last executing test programs:

1m40.782484855s ago: executing program 2 (id=779):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

1m40.678204997s ago: executing program 2 (id=781):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x60, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

1m39.293161698s ago: executing program 0 (id=807):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

1m39.222256393s ago: executing program 1 (id=808):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fbdbdf25050000000c00098008000200030000000c000280080001"], 0x2c}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1m39.222123037s ago: executing program 0 (id=809):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23444, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)

1m39.133739002s ago: executing program 0 (id=810):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)
connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0)

1m39.133491274s ago: executing program 1 (id=811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6}]}]}, 0x4c}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

1m39.057900538s ago: executing program 0 (id=812):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000180))
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d00000000009500000700000000cb80945faf008fdc7f54c50fcbbf902a7aef050b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x3, 0x1}, {0x0, 0x1, 0x1}}], 0x8)
bind$can_raw(r2, &(0x7f0000000480), 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000068c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "d1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r7=>0x0})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r9, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x70, r9, 0x100, 0x70bd25, 0x5, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xfffffffffffffd12, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x200000c0}, 0x81)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000004feffff070004000000000008000500ac1414000f000600"], 0x38}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2a4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x64, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20080)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r12, 0x0, 0x1}, 0x48)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x1287, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xfffffffffffffce6, 0x4, {0x300}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0xe0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x97, 0x6, "cd5e107672f1d0d759367a1a0035d0f4d4377eec1d6267403868a7f725ea253a1328a580c170e55f6612e4982f3ca958756cc38074ee488c776ef66cabf6fd491e68fdf429a8f8e671bf1760f4f572d7c64604aa6b3158e3b1045cc1a04c42836d79d4553f1205d5b0a21e4c35382e3cc28830bf2c9caa3610c0b242356c96bd821b7256c65da880c826623fa5d0895f483d7e"}, @NFTA_TABLE_USERDATA={0x34, 0x6, "7fff15fb3961774564ab50b7e914c13554ed651c106739ab120ad511206dad86e0a6c7f8597ab04feee729bfdbb3eff6"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x12, 0x6, "f8f6d50a4facec4f75aba566326e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0xe8, 0x8, 0xa, 0x506, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x9c, 0x7, 0x1, 0x0, "52c9ce2e20641f7ea3e4608e83afe56452a7349e4e2cd846942ac336f1858940283fa78b424aad44a79e267f6d5f5964f4b7735f0ba6eb5c2526143cf9f30cf196bdb7db59f24e5de6c2abf187beb66dbdb7e4129a31ef7c66874e990c924079d5c81917d4910aed1df6b935c42cc1d012ce0daf91663c27f82ca6fe24e36b3c920e0da76ad6504694780629b945f3318b18eb6e26d6daf3"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_USERDATA={0x2a, 0x7, 0x1, 0x0, "f7e21b21ff3ed32ad0c7c569969f13b1340641156409fe29d4830ab2e2f056b90de3c0f4c8c8"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r13 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r14=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r14, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

1m38.990317438s ago: executing program 1 (id=813):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xfffffffffffffd8f, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000955ad9b34f2c96825323e36b05484eaaad3ca4f701e06ec9853e7dae970072acaf62da5aac9d7588e7f28cc1a1936b4fd9198322608b7c6593207468a34a29f93190d0ebe93c401a9e2339be61052905a5c66128cb350a77052ab4db0f4c6dc34b6219e351b65007f8790ceb146589fcaf9661f39e63bb928b76b6952ab38767e9a4fe54bc2cb67f978d21822f012b63068cac24e247edae0aaece2bfba5f4bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000ec0)={0x4, {{0xa, 0x4e23, 0x8, @mcast1, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}}, {{0xa, 0x4e21, 0x2, @loopback, 0xfffffffb}}]}, 0x190)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x0, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xf, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x2, 0xb}, {0x3, 0x6, 0x1}, {0x0, 0x1, 0x1}, 0xc, 0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010000000c0000000c000000070000000f000000000000090500000000615f002e5f00"], &(0x7f0000000640)=""/21, 0x2b, 0x15, 0x1, 0x600}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x4, 0xa, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50)
close(0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)

1m38.793012331s ago: executing program 2 (id=814):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0xfffffffe, 0x4)

1m38.693937458s ago: executing program 1 (id=815):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0x2, 0x4)

1m38.629576358s ago: executing program 0 (id=816):
connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r0, &(0x7f0000000380)}, 0x20)

1m38.548504407s ago: executing program 0 (id=817):
r0 = socket$packet(0x11, 0xa, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0xfffffffc}]})
write$ppp(r1, &(0x7f0000000600)="0200", 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)

1m38.294204052s ago: executing program 2 (id=818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

1m38.241756055s ago: executing program 1 (id=819):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x400, 0xbf28, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000540)='ipvlan1\x00', 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

1m38.241466735s ago: executing program 2 (id=820):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

1m18.712902921s ago: executing program 1 (id=821):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f0000000180)="300000001e005f0214f6ff03000000f90700010000000000000008000900120000000000db32d4a14d0000000000000045", 0x31)

1m12.159452939s ago: executing program 2 (id=822):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000000090001"], 0xb8}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)

56.452819522s ago: executing program 32 (id=817):
r0 = socket$packet(0x11, 0xa, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0xfffffffc}]})
write$ppp(r1, &(0x7f0000000600)="0200", 0x2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4, 0x0, 0xa6b9}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x2}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)

32.347466403s ago: executing program 33 (id=821):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f0000000180)="300000001e005f0214f6ff03000000f90700010000000000000008000900120000000000db32d4a14d0000000000000045", 0x31)

31.423025394s ago: executing program 34 (id=822):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000000090001"], 0xb8}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)

2.191411302s ago: executing program 5 (id=1357):
socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006", @ANYRES32=0x0, @ANYBLOB="9bb89d6bc52ef377a01ff7eb1568257dd36482dd75dab204a09dee121a74e9a739"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.753343438s ago: executing program 4 (id=1376):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140))

1.682977488s ago: executing program 4 (id=1379):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123dee2dd2b184b256482322de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d"], 0xe0}], 0x1}, 0x40040)

1.633015283s ago: executing program 4 (id=1380):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

1.5927618s ago: executing program 4 (id=1381):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendmsg$can_bcm(r0, 0x0, 0x4804)
syz_genetlink_get_family_id$smc(0x0, r0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r0, &(0x7f0000000000)='\"', 0x1)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

1.51128384s ago: executing program 3 (id=1383):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

1.510936119s ago: executing program 3 (id=1384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000003d0007010000000000000000027c0000140037800d0003"], 0x28}}, 0xc000)

1.425523891s ago: executing program 3 (id=1385):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

