last executing test programs:

17.679769899s ago: executing program 0 (id=1336):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20a040, 0x0) (async)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'nicvf0\x00', {}, 0x8001})
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)

17.589865381s ago: executing program 0 (id=1337):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r1=>0x0, 0x9, 0x7ff}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xfffffff8}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x9c)

17.589359786s ago: executing program 0 (id=1338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1300000008000300", @ANYRES32=r8, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

17.367713981s ago: executing program 1 (id=1343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0)
unshare(0x64000600)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
unshare(0x2c020400)
r3 = socket$inet(0xa, 0x801, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b00010065787468647200002400028008000140000000020800034000000000080004400000002205000200890000002c0001800c00010062697477697365001c0002800800014000000014080002400000801708000340000000040900010073797a30"], 0x100}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r2}, 0x10)
socket(0x23, 0x800, 0x8)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={<r5=>0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xcf84, 0x0, 0x3, 0x6a, 0x4, 0x3, 0x8}, &(0x7f0000000080)=0x9c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={r5, 0x0, 0x2}, &(0x7f0000000300)=0x8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x96, 0x7, 0x1, 0x0, "0f5aec2ec160b8cd5a8a90d6b0ba65bfd5391ebbcb7a4f7f275e43eba158a9a6c4fe72ec1f8952f6c85f9702ca29478dc71624b0460e0abac4a45f517c2713bcb534cbffc40f0548d6d9288a7594947deb5f6e53d999833aa2f81d10bc5d7eca3728b497203ad60151e2a08fd6b8c792b71e2698a106be0f584bc36c798a23ff6c0b651e5e42d74f3d03bdea4e73a3c03db8"}]}], {0x14}}, 0x124}}, 0x40)

17.180327315s ago: executing program 1 (id=1346):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', <r1=>0x0, 0x4, 0x6, 0x2, 0x7, 0x28, @local, @mcast1, 0x20, 0x760, 0x5, 0x200}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', <r2=>0x0, 0x8000, 0x20, 0x10001, 0x0, {{0x12, 0x4, 0x2, 0x9, 0x48, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, {[@timestamp={0x44, 0x8, 0x3d, 0x0, 0x1, [0x9]}, @ssrr={0x89, 0x2b, 0x5d, [@empty, @loopback, @multicast2, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010102, @private=0xa010102, @remote, @empty]}]}}}}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xfff2}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd6aa, 0x3, 0xd, 0x500, 0x5, 0x81000000, r6})
sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="35e7bbafb1c545877ba921414a6957b7057e62a9ec465b3e4c2596ac7b82c59c8c481ee31c40f99f687dfa29fe4235bb82b9fe7cce2ef6dda5f90806147d5964b03d1c8b5468ece4fa5610b34fd6a596fa87a23d2fff4ce02ca8e75fed06a37fd59043e1de8d6ad52dc281565492c4e2230bf5e2b2200b82fc9b0ed6e1f69ff68df9d564ec3a54b05a255c140da72ad423e3c553a5e723904207318525c84dfdcf", 0xa1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="e0000001ac1414bb000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="e0000001640101010000000040000000000000000000000007000000442462e3ac1e000100000009ac14142d00000004e000000200000101ac1414bb00000006940401000707137f00000100"], 0x1b0}}], 0x1, 0x44005)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'vxcan1\x00', 0x10})
accept(0xffffffffffffffff, 0x0, &(0x7f00000005c0))
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)

17.179760832s ago: executing program 2 (id=1347):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc4, &(0x7f00000000c0)=""/196, 0x0, 0x5e, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x10000324, 0x0, 0x0, 0x1}], 0x1, 0x40800)
unshare(0x22020400)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000))
unshare(0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0200000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160005000a0000000000e000e2", 0x6d, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})

17.047684135s ago: executing program 1 (id=1348):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r1}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x15, 0x10, 0x8}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r6}, 0x10)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000006c0)=[{&(0x7f00000003c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1)

