last executing test programs:

1.981391526s ago: executing program 0 (id=1187):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000040c0)='reno\x00', 0x5)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)

1.117569153s ago: executing program 0 (id=1208):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @private1, 0x3}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000040)="2e360e", 0x3}], 0x1}}], 0x1, 0x931766f6119e6dc0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000340)=0x8)

1.021705602s ago: executing program 0 (id=1210):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

420.262542ms ago: executing program 2 (id=1233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

371.832843ms ago: executing program 2 (id=1234):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x3, 0xff)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

320.738554ms ago: executing program 1 (id=1235):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

320.470176ms ago: executing program 2 (id=1236):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x14, 0x7ce6755b3a6b8c51, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0)

311.08679ms ago: executing program 2 (id=1237):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/2219], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r2)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000fc0))
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

309.71657ms ago: executing program 1 (id=1238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x1, 0x70bd2c, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4, 0x10d}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

220.32996ms ago: executing program 1 (id=1239):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000300), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x1d, 0x0, 0x2000000}, 0x10, &(0x7f0000000180)={&(0x7f0000002d40)=ANY=[], 0x48}}, 0x810)

220.18078ms ago: executing program 1 (id=1240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a3200000000050004000000000011000300686173683a69702c6d61726b00000000140007800500150096600000080011400000000c050005000a0000000500010006"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)

139.235092ms ago: executing program 0 (id=1241):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000000000100100000d000000", @ANYRES32=0x0, @ANYBLOB="80ee000096df2a0ce3"], 0x30}, 0x0)

138.748481ms ago: executing program 2 (id=1242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xd, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c15208", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

138.5551ms ago: executing program 1 (id=1243):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[{0x10, 0x1, 0x51}], 0x10}}], 0x2, 0x4000854)

69.212287ms ago: executing program 2 (id=1244):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

69.05641ms ago: executing program 0 (id=1245):
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x1f, 0x1f, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0)