1.409985774s ago: executing program 3 (id=1386):
r0 = socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000000000000007020000f8ffffffb70300a208000000b70400000000000085000000030000009500000000000000980c6fc45efa2b180efe"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000200c12e50000000007b00"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.221301429s ago: executing program 5 (id=1387):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

952.329638ms ago: executing program 5 (id=1388):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)

812.279174ms ago: executing program 5 (id=1389):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

722.889204ms ago: executing program 5 (id=1390):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080))
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

570.120851ms ago: executing program 5 (id=1391):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18)
unshare(0x2a020400)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4048000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)

494.907542ms ago: executing program 3 (id=1392):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

421.130514ms ago: executing program 3 (id=1393):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r1, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r2, 0x0, 0xffffffff004)

428.279µs ago: executing program 4 (id=1394):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000100), 0x4)

0s ago: executing program 4 (id=1395):
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0)
syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
socket$kcm(0xf, 0x0, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{<r7=>0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000017c0)={0x0, r7, "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", "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"})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:60820' (ED25519) to the list of known hosts.
syzkaller login: [   49.022589][ T5789] cgroup: Unknown subsys name 'net'
[   49.143437][ T5789] cgroup: Unknown subsys name 'cpuset'
[   49.149287][ T5789] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.570828][ T5789] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.353950][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.359151][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.361843][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.364308][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.366912][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.379940][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.383064][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.385687][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.424270][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.427865][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.472435][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.476142][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.482278][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.487210][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.491209][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.696518][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   54.704277][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   54.720047][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.837510][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.841844][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.845162][ T5820] bridge_slave_0: entered allmulticast mode
[   54.849525][ T5820] bridge_slave_0: entered promiscuous mode
[   54.857439][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.860223][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.862871][ T5824] bridge_slave_0: entered allmulticast mode
[   54.865643][ T5824] bridge_slave_0: entered promiscuous mode
[   54.870010][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.872919][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.875918][ T5820] bridge_slave_1: entered allmulticast mode
[   54.880168][ T5820] bridge_slave_1: entered promiscuous mode
[   54.892476][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.894986][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.897750][ T5824] bridge_slave_1: entered allmulticast mode
[   54.902425][ T5824] bridge_slave_1: entered promiscuous mode
[   54.954021][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.967052][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.970198][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.973185][ T5830] bridge_slave_0: entered allmulticast mode
[   54.976935][ T5830] bridge_slave_0: entered promiscuous mode
[   54.981817][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.984265][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.986703][ T5830] bridge_slave_1: entered allmulticast mode
[   54.990184][ T5830] bridge_slave_1: entered promiscuous mode
[   54.993726][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.998135][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.036943][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.043287][ T5820] team0: Port device team_slave_0 added
[   55.069331][ T5820] team0: Port device team_slave_1 added
[   55.086592][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.107185][ T5824] team0: Port device team_slave_0 added
[   55.110909][ T5824] team0: Port device team_slave_1 added
[   55.124135][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.128678][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.132906][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.144393][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.178696][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.181983][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.192427][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.197883][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.201096][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.211596][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.217467][ T5830] team0: Port device team_slave_0 added
[   55.222875][ T5830] team0: Port device team_slave_1 added
[   55.225236][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.227780][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.236213][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.266705][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.269166][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.278392][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.304871][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.307281][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.316170][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.346884][ T5824] hsr_slave_0: entered promiscuous mode
[   55.349504][ T5824] hsr_slave_1: entered promiscuous mode
[   55.356779][ T5820] hsr_slave_0: entered promiscuous mode
[   55.360236][ T5820] hsr_slave_1: entered promiscuous mode
[   55.363246][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   55.365647][ T5820] Cannot create hsr debugfs directory
[   55.396165][ T5830] hsr_slave_0: entered promiscuous mode
[   55.398437][ T5830] hsr_slave_1: entered promiscuous mode
[   55.401634][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   55.403568][ T5830] Cannot create hsr debugfs directory
[   55.635737][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.644329][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.651582][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.664934][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.714818][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.720091][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.725520][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.749279][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.777144][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.791099][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.804461][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.811768][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.912858][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.942486][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   55.959221][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.961552][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.968347][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.980886][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.983838][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.002118][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.018272][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   56.028649][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   56.044247][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.047083][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.058373][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.060861][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.067139][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.069863][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.080859][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.083580][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.168500][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.247218][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.295883][ T5824] veth0_vlan: entered promiscuous mode