16.659951591s ago: executing program 0 (id=1349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000054) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r5 = getpid()
syz_open_procfs$namespace(r5, 0x0) (async)
r6 = getgid()
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006f40)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc, &(0x7f0000006a40)=[{&(0x7f0000000a00)={0x10, 0x31, 0x200, 0x70bd29, 0x25dfdbfe}, 0x10}, {&(0x7f0000000640)={0x2c, 0x21, 0x0, 0x70bd27, 0x25dfdbfe, "", [@generic="11bf8f31ee4efd193fa00cd0e6f6324e11583070189b7d23", @nested={0x4, 0xda}]}, 0x2c}, {0x0}, {0x0}, {&(0x7f0000004540)={0x18, 0x3b, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic, @generic, @typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x18}, {&(0x7f0000006880)={0x1c, 0x11, 0x20, 0x70bd26, 0x25dfdbfc, "", [@nested={0x4, 0x56}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}], 0x6, &(0x7f0000006e00)=[@rights={{0x18, 0x1, 0x1, [r2, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}], 0xa0, 0x800}, 0x40000) (async)
socket$inet(0x2, 0x2, 0x1) (async)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0), &(0x7f0000000840)=""/149, &(0x7f0000000340)="89db79a163f26c", &(0x7f0000000900)="74342bea85b8bd510c0aa1471407dab8b5a09c828f93f84ec0afe296e7c2b079d08acaa5a56ce52104b0045d23df93a35f92b3e93d648cea3bb05f9aa5e4c479ed37cf5fb227f030e8fd822c7f33152060a76b89214cad56591d94ecc90611cb4c1b9aab6b252c2ee489e5204fc208764be770957623bd70c80d18fdc59b1f85ee9dad692e67856b0d0fe4c3c67d4a1d6b73858051dba2a28deb6436deeea06fc4ad18e7307652c08679d069554d434381ede133b62cd07f4c276e7a0c4a731a4651ede047a61406fcbf86d5edacd60c3080", 0x2f90000, r3, 0x4}, 0x38) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1ea8, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x614, 0x3, 0x0, 0x1, [{0x364, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x304, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7a, 0x1, "8a4e73688add7d8752b21e4cbad43e9ae1e4ff1e41ddb611a0626360cd899f6a82edd102c702672dabf682eca27deeaba9ef143934044412680c3c76e94eb2455c17c9a49f71c60bdb526aa3b9c99b0c571f6ba65eafca2dbee9a95767ba73ba25a40ce01b342ff0102cfe0fe7784b2ab1bdc6f1f273"}, @NFTA_DATA_VALUE={0xea, 0x1, "cc686672d6c3e13e9bcf6fbbaa80e55df4e9e8bee7e9adefd7577484a96ad87fcf94ba2601e4dc5f189c58256706a8bb303e86729affb1983057d4b1f6acbd41ef1870c5ba452bbb18b71c48e4f11a5c9f6a3214955d87d654818013d5f86660258a805d06ced02da33c27b1498598dd86910ace4df96e00236fe37644297b13b7caa14e5aa8c823508274e31bb2e7c2b0fdf9fab3932763fb4d2a6f18421b71033dc08b41473daf65bf8a7d4c8390bf9887e05885c38d6f7803412d91a6e1fccf23844c4fd1a0c87673eb1b078f5b62a07ffd5d5bcdb67c614239ed06130b2b3320f421b614"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x63, 0x1, "05699fa9f92e696628280b535ac0be6c502f9a4c3a6ebebaa50dc55ae3dc081b6cdf92cd37495041b96db8e8f02a3715f197f4dacefefa6d4c589ae4245193bdc1cb5d31553c39cb80d42ec18f6ecec439e75829017d393a3fbb927f77f38f"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "3c23f60d8370c95c314186643d223b5d4e36a1249cd05e981b6c1489d7e6cd9bac893bb4b8f761fed1dc75f7cfca75df1fb55dbf2649bc61c02ae4c3b661a857c23f809bab5cd751945067c0205cd94a6a0710dba68a"}]}]}, {0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "a9abbef6beab5d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "5b04777092502f73a5f9c86bc96733bfe4044dff52ff44dbc4f56a2087ae83221b6eed2f082cf476c52c07254932668c09051b6f3d46855d8181947236e06b8798a3f9a3e0795d969ab2a91bd232308e844ee2ceba966303bffdfc1e436698a2b9a90fb33bd5c5238b2407b4cac8dc56c183cdcad70a52944da88012272db396267855c5fc873c505cf57739ca0638290788b29d46dfec18552088f01748447c0627d1822ce0536029b1488c6f41a57021574dd54fe61ae16ee8e45555f73998a7df532df7eb8b61e4b461a3557782fa38fe1385185f9dc18aab28a222ab4d1a90a2072f35ca980dadeb75cc051f86e439f9"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x54, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'realm\x00'}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x76}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xf801}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1ff}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1858, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1d, 0x1, "af4bfd637a2c9187ad3c625c913c9113bea02dd07b25548a8c"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}]}, {0x4}, {0x12ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1240, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "4ed1293d5e20992ec104d2b583c78c7e17887636bf3cc1cf00325aee3b7113f46a9c29fa850fc0a06f9f5850ef475d78b0104d4993fe11e49433ac0b2e4d98cbcf4323c5a05839478ac57ba88f5030231536d0f1c4c7bb82708149161226fa5e8cba3af89e52cb58e0d030"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x22, 0x1, "6c8385e81109f91af5e3020f7438a77cd41bb36442f2ce6b187b35aeb99b"}, @NFTA_DATA_VALUE={0x19, 0x1, "5d5fd0135d86f33f46ec2304b156fd0b0303b90738"}, @NFTA_DATA_VALUE={0xe9, 0x1, "625ecbb7fdc449c965d8fcbdb1d765e52c68ab84347eb701235f60ffd54bfebc1505ba60c8e2ae8e12e3df797d42b6f7173a272c0369cf852ef027516e2cc80f151dc4b2e5352bca21294f662279cd1b4652cf9d1e4b41ef82606bf4bb59d86e735c7d9012daf78842988daae7b832a7f94f17f7e540ba9306c06938167957e1405ec75bd1471a05db13c60dfca4cfa74906cd688fc6d08bfdf4eb6c258ac3489218e737264630fc6d814d54ed3011a83cbe275b38614e9b163d980cc4640360bc8fbd0c31852f71ed917692980dea972e2fb034c3dbbe5125fe4241279799a8fbd18b5dbe"}]}, @NFTA_SET_ELEM_KEY={0x90, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "1e6e7521bce2c25437644b83805c4913242c6d9cf0f93cc2ebd7ab37b9759b413fbbf5f778a5c85cfb5e4468c32e252e9ae7b458e8c027565e82f1aefe2249bba33759efeb320a8a1d2dcce5f0372bd68c5533b4a03651eb1393bcf877d8ffebe00c"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xd9, 0x6, 0x1, 0x0, "673b817733e485604b2109731feeb4be849101e4ab6d3f58efae4d13763f415de5a4859e316974e9bfbbd296b65d9f53129492ba1f9cb124b281f49f2b360fcb4bb59ca09db949656dbfef6f7a0bd5f50a9d3659d8b1e0c50547e9d606debd9ccf0e04c3734e40ce41e38de0ea1bac92096e8ce47000fd7ec8cfb2cbbe4e74989adcbda06c2dc31a50afd95ed76b3bbaaec240dd08819fe351de6054ddfcd5a103b69b199bda8f936fdab89f67995cf9a4912b6e4d4b021de7a3200c2bdd5b3087e3523eb8a4ef58239ebd85b2afbd624aabc477b1"}, @NFTA_SET_ELEM_EXPRESSIONS={0xe0, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x5c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x67}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x19}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x224, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xda, 0x1, "7de4ebe961f7e34e95b00006ad3f8dfbe5c4f886a76f010d709b36bc7d41b70c061fb7d0b5998cd70ccb6a2667a91475df775187a889832b4049a4a1425e4605eaf4fe24e84f8e670934fee5f0dd0e8b5c1994ec70fa0eb78b092daee236089fbf5d1dabbdbc5d8c1ac78cd8c28ff45c59b8a93ce04265a79ebde428ecf7fd4536eca62868c54d2ea51416f3c17a50c9b24b361901b13845fe9bfe9f5dabc4b7787505ca611e576dd5eeef1e78572d39efb2c12b38e91134236dd285714e6a04cab812cbfed1f2c0d724d2f387477d3637e6b5dd278a"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xea, 0x1, "c292afc86b4fbc1a89c58eb70df632e03f66957a413e884a053061b3e40de5d779f17747c8c0dacbf08df9c92c25a35b2bf337d3bb78c5b59d06479836b3b944e485634ac8e5ab2ea79f0d36e34508ba880fabba7ecd7b9970e59ff2fdb661d672908140213a4f7850685f66eb6e11f1f0ca9f226a55e396dce972655fe9d5f73907ffcf61ccb67f68b2faacbd318e6d0d688c6813d412f9ee4ea7e1f61bb122449c5bbda5d0b4a971d1fa4ac990b874fd6fae1679e4c16c8a12f32b3ca5d5d4fb45d3e6ca9f07f113c817752e984476bc49ea40d9de808f1761a0fe1ac5faef861d44010694"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1f30}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000102158c00070000000000000000000053bdc30700000000000000844e626fdcfde92b62120d4812b0a1be19367b1d034fcceb276d1899ee04819c38d9b9fea1f6e0669e66ecdcc47c229d1b3bc8d3f9fac8ec596d359af3fadbccb02a891c1c56b589f9ee28f1a612b587166fff688d0b8c61b62164dd3fde3cf5ba7b73f5e06b0ef726f423ee5c5a5d0dbe47c86f090460b1a65c773d57c6521dfe681c1f18"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004800)