68.841986ms ago: executing program 1 (id=1246):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c63a6efdecc4194d99634ff4eb90c266e83fff7dfbd3568c030612b423a3", 0x21}, {&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781b800c423ace69c1eba8d0c505baa2acdddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae76812b1375a1b59f2b669bcf1f", 0x73}, {&(0x7f0000000100)="8d25ca2a98879e57578c3d652f5cf57f904b471f18c14b4d786c4ae155bee597b14455173e5580fb3f47c2e329b126d05465fb165f089b", 0x37}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 0 (id=1247):
unshare(0x2c020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42820' (ED25519) to the list of known hosts.
syzkaller login: [   57.331204][ T5774] cgroup: Unknown subsys name 'net'
[   57.412375][ T5774] cgroup: Unknown subsys name 'cpuset'
[   57.417996][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.673685][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.805971][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.810322][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.813683][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.817402][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.820925][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.847307][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.853244][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.856659][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.860397][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.863827][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.942604][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.946828][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.950822][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.954759][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.958680][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.155669][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   66.263081][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.295704][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.299755][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.302953][ T5853] bridge_slave_0: entered allmulticast mode
[   66.306970][ T5853] bridge_slave_0: entered promiscuous mode
[   66.343694][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.346524][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.350226][ T5853] bridge_slave_1: entered allmulticast mode
[   66.354181][ T5853] bridge_slave_1: entered promiscuous mode
[   66.432682][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.480887][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.484652][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.487120][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.489571][ T5848] bridge_slave_0: entered allmulticast mode
[   66.492836][ T5848] bridge_slave_0: entered promiscuous mode
[   66.500254][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.503154][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.506064][ T5848] bridge_slave_1: entered allmulticast mode
[   66.510899][ T5848] bridge_slave_1: entered promiscuous mode
[   66.551414][ T5853] team0: Port device team_slave_0 added
[   66.563914][ T5853] team0: Port device team_slave_1 added
[   66.583179][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.586870][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   66.623015][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.634193][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.636583][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.644456][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.649739][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.651852][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.659556][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.703212][ T5848] team0: Port device team_slave_0 added
[   66.708929][ T5848] team0: Port device team_slave_1 added
[   66.792215][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.795005][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.804931][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.816300][ T5853] hsr_slave_0: entered promiscuous mode
[   66.820113][ T5853] hsr_slave_1: entered promiscuous mode
[   66.830959][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.833799][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.842093][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.922443][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.924686][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.926983][ T5857] bridge_slave_0: entered allmulticast mode
[   66.930023][ T5857] bridge_slave_0: entered promiscuous mode
[   66.953565][ T5848] hsr_slave_0: entered promiscuous mode
[   66.956594][ T5848] hsr_slave_1: entered promiscuous mode
[   66.960710][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   66.963022][ T5848] Cannot create hsr debugfs directory
[   66.969734][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.972224][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.974541][ T5857] bridge_slave_1: entered allmulticast mode
[   66.977897][ T5857] bridge_slave_1: entered promiscuous mode
[   67.041519][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.069470][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.124234][ T5857] team0: Port device team_slave_0 added
[   67.138649][ T5857] team0: Port device team_slave_1 added
[   67.192487][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.194807][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.203733][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.233072][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.235914][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.246071][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.301935][ T5857] hsr_slave_0: entered promiscuous mode
[   67.305022][ T5857] hsr_slave_1: entered promiscuous mode
[   67.307952][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   67.310529][ T5857] Cannot create hsr debugfs directory
[   67.346410][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.354176][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.368146][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.397410][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.466953][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.480145][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.512473][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.518942][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.640356][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.651994][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.670891][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.689334][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.715465][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.760339][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.774919][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.777354][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.794742][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.802121][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.804500][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.845568][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   67.870258][  T145] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.873227][  T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.895220][  T145] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.898182][  T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.908641][ T5234] Bluetooth: hci1: command tx timeout
