last executing test programs:

1.508967788s ago: executing program 1 (id=989):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0}) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x130, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x100, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x80, 0x1507]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0xc, 0xc, 0x8, 0xa, 0x6, 0xd, 0x6, 0x10, 0xb, 0x9, 0x4, 0x0, 0x0, 0x1, 0x8, 0xf], 0x0, [0x8, 0x0, 0x4, 0x4000, 0x6, 0x8, 0x8, 0x9, 0xfff2, 0x0, 0xf001, 0x2, 0x4, 0x9, 0x5, 0x101], [0xfffd, 0xfffe, 0x7, 0x30, 0x6, 0x7, 0x4, 0xa579, 0x6, 0x10, 0xa7, 0x36, 0x7, 0x81, 0x3ff, 0x9]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x83}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x130}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'pim6reg\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', <r8=>0x0, 0x872e, 0x8, 0x9, 0xfff, {{0x10, 0x4, 0x0, 0x37, 0x40, 0x64, 0x0, 0xd7, 0x4, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x38, [@broadcast, @empty, @rand_addr=0x64010102, @loopback, @loopback]}, @noop, @lsrr={0x83, 0xb, 0x74, [@rand_addr=0x64010101, @private=0xa010101]}]}}}}}) (async, rerun: 64)
r9 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64)
setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r10=>0x0}) (rerun: 32)
sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) (async, rerun: 32)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a0000"], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r14=>0x0, 0x2f, 0xf, 0x8, 0x7, 0x12, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8, 0x80, 0xb52f, 0x4}})
r15 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r15, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c)
setsockopt(r15, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
ioctl$sock_TIOCINQ(r15, 0x541b, &(0x7f00000000c0)) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@dev, <r16=>0x0}, &(0x7f0000000380)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r17=>0x0, 0x4, 0x80, 0x10, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x20, 0x8000, 0x9, 0x1a}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', <r18=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1c8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
socket$nl_route(0x10, 0x3, 0x0)

1.319728846s ago: executing program 1 (id=994):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r3 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r3, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000023c0)=r3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800)
r8 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0)
recvmmsg$unix(r8, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x24}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f0000001a40)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400})
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r6, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a801400003218f19c00010014000200fc02000000000000000000000000000105001600320000001400010020010000000000000000000000000001"], 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)

1.231360537s ago: executing program 1 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006a000105fefdfffffddbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008000)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xc07, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008810)
r3 = socket(0x15, 0x5, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x3, 0xa29, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x64, 0x4, 0x0, 0x4, 0x0, @multicast1}}}})
r5 = accept4$rose(r3, &(0x7f00000000c0)=@full={0xb, @remote, @remote, 0x0, [@remote, @netrom, @null, @remote, @rose, @rose]}, &(0x7f0000000080)=0x40, 0x800)
ioctl$SIOCRSACCEPT(r5, 0x89e3)

1.228749465s ago: executing program 1 (id=997):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "342a4f49e872f79d", "4b8b4e0802ff03fbe3c7a6f875981e00", "85372e3c", "090000e6ff00"}, 0x28)
readv(r1, &(0x7f0000000700)=[{&(0x7f0000000300)=""/203, 0xcb}], 0x1)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7ffd, 0xe)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002000ffff2abd7000000000000200200003000000000000001400110076657468305f6d61637674617000000008000200ac1e000108001b"], 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0)

1.171145174s ago: executing program 0 (id=998):
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000240), &(0x7f0000000140)=r0}, 0x20)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r3=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xe, r3, 0xc}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)

590.888842ms ago: executing program 2 (id=1003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x50}}, 0x42)

590.288866ms ago: executing program 2 (id=1004):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x154, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @filter_kind_options=@f_bpf={{0xfffffe56}, {0x10c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xf4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xc0, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x89, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000880)=@newtaction={0xd0, 0x30, 0x9, 0x0, 0x0, {}, [{0xbc, 0x1, [@m_bpf={0xb8, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x400}, {}, {0x2, 0x0, 0x0, 0x4}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x31, 0x6, "10ea74bc06d6cbcdfa02e231db97294f91fb54798ccc5b7e0b11a937b6e133c4d204b74425ecf7841136966e5e"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x99f}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440000008854192c25c067fb1e548c3e469de090585923d8f557e88c9d089efeb2ca51fbdbc00706c56370f847d3807ffad2dab860365285c7f518c2c2616fde629e49e712608b28e311d65264e1af58557bcf71ab711e5ff201b36cdd93bc6bc19cf22d4b6fc1466b3bce5c2d8878f4d737c4c7ab12932f928d3e8a0757e38b9de1c025734f43ffb0531ea998d2ea1d6a8fa009b53d0bd2fb9af7c31ce7bc4194f64e9626fa773886c1839bea5db6c9d9aaa5a37a960d738313bf0d17a8b1e81e0a5474e797ab9e15f858240b740d078943de5f1eb3ae3863", @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f00000000000a0001007770616e3100000005002b00000000000600060003000000"], 0x44}}, 0x4008000) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x78, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40080)

529.773403ms ago: executing program 2 (id=1005):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x3, @mcast1, 0x9}}, 0x0, 0x0, 0x34, 0x0, "803c790e68512c1af8264e8185596013882dd3d57833cd55a0c861d90b56916174e4a1bf1b3790058676271dd1c7418caa9211ec7a6bc9aed03849050dcf39aa1f378d258a20714a54c7de3a11a9b506"}, 0xd8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0x31)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0)
preadv(r1, &(0x7f0000000040), 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00', @multicast})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
pipe(&(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12)
read$alg(r11, &(0x7f0000000b80)=""/237, 0xed)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000001020101000000000000000002000002240001801400"], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94)

460.870167ms ago: executing program 2 (id=1006):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c}, 0x94)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYRES8=<r2=>r0], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000240), &(0x7f0000000140)=r3}, 0x20)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r8=>0x0})
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xe, r8, 0xc}, 0x10)
r9 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000000300)={0x2, 0x10, [0xd, 0x3c, 0x8, 0x8], &(0x7f00000001c0)=[0x0, 0x0]})
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x238}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01000000000028000000600000"], 0xfdef)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000540)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x2, 0x38}, {@loopback, 0x4e24, 0x4, 0x93, 0x12d60, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x0)

456.894233ms ago: executing program 2 (id=1007):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x12, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="f8", 0x1}], 0x1}, 0x2c01}], 0x1, 0x4c851)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4)
setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000100)=r2, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x64000000)

370.162997ms ago: executing program 2 (id=1008):
syz_80211_inject_frame(0x0, 0x0, 0xb5)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x205, 0x0, 0x25dfdbf9, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5c9d}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xffffff45}]}, 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$pppoe(0x18, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb24}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000801}, 0x440400c0) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x6c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb24}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000801}, 0x440400c0)
connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async)
connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14) (async)
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x20000000)
r11 = socket$packet(0x11, 0x3, 0x300)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000000), &(0x7f00000001c0)='%pK    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r11, <r14=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r14, 0x4)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

310.440867ms ago: executing program 1 (id=1009):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000105c1e0400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x20}}, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64)
r0 = socket(0x1, 0x803, 0x0) (rerun: 64)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200020000000800010003000008"], 0x58}}, 0x0)

308.423762ms ago: executing program 0 (id=1010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}]}, 0x50}}, 0xfe)

307.776676ms ago: executing program 0 (id=1011):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
socket(0x1, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000380), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e00000000"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESOCT=r5, @ANYRESHEX=r6], 0x104}, 0x1, 0x0, 0x0, 0x40026}, 0x240040c4)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtclass={0x848, 0x28, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffe0, 0x3}, {0xa, 0xc}, {0x7, 0x1}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_htb={{0x8}, {0x810, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x4, 0x8001, 0x4, 0xf0, 0x9, 0x5, 0x54, 0x7, 0x8, 0x7, 0x6, 0x0, 0x0, 0x6, 0x2, 0xa20, 0x6, 0xff, 0x1000, 0x9, 0x8, 0x6, 0x4, 0x2, 0x92, 0x9, 0x6, 0x1, 0xffffffff, 0x80000001, 0x9, 0x0, 0x5, 0x9, 0x1, 0x5, 0xf9ea, 0x2, 0xe, 0xa, 0x1, 0x1, 0x1, 0x10000, 0x200000, 0x7, 0x3, 0x8, 0x9, 0xd9e, 0x9, 0xb11, 0x8, 0xa, 0x20003, 0xcfeb, 0x7, 0x1, 0x2, 0xc, 0x8, 0x80000000, 0x2, 0x3ff, 0x5, 0x0, 0x4, 0xf5d5, 0x401, 0x4, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x8, 0x5, 0x6, 0x1, 0xff, 0xf, 0xc, 0x7fff, 0x7, 0x6, 0x7, 0x10000, 0x9, 0x2, 0x7, 0x2, 0x800, 0x400009, 0x2, 0x7fff, 0x10000, 0xb679, 0x3, 0x1000, 0x3, 0x6, 0xe, 0x1000048, 0x101, 0x1ff, 0xd4, 0x4, 0x1, 0x1, 0xc, 0x81, 0xd1b, 0x81, 0x2, 0x4, 0x8, 0x8, 0xff, 0x16300000, 0x10000, 0x7, 0x7, 0x7, 0x4319, 0xfffffff9, 0x101, 0x7, 0x5, 0x27, 0x10000, 0x81, 0x5, 0x80, 0x6, 0x7, 0x6d, 0xa, 0x2b3d, 0xb35a, 0x1, 0x2, 0x8, 0x7f, 0x1, 0x6, 0x5, 0x5, 0x7, 0x3, 0x81d, 0x3, 0x301f, 0xffffb50d, 0x7de, 0x7b, 0x0, 0x5, 0x7, 0x9, 0x5, 0x2, 0x7, 0xe78, 0x9, 0x6, 0x7ff, 0x2f1, 0x10, 0x50, 0x81, 0x7, 0x7ff, 0x400, 0x0, 0x8, 0xfffffffb, 0xffff7fff, 0xd4, 0x2, 0x10000, 0x5, 0x5, 0x4edb, 0x6, 0x7fffffff, 0x8000, 0xc7d, 0x3, 0xe, 0x1a27, 0x0, 0x4, 0x4, 0x340, 0xde0, 0x5, 0x3, 0x290, 0x7, 0x3, 0x0, 0x5, 0x7, 0xc, 0xfffffff3, 0x100, 0x3, 0xc81, 0x7, 0x5, 0xf4, 0x1, 0x6, 0x5, 0x9, 0x1, 0x5d1b, 0x6, 0x38, 0x100, 0x2, 0xfe, 0x7, 0x17fffd, 0x7, 0x3e9, 0x7, 0xfffff000, 0x9, 0x1, 0x9, 0x8, 0x8, 0xc7fa, 0x9, 0x2c6, 0x9, 0x2, 0x4, 0x3, 0x3, 0x5, 0x6, 0x8, 0x0, 0x3, 0x8001, 0x2, 0x9, 0x8, 0x7fffffff, 0x1, 0x3, 0xfff]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0xffff, 0x5, 0x5, 0x3, 0x7ff, 0xffffb08c, 0xa, 0x1, 0x4, 0x1, 0x4, 0xffff, 0x52492e92, 0x80000001, 0x6, 0xb129, 0x1bb6, 0xed83, 0xfe9, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x7975, 0x5, 0x0, 0xffffff00, 0x2, 0x6, 0x9b, 0x351d, 0x4, 0x6, 0x2, 0x3, 0x3, 0xb, 0x6, 0x8000, 0x7, 0x0, 0x1, 0x189, 0x8, 0x7, 0x8, 0x8, 0x5, 0x4, 0x8bbf, 0x2, 0x1, 0xddd, 0xfffff000, 0x100, 0xd, 0xff, 0xfffff3eb, 0x2, 0xd, 0x4, 0x4, 0x6, 0x81, 0x0, 0x3b7b, 0x7, 0x9, 0x5, 0x7, 0x2, 0x9, 0x3, 0x4, 0x9dca, 0x5, 0x0, 0x8000, 0x9, 0x97, 0xa, 0x2, 0x81, 0x7, 0x4, 0x1, 0xc, 0x4, 0xf, 0x1, 0x7fffffff, 0x1, 0x3, 0x7f, 0x8, 0x5, 0xd1e, 0x4, 0x9, 0x5, 0x7fff, 0x3, 0xfffffffa, 0x67, 0x6, 0x7f, 0xa740, 0x0, 0x4, 0x401, 0x6, 0x400, 0x1, 0x0, 0xda8c, 0x9, 0x2, 0x4, 0xfffffffb, 0x0, 0x200, 0x9, 0x10001, 0x1, 0xe5, 0x0, 0x27478000, 0xc, 0xbd, 0xa, 0x2, 0x80, 0x4, 0x7fa2001, 0x5, 0x7, 0x0, 0x6, 0x401, 0x9, 0x4, 0xfffffffa, 0x9, 0x28, 0x7, 0x10, 0x1000, 0x81, 0xffff, 0x4, 0x10000, 0x5, 0x3e, 0x1, 0x9, 0x3, 0x0, 0x7, 0x3, 0x4, 0x8, 0x4, 0x5, 0x5, 0x8, 0xca6, 0x59, 0x1b, 0x5, 0x2, 0x8, 0x100, 0x5, 0x2, 0x802, 0x3, 0x60, 0x7f, 0x13, 0xb0000, 0x3, 0x3, 0x80000000, 0x81, 0x5, 0x9, 0x0, 0x995e, 0xdfa1, 0xb, 0xfffffffb, 0x8, 0x5, 0x1000, 0x7ff, 0x9b, 0xffffffff, 0x9, 0x401, 0x1, 0xfffff97d, 0xfffffeff, 0x0, 0x6, 0x7, 0x1, 0x100, 0x7, 0x40, 0x312, 0x1, 0x6, 0x2, 0xe69, 0x10000, 0x5, 0x9, 0x80000001, 0x80, 0xf010, 0x3, 0xf, 0xe3, 0x7d69fe96, 0x0, 0x400, 0x9, 0x3, 0x3f, 0x6, 0x9, 0x7, 0x40, 0x5, 0x7f, 0x6, 0x30e7fa8f, 0x6, 0x82, 0xfa8, 0x9, 0x7, 0x5, 0x1, 0x4, 0x6, 0x3800, 0x6, 0x7, 0xf6df, 0xe, 0x800005, 0x0, 0xd2, 0x4]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x200090a1}, 0x24048000)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='mem_connect\x00', r10, 0x0, 0x401}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