16.527922395s ago: executing program 0 (id=1350):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r1)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)

16.236444668s ago: executing program 2 (id=1351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0xfffffff5}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x40)

16.155943333s ago: executing program 2 (id=1352):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x40)

16.059505812s ago: executing program 2 (id=1353):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='host1x_wait_cdma\x00', r0}, 0x18) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async)
close(r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0}) (async)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x803, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7b8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_DATA={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x4040000)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32=r7, @ANYBLOB="10001d810c00000006000500c2"], 0x2c}}, 0x0) (rerun: 32)
close(r1) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405f1ffffff0000711066000000000006000200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64)

15.820897652s ago: executing program 2 (id=1354):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1530412}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=@deltclass={0x98, 0x29, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x5, 0xf}, {0x98a75a4c935c6aba}}, [@TCA_RATE={0x6, 0x5, {0x7b, 0x9}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xaa, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_htb={{0x8}, {0x38, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x2, 0x800, 0x7f, 0x67, 0x800}, {0x18, 0x2, 0x4, 0x4, 0x10, 0x9}, 0x7fffffff, 0x7, 0x0, 0xffff1fc5, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x30000015}, 0x4) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe", 0x13}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000d00)={0x2, &(0x7f0000000cc0)=[{0xac, 0x1, 0xc, 0x1}, {0x6, 0x4, 0x6, 0x3}]}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38f7be179f89e1a1f5c73276247b7f385139d1356658257cb7d181bf4755f832415e7f6b80603bbaf8200c24c51818a493076c760a2cf41bc4109965f8635fa610ba30c8b5524d25dca916bddb349e6de04311a5e4dfe06bf3eb3d5a6aaa91e7e99140f5945bd39f850c53392ed0baf61cb8d9ec8cb6e8e2270eec38c5a02f040fd0c827", @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESOCT=0x0], 0x30}}, 0x40000) (async, rerun: 64)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64)
sendmmsg$sock(r3, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x18, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x20000000)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x8, 0x2c16, 0x7, 0x48000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r5}, 0x38) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000800), 0x8) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0}) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newroute={0x34, 0x18, 0x200, 0x1, 0x25dfdbfc, {0x2, 0x0, 0x20, 0x0, 0xff, 0x0, 0xff, 0x2}, [@RTA_NH_ID={0x8, 0x1e, 0x4}, @RTA_OIF={0x8, 0x4, r9}, @RTA_PREFSRC={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0xffffff7f, 0x0, 0x4014}, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000009c0)={<r10=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000000a00)={0xff, 0x908, 0x204, 0xcfb, 0x9, 0x80, 0x9}, 0x20) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x40004) (async)
r12 = socket$inet6(0x2d, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x11d, 0x76, 0x0, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) (rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x7, '\x00', r9, 0xffffffffffffffff, 0x5, 0x9, 0x5}, 0x50) (async)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r13=>0xffffffffffffffff}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
write(r13, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)

15.820197034s ago: executing program 0 (id=1355):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0x9, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x2, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/239, 0xef, 0x5, 0x1})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='pimreg1\x00', 0x10)

15.749208714s ago: executing program 1 (id=1356):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000003080102000000000000000003000002050003002100000014000480090001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44044)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)

15.747980426s ago: executing program 2 (id=1357):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "facaf7719ce1"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd8}}, 0x0)