[   67.908682][   T55] Bluetooth: hci0: command tx timeout
[   67.914490][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   67.987236][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.000535][   T55] Bluetooth: hci2: command tx timeout
[   68.031238][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   68.052338][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.055268][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.090783][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.093751][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.184494][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.271178][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.276337][ T5853] veth0_vlan: entered promiscuous mode
[   68.286115][ T5853] veth1_vlan: entered promiscuous mode
[   68.346007][ T5848] veth0_vlan: entered promiscuous mode
[   68.382422][ T5848] veth1_vlan: entered promiscuous mode
[   68.402910][ T5853] veth0_macvtap: entered promiscuous mode
[   68.415719][ T5853] veth1_macvtap: entered promiscuous mode
[   68.447167][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.457124][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.470966][ T5848] veth0_macvtap: entered promiscuous mode
[   68.476714][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.485567][ T5848] veth1_macvtap: entered promiscuous mode
[   68.507274][ T5719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.519695][ T5719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.532377][ T5719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.543070][ T5719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.552977][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.575499][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.596920][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.616841][ T5857] veth0_vlan: entered promiscuous mode
[   68.623198][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.642115][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.661452][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.678700][ T5857] veth1_vlan: entered promiscuous mode
[   68.698302][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.701293][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.770464][ T5857] veth0_macvtap: entered promiscuous mode
[   68.793468][ T5857] veth1_macvtap: entered promiscuous mode
[   68.814053][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.819691][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.843836][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.847081][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.866288][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.899770][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.924114][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.941787][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.945124][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.948952][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.960711][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.978736][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.022129][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.045597][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   69.110544][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.113224][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.167782][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.172410][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.692057][ T5950] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   69.907564][ T5961] trusted_key: syz.0.15 sent an empty control message without MSG_MORE.
[   69.979462][ T5958] netlink: 'syz.2.14': attribute type 4 has an invalid length.
[   69.990822][   T55] Bluetooth: hci1: command tx timeout
[   69.991716][ T5234] Bluetooth: hci0: command tx timeout
[   70.089630][ T5234] Bluetooth: hci2: command tx timeout
[   70.336360][ T5983] netlink: 'syz.0.26': attribute type 1 has an invalid length.
[   70.340254][ T5983] netlink: 'syz.0.26': attribute type 3 has an invalid length.
[   70.343921][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.0.26'.
[   70.383004][ T5986] Zero length message leads to an empty skb
[   70.653573][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'.
[   70.742156][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.37'.
[   70.897132][ T6031] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.064153][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'.
[   71.416764][ T6068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.464948][ T6073] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   71.510874][    C1] Illegal XDP return value 16128 on prog  (id 11) dev lo, expect packet loss!
[   71.811711][ T6068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.825108][ T6085] syzkaller1: entered promiscuous mode
[   71.827179][ T6085] syzkaller1: entered allmulticast mode
[   71.835692][ T6087] xt_socket: unknown flags 0xd0
[   71.876638][ T6068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.935439][ T6068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.068946][ T5234] Bluetooth: hci1: command tx timeout
[   72.071192][ T5234] Bluetooth: hci0: command tx timeout
[   72.082354][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.124496][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.132007][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.148194][   T55] Bluetooth: hci2: command tx timeout
[   72.153347][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.199794][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'.
[   72.238147][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'.
[   72.318272][ T6106] netlink: 'syz.2.77': attribute type 11 has an invalid length.
[   72.335695][ T6106] netlink: 244 bytes leftover after parsing attributes in process `syz.2.77'.
[   72.449477][ T6118] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.81'.
[   72.777728][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'.
[   72.782076][ T6144] tc_dump_action: action bad kind
[   73.006488][ T6157] netlink: 'syz.1.99': attribute type 3 has an invalid length.
[   74.148381][   T55] Bluetooth: hci0: command tx timeout
[   74.149035][ T5234] Bluetooth: hci1: command tx timeout
[   74.169889][ T6195] lo: entered allmulticast mode
[   74.173256][ T6195] lo: left allmulticast mode
[   74.229780][ T5234] Bluetooth: hci2: command tx timeout
[   74.252673][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.115'.
[   74.261923][ T6200] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.329219][ T5878] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   75.101089][ T6210] netlink: 788 bytes leftover after parsing attributes in process `syz.0.119'.