[   56.306284][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.312576][ T5824] veth1_vlan: entered promiscuous mode
[   56.340830][ T5824] veth0_macvtap: entered promiscuous mode
[   56.344591][ T5824] veth1_macvtap: entered promiscuous mode
[   56.351312][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.377072][ T5820] veth0_vlan: entered promiscuous mode
[   56.382133][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.391539][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.397336][ T5820] veth1_vlan: entered promiscuous mode
[   56.410911][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.420759][ T5825] Bluetooth: hci1: command tx timeout
[   56.423464][ T5830] veth0_vlan: entered promiscuous mode
[   56.426372][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.429677][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.440592][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.458709][ T5830] veth1_vlan: entered promiscuous mode
[   56.481331][ T5820] veth0_macvtap: entered promiscuous mode
[   56.498203][ T5820] veth1_macvtap: entered promiscuous mode
[   56.501099][ T5825] Bluetooth: hci0: command tx timeout
[   56.542508][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.543807][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.545596][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.565386][ T5830] veth0_macvtap: entered promiscuous mode
[   56.577070][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.588204][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.592910][ T5825] Bluetooth: hci2: command tx timeout
[   56.598061][ T5830] veth1_macvtap: entered promiscuous mode
[   56.602578][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.605449][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.608677][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.608772][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.616358][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.658770][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.660076][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.673250][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.700390][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.705999][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.727173][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.733958][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.778454][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.785824][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.852533][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.855900][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.872249][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.875699][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.917493][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.921412][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.087756][ T5903] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   57.099160][ T5901] IPVS: stopping backup sync thread 5903 ...
[   57.358080][ T5923] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   57.367244][ T5925] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.515343][ T5937] !: renamed from dummy0 (while UP)
[   57.593349][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   57.598303][ T5943] netlink: 596 bytes leftover after parsing attributes in process `syz.1.26'.
[   57.714529][ T5955] Bluetooth: MGMT ver 1.23
[   57.933229][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'.
[   57.936108][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   57.948695][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   58.360331][ T6017] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   58.364000][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'.
[   58.499238][ T5825] Bluetooth: hci1: command tx timeout
[   58.579101][ T5825] Bluetooth: hci0: command tx timeout
[   58.659315][ T5825] Bluetooth: hci2: command tx timeout
[   58.764599][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'.
[   58.983157][ T6079] netlink: 'syz.2.54': attribute type 10 has an invalid length.
[   58.987118][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   58.991306][ T6079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.54'.
[   58.995091][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   59.088409][ T6083] Zero length message leads to an empty skb
[   59.875237][ T6124] netlink: 'syz.2.72': attribute type 29 has an invalid length.
[   59.985222][ T6128] IPv6: syztnl1: Disabled Multicast RS
[   60.081513][ T6136] syz.0.78 uses obsolete (PF_INET,SOCK_PACKET)
[   60.364691][ T6162] netlink: 'syz.1.90': attribute type 2 has an invalid length.
[   60.447797][ T6170] atomic_op ffff888021081198 conn xmit_atomic 0000000000000000
[   60.533468][ T6176] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   60.580342][ T5825] Bluetooth: hci1: command tx timeout
[   60.632187][ T6184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.665994][ T5825] Bluetooth: hci0: command tx timeout
[   60.739181][ T5825] Bluetooth: hci2: command tx timeout
[   61.735530][ T5886] IPVS: starting estimator thread 0...
[   61.819545][ T6219] IPVS: using max 79 ests per chain, 189600 per kthread
[   61.981141][ T6230] veth3: entered promiscuous mode
[   62.131366][ T6236] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   62.371845][ T6245] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   62.659062][ T5825] Bluetooth: hci1: command tx timeout
[   62.739886][ T5825] Bluetooth: hci0: command tx timeout
[   62.819197][ T5825] Bluetooth: hci2: command tx timeout
[   62.857034][ T6265] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.988406][ T6273] __nla_validate_parse: 9 callbacks suppressed
[   62.988420][ T6273] netlink: 324 bytes leftover after parsing attributes in process `syz.2.137'.
[   63.119927][ T6281] netlink: 'syz.2.141': attribute type 1 has an invalid length.
[   63.461389][ T6309] ip6erspan0: entered promiscuous mode
[   63.770021][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.586024][ T6357] syzkaller0: entered promiscuous mode
[   64.588293][ T6357] syzkaller0: entered allmulticast mode
[   65.365653][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.194'.
[   65.385402][ T6398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.194'.
[   65.538326][ T6402] batman_adv: batadv0: Adding interface: ip6gretap1
[   65.541457][ T6402] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.554068][ T6402] batman_adv: batadv0: Interface activated: ip6gretap1
[   66.088766][ T6423] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.205'.
[   66.316312][ T6445] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   66.330684][ T6446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.216'.
[   66.334155][ T6446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.216'.
[   66.360349][ T6446] netlink: 52 bytes leftover after parsing attributes in process `syz.1.216'.
[   66.379626][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.216'.
[   67.089659][ T6503] netlink: 124 bytes leftover after parsing attributes in process `syz.2.241'.
[   67.158291][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   67.276485][ T6531] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   67.846722][ T6579] netlink: 'syz.1.276': attribute type 15 has an invalid length.
[   68.144549][ T6606] delete_channel: no stack
[   68.296775][ T6621] __nla_validate_parse: 2 callbacks suppressed
[   68.296821][ T6621] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.297'.
[   68.304966][ T6621] openvswitch: netlink: Message has 5 unknown bytes.
[   68.633743][ T6646] macvtap0: refused to change device tx_queue_len
[   68.636617][ T6646] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   68.954903][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.319'.
[   69.088024][ T6678] netlink: 508 bytes leftover after parsing attributes in process `syz.2.324'.
[   69.105607][ T6680] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   69.112195][ T6680] netlink: 244 bytes leftover after parsing attributes in process `syz.1.325'.
[   69.134200][ T6682] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   69.254337][ T6696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'.
[   69.625476][ T6733] netlink: 'syz.1.345': attribute type 9 has an invalid length.
[   69.749554][ T6751] netlink: 'syz.0.354': attribute type 1 has an invalid length.
[   69.777345][ T6751] 8021q: adding VLAN 0 to HW filter on device bond2
[   69.793329][ T6754] tipc: Started in network mode
[   69.795235][ T6754] tipc: Node identity ee2a562128ad, cluster identity 4711
[   69.798011][ T6754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.813351][ T6751] bond2: (slave geneve2): making interface the new active one
[   69.816896][ T6751] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   69.821287][ T6754] syzkaller0: entered promiscuous mode