15.745612137s ago: executing program 1 (id=1358):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x65}, 0x7, 0x1, 0x4, 0x0, 0x1c, 'syz0\x00', "523ca936f8f61adc3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b163e3da54e1b5e6a5ef65b661209cd090c61155070ae569ac4a65ef21", [{0x8, 0xa000, {0x1, 0x10}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0xd240, {0x3, 0x56c}}, {0x8, 0x401, {0x0, 0x2e}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x0, 0x2}}, {0x4, 0x5}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0x791, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3d}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0x5}}, {0x6, 0x8, {0x0, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x7, 0xfffe, {0x2, 0x7f}}, {0x3, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x7f}}, {0x9, 0x7, {0x3, 0x3ff}}, {0x1, 0x10, {0x1, 0x7fff}}, {0xe, 0x7, {0x3, 0xfffffffc}}, {0x9, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x3, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xdc, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xc, {0x1, 0xfd}}, {0x7, 0x2, {0x2, 0x7}}, {0x8000, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0x2}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x3, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0xfff7, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="64000000140011020000000000000000ffffffff000000000000000000000000fc0200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c06b6e000000000008001f00000000000a001000e6"], 0x64}}, 0x0)

15.67103808s ago: executing program 1 (id=1359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) (async)

165.867405ms ago: executing program 32 (id=1355):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0x9, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x2, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000180)={&(0x7f0000000080)=""/239, 0xef, 0x5, 0x1})
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='pimreg1\x00', 0x10)

100.773964ms ago: executing program 33 (id=1359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b\x00'], 0x38}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) (async)