232.020684ms ago: executing program 1 (id=1012):
socket(0x2b, 0x80801, 0x1)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create1(0x80000)
nanosleep(&(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180))
unshare(0x6a040000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f0000000040), &(0x7f0000000940)=r4}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000380001070000ef067c6c580e08"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x110}}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
ppoll(&(0x7f0000000280)=[{r9, 0x110}, {r4}, {r4}], 0x3, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000440)={[0x7]}, 0x8)
sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r5], 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x6)
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r13, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r13, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

120.046308ms ago: executing program 0 (id=1013):
r0 = socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18)
getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r4=>0x0})
r5 = gettid()
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000240)=0x1, 0x4)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r4, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
listen(0xffffffffffffffff, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK    \x00'}, 0x20)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r12, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, <r13=>0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r13}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r14, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x35cc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x9}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x56c7, 0x0, 0x0, 0x40f00, 0x18, '\x00', r4, @xdp, r6, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0x1, r9, r10, r11, r14], &(0x7f0000000ac0)=[{0x3, 0x4, 0xf, 0xc}], 0x10, 0x10}, 0x94)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000)

741.43µs ago: executing program 0 (id=1014):
r0 = socket$inet(0x2, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x69}]}]}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000fb03000012c10000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0) (async)
socket(0x1, 0x803, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff7b)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) (async)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) (async)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xfffffffffffffedc, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
socket(0x2, 0x80805, 0x0)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000000c0)={r6, 0x9, 0x0, 0x100000001})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0x6, 0x1, 0x7, 0xffffffffffffffc0, 0xfffffffffffffffd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @alu={0x4, 0x1, 0x5, 0x3, 0x5, 0xfffffffffffffffe, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xbc7, 0x44, &(0x7f0000000240)=""/68, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x3, 0xf, 0xb}], 0x10, 0x7}, 0x94)