[   69.823360][ T6754] syzkaller0: entered allmulticast mode
[   69.836824][ T6754] tipc: Resetting bearer <eth:syzkaller0>
[   69.840375][ T6753] tipc: Resetting bearer <eth:syzkaller0>
[   69.845494][ T6751] syz.0.354 (6751) used greatest stack depth: 19192 bytes left
[   69.848543][ T6753] tipc: Disabling bearer <eth:syzkaller0>
[   70.073474][ T6770] netlink: 'syz.0.357': attribute type 4 has an invalid length.
[   70.681321][ T6799] netlink: 'syz.1.375': attribute type 64 has an invalid length.
[   70.691599][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[   71.075078][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.077384][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.157251][ T6826] netlink: 'syz.2.388': attribute type 29 has an invalid length.
[   71.160574][ T6826] netlink: 'syz.2.388': attribute type 29 has an invalid length.
[   71.163277][ T6826] netlink: 'syz.2.388': attribute type 29 has an invalid length.
[   71.166097][ T6826] netlink: 'syz.2.388': attribute type 29 has an invalid length.
[   71.207490][ T6827] bond3: (slave gretap2): making interface the new active one
[   71.212497][ T6827] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   71.396659][ T6838] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   71.702406][ T6853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'.
[   71.705290][ T6853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.400'.
[   71.770168][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'.
[   72.822926][ T6805] Set syz1 is full, maxelem 65536 reached
[   73.234158][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.236641][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   73.280442][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.607399][ T6963] 8021q: adding VLAN 0 to HW filter on device team0
[   73.618904][ T6963] bond0: (slave team0): Enslaving as an active interface with an up link
[   73.636666][ T6962] delete_channel: no stack
[   73.672994][ T6969] sctp: [Deprecated]: syz.1.442 (pid 6969) Use of struct sctp_assoc_value in delayed_ack socket option.
[   73.672994][ T6969] Use struct sctp_sack_info instead
[   73.727854][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'.
[   73.894070][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[   74.224341][ T7021] validate_nla: 24 callbacks suppressed
[   74.224357][ T7021] netlink: 'syz.1.467': attribute type 1 has an invalid length.
[   74.233273][ T7021] netlink: 'syz.1.467': attribute type 2 has an invalid length.
[   74.276419][ T7022] netlink: 56 bytes leftover after parsing attributes in process `syz.2.466'.
[   74.296699][ T7022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.437866][ T7037] netlink: 'syz.0.472': attribute type 3 has an invalid length.
[   74.487529][ T7041] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   74.544101][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[   74.549324][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'.
[   74.787585][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'.
[   74.944049][ T7081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.493'.
[   74.961928][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.487289][ T7113] nbd: must specify a size in bytes for the device
[   75.554132][ T7115] vxcan3: entered allmulticast mode
[   76.181018][ T7165] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   76.216786][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[   76.231842][ T7174] vlan0: entered promiscuous mode
[   76.262046][ T7178] netlink: 516 bytes leftover after parsing attributes in process `syz.1.535'.
[   76.271724][ T7180] netlink: 'syz.2.536': attribute type 21 has an invalid length.
[   76.274404][ T7180] netlink: 128 bytes leftover after parsing attributes in process `syz.2.536'.
[   78.099227][ T5825] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   78.105630][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout
[   78.732392][ T7287] __nla_validate_parse: 9 callbacks suppressed
[   78.732406][ T7287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.579'.
[   78.761404][ T7287] unsupported nlmsg_type 40
[   78.911679][ T7293] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.870557][ T7298] delete_channel: no stack
[   80.469613][ T7347] syzkaller0: entered promiscuous mode
[   80.483309][ T7347] syzkaller0: entered allmulticast mode
[   80.645684][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'.
[   81.302508][   T24] cfg80211: failed to load regulatory.db
[   82.316740][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'.
[   82.964715][ T7380] syzkaller1: entered promiscuous mode
[   82.966696][ T7380] syzkaller1: entered allmulticast mode
[   83.151524][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.627'.
[   83.156413][ T7406] netlink: 'syz.1.627': attribute type 2 has an invalid length.
[   83.160317][ T7406] netlink: 'syz.1.627': attribute type 1 has an invalid length.
[   83.162881][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'.
[   83.655493][ T7432] netlink: 'syz.2.637': attribute type 10 has an invalid length.
[   83.695899][ T7432] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.711054][ T7432] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   83.752025][ T7434] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[   83.969183][ T7442] netlink: 'syz.1.642': attribute type 12 has an invalid length.
[   83.973283][ T7442] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.642'.
[   84.267521][ T7458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.651'.
[   84.531661][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[   84.554527][ T7472] netlink: 'syz.0.658': attribute type 32 has an invalid length.
[   84.571933][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[   84.575096][ T7472] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   84.896684][ T7502] tap0: tun_chr_ioctl cmd 1074025677
[   84.898524][ T7502] tap0: linktype set to 804
[   84.925761][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'.
[   85.286162][ T7521] sctp: [Deprecated]: syz.0.680 (pid 7521) Use of int in maxseg socket option.
[   85.286162][ T7521] Use struct sctp_assoc_value instead
[   85.321153][ T7516] syzkaller1: entered promiscuous mode
[   85.323131][ T7516] syzkaller1: entered allmulticast mode
[   86.067794][ T7546] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.371579][ T7564] netlink: 'syz.0.697': attribute type 1 has an invalid length.
[   86.374205][ T7564] netlink: 224 bytes leftover after parsing attributes in process `syz.0.697'.
[   86.476186][ T7575] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.704'.
[   86.641945][ T7585] netlink: 72 bytes leftover after parsing attributes in process `syz.1.708'.
[   86.811530][ T7596] netlink: 'syz.0.714': attribute type 10 has an invalid length.
[   86.854731][ T7596] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.884035][ T7598] dvmrp1: entered allmulticast mode
[   86.902625][ T7601] dvmrp1: left allmulticast mode
[   87.163824][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'.
[   87.408163][ T7621] "syz.2.723" (7621) uses obsolete ecb(arc4) skcipher
[   87.538021][ T7632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.727'.
[   88.206371][ T7659] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[   88.209349][ T7659] netlink: 'syz.2.740': attribute type 2 has an invalid length.
[   88.214595][ T7659] netlink: 'syz.2.740': attribute type 1 has an invalid length.
[   89.161260][ T7699] __nla_validate_parse: 2 callbacks suppressed
[   89.161276][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[   89.171342][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[   89.337738][ T7707] netlink: 'syz.2.764': attribute type 11 has an invalid length.
[   89.757624][ T7727] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.773'.
[   89.775909][ T7727] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   90.143973][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   90.146872][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   90.172079][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   90.695841][ T7749] infiniband syz2: set active
[   90.711028][ T7749] infiniband syz2: added vxcan1
[   90.742481][   T24] vxcan1 speed is unknown, defaulting to 1000
[   90.818103][ T7749] RDS/IB: syz2: added
[   90.826584][ T7749] smc: adding ib device syz2 with port count 1
[   90.836543][ T7749] smc:    ib device syz2 port 1 has pnetid 
[   90.844119][   T24] vxcan1 speed is unknown, defaulting to 1000
[   90.861844][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   91.151414][ T7785] netlink: 'syz.0.798': attribute type 4 has an invalid length.
[   91.232138][ T7789] netlink: 'syz.0.800': attribute type 2 has an invalid length.
[   91.270934][ T7789] k*]: entered promiscuous mode
[   91.434169][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   91.480442][ T7799] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.607876][ T7806] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[   91.621543][ T7806] netlink: 172 bytes leftover after parsing attributes in process `syz.1.808'.