0s ago: executing program 34 (id=1357):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "facaf7719ce1"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xd8}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18523' (ED25519) to the list of known hosts.
syzkaller login: [   48.809982][ T5758] cgroup: Unknown subsys name 'net'
[   48.901335][ T5758] cgroup: Unknown subsys name 'cpuset'
[   48.906612][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.697971][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.932436][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.954705][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.958448][ T5220] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.962563][ T5220] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.966855][ T5220] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.026837][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.030781][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.034100][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.038601][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.041977][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.046849][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.050357][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.053117][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.055826][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.058375][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.281442][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.371782][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.442708][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   55.453647][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.456991][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.459529][ T5826] bridge_slave_0: entered allmulticast mode
[   55.462665][ T5826] bridge_slave_0: entered promiscuous mode
[   55.490352][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.492726][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.495716][ T5826] bridge_slave_1: entered allmulticast mode
[   55.498485][ T5826] bridge_slave_1: entered promiscuous mode
[   55.547534][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.549988][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.552331][ T5831] bridge_slave_0: entered allmulticast mode
[   55.555562][ T5831] bridge_slave_0: entered promiscuous mode
[   55.561834][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.582530][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.585258][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.587764][ T5831] bridge_slave_1: entered allmulticast mode
[   55.590436][ T5831] bridge_slave_1: entered promiscuous mode
[   55.594048][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.658866][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.662048][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.665371][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.668389][ T5833] bridge_slave_0: entered allmulticast mode
[   55.672388][ T5833] bridge_slave_0: entered promiscuous mode
[   55.678276][ T5826] team0: Port device team_slave_0 added
[   55.680612][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.683529][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.686675][ T5833] bridge_slave_1: entered allmulticast mode
[   55.690346][ T5833] bridge_slave_1: entered promiscuous mode
[   55.695388][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.699842][ T5826] team0: Port device team_slave_1 added
[   55.751941][ T5831] team0: Port device team_slave_0 added
[   55.764600][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.768602][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.770957][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.779827][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.785242][ T5831] team0: Port device team_slave_1 added
[   55.788569][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.800754][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.803010][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.812597][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.853408][ T5833] team0: Port device team_slave_0 added
[   55.858369][ T5833] team0: Port device team_slave_1 added
[   55.860752][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.863096][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.874778][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.881580][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.886665][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.895780][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.941209][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.944015][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.955215][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.999243][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.002082][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.012484][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.023642][ T5831] hsr_slave_0: entered promiscuous mode
[   56.027567][ T5831] hsr_slave_1: entered promiscuous mode
[   56.036626][ T5826] hsr_slave_0: entered promiscuous mode
[   56.039765][ T5826] hsr_slave_1: entered promiscuous mode
[   56.042656][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.046978][ T5826] Cannot create hsr debugfs directory
[   56.153958][ T5833] hsr_slave_0: entered promiscuous mode
[   56.157245][ T5833] hsr_slave_1: entered promiscuous mode
[   56.159750][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.162568][ T5833] Cannot create hsr debugfs directory
[   56.396885][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.407816][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.421916][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.437352][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.468754][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.476633][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.489953][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.521625][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.544399][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.556521][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.570747][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.583976][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.689407][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.723297][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.731430][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.741625][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.744675][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.753427][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.755903][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.783632][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.790756][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.808023][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.811161][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.831190][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.833659][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.840073][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.864008][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.867265][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.893161][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.896137][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.960015][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.005275][ T5220] Bluetooth: hci0: command tx timeout
[   57.085047][ T5220] Bluetooth: hci2: command tx timeout
[   57.105501][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.165380][ T5220] Bluetooth: hci1: command tx timeout
[   57.187950][ T5831] veth0_vlan: entered promiscuous mode
[   57.199074][ T5831] veth1_vlan: entered promiscuous mode
[   57.225378][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.236863][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.258481][ T5831] veth0_macvtap: entered promiscuous mode
[   57.271785][ T5831] veth1_macvtap: entered promiscuous mode
[   57.301817][ T5833] veth0_vlan: entered promiscuous mode
[   57.314340][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.323168][ T5833] veth1_vlan: entered promiscuous mode
[   57.328226][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.347501][ T5826] veth0_vlan: entered promiscuous mode
[   57.352635][ T5833] veth0_macvtap: entered promiscuous mode
[   57.361211][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.368629][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.372159][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.378220][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.390846][ T5833] veth1_macvtap: entered promiscuous mode
[   57.394265][ T5826] veth1_vlan: entered promiscuous mode
[   57.419843][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.434391][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.448082][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.452318][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.456916][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.460240][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.471238][ T5826] veth0_macvtap: entered promiscuous mode
[   57.489940][ T5826] veth1_macvtap: entered promiscuous mode