[   75.981279][ T6254] netlink: 'syz.1.140': attribute type 23 has an invalid length.
[   76.094365][ T6264] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.366703][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   76.370305][ T6281] netlink: 120 bytes leftover after parsing attributes in process `syz.1.153'.
[   76.373790][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   76.424878][ T6285] xfrm1: entered allmulticast mode
[   76.446683][ T6289] netlink: 'syz.2.156': attribute type 1 has an invalid length.
[   76.474108][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.476973][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.562635][ T6292] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.569756][ T6292] bond1: (slave bond2): making interface the new active one
[   76.583151][ T6292] bond1: (slave bond2): Enslaving as an active interface with an up link
[   76.602570][ T6289] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   76.640140][ T6298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.650077][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'.
[   76.657151][ T6289] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.730662][ T6298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.819985][ T6298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.932212][ T6298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.954421][ T6315] syzkaller1: entered promiscuous mode
[   76.956724][ T6315] syzkaller1: entered allmulticast mode
[   76.985290][ T6318] bond2: entered promiscuous mode
[   76.986964][ T6318] bond2: entered allmulticast mode
[   76.989876][ T6318] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.070998][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.124772][ T5719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.210660][ T5719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.228461][ T5719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.437317][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'.
[   77.440079][ T6345] syzkaller0: entered promiscuous mode
[   77.443042][ T6345] syzkaller0: entered allmulticast mode
[   77.982698][ T6371] syz.2.190 uses obsolete (PF_INET,SOCK_PACKET)
[   78.126452][ T6375] netlink: 224 bytes leftover after parsing attributes in process `syz.2.192'.
[   78.296684][ T6383] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.196'.
[   78.522937][ T6395] netlink: 'syz.1.202': attribute type 83 has an invalid length.
[   78.681147][ T6400] netlink: 240 bytes leftover after parsing attributes in process `syz.2.204'.
[   79.075735][ T6423] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.091217][ T6423] bond0: (slave bond3): Enslaving as an active interface with an up link
[   79.436177][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[   79.724480][ T6457] netlink: 'syz.2.231': attribute type 1 has an invalid length.
[   79.727029][ T6457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.231'.
[   79.915988][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'.
[   79.965538][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'.
[   81.238168][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'.
[   81.247535][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'.
[   81.257985][ T6493] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   81.356516][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[   81.360103][ T6506] netlink: 'syz.2.249': attribute type 39 has an invalid length.
[   81.405782][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'.
[   81.414445][ T6510] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   81.420276][ T6510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.571028][ T6526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.258'.
[   82.111482][ T6577] sctp: Trying to GSO but underlying device doesn't support it.
[   82.307417][ T6584] sctp: [Deprecated]: syz.2.285 (pid 6584) Use of int in max_burst socket option.
[   82.307417][ T6584] Use struct sctp_assoc_value instead
[   82.384360][ T6590] tipc: Started in network mode
[   82.386544][ T6590] tipc: Node identity 46e4bb5d6c9a, cluster identity 4711
[   82.391513][ T6590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.395478][ T6590] syzkaller0: entered promiscuous mode
[   82.401937][ T6590] syzkaller0: entered allmulticast mode
[   82.426653][ T6590] tipc: Resetting bearer <eth:syzkaller0>
[   82.439635][ T6589] tipc: Resetting bearer <eth:syzkaller0>
[   82.447967][ T6589] tipc: Disabling bearer <eth:syzkaller0>
[   82.531897][ T6601] batadv0: entered promiscuous mode
[   83.493398][   T10] IPVS: starting estimator thread 0...
[   83.587959][ T6625] IPVS: using max 45 ests per chain, 108000 per kthread
[   84.089877][ T6684] syzkaller0: entered promiscuous mode
[   84.092016][ T6684] syzkaller0: entered allmulticast mode
[   84.271642][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'.
[   84.870544][ T6742] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.351'.
[   85.233183][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.0.359'.
[   85.434126][ T6773] netlink: 'syz.0.365': attribute type 1 has an invalid length.
[   85.447849][ T6773] netlink: 224 bytes leftover after parsing attributes in process `syz.0.365'.
[   85.448922][ T6775] netem: change failed
[   85.682910][ T6794] netlink: 'syz.1.375': attribute type 23 has an invalid length.
[   86.011349][ T6818] netlink: 'syz.0.387': attribute type 4 has an invalid length.
[   86.113116][ T6827] netlink: 96 bytes leftover after parsing attributes in process `syz.1.390'.
[   86.478741][ T6856] netlink: 'syz.1.402': attribute type 2 has an invalid length.
[   86.543984][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[   86.575814][ T6861] netlink: 64 bytes leftover after parsing attributes in process `syz.1.404'.
[   86.720257][  T973] cfg80211: failed to load regulatory.db
[   86.725772][ T6873] netlink: 'syz.1.410': attribute type 83 has an invalid length.
[   87.253259][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[   87.258352][ T6922] veth1_macvtap: left promiscuous mode
[   87.306950][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[   87.315395][ T6926] veth0_to_bridge: entered promiscuous mode
[   87.323176][ T6926] veth0_to_bridge: left promiscuous mode
[   87.541874][ T6944] IPVS: Scheduler module ip_vs_sip not found
[   88.066437][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'.
[   88.240701][ T7016] syzkaller0: entered promiscuous mode
[   88.244261][ T7016] syzkaller0: entered allmulticast mode
[   89.124471][ T7053] netlink: 'syz.0.490': attribute type 83 has an invalid length.
[   89.813752][ T7076] syzkaller1: entered promiscuous mode
[   89.817270][ T7076] syzkaller1: entered allmulticast mode
[   89.825421][ T7078] nbd: socks must be embedded in a SOCK_ITEM attr
[   90.267698][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[   91.240462][ T7128] netlink: 'syz.1.527': attribute type 1 has an invalid length.
[   91.256104][ T7128] netlink: 'syz.1.527': attribute type 2 has an invalid length.
[   91.259645][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.527'.