[   91.755467][ T7811] IPVS: Scheduler module ip_vs_sip not found
[   91.767897][ T7749] vxcan1 speed is unknown, defaulting to 1000
[   91.770927][ T7811] IPVS: length: 8 != 446622349272
[   91.927360][    T9] sched: DL replenish lagged too much
[   92.048061][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'.
[  132.869533][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  159.824198][ T5213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  159.828141][ T5213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  159.842381][ T5213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  159.852569][ T5213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  159.857108][ T5213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  159.902813][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.012766][ T7856] vxcan1 speed is unknown, defaulting to 1000
[  160.113168][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.172452][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.183648][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  160.187570][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  160.192960][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  160.196884][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  160.200882][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  160.214239][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  160.221156][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  160.230173][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  160.240782][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  160.244912][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.250716][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  160.319800][ T7860] vxcan1 speed is unknown, defaulting to 1000
[  160.447689][   T12] bridge_slave_1: left allmulticast mode
[  160.450686][   T12] bridge_slave_1: left promiscuous mode
[  160.453304][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.471550][   T12] bridge_slave_0: left allmulticast mode
[  160.473446][   T12] bridge_slave_0: left promiscuous mode
[  160.475365][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.625964][   T12] bond3 (unregistering): (slave gretap2): Releasing active interface
[  160.650992][   T12] bond2 (unregistering): (slave geneve2): Releasing active interface
[  160.811665][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.816455][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.820913][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  160.824953][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  160.832472][   T12] bond0 (unregistering): Released all slaves
[  160.844109][   T12] bond1 (unregistering): Released all slaves
[  160.916483][   T12] bond2 (unregistering): Released all slaves
[  160.927517][   T12] bond3 (unregistering): Released all slaves
[  160.945836][ T7858] vxcan1 speed is unknown, defaulting to 1000
[  161.011287][   T12] k*]: left promiscuous mode
[  161.028476][ T7856] chnl_net:caif_netlink_parms(): no params data found
[  161.237207][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.242865][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.245191][ T7856] bridge_slave_0: entered allmulticast mode
[  161.247994][ T7856] bridge_slave_0: entered promiscuous mode
[  161.252197][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.254668][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.256926][ T7856] bridge_slave_1: entered allmulticast mode
[  161.259998][ T7856] bridge_slave_1: entered promiscuous mode
[  161.328144][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.360968][ T7860] chnl_net:caif_netlink_parms(): no params data found
[  161.368940][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.519423][ T7856] team0: Port device team_slave_0 added
[  161.543308][   T12] hsr_slave_0: left promiscuous mode
[  161.546292][   T12] hsr_slave_1: left promiscuous mode
[  161.549331][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.552480][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.556552][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.561388][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.576230][   T12] veth1_macvtap: left promiscuous mode
[  161.578286][   T12] veth0_macvtap: left promiscuous mode
[  161.582156][   T12] veth1_vlan: left promiscuous mode
[  161.583975][   T12] veth0_vlan: left promiscuous mode
[  161.832332][   T12] team0 (unregistering): Port device team_slave_1 removed
[  161.853844][   T12] team0 (unregistering): Port device team_slave_0 removed
[  161.939278][   T54] Bluetooth: hci1: command tx timeout
[  162.070740][ T7856] team0: Port device team_slave_1 added
[  162.157781][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.160238][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.168317][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.196390][ T7860] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.199954][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.203176][ T7860] bridge_slave_0: entered allmulticast mode
[  162.207050][ T7860] bridge_slave_0: entered promiscuous mode
[  162.211523][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.214010][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.216483][ T7860] bridge_slave_1: entered allmulticast mode
[  162.219269][ T7860] bridge_slave_1: entered promiscuous mode
[  162.225736][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.228069][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.238748][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.269987][   T54] Bluetooth: hci0: command tx timeout
[  162.320100][ T7860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.349692][   T54] Bluetooth: hci2: command tx timeout
[  162.354701][ T7860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.394310][ T7856] hsr_slave_0: entered promiscuous mode
[  162.396870][ T7856] hsr_slave_1: entered promiscuous mode
[  162.399857][ T7856] debugfs: 'hsr0' already exists in 'hsr'
[  162.402266][ T7856] Cannot create hsr debugfs directory
[  162.423570][ T7858] chnl_net:caif_netlink_parms(): no params data found
[  162.430160][ T7860] team0: Port device team_slave_0 added
[  162.475892][ T7860] team0: Port device team_slave_1 added
[  162.544838][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.547016][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.555809][ T7860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.593571][ T7860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.596016][ T7860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.606000][ T7860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.636048][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.660886][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.663556][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.666301][ T7858] bridge_slave_0: entered allmulticast mode
[  162.670296][ T7858] bridge_slave_0: entered promiscuous mode
[  162.673394][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.676099][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.678909][ T7858] bridge_slave_1: entered allmulticast mode
[  162.687013][ T7858] bridge_slave_1: entered promiscuous mode
[  162.715214][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.782791][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.791764][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.802698][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.809397][ T7860] hsr_slave_0: entered promiscuous mode
[  162.811771][ T7860] hsr_slave_1: entered promiscuous mode
[  162.814111][ T7860] debugfs: 'hsr0' already exists in 'hsr'
[  162.816056][ T7860] Cannot create hsr debugfs directory
[  162.898800][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.928334][ T7858] team0: Port device team_slave_0 added
[  162.935924][ T7858] team0: Port device team_slave_1 added
[  162.976023][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.979473][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.988845][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.010529][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.013517][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.024169][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.094636][ T7856] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.099476][ T7856] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.139315][ T7856] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.177349][ T7858] hsr_slave_0: entered promiscuous mode
[  163.181991][ T7858] hsr_slave_1: entered promiscuous mode
[  163.184949][ T7858] debugfs: 'hsr0' already exists in 'hsr'
[  163.187329][ T7858] Cannot create hsr debugfs directory
[  163.191611][   T12] bridge_slave_1: left allmulticast mode
[  163.193989][   T12] bridge_slave_1: left promiscuous mode
[  163.196490][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.205637][   T12] bridge_slave_0: left allmulticast mode
[  163.207951][   T12] bridge_slave_0: left promiscuous mode
[  163.212277][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.221153][   T12] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  163.272056][   T12] batman_adv: batadv0: Removing interface: ip6gretap1