0s ago: executing program 0 (id=1015):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x2, 0x80805, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x1, 0x1, 0x4, 0x4}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 64)
write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async, rerun: 64)
shutdown(r1, 0x0) (rerun: 64)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async, rerun: 64)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 64)
socket(0x11, 0x800000003, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0xc39}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000200)={&(0x7f0000000ac0)=""/89, 0x59}) (async, rerun: 32)
sendmmsg$inet(r8, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30514' (ED25519) to the list of known hosts.
syzkaller login: [   47.894381][ T5834] cgroup: Unknown subsys name 'net'
[   48.034834][ T5834] cgroup: Unknown subsys name 'cpuset'
[   48.039823][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.854161][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.804469][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.807871][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.811023][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.814312][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.817626][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.906447][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.909487][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.912596][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.915784][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.919069][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.932191][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.935295][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.937435][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   53.940567][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.961770][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.966749][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.998905][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.001319][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.004070][ T5842] bridge_slave_0: entered allmulticast mode
[   54.007072][ T5842] bridge_slave_0: entered promiscuous mode
[   54.010980][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.014166][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.016723][ T5842] bridge_slave_1: entered allmulticast mode
[   54.019349][ T5842] bridge_slave_1: entered promiscuous mode
[   54.038051][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.048068][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.069063][ T5842] team0: Port device team_slave_0 added
[   54.076795][ T5842] team0: Port device team_slave_1 added
[   54.093543][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.095764][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.103855][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.113898][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.116049][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.124369][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.151584][ T5842] hsr_slave_0: entered promiscuous mode
[   54.154202][ T5842] hsr_slave_1: entered promiscuous mode
[   54.260645][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   54.264658][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   54.333253][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.336117][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.338756][ T5849] bridge_slave_0: entered allmulticast mode
[   54.341027][ T5849] bridge_slave_0: entered promiscuous mode
[   54.351450][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.354961][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.357779][ T5851] bridge_slave_0: entered allmulticast mode
[   54.360806][ T5851] bridge_slave_0: entered promiscuous mode
[   54.368488][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.372401][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.375259][ T5849] bridge_slave_1: entered allmulticast mode
[   54.378342][ T5849] bridge_slave_1: entered promiscuous mode
[   54.381406][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.385106][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.388011][ T5851] bridge_slave_1: entered allmulticast mode
[   54.391066][ T5851] bridge_slave_1: entered promiscuous mode
[   54.403990][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.431129][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.435128][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.441422][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.445632][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.453015][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.457799][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.461087][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.500608][ T5851] team0: Port device team_slave_0 added
[   54.504263][ T5849] team0: Port device team_slave_0 added
[   54.507501][ T5851] team0: Port device team_slave_1 added
[   54.510904][ T5849] team0: Port device team_slave_1 added
[   54.533167][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.535753][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.545637][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.556245][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.558551][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.568005][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.574966][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.577796][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.589133][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.597438][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.600205][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.611022][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.629555][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.632510][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.635468][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.638374][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.655146][ T5849] hsr_slave_0: entered promiscuous mode
[   54.657983][ T5849] hsr_slave_1: entered promiscuous mode
[   54.660609][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   54.663293][ T5849] Cannot create hsr debugfs directory
[   54.691244][ T5851] hsr_slave_0: entered promiscuous mode
[   54.694614][ T5851] hsr_slave_1: entered promiscuous mode
[   54.696758][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   54.698802][ T5851] Cannot create hsr debugfs directory
[   54.804528][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.811778][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.823243][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.829706][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.857677][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.869876][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.873306][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.884353][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.894558][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   54.898221][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.916323][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.918880][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.921891][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.927728][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.937083][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.939879][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.016700][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.030418][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.036830][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   55.041281][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.043840][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.054819][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.057065][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.063780][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   55.076762][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.079054][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.085853][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.088059][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.095366][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.163559][ T5842] veth0_vlan: entered promiscuous mode
[   55.168191][ T5842] veth1_vlan: entered promiscuous mode
[   55.187767][ T5842] veth0_macvtap: entered promiscuous mode
[   55.191416][ T5842] veth1_macvtap: entered promiscuous mode
[   55.206313][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.214287][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.221693][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.233038][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.236000][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.239040][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.241808][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.251862][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.270705][ T5851] veth0_vlan: entered promiscuous mode
[   55.283858][ T5851] veth1_vlan: entered promiscuous mode
[   55.296899][ T5849] veth0_vlan: entered promiscuous mode
[   55.308684][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.310322][ T5849] veth1_vlan: entered promiscuous mode
[   55.318452][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.337742][ T5851] veth0_macvtap: entered promiscuous mode
[   55.341420][ T5851] veth1_macvtap: entered promiscuous mode
[   55.341459][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.348480][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.350963][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.357750][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.361280][ T5849] veth0_macvtap: entered promiscuous mode
[   55.368800][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.376574][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.382053][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.385024][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.389749][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.394962][ T5849] veth1_macvtap: entered promiscuous mode
[   55.416575][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.421080][ T5908] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.434023][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.438122][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.457253][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.462462][ T5910] netlink: 'syz.1.4': attribute type 1 has an invalid length.
[   55.466621][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.470435][ T4966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.470857][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.476047][ T4966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.493222][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'.
[   55.503719][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.506114][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.518097][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.520642][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.540964][ T4966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.549561][ T4966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.559352][ T5911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   55.619126][ T5918] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   55.624542][ T5919] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   55.657243][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.660280][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.685981][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.697963][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.702629][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.776204][ T5859] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.779334][ T5859] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.783795][ T5859] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.787202][ T5859] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.863239][ T5852] Bluetooth: hci0: command tx timeout
[   55.872953][ T5935] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.964118][ T5939] syzkaller0: entered promiscuous mode
[   55.967032][ T5939] syzkaller0: entered allmulticast mode
[   56.011551][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'.
[   56.029996][ T5852] Bluetooth: hci2: command tx timeout
[   56.032389][ T5852] Bluetooth: hci1: command tx timeout
[   56.386851][ T5973] Bluetooth: MGMT ver 1.23
[   56.389504][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'.
[   56.515380][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   56.518626][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   56.521628][ T5982] netlink: 'syz.1.13': attribute type 5 has an invalid length.
[   56.529560][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.535758][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.538855][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.546257][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.637960][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   56.696641][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.699765][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.733854][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.738554][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.798867][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   56.809869][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.817205][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   56.823600][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.837378][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   56.847346][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.851485][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   56.855803][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.029582][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.032587][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22'.
[   57.035349][ T6008] netlink: 'syz.1.22': attribute type 19 has an invalid length.
[   57.087335][ T6016] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET)