[   91.693616][ T7152] pim6reg1: entered promiscuous mode
[   91.695762][ T7152] pim6reg1: entered allmulticast mode
[   92.743085][ T7235] netlink: 'syz.1.560': attribute type 3 has an invalid length.
[   92.745995][ T7235] netlink: 224 bytes leftover after parsing attributes in process `syz.1.560'.
[   92.796507][ T7238] netlink: 'syz.2.561': attribute type 1 has an invalid length.
[   92.871925][ T7238] bond4: (slave bridge3): making interface the new active one
[   92.876773][ T7238] bond4: (slave bridge3): Enslaving as an active interface with an up link
[   93.127301][ T7278] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.566'.
[   93.196155][ T7280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'.
[   93.454622][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[   93.540073][ T7312] netlink: 'syz.0.581': attribute type 12 has an invalid length.
[   93.691898][ T7326] Bluetooth: MGMT ver 1.23
[   94.191105][ T7370] bridge: RTM_NEWNEIGH with invalid state 0x8
[   94.276003][ T7376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.614'.
[   94.594769][ T7408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'.
[   94.763422][ T7422] ip6tnl1: entered promiscuous mode
[   94.765369][ T7422] ip6tnl1: entered allmulticast mode
[   94.775494][ T7422] team0: Device ip6tnl1 is of different type
[   95.214935][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'.
[   95.244547][ T7463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.655'.
[   95.851035][ T7517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.855422][ T7517] syzkaller0: entered promiscuous mode
[   95.859476][ T7517] syzkaller0: entered allmulticast mode
[   95.882768][ T7517] tipc: Resetting bearer <eth:syzkaller0>
[   95.887478][ T7515] tipc: Resetting bearer <eth:syzkaller0>
[   95.906828][ T7515] tipc: Disabling bearer <eth:syzkaller0>
[   96.060146][ T7535] smc: net device bond0 applied user defined pnetid SYZ2
[   96.063816][ T7535] netlink: 14 bytes leftover after parsing attributes in process `syz.1.686'.
[   96.090602][ T7535] smc: removing net device bond0 with user defined pnetid SYZ2
[   96.101027][ T7535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.129436][ T7535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.134884][ T7535] bond0 (unregistering): Released all slaves
[   96.218207][ T7547] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   96.494758][ T7572] netlink: 'syz.1.703': attribute type 1 has an invalid length.
[   97.843692][ T7604] netlink: 84 bytes leftover after parsing attributes in process `syz.0.716'.
[   97.847261][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.716'.
[   98.054633][ T7628] netlink: 36 bytes leftover after parsing attributes in process `syz.0.721'.
[   98.080116][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'.
[   98.114648][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[   98.118354][ T7634] netlink: 'syz.1.729': attribute type 20 has an invalid length.
[   98.121376][ T7634] netlink: 'syz.1.729': attribute type 21 has an invalid length.
[   98.211895][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'.
[   98.215320][ T7642] netlink: 'syz.1.733': attribute type 5 has an invalid length.
[   98.218939][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.733'.
[   98.272108][ T7646] netlink: 216 bytes leftover after parsing attributes in process `syz.1.735'.
[   98.275870][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.735'.
[   98.503160][ T7664] bridge0: port 3(macvlan2) entered blocking state
[   98.505545][ T7664] bridge0: port 3(macvlan2) entered disabled state
[   98.511405][ T7664] macvlan2: entered allmulticast mode
[   98.513594][ T7664] bridge0: entered allmulticast mode
[   98.520125][ T7664] macvlan2: left allmulticast mode
[   98.522174][ T7664] bridge0: left allmulticast mode
[   98.718135][ T7673] netlink: 'syz.1.748': attribute type 1 has an invalid length.
[   98.838427][ T7680] geneve2: entered promiscuous mode
[   98.873048][ T7684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.878501][ T7684] syzkaller0: entered promiscuous mode
[   98.888185][ T7684] syzkaller0: entered allmulticast mode
[   98.954210][ T7684] tipc: Resetting bearer <eth:syzkaller0>
[   98.960369][ T7682] tipc: Resetting bearer <eth:syzkaller0>
[   98.984821][ T7682] tipc: Disabling bearer <eth:syzkaller0>
[   99.433001][ T7712] openvswitch: netlink: Flow actions attr not present in new flow.
[   99.550583][ T7724] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   99.910137][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.913175][ T7740] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.130238][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.136850][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.242062][ T7740] bond2: left promiscuous mode
[  100.244177][ T7740] bond2: left allmulticast mode
[  100.262777][ T7753] dummy0: entered allmulticast mode
[  100.266187][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.271757][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.275108][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.280617][ T7751] dummy0: left allmulticast mode
[  100.283075][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.753814][ T7800] tipc: New replicast peer: 255.255.255.255
[  100.756977][ T7800] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.807427][ T7803] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  100.922027][ T7814] vti0: entered promiscuous mode
[  101.160886][ T7836] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  101.171581][ T7830] syzkaller0: entered promiscuous mode
[  101.173744][ T7830] syzkaller0: entered allmulticast mode
[  101.879328][    T9] tipc: Node number set to 712948573
[  102.159160][ T7836] bond1: (slave gretap1): making interface the new active one
[  102.163031][ T7836] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  102.197717][ T7836] syz.0.823 (7836) used greatest stack depth: 19816 bytes left
[  102.243118][ T7848] __nla_validate_parse: 8 callbacks suppressed
[  102.243134][ T7848] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.828'.
[  102.482179][ T7871] openvswitch: netlink: IP tunnel TTL not specified.
[  102.524997][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'.
[  103.345390][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'.
[  103.686427][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'.
[  103.734080][ T7953] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  103.741518][ T7953] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  103.764840][ T7956] pimreg: entered allmulticast mode
[  103.776446][ T7957] macvlan2: entered promiscuous mode
[  103.780371][ T7957] macvlan2: entered allmulticast mode
[  103.782809][ T7957] bond5: (slave macvlan2): Error -98 calling set_mac_address
[  103.804065][ T7956] pimreg: left allmulticast mode
[  104.144982][ T7983] sit1: entered promiscuous mode
[  104.321179][ T7997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.324167][ T7997] syzkaller0: entered promiscuous mode
[  104.325909][ T7997] syzkaller0: entered allmulticast mode