[  163.464609][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.468740][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.473006][   T12] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  163.476552][   T12] bond0 (unregistering): Released all slaves
[  163.527835][   T12] bond1 (unregistering): Released all slaves
[  163.544730][ T7856] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.647833][ T7860] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  163.665860][ T7860] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  163.685920][ T7860] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  163.724495][ T7860] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  163.944375][ T7858] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.964185][ T7858] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  163.973698][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.982963][   T12] hsr_slave_0: left promiscuous mode
[  163.985195][   T12] hsr_slave_1: left promiscuous mode
[  163.987716][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.990735][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.993508][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.996018][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.005678][   T12] veth1_macvtap: left promiscuous mode
[  164.007910][   T12] veth0_macvtap: left promiscuous mode
[  164.010431][   T12] veth1_vlan: left promiscuous mode
[  164.019522][   T54] Bluetooth: hci1: command tx timeout
[  164.283190][   T12] team0 (unregistering): Port device team_slave_1 removed
[  164.310502][   T12] team0 (unregistering): Port device team_slave_0 removed
[  164.339175][   T54] Bluetooth: hci0: command tx timeout
[  164.422487][   T54] Bluetooth: hci2: command tx timeout
[  164.480619][ T6050] smc: removing ib device syz2
[  164.633782][ T7858] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.661123][ T7858] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.673519][   T10] vxcan1 speed is unknown, defaulting to 1000
[  164.675473][   T10] syz2: Port: 1 Link DOWN
[  164.761149][ T7856] 8021q: adding VLAN 0 to HW filter on device team0
[  164.813597][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.815963][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.865130][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.867909][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.924011][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.053145][ T7860] 8021q: adding VLAN 0 to HW filter on device team0
[  165.073745][  T716] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.076606][  T716] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.106203][  T716] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.109358][  T716] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.154757][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.181920][ T7856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.250809][ T7858] 8021q: adding VLAN 0 to HW filter on device team0
[  165.310174][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.312681][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.315822][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.318118][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.398529][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.474041][ T7860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.542264][ T7860] veth0_vlan: entered promiscuous mode
[  165.550993][ T7860] veth1_vlan: entered promiscuous mode
[  165.592488][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.616364][ T7860] veth0_macvtap: entered promiscuous mode
[  165.624794][ T7860] veth1_macvtap: entered promiscuous mode
[  165.651258][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.670854][ T7860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.685867][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.690049][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.718843][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.726435][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.773254][ T7856] veth0_vlan: entered promiscuous mode
[  165.781911][  T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.790204][  T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.797247][ T7856] veth1_vlan: entered promiscuous mode
[  165.821660][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.826082][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.831516][ T7856] veth0_macvtap: entered promiscuous mode
[  165.853589][ T7856] veth1_macvtap: entered promiscuous mode
[  165.894719][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.898868][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.912500][ T7858] veth0_vlan: entered promiscuous mode
[  165.931615][ T7858] veth1_vlan: entered promiscuous mode
[  165.948125][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.964846][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.967689][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.992325][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.058277][ T7858] veth0_macvtap: entered promiscuous mode
[  166.077221][ T7858] veth1_macvtap: entered promiscuous mode
[  166.099796][   T54] Bluetooth: hci1: command tx timeout
[  166.121285][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.132295][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'.
[  166.138893][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.143052][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.148808][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.152283][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.161621][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.181801][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.194869][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.258613][  T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.283805][  T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.367233][  T716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.380796][  T716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.419745][   T54] Bluetooth: hci0: command tx timeout
[  166.481719][  T716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.499419][ T5213] Bluetooth: hci2: command tx timeout
[  166.500342][  T716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.700265][ T8002] netlink: 'syz.3.833': attribute type 1 has an invalid length.
[  166.817514][ T8002] gretap1: entered promiscuous mode
[  166.922044][ T8002] macvlan2: entered promiscuous mode
[  166.928307][ T8002] macvlan2: entered allmulticast mode
[  167.030112][ T8020] netlink: 'syz.5.839': attribute type 4 has an invalid length.
[  167.242482][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.846'.
[  167.325020][ T8034] netlink: 'syz.4.844': attribute type 1 has an invalid length.
[  167.327979][ T8034] netlink: 208 bytes leftover after parsing attributes in process `syz.4.844'.
[  167.424926][ T8051] syz.3.852 uses old SIOCAX25GETINFO
[  167.504595][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'.
[  167.507446][ T8060] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  167.514690][ T8060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.541022][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.546055][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.773456][ T8074] tipc: Started in network mode
[  167.775232][ T8074] tipc: Node identity 96bc57736636, cluster identity 4711
[  167.778066][ T8074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.791710][ T8074] syzkaller0: entered promiscuous mode
[  167.796267][ T8074] syzkaller0: entered allmulticast mode
[  167.840223][ T8074] tipc: Resetting bearer <eth:syzkaller0>
[  167.844121][ T8072] tipc: Resetting bearer <eth:syzkaller0>
[  167.873657][ T8072] tipc: Disabling bearer <eth:syzkaller0>
[  168.180035][ T5213] Bluetooth: hci1: command tx timeout
[  168.226028][ T8113] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  168.499241][ T5213] Bluetooth: hci0: command tx timeout
[  168.538553][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'.
[  168.546907][ T8146] chnl_net:caif_netlink_parms(): no params data found
[  168.567837][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.883'.
[  168.579448][ T5213] Bluetooth: hci2: command tx timeout
[  168.588793][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.883'.
[  168.930828][ T8173] netlink: 168 bytes leftover after parsing attributes in process `syz.5.892'.
[  169.144955][ T8202] netlink: 148 bytes leftover after parsing attributes in process `syz.5.905'.
[  169.353407][ T8225] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  169.506571][ T8239] Bluetooth: MGMT ver 1.23
[  169.592054][ T8248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.595852][ T8248] syzkaller0: entered promiscuous mode
[  169.598262][ T8248] syzkaller0: entered allmulticast mode
[  169.613411][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'.
[  169.631991][ T8248] tipc: Resetting bearer <eth:syzkaller0>
[  169.636512][ T8247] tipc: Resetting bearer <eth:syzkaller0>
[  169.647525][ T8247] tipc: Disabling bearer <eth:syzkaller0>