[   57.161124][ T6025] lo speed is unknown, defaulting to 1000
[   57.164203][ T6025] lo speed is unknown, defaulting to 1000
[   57.169258][ T6025] lo speed is unknown, defaulting to 1000
[   57.172335][ T6025] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.177148][ T6025] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   57.185944][ T6025] lo speed is unknown, defaulting to 1000
[   57.189043][ T6025] lo speed is unknown, defaulting to 1000
[   57.191381][ T6025] lo speed is unknown, defaulting to 1000
[   57.202970][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.237002][ T6028] syzkaller1: entered promiscuous mode
[   57.238786][ T6028] syzkaller1: entered allmulticast mode
[   57.942109][ T5852] Bluetooth: hci0: command tx timeout
[   58.102331][ T5852] Bluetooth: hci1: command tx timeout
[   58.104066][ T5856] Bluetooth: hci2: command tx timeout
[   58.306608][ T6035] Zero length message leads to an empty skb
[   58.375435][ T6037] netlink: 36 bytes leftover after parsing attributes in process `syz.0.30'.
[   58.422068][ T5245] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   58.512538][ T6051] tipc: Started in network mode
[   58.514159][ T6051] tipc: Node identity 6e18c94334fc, cluster identity 4711
[   58.516492][ T6051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.518972][ T6051] syzkaller0: entered promiscuous mode
[   58.521130][ T6051] syzkaller0: entered allmulticast mode
[   58.527224][ T6051] tipc: Resetting bearer <eth:syzkaller0>
[   58.530230][ T6050] tipc: Resetting bearer <eth:syzkaller0>
[   58.534813][ T6050] tipc: Disabling bearer <eth:syzkaller0>
[   58.979328][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.982669][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.016947][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.021447][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   59.074626][ T5312] lo speed is unknown, defaulting to 1000
[   59.076954][ T5312] syz1: Port: 1 Link DOWN
[   59.077222][ T5859] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.081662][ T5859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.086151][ T5859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.089653][ T5859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   59.384906][ T6088] netlink: 'syz.2.48': attribute type 30 has an invalid length.
[   59.391516][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.399322][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.405763][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.413179][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.484639][ T1919] cfg80211: failed to load regulatory.db
[   59.534866][ T6101] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   59.575332][ T6110] IPv6: sit1: Disabled Multicast RS
[   59.600989][ T6116] netlink: 'syz.1.58': attribute type 4 has an invalid length.
[   59.657690][ T6126] bridge0: port 3(erspan0) entered blocking state
[   59.660600][ T6126] bridge0: port 3(erspan0) entered disabled state
[   59.663579][ T6126] erspan0: entered allmulticast mode
[   59.666241][ T6126] erspan0: left allmulticast mode
[   59.837604][ T6136] lo speed is unknown, defaulting to 1000
[   60.022170][ T5245] Bluetooth: hci0: command tx timeout
[   60.136821][ T6153] syzkaller1: entered promiscuous mode
[   60.139004][ T6153] syzkaller1: entered allmulticast mode
[   60.145897][ T6152] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   60.182264][ T5856] Bluetooth: hci1: command tx timeout
[   60.183084][ T5245] Bluetooth: hci2: command 0x040f tx timeout
[   60.347822][ T6167] netlink: 'syz.2.73': attribute type 3 has an invalid length.
[   60.351710][ T6169] netlink: 'syz.2.73': attribute type 3 has an invalid length.
[   60.390682][ T6174] Set syz0 is full, maxelem 0 reached
[   60.521829][ T6184] __nla_validate_parse: 31 callbacks suppressed
[   60.521849][ T6184] netlink: 47 bytes leftover after parsing attributes in process `syz.2.78'.
[   60.531585][ T6187] validate_nla: 1 callbacks suppressed
[   60.531619][ T6187] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   60.542105][ T6186] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   60.558670][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.77'.
[   60.558672][ T6186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.77'.
[   60.642094][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.82'.
[   60.645685][ T6203] 8021q: VLANs not supported on ipvlan1
[   60.654980][ T6203] macsec1: entered promiscuous mode
[   60.657209][ T6203] macsec1: entered allmulticast mode
[   60.713960][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'.
[   60.723916][ T6211] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   60.757238][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'.
[   60.811420][ T6219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.87'.
[   60.817250][ T6224] batadv_slave_1: entered promiscuous mode
[   60.855545][ T6229] netlink: 1 bytes leftover after parsing attributes in process `syz.2.89'.
[   60.889503][ T6232] netlink: 'syz.0.90': attribute type 6 has an invalid length.
[   60.899721][ T6232] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.90'.
[   60.905156][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   60.938448][ T6237] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   61.009201][ T6252] ieee802154 phy0 wpan0: encryption failed: -22
[   61.095881][ T6258] netlink: 'syz.2.99': attribute type 58 has an invalid length.
[   62.011426][ T6299] netlink: 'syz.2.106': attribute type 83 has an invalid length.
[   62.102513][ T5245] Bluetooth: hci0: command tx timeout
[   62.262397][ T5245] Bluetooth: hci1: command tx timeout
[   62.272263][ T5245] Bluetooth: hci2: command 0x040f tx timeout
[   62.857579][ T6323] lo speed is unknown, defaulting to 1000
[   62.917883][ T6338] openvswitch: netlink: VXLAN extension 18 out of range max 1
[   62.948748][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.955762][ T6339] bond0: (slave rose0): Enslaving as an active interface with an up link
[   62.963934][ T6342] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   63.084091][   T33] audit: type=1800 audit(1756097012.250:2): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.120" name="blkio.bfq.time_recursive" dev="tmpfs" ino=208 res=0 errno=0
[   63.100877][   T33] audit: type=1800 audit(1756097012.260:3): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.120" name="blkio.bfq.time_recursive" dev="tmpfs" ino=208 res=0 errno=0
[   63.360687][ T6394] team0: Port device team_slave_0 removed
[   63.414569][ T6397] lo speed is unknown, defaulting to 1000
[   63.548505][ T6397] netlink: 'syz.0.128': attribute type 14 has an invalid length.
[   63.804914][ T6409] pim6reg: entered allmulticast mode
[   63.808267][ T6408] pim6reg: left allmulticast mode
[   63.961790][ T6415] IPVS: Scheduler module ip_vs_sip not found
[   63.976893][ T6419] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   63.990995][ T6419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.996078][ T6419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.000316][ T6419] bond0 (unregistering): Released all slaves
[   64.342196][ T5245] Bluetooth: hci2: command 0x040f tx timeout
[   65.184078][ T6477] bridge_slave_1: left allmulticast mode
[   65.186522][ T6477] bridge_slave_1: left promiscuous mode
[   65.188998][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.195820][ T6477] bridge_slave_0: left allmulticast mode
[   65.197837][ T6477] bridge_slave_0: left promiscuous mode
[   65.199834][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.267048][ T6488] netlink: 'syz.2.153': attribute type 1 has an invalid length.
[   65.321443][ T6488] hsr_slave_0: left promiscuous mode
[   65.325955][ T6488] hsr_slave_1: left promiscuous mode
[   65.374337][ T6498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.428553][ T6510] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[   65.434379][ T6510] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[   65.456529][ T6503] syzkaller0: entered promiscuous mode
[   65.458901][ T6503] syzkaller0: entered allmulticast mode
[   65.577333][ T6516] tipc: Started in network mode
[   65.579664][ T6516] tipc: Node identity aa026b9138c5, cluster identity 4711
[   65.582996][ T6516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.596382][ T6516] tipc: Disabling bearer <eth:syzkaller0>
[   65.719408][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.723820][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.727614][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.732509][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.754382][ T6527] __nla_validate_parse: 26 callbacks suppressed
[   65.754396][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'.
[   65.760504][ T6527] bridge_slave_1: left allmulticast mode
[   65.763831][ T6527] bridge_slave_1: left promiscuous mode
[   65.765794][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.769411][ T6527] bridge_slave_0: left allmulticast mode
[   65.771509][ T6527] bridge_slave_0: left promiscuous mode
[   65.774611][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.987658][ T6531] ip6erspan0: entered allmulticast mode
[   66.018820][ T6541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.164'.
[   66.080606][ T6545] netlink: 92 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.086414][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.091132][ T6545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.165'.
[   66.246316][ T6559] netlink: 32 bytes leftover after parsing attributes in process `syz.0.169'.
[   66.277003][ T6564] vlan0: entered promiscuous mode
[   66.305411][ T6561] sit0: Master is either lo or non-ether device
[   66.393884][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   66.397415][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   66.407404][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   66.447959][ T6579] netlink: 'syz.1.177': attribute type 2 has an invalid length.
[   66.455294][ T6579] k*]: entered promiscuous mode
[   66.483529][ T6579] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.490193][ T6579] 8021q: adding VLAN 0 to HW filter on device team0
[   66.498309][ T6579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.611563][ T6579] Illegal XDP return value 16128 on prog  (id 90) dev syz_tun, expect packet loss!
[   66.679429][ T6593] tipc: Started in network mode
[   66.681457][ T6593] tipc: Node identity 02c212a51fa2, cluster identity 4711
[   66.685791][ T6593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.689148][ T6594] syzkaller0: entered promiscuous mode
[   66.691351][ T6594] syzkaller0: entered allmulticast mode
[   66.705402][ T6594] tipc: Resetting bearer <eth:syzkaller0>
[   66.712522][ T6594] tipc: Disabling bearer <eth:syzkaller0>
[   67.191689][ T6605] netlink: 32 bytes leftover after parsing attributes in process `syz.2.182'.
[   67.382230][ T5245] Bluetooth: hci2: command 0x040f tx timeout
[   67.477241][ T6629] netlink: 'syz.2.188': attribute type 13 has an invalid length.
[   67.480325][ T6629] netlink: 'syz.2.188': attribute type 17 has an invalid length.
[   67.513232][ T6632] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   67.528416][ T6629] 8021q: adding VLAN 0 to HW filter on device team0
[   67.537542][ T6629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.544328][ T1919] lo speed is unknown, defaulting to 1000
[   67.547820][ T1919] syz1: Port: 1 Link ACTIVE
[   67.558067][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.568020][ T6631] bond1: (slave ip6gretap1): making interface the new active one
[   67.571207][ T6631] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   67.576774][ T6621] lo speed is unknown, defaulting to 1000
[   67.583346][ T6631] veth5: entered promiscuous mode
[   67.586834][ T6631] bond1: (slave veth5): Enslaving as an active interface with a down link
[   67.589718][ T6632] erspan0: entered allmulticast mode
[   67.593741][ T6632] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   67.755068][ T6649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.769561][ T6649] syzkaller0: entered promiscuous mode
[   67.771285][ T6649] syzkaller0: entered allmulticast mode
[   67.798208][ T6657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.807061][ T6649] tipc: Resetting bearer <eth:syzkaller0>
[   67.813105][ T6647] tipc: Resetting bearer <eth:syzkaller0>
[   67.820688][ T6647] tipc: Disabling bearer <eth:syzkaller0>
[   67.872491][ T6657] syzkaller0: entered promiscuous mode
[   67.902235][ T6657] syzkaller0: entered allmulticast mode
[   67.910297][ T6657] tipc: Resetting bearer <eth:syzkaller0>
[   67.913906][ T6656] tipc: Resetting bearer <eth:syzkaller0>
[   67.916579][ T6656] tipc: Disabling bearer <eth:syzkaller0>
[   68.213050][ T6679] netlink: 'syz.0.202': attribute type 9 has an invalid length.
[   68.619254][ T6688] netlink: 'syz.2.206': attribute type 13 has an invalid length.
[   68.641805][ T6688] netlink: 'syz.2.206': attribute type 17 has an invalid length.
[   68.655266][ T6688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.701372][ T6688] lo speed is unknown, defaulting to 1000
[   68.792166][ T6710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   68.812922][   T24] IPVS: starting estimator thread 0...
[   68.847329][ T6731] openvswitch: netlink: Duplicate or invalid key (type 0).
[   68.850496][ T6731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.902331][ T6728] IPVS: using max 66 ests per chain, 158400 per kthread
[   68.979131][ T6739] netlink: 'syz.1.213': attribute type 13 has an invalid length.
[   68.981883][ T6739] netlink: 'syz.1.213': attribute type 17 has an invalid length.
[   69.018471][ T6739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.039312][ T6739] lo speed is unknown, defaulting to 1000
[   69.543113][ T6752] team0: Device gtp0 is of different type
[   69.687501][ T6762] syzkaller0: entered promiscuous mode
[   69.689307][ T6762] syzkaller0: entered allmulticast mode
[   69.693299][ T6762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   69.696547][ T6762] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[   70.441101][ T6788] delete_channel: no stack
[   70.454473][ T6791] netlink: 'syz.2.226': attribute type 1 has an invalid length.