[  104.336988][ T7997] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  104.359518][ T7997] tipc: Resetting bearer <eth:syzkaller0>
[  104.370444][ T7996] tipc: Resetting bearer <eth:syzkaller0>
[  104.386809][ T7996] tipc: Disabling bearer <eth:syzkaller0>
[  104.528288][   T33] audit: type=1804 audit(1755203046.156:2): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.903" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1658 res=1 errno=0
[  104.536766][   T33] audit: type=1800 audit(1755203046.156:3): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.903" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1658 res=0 errno=0
[  104.607193][ T8018] ipvlan2: entered promiscuous mode
[  104.739162][ T8025] netlink: 'syz.1.908': attribute type 16 has an invalid length.
[  104.749772][ T8025] netlink: 'syz.1.908': attribute type 3 has an invalid length.
[  104.756948][ T8025] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.908'.
[  104.918222][ T8039] netlink: 'syz.1.916': attribute type 13 has an invalid length.
[  104.937563][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  104.941196][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'.
[  105.081115][ T1271] IPVS: starting estimator thread 0...
[  105.151829][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'.
[  105.169512][ T8055] IPVS: using max 35 ests per chain, 84000 per kthread
[  105.231403][ T8061] bridge_slave_1: left allmulticast mode
[  105.233719][ T8061] bridge_slave_1: left promiscuous mode
[  105.235988][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.249311][ T8061] bridge_slave_0: left allmulticast mode
[  105.251776][ T8061] bridge_slave_0: left promiscuous mode
[  105.254100][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.496622][ T8086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.936'.
[  105.546980][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.938'.
[  105.883653][    C0] Unknown status report in ack skb
[  106.112775][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.185837][ T8120] syzkaller1: entered promiscuous mode
[  106.189265][ T8120] syzkaller1: entered allmulticast mode
[  106.329871][ T8132] tipc: Invalid UDP bearer configuration
[  106.329918][ T8132] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.644759][ T8153] netlink: 'syz.1.967': attribute type 9 has an invalid length.
[  106.940419][ T8169] netlink: 'syz.1.975': attribute type 4 has an invalid length.
[  106.947468][ T8169] netlink: 'syz.1.975': attribute type 4 has an invalid length.
[  107.207476][ T8190] netlink: 'syz.1.983': attribute type 15 has an invalid length.
[  107.252683][ T8194] __nla_validate_parse: 3 callbacks suppressed
[  107.252700][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'.
[  107.267152][ T8196] netlink: 'syz.1.986': attribute type 7 has an invalid length.
[  107.271687][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'.
[  107.561857][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1001'.
[  107.668518][ T8236] tipc: Started in network mode
[  107.670149][ T8236] tipc: Node identity f6a27b82150e, cluster identity 4711
[  107.673155][ T8236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.676299][ T8236] syzkaller0: entered promiscuous mode
[  107.678599][ T8236] syzkaller0: entered allmulticast mode
[  107.704988][ T8236] tipc: Resetting bearer <eth:syzkaller0>
[  107.708620][ T8234] tipc: Resetting bearer <eth:syzkaller0>
[  107.731617][ T8234] tipc: Disabling bearer <eth:syzkaller0>
[  107.984580][ T8263] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  108.012577][ T8265] netlink: 'syz.0.1018': attribute type 2 has an invalid length.
[  108.015588][ T8265] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1018'.
[  108.091749][ T8271] openvswitch: netlink: Key type 251 is out of range max 32
[  108.164749][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'.
[  108.175103][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'.
[  108.463340][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'.
[  108.467320][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'.
[  108.479783][ T8293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.173718][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1047'.
[  109.207774][ T8327] Bluetooth: MGMT ver 1.23
[  109.534677][ T8339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.558402][ T8339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.574278][ T8339] bond0 (unregistering): Released all slaves
[  109.627900][ T8349] netlink: 'syz.1.1055': attribute type 3 has an invalid length.
[  109.774873][ T8353] netlink: 'syz.0.1057': attribute type 13 has an invalid length.
[  110.137263][ T8367] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  110.463795][ T8380] netlink: 'syz.0.1067': attribute type 23 has an invalid length.
[  110.582599][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  110.652791][ T8392] netlink: 'syz.1.1072': attribute type 5 has an invalid length.
[  110.800790][ T8403] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  111.035976][ T8422] bond0: (slave bond3): Error -95 calling ndo_bpf
[  111.292391][ T8436] delete_channel: no stack
[  111.471197][ T8451] netlink: 'syz.0.1099': attribute type 1 has an invalid length.
[  111.876829][ T8490] unknown channel width for channel at 909000KHz?
[  111.882709][ T8490] unknown channel width for channel at 909000KHz?
[  111.884792][ T8490] unknown channel width for channel at 909000KHz?
[  112.435725][ T8532] __nla_validate_parse: 2 callbacks suppressed
[  112.435737][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'.
[  112.616785][ T8550] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.1142'.
[  112.922022][ T8574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1153'.
[  112.984195][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1158'.
[  113.114017][ T8597] netlink: 'syz.0.1164': attribute type 1 has an invalid length.
[  113.135687][ T8591] "syz.1.1160" (8591) uses obsolete ecb(arc4) skcipher
[  113.135960][ T8597] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.200236][ T8597] bond2: (slave veth5): Enslaving as an active interface with a down link
[  113.239619][ T8597] 8021q: adding VLAN 0 to HW filter on device batadv1
[  113.242861][ T8597] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  113.740166][ T5719] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  114.164365][ T8616] netlink: 'syz.0.1171': attribute type 1 has an invalid length.
[  114.169573][ T8616] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1171'.
[  114.430189][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'.
[  114.634782][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'.
[  115.026731][ T8620] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  115.031513][ T8620] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  115.118309][ T8657] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1190'.
[  115.131520][ T8657] netlink: 'syz.1.1190': attribute type 1 has an invalid length.
[  115.156638][ T8657] smc: adding net device bond0 with user defined pnetid SYZ2