[  170.539224][ T8318] netlink: 'syz.3.949': attribute type 6 has an invalid length.
[  170.698777][ T8334] batadv1: entered promiscuous mode
[  170.707342][ T8334] batadv1: entered allmulticast mode
[  170.778553][ T8331] sctp: [Deprecated]: syz.5.955 (pid 8331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.778553][ T8331] Use struct sctp_sack_info instead
[  170.942849][ T8350] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  171.108614][ T8364] openvswitch: netlink: IPv4 tun info is not correct
[  171.156100][ T8367] __nla_validate_parse: 4 callbacks suppressed
[  171.156112][ T8367] netlink: 40 bytes leftover after parsing attributes in process `syz.5.969'.
[  171.225892][ T8372] netlink: 27 bytes leftover after parsing attributes in process `syz.5.971'.
[  171.391346][ T8391] netlink: 'syz.3.978': attribute type 1 has an invalid length.
[  171.406334][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'.
[  172.154406][ T8449] netlink: 'syz.3.995': attribute type 21 has an invalid length.
[  172.156880][ T8449] netlink: 'syz.3.995': attribute type 22 has an invalid length.
[  172.162629][ T8449] netlink: 'syz.3.995': attribute type 23 has an invalid length.
[  172.165214][ T8449] netlink: 136 bytes leftover after parsing attributes in process `syz.3.995'.
[  172.451000][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'.
[  172.539379][ T8476] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1006'.
[  172.546901][ T5871] IPVS: starting estimator thread 0...
[  172.640426][ T8478] IPVS: using max 79 ests per chain, 189600 per kthread
[  172.810305][ T8491] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1012'.
[  172.914352][ T8498] netlink: 'syz.4.1016': attribute type 1 has an invalid length.
[  174.188128][ T8544] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1033'.
[  175.424292][ T8564] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  176.153034][ T8609] netlink: 'syz.4.1054': attribute type 4 has an invalid length.
[  176.311308][ T8536] Set syz1 is full, maxelem 65536 reached
[  176.370213][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'.
[  176.435289][ T8633] Illegal XDP return value 4294967289 on prog  (id 135) dev N/A, expect packet loss!
[  176.610012][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'.
[  176.620651][ T8654] bridge0: entered promiscuous mode
[  176.624927][ T8654] bridge0: left promiscuous mode
[  176.660019][ T5213] Bluetooth: hci0: command 0x0c20 tx timeout
[  176.897842][ T8676] tipc: Can't bind to reserved service type 2
[  177.351156][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'.
[  177.366472][ T8688] infiniband syz2: set down
[  177.368459][ T8688] infiniband syz2: added syzkaller0
[  177.440327][ T8688] RDS/IB: syz2: added
[  177.447936][ T8688] smc: adding ib device syz2 with port count 1
[  177.455218][ T8688] smc:    ib device syz2 port 1 has pnetid 
[  177.917735][ T8737] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1109'.
[  178.095661][ T8747] netpci0: tun_chr_ioctl cmd 1074025681
[  178.125456][ T1087] smc: removing ib device syz2
[  178.489478][ T8765] netlink: 'syz.4.1120': attribute type 1 has an invalid length.
[  178.568075][ T8765] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.555248][ T8818] team0: No ports can be present during mode change
[  179.678220][ T8830] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  179.794539][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1153'.
[  179.967762][ T8849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.635134][ T8877] batadv_slave_1: entered promiscuous mode
[  180.637989][ T8876] batadv_slave_1: left promiscuous mode
[  180.907171][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1168'.
[  180.929590][ T8895] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1168'.
[  181.241993][ T8931] netlink: 'syz.4.1179': attribute type 10 has an invalid length.
[  181.245075][ T8931] syz_tun: entered promiscuous mode
[  181.255972][ T8931] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  181.363650][ T8937] team0: Device gtp0 is of different type
[  181.493664][   T33] audit: type=1800 audit(1754304939.479:2): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1182" name="blkio.bfq.time_recursive" dev="tmpfs" ino=627 res=0 errno=0
[  182.085425][ T8986] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1191'.
[  182.222505][ T9001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1196'.
[  182.265078][ T9004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  182.283519][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  182.336452][ T9009] netlink: 'syz.3.1199': attribute type 178 has an invalid length.
[  182.468293][ T9027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1205'.
[  182.471794][ T9027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1205'.
[  182.474710][ T9027] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1205'.
[  182.500233][ T9025] netlink: 'syz.3.1202': attribute type 72 has an invalid length.
[  182.503363][ T9025] netlink: 1016 bytes leftover after parsing attributes in process `syz.3.1202'.
[  182.600648][ T9035] syzkaller0: entered promiscuous mode
[  182.602763][ T9035] syzkaller0: entered allmulticast mode
[  182.612867][ T9037] netlink: 'syz.3.1210': attribute type 4 has an invalid length.
[  182.623535][ T9035] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  182.623757][ T9037] netlink: 'syz.3.1210': attribute type 4 has an invalid length.
[  182.632196][ T9038] ieee802154 phy0 wpan0: encryption failed: -22
[  182.761135][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'.
[  182.790884][ T9042] netlink: 'syz.4.1212': attribute type 4 has an invalid length.
[  182.793373][ T9042] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1212'.
[  182.822956][ T9042] : renamed from bond0 (while UP)
[  183.001784][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.090814][ T9073] openvswitch: netlink: Message has 4 unknown bytes.
[  183.093113][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.302678][ T9093] netlink: 'syz.5.1231': attribute type 32 has an invalid length.
[  183.507091][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1235'.
[  183.511589][ T9112] bridge_slave_1: left allmulticast mode
[  183.513487][ T9112] bridge_slave_1: left promiscuous mode
[  183.516359][ T9112] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.533476][ T9112] bridge_slave_0: left allmulticast mode
[  183.535409][ T9112] bridge_slave_0: left promiscuous mode
[  183.537706][ T9112] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.114277][ T9146] netlink: 'syz.5.1248': attribute type 9 has an invalid length.
[  184.130382][ T9146] netlink: 'syz.5.1248': attribute type 6 has an invalid length.
[  185.160593][ T9165] syzkaller0: entered promiscuous mode
[  185.162891][ T9165] syzkaller0: entered allmulticast mode
[  185.297552][ T9173] netlink: 'syz.5.1261': attribute type 1 has an invalid length.
[  185.444153][ T9183] syzkaller1: entered promiscuous mode
[  185.446161][ T9183] syzkaller1: entered allmulticast mode
[  185.584125][ T9187] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  185.586964][ T9187] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  186.095875][ T9213] netlink: 'syz.3.1280': attribute type 1 has an invalid length.
[  186.313200][ T9237] Bluetooth: MGMT ver 1.23
[  186.389435][ T9245] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  186.843036][ T9287] IPv6: Can't replace route, no match found
[  187.113968][ T9311] __nla_validate_parse: 13 callbacks suppressed
[  187.113983][ T9311] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1323'.
[  187.332764][ T9324] netlink: 'syz.4.1327': attribute type 4 has an invalid length.
[  187.341002][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1330'.
[  187.343958][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1330'.
[  188.269224][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'.
[  188.275574][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'.
[  188.276018][ T9351] team_slave_0: entered promiscuous mode
[  188.280793][ T9351] team_slave_1: entered promiscuous mode
[  188.286190][ T9351] team_slave_0: left promiscuous mode
[  188.288029][ T9351] team_slave_1: left promiscuous mode
[  188.310053][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.313585][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.376570][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1343'.
[  188.386898][ T9360] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  188.542650][ T9376] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  188.623825][ T9386] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  188.726174][ T9399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1362'.
[  188.735304][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1362'.
[  189.097014][ T9431] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1378'.
[  189.184574][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1380'.
[  189.256805][ T9442] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  190.271096][ T9477] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.274296][ T9477] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.258285][ T7858] : (slave syz_tun): Releasing backup interface