[   70.468297][ T6791] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.488238][ T6791] bond0: (slave gretap1): making interface the new active one
[   70.495930][ T6791] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   70.557432][ T6796] ip6tnl1: entered promiscuous mode
[   70.559259][ T6796] ip6tnl1: entered allmulticast mode
[   70.561405][ T6796] team0: Device ip6tnl1 is of different type
[   70.757775][ T6804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.766166][ T6804] __nla_validate_parse: 7 callbacks suppressed
[   70.766180][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'.
[   70.779919][ T6804] siw: device registration error -23
[   70.785824][ T6808] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   71.043344][ T6828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.047167][ T6829] syzkaller0: entered promiscuous mode
[   71.049149][ T6829] syzkaller0: entered allmulticast mode
[   71.058682][ T6829] tipc: Resetting bearer <eth:syzkaller0>
[   71.063588][ T6829] tipc: Disabling bearer <eth:syzkaller0>
[   71.099629][ T6830] netlink: 64 bytes leftover after parsing attributes in process `syz.0.236'.
[   71.143781][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.146164][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.230903][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'.
[   71.350684][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.355051][ T6841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.358568][ T6845] IPVS: length: 181 != 24
[   71.360356][ T6846] IPVS: length: 181 != 24
[   71.362624][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.366425][ T6841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.241'.
[   71.468502][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[   71.510848][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.514742][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'.
[   71.560033][ T6867] validate_nla: 2 callbacks suppressed
[   71.560045][ T6867] netlink: 'syz.2.247': attribute type 3 has an invalid length.
[   71.563832][ T6866] macvtap0: mtu less than device minimum
[   71.603738][ T6870] sctp: [Deprecated]: syz.1.249 (pid 6870) Use of int in max_burst socket option deprecated.
[   71.603738][ T6870] Use struct sctp_assoc_value instead
[   71.645789][ T6873] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   71.792159][   T24] tipc: Node number set to 1524943171
[   71.843631][ T6890] netlink: zone id is out of range
[   71.847195][ T6890] netlink: zone id is out of range
[   71.849366][ T6890] netlink: zone id is out of range
[   71.853831][ T6890] netlink: zone id is out of range
[   71.855942][ T6890] netlink: zone id is out of range
[   71.857928][ T6890] netlink: zone id is out of range
[   71.860049][ T6890] netlink: zone id is out of range
[   71.863519][ T6890] netlink: zone id is out of range
[   71.865594][ T6890] netlink: zone id is out of range
[   72.445739][ T6906] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   72.720155][ T6908] syzkaller0: entered promiscuous mode
[   72.723638][ T6908] syzkaller0: entered allmulticast mode
[   72.801485][ T6897] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   72.885139][ T6911] veth3: entered promiscuous mode
[   72.996893][ T6916] syzkaller0: entered promiscuous mode
[   72.999262][ T6916] syzkaller0: entered allmulticast mode
[   73.012882][ T6914] veth7: entered promiscuous mode
[   73.057867][ T6917] bond1: (slave erspan0): Releasing active interface
[   73.060087][ T6917] ip6gretap1: entered promiscuous mode
[   73.069862][ T6917] bond0: (slave bond_slave_0): Releasing backup interface
[   73.077378][ T6917] bond0: (slave bond_slave_1): Releasing backup interface
[   73.082917][ T6917] team0: Port device team_slave_0 removed
[   73.087048][ T6917] team0: Port device team_slave_1 removed
[   73.089860][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.094839][ T6917] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.100927][ T6917] bond1: (slave ip6gretap1): Releasing active interface
[   73.104500][ T6917] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 7e:08:b3:4a:eb:c4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   73.112733][ T6917] ip6gretap1: left promiscuous mode
[   73.116595][ T6917] bond1: (slave veth5): Releasing active interface
[   73.126587][ T6919] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   73.130702][ T6920] netlink: 'syz.1.268': attribute type 1 has an invalid length.
[   73.212636][ T6927] pimreg: entered allmulticast mode
[   73.279307][ T6935] syzkaller1: entered promiscuous mode
[   73.281167][ T6935] syzkaller1: entered allmulticast mode
[   73.294895][ T6937] veth1_to_team: entered allmulticast mode
[   73.436032][ T6955] netlink: 'syz.0.280': attribute type 21 has an invalid length.
[   73.648077][ T6982] tipc: Enabled bearer <eth:gre0>, priority 10
[   73.734633][ T6985] tc_dump_action: action bad kind
[   73.743373][ T6994] netlink: 'syz.0.289': attribute type 10 has an invalid length.
[   73.800669][ T7002] netlink: 'syz.2.293': attribute type 21 has an invalid length.
[   73.821031][ T7002] sctp: [Deprecated]: syz.2.293 (pid 7002) Use of int in maxseg socket option.
[   73.821031][ T7002] Use struct sctp_assoc_value instead
[   73.879927][ T7018] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   73.949915][ T7032] Bluetooth: MGMT ver 1.23
[   74.031813][ T7039] tipc: Resetting bearer <eth:gre0>
[   74.033988][ T5245] Bluetooth: hci0: command 0x0c20 tx timeout
[   74.138996][   T24] lo speed is unknown, defaulting to 1000
[   74.140980][   T24] syz1: Port: 1 Link DOWN
[   74.255703][ T7052] netlink: 'syz.0.303': attribute type 13 has an invalid length.
[   74.258136][ T7052] netlink: 'syz.0.303': attribute type 17 has an invalid length.
[   74.261182][ T7058] netlink: 'syz.0.303': attribute type 13 has an invalid length.
[   74.288974][ T7052] erspan0: left allmulticast mode
[   74.343467][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.347985][ T7052] 8021q: adding VLAN 0 to HW filter on device team0
[   74.442773][ T7066] tun0: tun_chr_ioctl cmd 2148045848
[   74.444940][ T7068] tun0: tun_chr_ioctl cmd 2148045848
[   74.772129][    T9] tipc: Node number set to 2462542737
[   74.827675][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.830784][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.834360][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.838168][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.919887][ T7125] sctp: [Deprecated]: syz.2.317 (pid 7125) Use of int in maxseg socket option.
[   74.919887][ T7125] Use struct sctp_assoc_value instead
[   74.927808][ T7125] : renamed from pim6reg1
[   75.423966][ T7147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.426652][ T7147] syzkaller0: entered promiscuous mode
[   75.428524][ T7147] syzkaller0: entered allmulticast mode
[   75.436264][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   75.439691][ T7146] tipc: Resetting bearer <eth:syzkaller0>
[   75.443950][ T7146] tipc: Disabling bearer <eth:syzkaller0>
[   75.540444][ T7151] lo speed is unknown, defaulting to 1000
[   75.721796][ T7163] lo speed is unknown, defaulting to 1000
[   75.830701][ T7173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.850458][ T7173] syzkaller0: entered promiscuous mode
[   75.857457][ T7173] syzkaller0: entered allmulticast mode
[   75.870699][ T7174] __nla_validate_parse: 30 callbacks suppressed
[   75.870717][ T7174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.330'.
[   75.889610][ T7173] tipc: Resetting bearer <eth:syzkaller0>
[   75.910114][ T7173] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   75.919691][ T7173] tipc: Resetting bearer <eth:syzkaller0>
[   75.930554][ T7173] tipc: Disabling bearer <eth:syzkaller0>
[   75.956277][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.332'.
[   76.006240][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'.
[   76.219409][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'.
[   76.222708][ T7202] bridge_slave_1: left allmulticast mode
[   76.224814][ T7202] bridge_slave_1: left promiscuous mode
[   76.227088][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.234504][ T7202] bridge_slave_0: left allmulticast mode
[   76.236628][ T7202] bridge_slave_0: left promiscuous mode
[   76.238567][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.725071][ T7252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.727650][ T7252] syzkaller0: entered promiscuous mode
[   76.729797][ T7252] syzkaller0: entered allmulticast mode
[   76.737371][ T7252] tipc: Resetting bearer <eth:syzkaller0>
[   76.745835][ T7251] tipc: Resetting bearer <eth:syzkaller0>
[   76.749685][ T7251] tipc: Disabling bearer <eth:syzkaller0>
[   76.844264][ T7271] syzkaller0: entered promiscuous mode
[   76.846564][ T7271] syzkaller0: entered allmulticast mode
[   76.877910][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   76.971120][ T7286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.974090][ T7286] syzkaller0: entered promiscuous mode
[   76.976005][ T7286] syzkaller0: entered allmulticast mode
[   76.981303][ T7286] tipc: Resetting bearer <eth:syzkaller0>
[   76.986852][ T7285] tipc: Resetting bearer <eth:syzkaller0>
[   76.989994][ T7285] tipc: Disabling bearer <eth:syzkaller0>
[   77.080986][ T7293] validate_nla: 7 callbacks suppressed
[   77.081001][ T7293] netlink: 'syz.2.356': attribute type 13 has an invalid length.
[   77.095119][ T7293] netlink: 'syz.2.356': attribute type 17 has an invalid length.
[   77.115840][ T7293] 8021q: adding VLAN 0 to HW filter on device team0
[   77.119439][ T7293] net_ratelimit: 45 callbacks suppressed
[   77.119445][ T7293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   77.126262][    T9] lo speed is unknown, defaulting to 1000
[   77.128105][    T9] syz1: Port: 1 Link ACTIVE
[   77.150259][ T7294] lo speed is unknown, defaulting to 1000
[   77.158684][ T7293] lo speed is unknown, defaulting to 1000
[   77.206548][ T7299] netlink: 'syz.0.358': attribute type 2 has an invalid length.
[   77.214182][ T7299] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[   77.217165][ T7299] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[   77.260450][ T7306] netlink: 248 bytes leftover after parsing attributes in process `syz.0.359'.
[   77.300521][ T7310] netlink: 14 bytes leftover after parsing attributes in process `syz.0.360'.
[   77.315627][ T7310] bond0 (unregistering): Released all slaves
[   77.481355][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.650539][ T7336] lo speed is unknown, defaulting to 1000
[   77.777705][ T7346] netlink: 96 bytes leftover after parsing attributes in process `syz.1.365'.
[   78.478813][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'.
[   78.481693][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'.
[   78.485553][ T7370] netlink: 'syz.2.372': attribute type 18 has an invalid length.
[   78.490421][ T7370] netlink: 'syz.2.372': attribute type 18 has an invalid length.
[   79.165561][ T7377] netlink: 'syz.0.375': attribute type 10 has an invalid length.
[   79.168158][ T7377] dummy0: entered promiscuous mode
[   79.170504][ T7377] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   79.319012][ T7389] bond0: (slave gretap0): Error: Device type is different from other slaves
[   79.347605][ T7391] dvmrp0: entered allmulticast mode
[   79.396324][ T7393] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.399604][ T7393] syzkaller0: entered promiscuous mode
[   79.401930][ T7393] syzkaller0: entered allmulticast mode
[   79.431021][ T7393] tipc: Resetting bearer <eth:syzkaller0>
[   79.474291][ T7392] tipc: Resetting bearer <eth:syzkaller0>
[   79.478927][ T7392] tipc: Disabling bearer <eth:syzkaller0>
[   79.610391][ T7397] netlink: 'syz.2.381': attribute type 18 has an invalid length.
[   80.003021][ T7430] mac80211_hwsim hwsim4 ": renamed from wlan0
[   80.347630][ T7477] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[   80.354289][ T7477] bridge0: port 1(vlan0) entered blocking state
[   80.356758][ T7477] bridge0: port 1(vlan0) entered disabled state
[   80.358740][ T7477] vlan0: entered allmulticast mode
[   80.360385][ T7477] bridge0: entered allmulticast mode
[   80.365746][ T7477] vlan0: left allmulticast mode
[   80.367923][ T7477] bridge0: left allmulticast mode
[   80.456576][ T7482] lo speed is unknown, defaulting to 1000
[   80.461321][ T7483] lo speed is unknown, defaulting to 1000
[   80.730414][ T7496] netlink: 'syz.2.406': attribute type 10 has an invalid length.
[   80.880179][ T7506] __nla_validate_parse: 18 callbacks suppressed
[   80.880196][ T7506] netlink: 48 bytes leftover after parsing attributes in process `syz.2.409'.
[   80.945214][ T7516] bridge0: port 1(ipvlan0) entered blocking state
[   80.947471][ T7516] bridge0: port 1(ipvlan0) entered disabled state
[   80.949657][ T7516] ipvlan0: entered allmulticast mode
[   80.951691][ T7516] bridge0: entered allmulticast mode
[   80.955034][ T7516] ipvlan0: left allmulticast mode
[   80.956716][ T7516] bridge0: left allmulticast mode
[   81.013037][ T7521] netlink: 10 bytes leftover after parsing attributes in process `syz.1.411'.
[   81.113737][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.289090][ T7559] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   81.333558][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'.
[   81.369561][ T7572] netlink: 36 bytes leftover after parsing attributes in process `syz.0.430'.
[   81.392461][ T5245] Bluetooth: hci0: command 0x0c20 tx timeout
[   81.420347][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   81.424170][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   81.427670][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   81.431904][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   81.578388][ T7581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.032822][ T7594] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003
[   82.336667][ T7634] veth3: entered promiscuous mode
[   82.338945][ T7634] bridge1: port 1(veth3) entered blocking state
[   82.350262][ T7634] bridge1: port 1(veth3) entered disabled state
[   82.353925][ T7637] sctp: [Deprecated]: syz.2.446 (pid 7637) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.353925][ T7637] Use struct sctp_sack_info instead
[   82.355785][ T7634] veth3: entered allmulticast mode