[  115.164456][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.186468][ T8657] bond0: (slave gretap2): making interface the new active one
[  115.191052][ T8657] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  115.353160][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'.
[  115.395436][ T8679] netlink: 'syz.1.1199': attribute type 3 has an invalid length.
[  116.013658][ T8717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1218'.
[  116.555990][ T8756] netlink: 'syz.2.1237': attribute type 4 has an invalid length.
[  116.563101][ T8756] tipc: Started in network mode
[  116.564845][ T8756] tipc: Node identity , cluster identity 4711
[  116.566739][ T8756] tipc: Failed to obtain node identity
[  116.569089][ T8756] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  116.782625][ T8775] netlink: 'syz.2.1244': attribute type 15 has an invalid length.
[  116.801590][ T8775] netlink: 'syz.2.1244': attribute type 15 has an invalid length.
[  116.801611][ T5719] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.819386][ T5719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.822906][ T5719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.826604][ T5719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
Connection to localhost closed by remote host.
[  117.580849][ T5853] syz-executor (5853) used greatest stack depth: 19768 bytes left
[  117.821894][   T12] bridge_slave_1: left allmulticast mode
[  117.824278][   T12] bridge_slave_1: left promiscuous mode
[  117.827401][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.836259][   T12] bridge_slave_0: left allmulticast mode
[  117.840294][   T12] bridge_slave_0: left promiscuous mode
[  117.842776][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.988142][   T12] bond0 (unregistering): (slave gretap2): Releasing active interface
[  118.312859][   T12] bond1 (unregistering): Released all slaves
[  118.381147][   T12] bond2 (unregistering): Released all slaves
[  118.388784][   T12] bond3 (unregistering): Released all slaves
[  118.466352][   T12] smc: removing net device bond0 with user defined pnetid SYZ2
[  118.470889][   T12] bond0 (unregistering): Released all slaves
[  118.561699][   T12] tipc: Left network mode
[  118.726393][   T12] hsr_slave_0: left promiscuous mode
[  118.731352][   T12] hsr_slave_1: left promiscuous mode
[  118.734064][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.737183][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.041359][   T12] team0 (unregistering): Port device team_slave_1 removed
[  119.067834][   T12] team0 (unregistering): Port device team_slave_0 removed
[  119.630054][   T12] IPVS: stop unused estimator thread 0...
[  119.725153][ T5878] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.771466][ T5878] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.819459][ T5878] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.864139][ T5878] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.016516][ T5878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.021180][ T5878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.102292][ T5878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.106330][ T5878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.165363][ T5878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.176831][ T5878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.250294][ T5878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.256370][ T5878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.390173][ T5878] bridge_slave_1: left allmulticast mode
[  120.392473][ T5878] bridge_slave_1: left promiscuous mode
[  120.394830][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.401590][ T5878] bridge_slave_0: left allmulticast mode
[  120.403804][ T5878] bridge_slave_0: left promiscuous mode
[  120.406448][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.683555][ T5878] bond1 (unregistering): (slave gretap1): Releasing active interface
[  120.823382][ T5878] bond1 (unregistering): Released all slaves
[  120.833607][ T5878] bond0 (unregistering): Released all slaves
[  120.911759][ T5878] bond2 (unregistering): (slave veth5): Releasing active interface
[  120.916529][ T5878] bond2 (unregistering): Released all slaves
[  121.037059][ T5878] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  121.276170][ T5878] bond4 (unregistering): (slave bridge3): Releasing active interface
[  121.403891][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.410429][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.415922][ T5878] bond0 (unregistering): (slave bond3): Releasing backup interface
[  121.420050][ T5878] bond0 (unregistering): Released all slaves
[  121.504423][ T5878] bond1 (unregistering): (slave bond2): Releasing backup interface
[  121.508547][ T5878] bond1 (unregistering): Released all slaves
[  121.592612][ T5878] bond2 (unregistering): Released all slaves
[  121.674984][ T5878] bond3 (unregistering): Released all slaves
[  121.686475][ T5878] bond4 (unregistering): Released all slaves
[  121.698031][ T5878] bond5 (unregistering): Released all slaves
[  121.821995][ T5878] tipc: Disabling bearer <udp:syz2>
[  121.833367][ T5878] tipc: Left network mode
[  122.288811][ T5878] hsr_slave_0: left promiscuous mode
[  122.291643][ T5878] hsr_slave_1: left promiscuous mode
[  122.294385][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.297271][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.306280][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.313784][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.327804][ T5878] hsr_slave_0: left promiscuous mode
[  122.333821][ T5878] hsr_slave_1: left promiscuous mode
[  122.338348][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.341161][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.344755][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.347807][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.371159][ T5878] veth1_macvtap: left promiscuous mode
[  122.373666][ T5878] veth0_macvtap: left promiscuous mode
[  122.375995][ T5878] veth1_vlan: left promiscuous mode
[  122.378626][ T5878] veth0_vlan: left promiscuous mode
[  122.384344][ T5878] veth0_macvtap: left promiscuous mode
[  122.386616][ T5878] veth1_vlan: left promiscuous mode
[  122.392542][ T5878] veth0_vlan: left promiscuous mode
[  122.877186][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  122.909852][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  123.443327][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  123.467898][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  124.201003][ T5878] IPVS: stop unused estimator thread 0...
[  124.219568][ T5878] ------------[ cut here ]------------
[  124.221737][ T5878] WARNING: CPU: 1 PID: 5878 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  124.224835][ T5878] Modules linked in:
[  124.226225][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  124.232326][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.236324][ T5878] Workqueue: netns cleanup_net
[  124.238590][ T5878] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  124.240912][ T5878] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  124.248987][ T5878] RSP: 0018:ffffc9000342f898 EFLAGS: 00010293