[  191.521715][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.587504][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.611996][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.672310][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.788364][   T12] bridge_slave_1: left allmulticast mode
[  191.790999][   T12] bridge_slave_1: left promiscuous mode
[  191.794190][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.798771][   T12] bridge_slave_0: left allmulticast mode
[  191.803587][   T12] bridge_slave_0: left promiscuous mode
[  191.806098][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.093378][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.099782][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.104782][   T12] bond0 (unregistering): Released all slaves
[  192.384901][   T12] hsr_slave_0: left promiscuous mode
[  192.387887][   T12] hsr_slave_1: left promiscuous mode
[  192.397015][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.403048][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.406805][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.410454][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.424996][   T12] veth1_macvtap: left promiscuous mode
[  192.427426][   T12] veth0_macvtap: left promiscuous mode
[  192.433730][   T12] veth1_vlan: left promiscuous mode
[  192.436118][   T12] veth0_vlan: left promiscuous mode
[  192.795474][   T12] team0 (unregistering): Port device team_slave_1 removed
[  192.816602][   T12] team0 (unregistering): Port device team_slave_0 removed
[  193.296948][   T12] ------------[ cut here ]------------
[  193.300543][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  193.304433][   T12] Modules linked in:
[  193.306363][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  193.312556][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.317042][   T12] Workqueue: netns cleanup_net
[  193.319165][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  193.321556][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 50 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 1f eb f7 e8 81 2d a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 2d a7 f7 90 0f 0b 90 e9 60 fe ff ff
[  193.329180][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  193.331671][   T12] RAX: ffffffff8a18832f RBX: ffff88811249c880 RCX: ffff88801c6bd640
[  193.334879][   T12] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff88801c6bd640
[  193.338134][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  193.341407][   T12] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[  193.344680][   T12] R13: 1ffff9200001ef40 R14: ffff88811249dd00 R15: dffffc0000000000
[  193.347933][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  193.351774][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  193.354509][   T12] CR2: 0000561cd26b0950 CR3: 000000002dd44000 CR4: 00000000000006f0
[  193.357776][   T12] Call Trace:
[  193.359377][   T12]  <TASK>
[  193.360642][   T12]  xfrm_net_exit+0x2d/0x70
[  193.362557][   T12]  ops_undo_list+0x49a/0x990
[  193.364485][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  193.366636][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  193.368646][   T12]  cleanup_net+0x4c5/0x800
[  193.370570][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  193.372674][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.374882][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  193.377293][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  193.379859][   T12]  process_scheduled_works+0xae1/0x17b0
[  193.382239][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  193.384743][   T12]  worker_thread+0x8a0/0xda0
[  193.386695][   T12]  kthread+0x711/0x8a0
[  193.388310][   T12]  ? __pfx_worker_thread+0x10/0x10
[  193.390223][   T12]  ? __pfx_kthread+0x10/0x10
[  193.391758][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.393503][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.395707][   T12]  ? __pfx_kthread+0x10/0x10
[  193.397666][   T12]  ret_from_fork+0x3fc/0x770
[  193.399863][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  193.402034][   T12]  ? __switch_to_asm+0x39/0x70
[  193.403977][   T12]  ? __switch_to_asm+0x33/0x70
[  193.406000][   T12]  ? __pfx_kthread+0x10/0x10
[  193.408083][   T12]  ret_from_fork_asm+0x1a/0x30
[  193.410680][   T12]  </TASK>
[  193.412011][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  193.415088][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  193.420151][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.424359][   T12] Workqueue: netns cleanup_net
[  193.426400][   T12] Call Trace:
[  193.427853][   T12]  <TASK>
[  193.429132][   T12]  dump_stack_lvl+0x99/0x250
[  193.430995][   T12]  ? __asan_memcpy+0x40/0x70
[  193.432889][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.435088][   T12]  ? __pfx__printk+0x10/0x10
[  193.437081][   T12]  panic+0x2db/0x790
[  193.438810][   T12]  ? __pfx_panic+0x10/0x10
[  193.440687][   T12]  ? ret_from_fork_asm+0x1a/0x30
[  193.442811][   T12]  __warn+0x31b/0x4b0
[  193.444531][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  193.446599][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  193.448682][   T12]  report_bug+0x2be/0x4f0
[  193.450503][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  193.452612][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  193.454699][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  193.456815][   T12]  handle_bug+0x84/0x160
[  193.458627][   T12]  exc_invalid_op+0x1a/0x50
[  193.460578][   T12]  asm_exc_invalid_op+0x1a/0x20
[  193.462659][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  193.464974][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 88 50 0a f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 46 1f eb f7 e8 81 2d a7 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 2d a7 f7 90 0f 0b 90 e9 60 fe ff ff
[  193.473127][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  193.475704][   T12] RAX: ffffffff8a18832f RBX: ffff88811249c880 RCX: ffff88801c6bd640
[  193.479027][   T12] RDX: 0000000000000000 RSI: ffffffff8db65e93 RDI: ffff88801c6bd640
[  193.482216][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa07af7 R09: 1ffffffff1f40f5e
[  193.485487][   T12] R10: dffffc0000000000 R11: fffffbfff1f40f5f R12: ffffffff8f601a20
[  193.488737][   T12] R13: 1ffff9200001ef40 R14: ffff88811249dd00 R15: dffffc0000000000
[  193.492020][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  193.494161][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  193.496329][   T12]  xfrm_net_exit+0x2d/0x70
[  193.498145][   T12]  ops_undo_list+0x49a/0x990
[  193.500107][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  193.502268][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  193.504434][   T12]  cleanup_net+0x4c5/0x800
[  193.506111][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  193.507770][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.509883][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  193.512285][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  193.514684][   T12]  process_scheduled_works+0xae1/0x17b0
[  193.517155][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  193.519706][   T12]  worker_thread+0x8a0/0xda0
[  193.521690][   T12]  kthread+0x711/0x8a0
[  193.523439][   T12]  ? __pfx_worker_thread+0x10/0x10
[  193.525625][   T12]  ? __pfx_kthread+0x10/0x10
[  193.527592][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.529754][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.531980][   T12]  ? __pfx_kthread+0x10/0x10
[  193.533994][   T12]  ret_from_fork+0x3fc/0x770
[  193.535910][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  193.538033][   T12]  ? __switch_to_asm+0x39/0x70
[  193.540073][   T12]  ? __switch_to_asm+0x33/0x70
[  193.542150][   T12]  ? __pfx_kthread+0x10/0x10
[  193.544121][   T12]  ret_from_fork_asm+0x1a/0x30
[  193.546208][   T12]  </TASK>
[  193.548178][   T12] Kernel Offset: disabled
[  193.549635][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:55:51  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822c2b3a RBX=0000000000140cca RCX=ffff88803cc65640 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff92a04000 RBP=0000000000000006 RSP=ffffc9000650f5a8
R8 =ffffffff8fa07af7 R9 =0000000000000000 R10=ffffed1005b0d800 R11=fffffbfff1f40f5f
R12=fffa80002d86d000 R13=dffffc0000000000 R14=1ffffffff1b72c85 R15=0000000000000000
RIP=ffffffff8b6fc51f RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe5ea2fa5c0 CR3=000000002a318000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888021bc0237 R9 =1ffff11004378046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958fa R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561cd26b0950 CR3=000000002dd44000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000141 000000000035736f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffff000000 XMM09=706d6f633a3a3574 75706e692f357475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