[   82.402741][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.445'.
[   82.428974][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'.
[   82.470257][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'.
[   82.478709][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'.
[   82.517358][ T7664] validate_nla: 4 callbacks suppressed
[   82.517370][ T7664] netlink: 'syz.1.452': attribute type 27 has an invalid length.
[   82.541108][ T7664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.560391][ T7657] pim6reg: entered allmulticast mode
[   82.569083][ T7658] pim6reg: left allmulticast mode
[   82.615142][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.454'.
[   82.618317][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.454'.
[   82.645281][ T7672] netlink: 'syz.2.453': attribute type 4 has an invalid length.
[   82.649325][ T7672] tipc: Resetting bearer <eth:gre0>
[   82.674659][ T5897] lo speed is unknown, defaulting to 1000
[   82.676816][ T5897] syz1: Port: 1 Link DOWN
[   82.678456][ T5862] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.682650][ T5862] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.685504][ T5862] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.688171][ T5862] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.709318][ T7684] netlink: 'syz.2.457': attribute type 6 has an invalid length.
[   82.910808][ T7696] sctp: [Deprecated]: syz.2.461 (pid 7696) Use of int in maxseg socket option.
[   82.910808][ T7696] Use struct sctp_assoc_value instead
[   82.986347][ T7706] netlink: 'syz.0.462': attribute type 13 has an invalid length.
[   82.989570][ T7706] netlink: 'syz.0.462': attribute type 17 has an invalid length.
[   82.996058][ T7706] dummy0: left promiscuous mode
[   82.998547][ T7706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.020654][ T7706] lo speed is unknown, defaulting to 1000
[   83.593199][ T7713] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   83.627177][ T7715] tun0: tun_chr_ioctl cmd 1074025672
[   83.629007][ T7715] tun0: ignored: set checksum disabled
[   83.888196][ T7732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.909452][ T7734] netlink: 'syz.2.474': attribute type 39 has an invalid length.
[   84.136324][ T7753] netlink: 'syz.2.478': attribute type 1 has an invalid length.
[   84.138843][ T7753] netlink: 'syz.2.478': attribute type 4 has an invalid length.
[   84.244310][ T7769] batadv_slave_0: entered promiscuous mode
[   84.246210][ T7769] batadv_slave_0: entered allmulticast mode
[   84.248297][ T7769] netlink: 'syz.2.484': attribute type 8 has an invalid length.
[   84.286449][ T7776] netlink: 'syz.0.486': attribute type 1 has an invalid length.
[   84.298583][ T7776] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   84.298889][ T7772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.310335][ T7773] sctp: [Deprecated]: syz.2.485 (pid 7773) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.310335][ T7773] Use struct sctp_sack_info instead
[   84.392836][ T7794] syzkaller1: entered promiscuous mode
[   84.394938][ T7794] syzkaller1: entered allmulticast mode
[   84.731491][ T7802] bond2: entered promiscuous mode
[   84.734014][ T7802] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.744059][ T7802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.797980][ T7807] syzkaller0: entered promiscuous mode
[   84.799802][ T7807] syzkaller0: entered allmulticast mode
[   85.409968][ T7831] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.412836][ T7831] bridge0: port 1(bond2) entered blocking state
[   85.415289][ T7831] bridge0: port 1(bond2) entered disabled state
[   85.417378][ T7831] bond2: entered allmulticast mode
[   85.419734][ T7831] bond2: entered promiscuous mode
[   85.457749][ T7837] vlan2: entered allmulticast mode
[   85.459989][ T7837] veth0_to_team: entered allmulticast mode
[   85.884509][ T7869] __nla_validate_parse: 21 callbacks suppressed
[   85.884531][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[   85.890173][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.923423][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'.
[   85.974902][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'.
[   86.004347][ T7881] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   86.009438][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[   86.103414][ T7906] netlink: 72 bytes leftover after parsing attributes in process `syz.0.524'.
[   86.145185][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[   86.162562][ T7913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.526'.
[   86.162711][ T7915] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.169315][ T7915] syzkaller0: entered promiscuous mode
[   86.170401][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'.
[   86.171150][ T7915] syzkaller0: entered allmulticast mode
[   86.185077][ T7915] tipc: Resetting bearer <eth:syzkaller0>
[   86.188220][ T7914] tipc: Resetting bearer <eth:syzkaller0>
[   86.194686][ T7914] tipc: Disabling bearer <eth:syzkaller0>
[   86.261937][ T7923] bridge0: port 2(erspan0) entered blocking state
[   86.267781][ T7923] bridge0: port 2(erspan0) entered disabled state
[   86.270603][ T7923] erspan0: entered allmulticast mode
[   86.275763][ T7923] erspan0: entered promiscuous mode
[   86.285040][ T7923] erspan0: left allmulticast mode
[   86.287030][ T7923] erspan0: left promiscuous mode
[   86.288947][ T7923] bridge0: port 2(erspan0) entered disabled state
[   86.298787][ T7927] netlink: 232 bytes leftover after parsing attributes in process `syz.1.531'.
[   86.302050][ T7927] netlink: 232 bytes leftover after parsing attributes in process `syz.1.531'.
[   86.349646][ T7936] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.459255][ T7959] lo speed is unknown, defaulting to 1000
[   86.477908][ T7957] openvswitch: netlink: Flow key attr not present in new flow.
[   86.522498][ T7962] lo speed is unknown, defaulting to 1000
[   86.871331][ T7995] lo speed is unknown, defaulting to 1000
[   86.943499][ T8009] lo speed is unknown, defaulting to 1000
[   87.108006][ T8009] batadv0: entered promiscuous mode
[   87.377551][ T8048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   87.426463][ T8056] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   87.430970][ T8056] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.475902][ T8062] lo speed is unknown, defaulting to 1000
[   87.665333][ T8080] bond2: left allmulticast mode
[   87.682788][ T8080] bond2: left promiscuous mode
[   87.694605][ T8080] bridge0: port 1(bond2) entered disabled state
[   87.793520][ T8012] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   87.795599][ T8012] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   87.803714][ T8012] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   87.812638][ T8012] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   87.818366][ T8088] v: renamed from ip6_vti0 (while UP)
[   87.832040][ T8012] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   87.834490][ T8012] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   88.114403][ T8115] syzkaller1: entered promiscuous mode
[   88.116917][ T8115] syzkaller1: entered allmulticast mode
[   88.121710][ T8115] syz_tun: entered allmulticast mode
[   88.131201][ T8115] dvmrp1: entered allmulticast mode
[   88.303273][ T8114] syz_tun: left allmulticast mode
[   88.334386][ T8128] validate_nla: 7 callbacks suppressed
[   88.334405][ T8128] netlink: 'syz.2.575': attribute type 5 has an invalid length.
[   88.833696][ T8159] netlink: 'syz.0.583': attribute type 19 has an invalid length.
[   88.837155][ T8159] netlink: 'syz.0.583': attribute type 19 has an invalid length.
[   89.006419][ T8175] sctp: [Deprecated]: syz.0.585 (pid 8175) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.006419][ T8175] Use struct sctp_sack_info instead
[   89.011790][ T8175] sctp: [Deprecated]: syz.0.585 (pid 8175) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.011790][ T8175] Use struct sctp_sack_info instead
[   89.018347][   T10] IPVS: starting estimator thread 0...
[   89.102729][ T8177] IPVS: using max 92 ests per chain, 220800 per kthread
[   89.402619][ T8193] lo speed is unknown, defaulting to 1000
[   89.737797][ T8200] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004
[   89.824739][ T8204] syzkaller0: entered promiscuous mode
[   89.827024][ T8204] syzkaller0: entered allmulticast mode
[   90.094070][ T8226] syzkaller0: entered promiscuous mode
[   90.096240][ T8226] syzkaller0: entered allmulticast mode
[   90.331156][ T8256] can: request_module (can-proto-3) failed.
[   90.353247][ T8264] syzkaller1: entered promiscuous mode
[   90.355385][ T8264] syzkaller1: entered allmulticast mode
[   90.425993][ T8270] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   90.594502][ T8280] sctp: [Deprecated]: syz.1.616 (pid 8280) Use of int in max_burst socket option.
[   90.594502][ T8280] Use struct sctp_assoc_value instead
[   90.918298][ T8289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[   91.425320][ T8294] __nla_validate_parse: 19 callbacks suppressed
[   91.425333][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[   91.442180][ T8294] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   91.506830][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'.
[   91.597907][ T8308] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   91.635175][ T8314] lo speed is unknown, defaulting to 1000
[   91.680921][ T8324] netlink: 'syz.2.627': attribute type 12 has an invalid length.
[   91.688374][ T8324] netlink: 'syz.2.627': attribute type 18 has an invalid length.
[   91.692706][ T8324] netlink: 'syz.2.627': attribute type 21 has an invalid length.
[   91.695764][ T8324] netlink: 'syz.2.627': attribute type 26 has an invalid length.
[   91.822550][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'.
[   91.826157][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'.
[   91.906301][ T8362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'.
[   91.939813][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[   91.944609][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[   92.106568][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'.
[   92.194119][ T8396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.196848][ T8396] syzkaller0: entered promiscuous mode
[   92.199851][ T8396] syzkaller0: entered allmulticast mode
[   92.206850][ T8396] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.221015][ T8396] tipc: Resetting bearer <eth:syzkaller0>
[   92.225792][ T8394] tipc: Resetting bearer <eth:syzkaller0>
[   92.229281][ T8394] tipc: Disabling bearer <eth:syzkaller0>
[   92.497732][ T8436] netlink: 'syz.2.658': attribute type 13 has an invalid length.
[   92.500506][ T8436] netlink: 'syz.2.658': attribute type 17 has an invalid length.
[   92.518181][ T8436] 8021q: adding VLAN 0 to HW filter on device team0
[   92.524860][ T8436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.529941][ T5312] lo speed is unknown, defaulting to 1000
[   92.534114][ T5312] s: Port: 1 Link ACTIVE
[   92.539992][ T8438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.544744][ T8438] syzkaller0: entered promiscuous mode
[   92.546684][ T8438] syzkaller0: entered allmulticast mode
[   92.550511][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[   92.553573][ T8437] tipc: Resetting bearer <eth:syzkaller0>
[   92.556004][ T8437] tipc: Disabling bearer <eth:syzkaller0>
[   92.561280][ T8436] lo speed is unknown, defaulting to 1000
[   92.612327][ T8444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.660'.
[   93.217134][ T8436] syz.2.658 (8436) used greatest stack depth: 20032 bytes left
[   93.253320][ T8463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'.
[   93.276993][ T8464] trusted_key: syz.0.667 sent an empty control message without MSG_MORE.
[   93.434788][ T8479] netlink: 'syz.2.672': attribute type 10 has an invalid length.
[   93.569572][ T8493] syzkaller1: entered promiscuous mode
[   93.571397][ T8493] syzkaller1: entered allmulticast mode
[   93.915039][ T8553] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[   93.925100][ T8553] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.936518][ T8549] tun0: tun_chr_ioctl cmd 1074025675
[   93.938259][ T8549] tun0: persist enabled
[   93.939775][ T8549] tun0: tun_chr_ioctl cmd 1074025675
[   93.941481][ T8549] tun0: persist enabled
[   94.034432][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.038127][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.041690][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.045986][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.094094][ T8581] sctp: [Deprecated]: syz.0.700 (pid 8581) Use of int in max_burst socket option.
[   94.094094][ T8581] Use struct sctp_assoc_value instead
[   94.192717][ T8596] netlink: 'syz.1.704': attribute type 9 has an invalid length.
[   94.272976][ T8618] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[   94.286481][ T8618] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   94.290542][ T8618] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address
[   94.296258][ T8618] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[   94.300039][ T8621] xt_l2tp: unknown flags: 51
[   94.301567][ T8626] netlink: 'syz.1.713': attribute type 10 has an invalid length.
[   94.314032][ T8626] team0: Port device dummy0 added
[   94.334077][ T8631] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[   94.359920][ T8631] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.379113][ T8637] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   94.433459][ T8643] gretap1: entered promiscuous mode
[   95.491213][ T8716] lo speed is unknown, defaulting to 1000
[   95.571475][ T8730] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[   95.587286][ T8730] 8021q: adding VLAN 0 to HW filter on device bond5
[   95.605910][ T8730] 8021q: adding VLAN 0 to HW filter on device bond5
[   95.608743][ T8730] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[   95.626786][ T8730] bond5: (slave vcan1): Error -95 calling set_mac_address
[   95.723770][ T8716] netlink: 'syz.2.740': attribute type 14 has an invalid length.
[   95.836197][ T8752] syzkaller1: entered promiscuous mode
[   95.838090][ T8752] syzkaller1: entered allmulticast mode