[  124.251407][ T5878] RAX: ffffffff8a21553f RBX: ffff888109d62440 RCX: ffff88801faf8000
[  124.254537][ T5878] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801faf8000
[  124.257993][ T5878] RBP: ffffc9000342f9b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  124.261153][ T5878] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  124.264240][ T5878] R13: 1ffff92000685f40 R14: ffff888109d638c0 R15: dffffc0000000000
[  124.267338][ T5878] FS:  0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  124.271169][ T5878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  124.273741][ T5878] CR2: 00007fff2fe275a8 CR3: 0000000039a0a000 CR4: 00000000000006f0
[  124.276869][ T5878] Call Trace:
[  124.278656][ T5878]  <TASK>
[  124.279871][ T5878]  xfrm_net_exit+0x2d/0x70
[  124.281667][ T5878]  ops_undo_list+0x49a/0x990
[  124.283533][ T5878]  ? __pfx_ops_undo_list+0x10/0x10
[  124.285588][ T5878]  ? do_raw_spin_unlock+0x4d/0x240
[  124.287990][ T5878]  cleanup_net+0x4c5/0x800
[  124.289819][ T5878]  ? __pfx_cleanup_net+0x10/0x10
[  124.291778][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.293865][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  124.296157][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  124.298691][ T5878]  process_scheduled_works+0xae1/0x17b0
[  124.300930][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.303326][ T5878]  worker_thread+0x8a0/0xda0
[  124.305122][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.307591][ T5878]  ? __kthread_parkme+0x7b/0x200
[  124.309719][ T5878]  kthread+0x711/0x8a0
[  124.311431][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  124.313454][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.315334][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.317423][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.319639][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.321476][ T5878]  ret_from_fork+0x3fc/0x770
[  124.323289][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  124.325314][ T5878]  ? __switch_to_asm+0x39/0x70
[  124.327231][ T5878]  ? __switch_to_asm+0x33/0x70
[  124.329266][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.331114][ T5878]  ret_from_fork_asm+0x1a/0x30
[  124.333025][ T5878]  </TASK>
[  124.334284][ T5878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  124.337155][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u8:4 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  124.341933][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.345881][ T5878] Workqueue: netns cleanup_net
[  124.347864][ T5878] Call Trace:
[  124.349191][ T5878]  <TASK>
[  124.350349][ T5878]  dump_stack_lvl+0x99/0x250
[  124.352149][ T5878]  ? __asan_memcpy+0x40/0x70
[  124.353970][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.356061][ T5878]  ? __pfx__printk+0x10/0x10
[  124.357935][ T5878]  vpanic+0x281/0x750
[  124.359528][ T5878]  ? __pfx__printk+0x10/0x10
[  124.361365][ T5878]  ? __pfx_vpanic+0x10/0x10
[  124.363184][ T5878]  ? is_bpf_text_address+0x292/0x2b0
[  124.365227][ T5878]  panic+0xb9/0xc0
[  124.366684][ T5878]  ? __pfx_panic+0x10/0x10
[  124.368437][ T5878]  __warn+0x31b/0x4b0
[  124.370198][ T5878]  ? xfrm_state_fini+0x270/0x2f0
[  124.372183][ T5878]  ? xfrm_state_fini+0x270/0x2f0
[  124.374192][ T5878]  report_bug+0x2be/0x4f0
[  124.375988][ T5878]  ? xfrm_state_fini+0x270/0x2f0
[  124.377987][ T5878]  ? xfrm_state_fini+0x270/0x2f0
[  124.379885][ T5878]  ? xfrm_state_fini+0x272/0x2f0
[  124.381772][ T5878]  handle_bug+0x84/0x160
[  124.383420][ T5878]  exc_invalid_op+0x1a/0x50
[  124.385125][ T5878]  asm_exc_invalid_op+0x1a/0x20
[  124.386992][ T5878] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  124.389118][ T5878] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 28 c1 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d6 7e e2 f7 e8 71 56 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 63 56 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  124.396289][ T5878] RSP: 0018:ffffc9000342f898 EFLAGS: 00010293
[  124.398700][ T5878] RAX: ffffffff8a21553f RBX: ffff888109d62440 RCX: ffff88801faf8000
[  124.401787][ T5878] RDX: 0000000000000000 RSI: ffffffff8dba3969 RDI: ffff88801faf8000
[  124.404923][ T5878] RBP: ffffc9000342f9b0 R08: ffffffff8fa34737 R09: 1ffffffff1f468e6
[  124.408065][ T5878] R10: dffffc0000000000 R11: fffffbfff1f468e7 R12: ffffffff8f62d760
[  124.411209][ T5878] R13: 1ffff92000685f40 R14: ffff888109d638c0 R15: dffffc0000000000
[  124.414355][ T5878]  ? xfrm_state_fini+0x26f/0x2f0
[  124.416342][ T5878]  ? xfrm_state_fini+0x26f/0x2f0
[  124.418304][ T5878]  xfrm_net_exit+0x2d/0x70
[  124.420077][ T5878]  ops_undo_list+0x49a/0x990
[  124.421954][ T5878]  ? __pfx_ops_undo_list+0x10/0x10
[  124.424016][ T5878]  ? do_raw_spin_unlock+0x4d/0x240
[  124.426071][ T5878]  cleanup_net+0x4c5/0x800
[  124.427837][ T5878]  ? __pfx_cleanup_net+0x10/0x10
[  124.429748][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.431834][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  124.434141][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  124.436404][ T5878]  process_scheduled_works+0xae1/0x17b0
[  124.438649][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  124.440996][ T5878]  worker_thread+0x8a0/0xda0
[  124.442831][ T5878]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.445340][ T5878]  ? __kthread_parkme+0x7b/0x200
[  124.447345][ T5878]  kthread+0x711/0x8a0
[  124.449001][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  124.451043][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.452878][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  124.454960][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.457008][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.458881][ T5878]  ret_from_fork+0x3fc/0x770
[  124.460735][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  124.462790][ T5878]  ? __switch_to_asm+0x39/0x70
[  124.464702][ T5878]  ? __switch_to_asm+0x33/0x70
[  124.466639][ T5878]  ? __pfx_kthread+0x10/0x10
[  124.468598][ T5878]  ret_from_fork_asm+0x1a/0x30
[  124.470541][ T5878]  </TASK>
[  124.472475][ T5878] Kernel Offset: disabled
[  124.474201][ T5878] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:24:26  Registers:
info registers vcpu 0

CPU#0
RAX=87baaf097005c600 RBX=ffffffff81968308 RCX=87baaf097005c600 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c8bcfe9000 CR3=000000010deb0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=73616c632f737973 2f002f74656e2f73 XMM03=0000000000000000 0000000000000073
XMM04=7373616c632f7379 732f002f74656e2f XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000342f030
R8 =ffff888107608237 R9 =1ffff11020ec1046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f4 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff2fe275a8 CR3=0000000039a0a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0000000000000071 0000000000000000
XMM06=ff00000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=00306e6170772f74 656e2f307968702f
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
