] Code: c7 60 ae 92 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 3e 31 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90
[  126.319241][   T47] RSP: 0018:ffffc9000075f418 EFLAGS: 00010286
[  126.321224][   T47] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: e4e9f9cf036d9c00
[  126.326285][   T47] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  126.328791][   T47] RBP: 00000000000006c0 R08: 0000000000000003 R09: 0000000000000004
[  126.331269][   T47] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: ffff88810ee06a90
[  126.333976][   T47] R13: ffff888120afd000 R14: ffff88808d61092c R15: 000000000000010c
[  126.337047][   T47] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  126.339943][   T47] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  126.342106][   T47] CR2: 0000200000003078 CR3: 000000002336a000 CR4: 00000000000006f0
[  126.344816][   T47] Kernel panic - not syncing: Fatal exception
[  126.347430][   T47] Kernel Offset: disabled
[  126.348847][   T47] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:24:58  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4c210 RBX=ffff88804b03b1c0 RCX=ffff88803cc7b980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900031af700 RSP=ffffc900031af5a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4c1f9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2580fe CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=35ec5bdb8738e434 86fcb10ddf60b122
XMM02=785d56998aade760 331c9e1998b7d090 XMM03=103b3f369de8c35e 0db45714ad7457b8
XMM04=b9b7fb8226e86c11 e5668342c83ea5fa XMM05=38b800881636fae9 f79e60ffb89fe50f
XMM06=c9edecb9b7fb8226 e86c11e5668342c8 XMM07=3ea5fa103b3f369d e8c35e0db45714ad
XMM08=7457b8785d56998a ade760331c9e1998 XMM09=0000000000000000 00007fc0edc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000041 RBX=0000000000000041 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000075eb70
R8 =ffff888107530237 R9 =1ffff11020ea6046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98bf R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc0edb74980 CR3=000000002336a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