[   95.841495][ T8752] netlink: 'syz.2.749': attribute type 2 has an invalid length.
[   95.869558][ T8753] netlink: 'syz.0.748': attribute type 12 has an invalid length.
[   95.985976][ T8764] lo speed is unknown, defaulting to 1000
[   96.527686][ T8775] delete_channel: no stack
[   96.580941][ T8780] __nla_validate_parse: 30 callbacks suppressed
[   96.580954][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'.
[   96.648189][ T8785] lo speed is unknown, defaulting to 1000
[   96.880234][ T8798] netlink: 64 bytes leftover after parsing attributes in process `syz.1.764'.
[   96.950854][ T8798] netlink: 188 bytes leftover after parsing attributes in process `syz.1.764'.
[   97.157404][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[   97.159633][ T8831] netlink: 224 bytes leftover after parsing attributes in process `syz.1.770'.
[   97.170053][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.770'.
[   97.218103][ T8830] 8021q: adding VLAN 0 to HW filter on device bond6
[   97.223768][ T8830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.771'.
[   97.234911][ T8838] sctp: [Deprecated]: syz.2.773 (pid 8838) Use of struct sctp_assoc_value in delayed_ack socket option.
[   97.234911][ T8838] Use struct sctp_sack_info instead
[   97.308054][ T8843] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   97.323945][ T8849] veth11: entered promiscuous mode
[   97.584454][ T8874] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   98.006057][ T8896] netlink: 272 bytes leftover after parsing attributes in process `syz.1.790'.
[   98.011749][ T8896] openvswitch: netlink: Flow key attr not present in new flow.
[   98.142986][ T8913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.794'.
[   98.399539][ T8926] netlink: 200 bytes leftover after parsing attributes in process `syz.1.799'.
[   98.511206][ T8930] validate_nla: 4 callbacks suppressed
[   98.511220][ T8930] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[   98.516131][ T8930] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[   98.651436][ T8948] netlink: 'syz.1.805': attribute type 1 has an invalid length.
[   98.833727][ T8952] netlink: 'syz.0.806': attribute type 3 has an invalid length.
[   98.873874][ T8960] lo speed is unknown, defaulting to 1000
[   99.073209][ T8971] netlink: 'syz.2.813': attribute type 13 has an invalid length.
[   99.076319][ T8971] netlink: 'syz.2.813': attribute type 17 has an invalid length.
[   99.094996][ T8971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.949445][ T8993] 8021q: VLANs not supported on caif0
[  100.101667][ T9009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.106512][ T9009] syzkaller0: entered promiscuous mode
[  100.108525][ T9009] syzkaller0: entered allmulticast mode
[  100.113495][ T9009] netlink: 'syz.1.823': attribute type 3 has an invalid length.
[  100.116939][ T9009] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[  100.177455][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  100.183282][ T9008] tipc: Disabling bearer <eth:syzkaller0>
[  100.438110][ T9017] syzkaller1: entered promiscuous mode
[  100.440514][ T9017] syzkaller1: entered allmulticast mode
[  100.672189][ T9028] lo speed is unknown, defaulting to 1000
[  100.681847][ T9023] netlink: 'syz.0.828': attribute type 12 has an invalid length.
[  100.748259][ T9033] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.811417][ T9038] netlink: 'syz.1.832': attribute type 30 has an invalid length.
[  100.907715][ T9052] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  101.546390][ T9109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.550626][ T9109] syzkaller0: MTU too low for tipc bearer
[  101.554137][ T9109] tipc: Disabling bearer <eth:syzkaller0>
[  101.677020][ T9111] lo speed is unknown, defaulting to 1000
[  101.751833][ T9114] ip6gre1: entered allmulticast mode
[  101.794724][ T9119] __nla_validate_parse: 28 callbacks suppressed
[  101.794737][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  101.799596][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  101.807947][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  101.811713][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  101.814979][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  101.907621][ T9127] team0: Port device dummy0 removed
[  102.276230][ T9143] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  102.309592][ T9147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.325226][ T9147] tipc: Disabling bearer <eth:syzkaller0>
[  102.507573][ T9159] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  102.512554][ T9159] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  102.557818][ T9159] gretap1: entered promiscuous mode
[  102.561293][ T9159] bond7: (slave gretap1): making interface the new active one
[  102.564033][ T9159] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  102.599304][ T9163] netlink: 256 bytes leftover after parsing attributes in process `syz.0.865'.
[  102.605633][ T9163] netlink: 48 bytes leftover after parsing attributes in process `syz.0.865'.
[  102.715654][ T9171] lo speed is unknown, defaulting to 1000
[  102.985571][ T9197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[  103.043764][ T9212] ip6gre2: entered allmulticast mode
[  103.101570][ T9219] lo speed is unknown, defaulting to 1000
[  103.373843][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.880'.
[  103.394825][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'.
[  103.648489][ T9259] ip6gretap0: entered promiscuous mode
[  103.650794][ T9259] macsec1: entered promiscuous mode
[  103.653012][ T9259] macsec1: entered allmulticast mode
[  103.655054][ T9259] ip6gretap0: entered allmulticast mode
[  103.926131][ T9294] validate_nla: 6 callbacks suppressed
[  103.926145][ T9294] netlink: 'syz.2.897': attribute type 1 has an invalid length.
[  103.956237][ T9294] 8021q: adding VLAN 0 to HW filter on device bond6
[  103.962704][ T9275] bond4: (slave ip6gretap1): making interface the new active one
[  103.965397][ T9275] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  104.024049][ T9308] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  104.123624][ T9327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.272117][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  104.367893][ T9365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.372181][ T9365] syzkaller0: entered promiscuous mode
[  104.374410][ T9365] syzkaller0: entered allmulticast mode
[  104.524192][ T9383] : entered promiscuous mode
[  104.820500][ T9414] netlink: 'syz.0.933': attribute type 4 has an invalid length.
[  104.824971][ T9415] netlink: 'syz.0.933': attribute type 4 has an invalid length.
[  104.908173][ T9423] netlink: 'syz.0.935': attribute type 2 has an invalid length.
[  104.939725][ T9425] netlink: 'syz.0.936': attribute type 27 has an invalid length.
[  105.099272][ T9446] lo speed is unknown, defaulting to 1000
[  105.114679][ T9448] syzkaller1: entered promiscuous mode
[  105.116363][ T9448] syzkaller1: entered allmulticast mode
[  105.133519][ T9448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.387878][ T9464] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  105.404705][ T9464] bpq0: entered promiscuous mode
[  105.476722][ T9469] sit0: entered promiscuous mode
[  105.481856][ T9469] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  105.487715][ T9469] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  105.550690][ T9477] bridge1: entered promiscuous mode
[  105.553090][ T9477] bridge1: entered allmulticast mode
[  105.615344][ T9480] vlan0: entered promiscuous mode
[  105.617207][ T9480] hsr_slave_1: entered promiscuous mode
[  105.619210][ T9480] vlan0: entered allmulticast mode
[  105.620822][ T9480] hsr_slave_1: entered allmulticast mode
[  105.623423][ T9481] pim6reg1: entered promiscuous mode
[  105.625295][ T9481] pim6reg1: entered allmulticast mode
[  105.718362][ T9487] v: renamed from ip6_vti0 (while UP)
[  105.727442][ T9487] sock: sock_set_timeout: `syz.2.955' (pid 9487) tries to set negative timeout
[  105.749730][ T9492] netlink: 'syz.0.956': attribute type 9 has an invalid length.
[  105.839142][ T9507] netlink: 'syz.2.961': attribute type 1 has an invalid length.
[  105.855489][ T9507] bond7: (slave gretap2): making interface the new active one
[  105.858397][ T9507] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  105.885289][ T9510] lo speed is unknown, defaulting to 1000
[  105.907296][ T9510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  106.100632][ T9524] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  106.110948][ T9524] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  106.139460][ T9524] netlink: 'syz.1.966': attribute type 10 has an invalid length.
[  106.179973][ T9534] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.231579][ T9543] netlink: 'syz.1.969': attribute type 12 has an invalid length.
[  106.252589][   T24] tipc: Node number set to 492835493
[  106.259913][ T9542] lo speed is unknown, defaulting to 1000
[  106.421281][ T9565] geneve2: entered promiscuous mode
[  106.429564][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.438260][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.441094][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.488321][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.697760][ T9580] tipc: Resetting bearer <eth:gre0>
[  107.356382][ T9589] bond6: entered promiscuous mode
[  107.358184][ T9589] 8021q: adding VLAN 0 to HW filter on device bond6
[  107.361860][ T9589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.364157][ T9589] IPv6: NLM_F_CREATE should be set when creating new route
[  107.366809][ T9589] IPv6: NLM_F_CREATE should be set when creating new route
[  107.371283][ T9589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.410677][ T9594] __nla_validate_parse: 29 callbacks suppressed
[  107.410691][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.984'.
[  107.466852][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'.
[  107.470292][ T9603] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  107.495179][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'.
[  107.501792][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'.
[  107.516133][ T9607] sctp: [Deprecated]: syz.0.988 (pid 9607) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.516133][ T9607] Use struct sctp_sack_info instead
[  107.534655][ T9608] openvswitch: netlink: Flow key attribute not present in set flow.
[  107.534699][ T9618] openvswitch: netlink: Flow key attribute not present in set flow.
[  107.582120][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'.
[  107.587393][ T9622] 8021q: adding VLAN 0 to HW filter on device bond9
[  107.597308][ T9622] bond9: (slave gretap2): making interface the new active one
[  107.600132][ T9622] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  107.709245][ T9633] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.995'.
[  107.750939][ T9633] lo speed is unknown, defaulting to 1000
[  107.756363][ T9634] lo speed is unknown, defaulting to 1000
[  108.129962][ T9652] team0: No ports can be present during mode change
[  108.471532][ T9669] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1005'.
[  108.554841][    T9] IPVS: starting estimator thread 0...
[  108.599513][ T9674] erspan1: entered promiscuous mode
[  108.635470][ T9678] lo speed is unknown, defaulting to 1000
[  108.635541][ T9677] rdma_rxe: rxe_newlink: failed to add lo
[  108.637909][ T9678] lo speed is unknown, defaulting to 1000
[  108.642302][ T9678] lo speed is unknown, defaulting to 1000
[  108.653355][ T9672] IPVS: using max 92 ests per chain, 220800 per kthread
[  108.706271][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'.
[  108.738147][ T9678] infiniband syz1: set active
[  108.740123][   T24] lo speed is unknown, defaulting to 1000
[  108.743125][ T9678] infiniband syz1: added lo
[  108.766289][ T9678] RDS/IB: syz1: added
[  108.767814][ T9678] smc: adding ib device syz1 with port count 1
[  108.769990][ T9678] smc:    ib device syz1 port 1 has pnetid 
[  108.772662][   T24] lo speed is unknown, defaulting to 1000
[  108.774818][ T9678] lo speed is unknown, defaulting to 1000
[  108.823557][ T9693] lo speed is unknown, defaulting to 1000
[  108.830717][ T9693] lo speed is unknown, defaulting to 1000
[  108.902908][ T9678] lo speed is unknown, defaulting to 1000
[  108.996233][ T9678] lo speed is unknown, defaulting to 1000
[  109.001845][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'.
[  109.020122][ T9689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1012'.
[  109.105556][ T5859] ==================================================================
[  109.108746][ T5859] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  109.111832][ T5859] Read of size 1 at addr ffff88802f256bb0 by task kworker/u8:2/5859
[  109.116072][ T5859] 
[  109.117045][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  109.117063][ T5859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.117073][ T5859] Workqueue: ipv6_addrconf addrconf_dad_work
[  109.117095][ T5859] Call Trace:
[  109.117117][ T5859]  <TASK>
[  109.117133][ T5859]  dump_stack_lvl+0x189/0x250
[  109.117154][ T5859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.117168][ T5859]  ? lock_release+0x4b/0x3e0
[  109.117191][ T5859]  ? __virt_addr_valid+0x4a5/0x5c0
[  109.117209][ T5859]  print_report+0xca/0x240
[  109.117231][ T5859]  ? xfrm_state_find+0x2cf2/0x5400
[  109.117245][ T5859]  kasan_report+0x118/0x150
[  109.117264][ T5859]  ? xfrm_state_find+0x2cf2/0x5400
[  109.117316][ T5859]  xfrm_state_find+0x2cf2/0x5400
[  109.117331][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.117346][ T5859]  ? unwind_next_frame+0x19ae/0x2390
[  109.117366][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.117380][ T5859]  ? xfrm_state_find+0x1da/0x5400
[  109.117394][ T5859]  ? __pfx_xfrm_state_find+0x10/0x10
[  109.117406][ T5859]  ? deref_stack_reg+0x19f/0x230
[  109.117422][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.117435][ T5859]  ? unwind_next_frame+0x19ae/0x2390
[  109.117453][ T5859]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  109.117477][ T5859]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  109.117495][ T5859]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  109.117512][ T5859]  ? lock_release+0x4b/0x3e0