[   57.510489][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.520751][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.555509][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.571495][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.573836][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.582876][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.585060][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.586772][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.592997][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.597540][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.650402][ T4882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.653566][ T4882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.707658][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.710987][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.728330][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.745693][  T621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.748751][  T621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.778398][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.781156][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.802023][ T5896] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.883205][ T5899] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.894285][ T5900] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   57.907466][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.938920][ T5902] xt_CT: No such helper "snmp"
[   58.085934][ T5900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.209396][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.575538][ T5922] Zero length message leads to an empty skb
[   59.061515][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   59.084773][ T5220] Bluetooth: hci0: command tx timeout
[   59.157388][ T5971] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.164666][ T5835] Bluetooth: hci2: command tx timeout
[   59.169611][ T5971] netlink: 52 bytes leftover after parsing attributes in process `syz.0.22'.
[   59.244681][ T5835] Bluetooth: hci1: command tx timeout
[   59.326869][ T5969] block nbd0: server does not support multiple connections per device.
[   59.346482][ T5969] block nbd0: shutting down sockets
[   59.426328][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.431610][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.437239][ T5971] bond0 (unregistering): Released all slaves
[   59.527056][ T5981] bridge_slave_0: mtu less than device minimum
[   59.539959][ T5988] bridge0: port 3(syz_tun) entered blocking state
[   59.542791][ T5988] bridge0: port 3(syz_tun) entered disabled state
[   59.547109][ T5988] syz_tun: entered allmulticast mode
[   59.551352][ T5988] syz_tun: entered promiscuous mode
[   59.554406][ T5988] bridge0: port 3(syz_tun) entered blocking state
[   59.557714][ T5988] bridge0: port 3(syz_tun) entered forwarding state
[   59.622311][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   59.627036][ T5990] syzkaller0: entered allmulticast mode
[   59.632522][ T5990] syzkaller0 (unregistering): left allmulticast mode
[   59.846312][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'.
[   59.855366][ T5999] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 33530 - 0
[   59.858667][ T5999] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 33530 - 0
[   59.861877][ T5999] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 33530 - 0
[   59.865630][ T5999] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 33530 - 0
[   59.869486][ T5999] geneve2: entered promiscuous mode
[   59.871663][ T5999] geneve2: entered allmulticast mode
[   59.968508][ T6001] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.32'.
[   60.103571][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   60.110360][ T6011] netlink: 'syz.1.35': attribute type 16 has an invalid length.
[   60.115227][ T6011] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.35'.
[   60.233208][ T6013] netlink: 'syz.1.36': attribute type 2 has an invalid length.
[   60.367714][ T6018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.528526][ T6031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.533186][ T6031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33530 - 0
[   60.715458][ T6031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.718934][ T6031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33530 - 0
[   60.780286][ T6031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.784872][ T6031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33530 - 0
[   60.835538][ T6018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.864161][ T6031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.870828][ T6031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33530 - 0
[   60.914283][ T6018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.950827][ T6035] netlink: 'syz.0.43': attribute type 9 has an invalid length.
[   60.981426][ T6031] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 33530 - 0
[   60.984671][ T6031] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   60.994379][ T6031] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 33530 - 0
[   60.997775][ T6031] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   61.016969][ T6018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.037142][ T6031] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 33530 - 0
[   61.040530][ T6031] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   61.056979][ T6031] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 33530 - 0
[   61.060582][ T6031] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   61.097639][ T6018] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.109194][ T6018] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.117148][ T6018] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.128458][ T6018] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.164811][ T5835] Bluetooth: hci0: command tx timeout
[   61.246275][ T5835] Bluetooth: hci2: command tx timeout
[   61.324982][ T5835] Bluetooth: hci1: command tx timeout
[   61.403087][   T24] hid-generic 0005:04F3:8002.0001: collection stack underflow
[   61.407892][   T24] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed
[   61.410759][   T24] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22
[   61.480711][ T6075] xt_limit: Overflow, try lower: 262144/524288
[   61.677149][ T6083] netlink: 'syz.2.59': attribute type 6 has an invalid length.
[   61.679697][ T6083] netlink: 'syz.2.59': attribute type 5 has an invalid length.
[   61.892099][ T6094] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET)
[   61.943383][ T6096] pim6reg: entered allmulticast mode
[   61.948604][ T6096] pim6reg: left allmulticast mode
[   62.323574][ T6124] nbd: illegal input index 65508
[   62.381650][ T6130] netlink: 'syz.0.70': attribute type 6 has an invalid length.
[   62.399548][ T6131] Illegal XDP return value 4294967274 on prog  (id 30) dev N/A, expect packet loss!
[   62.533585][ T6146] netlink: 'syz.2.73': attribute type 32 has an invalid length.
[   62.579581][   T33] audit: type=1800 audit(1752064715.387:2): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.76" name="memory.events" dev="tmpfs" ino=156 res=0 errno=0
[   62.582793][ T6149] Unknown options in mask 700
[   62.591222][   T33] audit: type=1804 audit(1752064715.407:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.76" name="memory.events" dev="tmpfs" ino=156 res=1 errno=0
[   62.640468][ T6153] Bluetooth: MGMT ver 1.23
[   62.719767][ T6158] openvswitch: netlink: Key type 251 is out of range max 32
[   62.966855][ T6169] __nla_validate_parse: 20 callbacks suppressed
[   62.966865][ T6169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'.
[   63.245427][ T5835] Bluetooth: hci0: command tx timeout
[   63.324670][ T5835] Bluetooth: hci2: command tx timeout
[   63.406275][ T5835] Bluetooth: hci1: command tx timeout
[   63.682279][ T6187] tipc: Started in network mode
[   63.684374][ T6187] tipc: Node identity d6a64e98a041, cluster identity 4711
[   63.688881][ T6187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.693932][ T6187] syzkaller0: entered promiscuous mode
[   63.695952][ T6187] syzkaller0: entered allmulticast mode
[   63.702985][ T6187] tipc: Resetting bearer <eth:syzkaller0>
[   63.711249][ T6186] tipc: Resetting bearer <eth:syzkaller0>
[   63.718953][ T6186] tipc: Disabling bearer <eth:syzkaller0>
[   63.800114][ T6194] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   63.805082][ T6194] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   63.811338][ T6194] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   63.816981][ T6194] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   63.929318][ T6201] netlink: 100 bytes leftover after parsing attributes in process `syz.0.94'.
[   64.010688][ T6205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.96'.
[   64.226214][ T6214] netlink: 27 bytes leftover after parsing attributes in process `syz.0.99'.
[   64.303457][ T6218] bridge_slave_0: left allmulticast mode
[   64.305785][ T6218] bridge_slave_0: left promiscuous mode
[   64.308060][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.318335][ T6218] bridge_slave_1: left allmulticast mode
[   64.320740][ T6218] bridge_slave_1: left promiscuous mode
[   64.323365][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.342962][ T6218] team0: Port device team_slave_0 removed
[   64.350603][ T6218] team0: Port device team_slave_1 removed
[   64.353807][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.357371][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.360918][ T6218] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.363408][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.481380][ T6227] xt_policy: neither incoming nor outgoing policy selected