[  109.117530][ T5859]  ? xfrm_selector_match+0xbcf/0x1140
[  109.117545][ T5859]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  109.117560][ T5859]  ? process_scheduled_works+0xae1/0x17b0
[  109.117585][ T5859]  ? xfrm_expand_policies+0x41f/0x6a0
[  109.117602][ T5859]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  109.117622][ T5859]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  109.117636][ T5859]  ? do_raw_spin_unlock+0x4d/0x240
[  109.117652][ T5859]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.117668][ T5859]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.117685][ T5859]  ndisc_send_skb+0x3f1/0x1470
[  109.117699][ T5859]  ? ndisc_send_skb+0x1e4/0x1470
[  109.117710][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.117726][ T5859]  ? __pfx_ndisc_send_skb+0x10/0x10
[  109.117738][ T5859]  ? ndisc_ns_create+0x4ea/0x650
[  109.117751][ T5859]  ? __asan_memcpy+0x40/0x70
[  109.117769][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.117784][ T5859]  ndisc_send_ns+0xcb/0x150
[  109.117797][ T5859]  ? __pfx_ndisc_send_ns+0x10/0x10
[  109.117809][ T5859]  ? lock_release+0x4b/0x3e0
[  109.117830][ T5859]  addrconf_dad_work+0xaae/0x14b0
[  109.117845][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.117860][ T5859]  ? __pfx_addrconf_dad_work+0x10/0x10
[  109.117874][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.117887][ T5859]  ? lock_acquire+0x5f/0x360
[  109.117905][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.117916][ T5859]  ? process_scheduled_works+0x9ef/0x17b0
[  109.117928][ T5859]  ? process_scheduled_works+0x9ef/0x17b0
[  109.117941][ T5859]  process_scheduled_works+0xae1/0x17b0
[  109.117963][ T5859]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.117981][ T5859]  worker_thread+0x8a0/0xda0
[  109.117995][ T5859]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.118015][ T5859]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.118032][ T5859]  ? __kthread_parkme+0x7b/0x200
[  109.118050][ T5859]  kthread+0x711/0x8a0
[  109.118066][ T5859]  ? __pfx_worker_thread+0x10/0x10
[  109.118079][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.118095][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.118107][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.118123][ T5859]  ret_from_fork+0x3fc/0x770
[  109.118138][ T5859]  ? __pfx_ret_from_fork+0x10/0x10
[  109.118152][ T5859]  ? __switch_to_asm+0x39/0x70
[  109.118169][ T5859]  ? __switch_to_asm+0x33/0x70
[  109.118185][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.118200][ T5859]  ret_from_fork_asm+0x1a/0x30
[  109.118228][ T5859]  </TASK>
[  109.118233][ T5859] 
[  109.251709][ T5859] Allocated by task 7370:
[  109.253255][ T5859]  kasan_save_track+0x3e/0x80
[  109.254962][ T5859]  __kasan_slab_alloc+0x6c/0x80
[  109.256814][ T5859]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  109.258779][ T5859]  xfrm_state_alloc+0x24/0x2f0
[  109.260555][ T5859]  __find_acq_core+0x8a7/0x1c00
[  109.262295][ T5859]  xfrm_find_acq+0x78/0xa0
[  109.263938][ T5859]  xfrm_alloc_userspi+0x6b3/0xc90
[  109.265689][ T5859]  xfrm_user_rcv_msg+0x7a3/0xab0
[  109.267537][ T5859]  netlink_rcv_skb+0x208/0x470
[  109.269022][ T5859]  xfrm_netlink_rcv+0x79/0x90
[  109.270485][ T5859]  netlink_unicast+0x82f/0x9e0
[  109.272168][ T5859]  netlink_sendmsg+0x805/0xb30
[  109.273826][ T5859]  __sock_sendmsg+0x21c/0x270
[  109.275326][ T5859]  ____sys_sendmsg+0x505/0x830
[  109.276923][ T5859]  ___sys_sendmsg+0x21f/0x2a0
[  109.278415][ T5859]  __x64_sys_sendmsg+0x19b/0x260
[  109.280045][ T5859]  do_syscall_64+0xfa/0x3b0
[  109.281754][ T5859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.284056][ T5859] 
[  109.285013][ T5859] Freed by task 9:
[  109.286490][ T5859]  kasan_save_track+0x3e/0x80
[  109.288362][ T5859]  kasan_save_free_info+0x46/0x50
[  109.290320][ T5859]  __kasan_slab_free+0x5b/0x80
[  109.292229][ T5859]  kmem_cache_free+0x18f/0x400
[  109.294154][ T5859]  xfrm_state_gc_task+0x52d/0x6b0
[  109.296130][ T5859]  process_scheduled_works+0xae1/0x17b0
[  109.298299][ T5859]  worker_thread+0x8a0/0xda0
[  109.300108][ T5859]  kthread+0x711/0x8a0
[  109.301702][ T5859]  ret_from_fork+0x3fc/0x770
[  109.303170][ T5859]  ret_from_fork_asm+0x1a/0x30
[  109.304727][ T5859] 
[  109.305494][ T5859] The buggy address belongs to the object at ffff88802f256880
[  109.305494][ T5859]  which belongs to the cache xfrm_state of size 928
[  109.310105][ T5859] The buggy address is located 816 bytes inside of
[  109.310105][ T5859]  freed 928-byte region [ffff88802f256880, ffff88802f256c20)
[  109.314387][ T5859] 
[  109.315129][ T5859] The buggy address belongs to the physical page:
[  109.317062][ T5859] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f256d00 pfn:0x2f254
[  109.320860][ T5859] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  109.324093][ T5859] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  109.326935][ T5859] page_type: f5(slab)
[  109.328497][ T5859] raw: 00fff00000000040 ffff88801abf0640 dead000000000122 0000000000000000
[  109.331768][ T5859] raw: ffff88802f256d00 00000000800e000c 00000000f5000000 0000000000000000
[  109.334747][ T5859] head: 00fff00000000040 ffff88801abf0640 dead000000000122 0000000000000000
[  109.337434][ T5859] head: ffff88802f256d00 00000000800e000c 00000000f5000000 0000000000000000
[  109.340179][ T5859] head: 00fff00000000002 ffffea0000bc9501 00000000ffffffff 00000000ffffffff
[  109.342893][ T5859] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  109.346133][ T5859] page dumped because: kasan: bad access detected
[  109.348631][ T5859] page_owner tracks the page as allocated
[  109.350838][ T5859] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6266, tgid 6265 (syz.2.101), ts 61825611411, free_ts 61101321068
[  109.358041][ T5859]  post_alloc_hook+0x240/0x2a0
[  109.359829][ T5859]  get_page_from_freelist+0x21e4/0x22c0
[  109.361824][ T5859]  __alloc_frozen_pages_noprof+0x181/0x370
[  109.363595][ T5859]  alloc_pages_mpol+0x232/0x4a0
[  109.365199][ T5859]  allocate_slab+0x8a/0x370
[  109.366568][ T5859]  ___slab_alloc+0xbeb/0x1410
[  109.367980][ T5859]  kmem_cache_alloc_noprof+0x283/0x3c0
[  109.369619][ T5859]  xfrm_state_alloc+0x24/0x2f0
[  109.371308][ T5859]  xfrm_add_sa+0x17d1/0x4070
[  109.373051][ T5859]  xfrm_user_rcv_msg+0x7a3/0xab0
[  109.374690][ T5859]  netlink_rcv_skb+0x208/0x470
[  109.376508][ T5859]  xfrm_netlink_rcv+0x79/0x90
[  109.378233][ T5859]  netlink_unicast+0x82f/0x9e0
[  109.380084][ T5859]  netlink_sendmsg+0x805/0xb30
[  109.381893][ T5859]  __sock_sendmsg+0x21c/0x270
[  109.383525][ T5859]  ____sys_sendmsg+0x505/0x830
[  109.384964][ T5859] page last free pid 6258 tgid 6255 stack trace:
[  109.386876][ T5859]  __free_frozen_pages+0xbc4/0xd30
[  109.388442][ T5859]  stack_depot_save_flags+0x436/0x860
[  109.390113][ T5859]  kasan_save_track+0x4f/0x80
[  109.391569][ T5859]  __kasan_kmalloc+0x93/0xb0
[  109.392978][ T5859]  __kmalloc_noprof+0x27a/0x4f0
[  109.394474][ T5859]  __register_sysctl_table+0x72/0x1340
[  109.396151][ T5859]  mpls_dev_sysctl_register+0x188/0x270
[  109.397858][ T5859]  mpls_dev_notify+0x357/0x7a0
[  109.399331][ T5859]  notifier_call_chain+0x1b6/0x3e0
[  109.400920][ T5859]  register_netdevice+0x1608/0x1ae0
[  109.402679][ T5859]  xfrmi_newlink+0x49b/0x7b0
[  109.404227][ T5859]  rtnl_newlink_create+0x310/0xb00
[  109.406070][ T5859]  rtnl_newlink+0x16d6/0x1c70
[  109.407729][ T5859]  rtnetlink_rcv_msg+0x7cf/0xb70
[  109.409544][ T5859]  netlink_rcv_skb+0x208/0x470
[  109.411009][ T5859]  netlink_unicast+0x82f/0x9e0
[  109.412560][ T5859] 
[  109.413297][ T5859] Memory state around the buggy address:
[  109.415009][ T5859]  ffff88802f256a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.417747][ T5859]  ffff88802f256b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.420456][ T5859] >ffff88802f256b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  109.423206][ T5859]                                      ^
[  109.425078][ T5859]  ffff88802f256c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  109.427756][ T5859]  ffff88802f256c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  109.430598][ T5859] ==================================================================
[  109.670865][ T5859] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  109.673580][ T5859] CPU: 0 UID: 0 PID: 5859 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  109.676591][ T5859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.679888][ T5859] Workqueue: ipv6_addrconf addrconf_dad_work
[  109.681920][ T5859] Call Trace:
[  109.682948][ T5859]  <TASK>
[  109.683878][ T5859]  dump_stack_lvl+0x99/0x250
[  109.685295][ T5859]  ? __asan_memcpy+0x40/0x70
[  109.686706][ T5859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.688257][ T5859]  ? __pfx__printk+0x10/0x10
[  109.689644][ T5859]  vpanic+0x281/0x750
[  109.690968][ T5859]  ? preempt_schedule+0xae/0xc0
[  109.692615][ T5859]  ? __pfx_vpanic+0x10/0x10
[  109.694201][ T5859]  ? preempt_schedule_common+0x83/0xd0
[  109.695990][ T5859]  ? preempt_schedule+0xae/0xc0
[  109.697748][ T5859]  ? __pfx_preempt_schedule+0x10/0x10
[  109.699588][ T5859]  panic+0xb9/0xc0
[  109.700826][ T5859]  ? __pfx_panic+0x10/0x10
[  109.702348][ T5859]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  109.704203][ T5859]  ? xfrm_state_find+0x2cf2/0x5400
[  109.705886][ T5859]  check_panic_on_warn+0x89/0xb0
[  109.707561][ T5859]  ? xfrm_state_find+0x2cf2/0x5400
[  109.709304][ T5859]  end_report+0x78/0x160
[  109.710756][ T5859]  kasan_report+0x129/0x150
[  109.712129][ T5859]  ? xfrm_state_find+0x2cf2/0x5400
[  109.713664][ T5859]  xfrm_state_find+0x2cf2/0x5400
[  109.715187][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.716928][ T5859]  ? unwind_next_frame+0x19ae/0x2390
[  109.718605][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.720171][ T5859]  ? xfrm_state_find+0x1da/0x5400
[  109.721972][ T5859]  ? __pfx_xfrm_state_find+0x10/0x10
[  109.723590][ T5859]  ? deref_stack_reg+0x19f/0x230
[  109.725071][ T5859]  ? unwind_next_frame+0xa5/0x2390
[  109.726626][ T5859]  ? unwind_next_frame+0x19ae/0x2390
[  109.728270][ T5859]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  109.730251][ T5859]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  109.732262][ T5859]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  109.734502][ T5859]  ? lock_release+0x4b/0x3e0
[  109.735989][ T5859]  ? xfrm_selector_match+0xbcf/0x1140
[  109.737961][ T5859]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  109.740103][ T5859]  ? process_scheduled_works+0xae1/0x17b0
[  109.742312][ T5859]  ? xfrm_expand_policies+0x41f/0x6a0
[  109.744326][ T5859]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  109.746432][ T5859]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  109.748690][ T5859]  ? do_raw_spin_unlock+0x4d/0x240
[  109.750629][ T5859]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.752572][ T5859]  ? icmp6_dst_alloc+0x3a5/0x420
[  109.754471][ T5859]  ndisc_send_skb+0x3f1/0x1470
[  109.756362][ T5859]  ? ndisc_send_skb+0x1e4/0x1470
[  109.758279][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.760144][ T5859]  ? __pfx_ndisc_send_skb+0x10/0x10
[  109.762127][ T5859]  ? ndisc_ns_create+0x4ea/0x650
[  109.763918][ T5859]  ? __asan_memcpy+0x40/0x70
[  109.765324][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.766995][ T5859]  ndisc_send_ns+0xcb/0x150
[  109.768631][ T5859]  ? __pfx_ndisc_send_ns+0x10/0x10
[  109.770421][ T5859]  ? lock_release+0x4b/0x3e0
[  109.771993][ T5859]  addrconf_dad_work+0xaae/0x14b0
[  109.773891][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.775676][ T5859]  ? __pfx_addrconf_dad_work+0x10/0x10
[  109.777615][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.779099][ T5859]  ? lock_acquire+0x5f/0x360
[  109.780879][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.782629][ T5859]  ? process_scheduled_works+0x9ef/0x17b0
[  109.784649][ T5859]  ? process_scheduled_works+0x9ef/0x17b0
[  109.786852][ T5859]  process_scheduled_works+0xae1/0x17b0
[  109.788985][ T5859]  ? __pfx_process_scheduled_works+0x10/0x10
[  109.791366][ T5859]  worker_thread+0x8a0/0xda0
[  109.793162][ T5859]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  109.795603][ T5859]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  109.797601][ T5859]  ? __kthread_parkme+0x7b/0x200
[  109.799252][ T5859]  kthread+0x711/0x8a0
[  109.800833][ T5859]  ? __pfx_worker_thread+0x10/0x10
[  109.802702][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.804347][ T5859]  ? rcu_is_watching+0x15/0xb0
[  109.805978][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.807463][ T5859]  ret_from_fork+0x3fc/0x770
[  109.808898][ T5859]  ? __pfx_ret_from_fork+0x10/0x10
[  109.810518][ T5859]  ? __switch_to_asm+0x39/0x70
[  109.811975][ T5859]  ? __switch_to_asm+0x33/0x70
[  109.813456][ T5859]  ? __pfx_kthread+0x10/0x10
[  109.814889][ T5859]  ret_from_fork_asm+0x1a/0x30
[  109.816371][ T5859]  </TASK>
[  109.817872][ T5859] Kernel Offset: disabled
[  109.819243][ T5859] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:44:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000339e8b0
R8 =ffff888108178237 R9 =1ffff1102102f046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8fb R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000100 CR3=000000010a13c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcec6412e53
XMM06=0000000000000000 00007fcec6412e4d XMM07=0000000000000000 00007fcec6412e61
XMM08=0000000000000000 00007fcec6412ee7 XMM09=0000000000000000 00007fcec6412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000004 RCX=0000000000000005 RDX=ffffffff81c18685
RSI=ffffffff8e18ed80 RDI=0000000000000004 RBP=000000196920ea91 RSP=ffffc900001b70c0
R8 =ffff8881006a5640 R9 =000000000000000d R10=000000000000000d R11=0000000000000000
R12=dffffc0000000000 R13=ffff8881006ea010 R14=ffff8881006ea40c R15=0000000000028a44
RIP=ffffffff81bfb132 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbcae1d4fc8 CR3=0000000026648000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f0646e12e53
XMM06=0000000000000000 00007f0646e12e4d XMM07=0000000000000000 00007f0646e12e61
XMM08=0000000000000000 00007f0646e12ee7 XMM09=0000000000000000 00007f0646e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