[   64.624274][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   64.634218][ T6239] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   64.650774][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.675265][ T6239] veth3: entered promiscuous mode
[   64.677672][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.109'.
[   64.720823][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'.
[   64.723796][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.112'.
[   64.941158][    C0] Unknown status report in ack skb
[   65.020300][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'.
[   65.186306][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'.
[   65.226504][ T6281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.229628][ T6281] syzkaller0: entered promiscuous mode
[   65.231980][ T6281] syzkaller0: entered allmulticast mode
[   65.257605][ T6280] tipc: Resetting bearer <eth:syzkaller0>
[   65.277024][ T6280] tipc: Disabling bearer <eth:syzkaller0>
[   65.382415][ T6290] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   65.386102][ T6290] netlink: 'syz.0.126': attribute type 1 has an invalid length.
[   65.795789][ T6308] netlink: 'syz.2.130': attribute type 1 has an invalid length.
[   66.004332][ T6308] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.014892][ T6311] syzkaller1: entered promiscuous mode
[   66.016781][ T6311] syzkaller1: entered allmulticast mode
[   66.043818][ T6308] bond2: (slave gretap1): making interface the new active one
[   66.054812][ T6308] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.146749][ T6308] syz.2.130 (6308) used greatest stack depth: 20040 bytes left
[   66.342263][ T6339] can: request_module (can-proto-5) failed.
[   66.473319][ T6350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.690609][ T6364] xt_l2tp: v2 sid > 0xffff: 4294901760
[   66.694349][ T6365] xt_l2tp: v2 sid > 0xffff: 4294901760
[   66.869794][ T6376] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   67.083825][ T6396] Cannot find set identified by id 0 to match
[   67.149616][ T6406] ieee802154 phy0 wpan0: encryption failed: -22
[   67.303696][ T6422] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   67.309299][ T6422] netlink: 'syz.2.163': attribute type 2 has an invalid length.
[   67.393324][ T6431] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[   67.401180][ T6431] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.454649][ T6440] netlink: 'syz.0.168': attribute type 1 has an invalid length.
[   67.495571][ T6440] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.539523][ T6440] bond0: (slave veth3): Enslaving as an active interface with a down link
[   68.044052][ T6494] __nla_validate_parse: 21 callbacks suppressed
[   68.044070][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   68.076528][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'.
[   68.100044][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'.
[   68.118545][ T6495] ipvlan2: entered promiscuous mode
[   68.284286][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   68.366453][ T6520] netlink: 52 bytes leftover after parsing attributes in process `syz.0.188'.
[   68.405463][ T5297] tipc: Node number set to 1994870424
[   68.442067][ T6520] wireguard0: entered promiscuous mode
[   68.444619][ T6520] wireguard0: entered allmulticast mode
[   68.458961][ T6517] delete_channel: no stack
[   68.650751][ T6536] xt_l2tp: missing protocol rule (udp|l2tpip)
[   68.651648][ T6538] trusted_key: syz.2.193 sent an empty control message without MSG_MORE.
[   68.825447][ T6556] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   68.828537][ T6556] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   68.906559][ T6563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.038895][ T6569] netlink: 'syz.2.204': attribute type 10 has an invalid length.
[   69.054172][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.060773][ T6569] team0: Port device bond0 added
[   69.171993][ T6585] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.209125][ T6585] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.271759][ T6585] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.329136][ T6585] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.403746][ T6585] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.408558][ T6597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'.
[   69.416689][ T6585] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.438897][ T6585] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.450991][ T6585] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.668580][ T6612] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[   69.798841][ T6621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.220'.
[   69.863093][ T6624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.930061][ T6624] syzkaller0: entered promiscuous mode
[   69.932326][ T6624] syzkaller0: entered allmulticast mode
[   69.940586][ T6624] tipc: Resetting bearer <eth:syzkaller0>
[   69.984266][   T40] tipc: Resetting bearer <eth:syzkaller0>
[   70.012080][ T6624] netlink: 'syz.0.221': attribute type 15 has an invalid length.
[   70.023597][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[   70.078464][ T6638] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003
[   70.807512][ T6623] tipc: Disabling bearer <eth:syzkaller0>
[   71.006189][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.229'.
[   71.091335][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.093725][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.129092][ T6660] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   71.220155][ T6661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.304133][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'.
[   71.323739][ T6666] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   71.338093][ T6666] netlink: 'syz.2.235': attribute type 10 has an invalid length.
[   71.347087][ T6666] netlink: 'syz.2.235': attribute type 11 has an invalid length.
[   71.597830][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   71.853004][ T6685] macsec1: entered promiscuous mode
[   71.855337][ T6685] macsec1: entered allmulticast mode
[   71.908301][ T6694] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[   71.914349][ T6691] netlink: 'syz.1.243': attribute type 1 has an invalid length.
[   72.726931][ T6761] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   72.775518][ T6766] xt_CT: You must specify a L4 protocol and not use inversions on it
[   72.777907][ T6766] x_tables: duplicate underflow at hook 2
[   73.063408][ T6789] __nla_validate_parse: 4 callbacks suppressed
[   73.063421][ T6789] netlink: 248 bytes leftover after parsing attributes in process `syz.0.274'.
[   73.071566][ T6789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.274'.
[   73.154724][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'.
[   73.159833][ T6795] IPVS: length: 163 != 8
[   73.170533][ T6797] xt_CT: No such helper "syz0"
[   73.218010][ T6804] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   73.368233][ T6815] netlink: 68 bytes leftover after parsing attributes in process `syz.2.281'.
[   73.370377][ T6817] ieee802154 phy0 wpan0: encryption failed: -90
[   73.371268][ T6815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.396669][ T6815] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.411639][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   73.417382][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   73.421697][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   73.428147][ T6820] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   73.428420][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   73.435578][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   73.440001][ T6819] netlink: 124 bytes leftover after parsing attributes in process `syz.0.283'.
[   74.057738][ T6863] netlink: 'syz.0.297': attribute type 32 has an invalid length.
[   74.062207][ T6863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.235424][ T6886] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   74.281178][ T6890] ksmbd: Unknown IPC event: 3, ignore.
[   74.285581][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[   74.491905][ T6910] netlink: 'syz.2.311': attribute type 1 has an invalid length.
[   74.561102][ T6921] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 1, id = 0
[   74.845302][ T6962] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.856267][ T6962] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   75.270680][ T6965] bond0: entered promiscuous mode
[   75.272943][ T6965] bond_slave_0: entered promiscuous mode
[   75.279375][ T6965] bond_slave_1: entered promiscuous mode
[   75.282779][ T6965] bond0: left promiscuous mode
[   75.286436][ T6965] bond_slave_0: left promiscuous mode
[   75.289648][ T6965] bond_slave_1: left promiscuous mode
[   75.864811][ T7010] netlink: 'syz.0.335': attribute type 11 has an invalid length.
[   75.948785][ T7017] netlink: 'syz.1.336': attribute type 10 has an invalid length.
[   75.979998][ T7023] lo: entered allmulticast mode
[   76.044071][ T7033] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[   76.114874][ T7039] lo speed is unknown, defaulting to 1000
[   76.117216][ T7039] lo speed is unknown, defaulting to 1000
[   76.119572][ T7039] lo speed is unknown, defaulting to 1000
[   76.142395][ T7039] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   76.170474][ T7039] lo speed is unknown, defaulting to 1000
[   76.174381][ T7039] lo speed is unknown, defaulting to 1000
[   76.177418][ T7039] lo speed is unknown, defaulting to 1000
[   76.180088][ T7039] lo speed is unknown, defaulting to 1000
[   76.221270][ T7045] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[   76.861790][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.865289][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.869121][ T7091] netlink: 'syz.0.358': attribute type 3 has an invalid length.
[   77.716550][ T7098] netlink: 'syz.1.360': attribute type 4 has an invalid length.
[   77.785346][ T7100] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   77.999648][ T7126] netlink: 'syz.1.368': attribute type 23 has an invalid length.
[   78.115081][ T7129] __nla_validate_parse: 150 callbacks suppressed
[   78.115090][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'.
[   78.178110][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.182342][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.196309][ T7146] erspan0: entered promiscuous mode
[   78.200108][ T7146] gretap0: entered promiscuous mode
[   78.203740][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.209168][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.255547][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.258472][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.300784][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.303656][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.356847][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'.
[   78.501415][ T7164] xt_hashlimit: size too large, truncated to 1048576
[   78.655926][ T7170] netlink: 'syz.0.382': attribute type 1 has an invalid length.
[   78.674014][ T7170] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.700459][ T7170] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.705727][ T7170] bond1: (slave batadv0): making interface the new active one
[   78.709203][ T7170] bond1: (slave batadv0): Enslaving as an active interface with an up link
[   79.001240][ T7192] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   79.047440][ T7192] bond3: (slave gretap2): making interface the new active one
[   79.050939][ T7192] bond3: (slave gretap2): Enslaving as an active interface with an up link
[   79.149955][ T7204] netlink: 'syz.0.391': attribute type 1 has an invalid length.
[   79.183131][ T7204] xt_policy: output policy not valid in PREROUTING and INPUT
[   79.293598][ T7225] xt_l2tp: missing protocol rule (udp|l2tpip)
[   79.474002][ T7247] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   79.643142][   T33] audit: type=1800 audit(1752064732.447:4): pid=7264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.406" name="bpf-map" dev="anon_inodefs" ino=30 res=0 errno=0
[   79.672893][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.683417][ T7265] macvlan2: entered promiscuous mode
[   79.688581][ T7265] macvlan2: entered allmulticast mode
[   79.692199][ T7265] bond1: (slave macvlan2): Opening slave failed
[   80.752573][ T7365] netlink: 'syz.0.428': attribute type 2 has an invalid length.
[   80.946372][ T7384] tipc: Enabling of bearer <et:g> rejected, media not registered
[   81.167166][ T7403] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   81.169993][ T5857] bond0: (slave bond_slave_0): interface is now down
[   81.183237][ T5857] bond0: (slave bond_slave_1): interface is now down
[   81.217599][ T5856] bond0: (slave bond_slave_0): interface is now down
[   81.220424][ T5856] bond0: (slave bond_slave_1): interface is now down
[   81.224371][ T5856] bond0: now running without any active interface!
[   81.240415][ T7411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.541223][    T9] IPVS: starting estimator thread 0...
[   81.544011][ T7433] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   81.564802][ T7445] validate_nla: 5 callbacks suppressed
[   81.564810][ T7445] netlink: 'syz.1.451': attribute type 1 has an invalid length.
[   81.612192][ T7443] netlink: 'syz.0.450': attribute type 32 has an invalid length.
[   81.638451][ T7441] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.696051][ T7452] lo speed is unknown, defaulting to 1000
[   82.411160][ T7468] netlink: 'syz.0.458': attribute type 5 has an invalid length.
[   82.650434][ T7479] lo speed is unknown, defaulting to 1000
[   82.874056][   T24] IPVS: starting estimator thread 0...
[   82.964810][ T7487] IPVS: using max 79 ests per chain, 189600 per kthread
[   83.091637][ T7493] netlink: 'syz.1.465': attribute type 1 has an invalid length.
[   83.141660][ T7494] delete_channel: no stack
[   83.195068][ T7499] nbd: must specify an index to disconnect
[   83.223515][ T7501] lo speed is unknown, defaulting to 1000
[   83.419550][ T7506] netlink: 'syz.2.470': attribute type 14 has an invalid length.
[   83.442015][ T7506] netlink: 'syz.2.470': attribute type 14 has an invalid length.
[   83.852869][ T7531] __nla_validate_parse: 41 callbacks suppressed
[   83.852885][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.479'.
[   84.147354][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[   84.241514][ T7583] netlink: 'syz.2.493': attribute type 11 has an invalid length.
[   84.249545][ T7583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.493'.
[   84.319233][ T7594] syz.1.496 uses old SIOCAX25GETINFO
[   84.326360][ T7594] sctp: [Deprecated]: syz.1.496 (pid 7594) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.326360][ T7594] Use struct sctp_sack_info instead
[   84.467041][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'.
[   84.469983][ T7613] bridge_slave_1: left allmulticast mode
[   84.471831][ T7613] bridge_slave_1: left promiscuous mode
[   84.474269][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.497985][ T7613] bridge_slave_0: left allmulticast mode
[   84.499909][ T7613] bridge_slave_0: left promiscuous mode
[   84.501832][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.539339][ T7608] netlink: 120 bytes leftover after parsing attributes in process `syz.0.501'.
[   84.679620][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'.
[   84.684322][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'.
[   84.717112][ T7639] netlink: 200 bytes leftover after parsing attributes in process `syz.0.506'.
[   84.718817][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'.
[   84.730985][ T7631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.505'.
[   85.082552][ T7666] lo speed is unknown, defaulting to 1000
[   85.713156][ T7696] netlink: 'syz.2.513': attribute type 21 has an invalid length.
[   85.717049][    C1] Unknown status report in ack skb
[   85.878335][ T7717] netlink: 'syz.0.514': attribute type 2 has an invalid length.
[   86.126842][ T7738] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[   86.130250][ T7738] netlink: 'syz.2.517': attribute type 1 has an invalid length.
[   86.348730][ T7760] netlink: zone id is out of range
[   86.351219][ T7760] netlink: zone id is out of range
[   86.353814][ T7760] netlink: zone id is out of range
[   86.356074][ T7760] netlink: zone id is out of range
[   86.460428][  T791] cfg80211: failed to load regulatory.db
[   86.471026][ T7771] IPVS: set_ctl: invalid protocol: 94 172.30.1.3:20004
[   86.628038][ T7782] validate_nla: 14 callbacks suppressed
[   86.628051][ T7782] netlink: 'syz.2.529': attribute type 1 has an invalid length.
[   86.689960][ T7791] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[   86.702156][ T7791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.770475][ T7789] bond0 (unregistering): (slave veth3): Releasing active interface
[   86.790966][ T7789] bond0 (unregistering): Released all slaves
[   86.876924][ T7805] netlink: 'syz.2.536': attribute type 1 has an invalid length.
[   87.085796][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   87.476356][ T7857] Cannot find map_set index 0 as target
[   87.732565][ T7875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.087881][ T7915] netlink: 'syz.0.577': attribute type 7 has an invalid length.
[   88.090812][ T7915] netlink: 'syz.0.577': attribute type 8 has an invalid length.
[   88.096619][ T7915] syz_tun: entered promiscuous mode
[   88.104131][ T7915] syz_tun: left promiscuous mode
[   88.152785][ T7921] lo speed is unknown, defaulting to 1000
[   88.199862][ T7929] netlink: 'syz.1.580': attribute type 13 has an invalid length.
[   88.202478][ T7929] netlink: 'syz.1.580': attribute type 17 has an invalid length.
[   88.347016][ T7928] bridge4: the hash_elasticity option has been deprecated and is always 16
[   88.550923][ T7944] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[   88.556715][ T7944] bond0: (slave vcan0): Error -95 calling set_mac_address
[   88.587114][ T7950] raw_sendmsg: syz.2.591 forgot to set AF_INET. Fix it!
[   88.630044][ T7955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   88.664160][ T7958] bridge0: entered allmulticast mode
[   88.690301][ T7961] syzkaller1: entered promiscuous mode
[   88.692167][ T7961] syzkaller1: entered allmulticast mode
[   88.837889][ T7978] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   89.089302][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.131607][ T8016] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   89.152506][ T8013] __nla_validate_parse: 52 callbacks suppressed
[   89.152516][ T8013] netlink: 68 bytes leftover after parsing attributes in process `syz.0.611'.
[   89.264314][ T8029] lo speed is unknown, defaulting to 1000
[   89.301823][ T8033] xt_hashlimit: size too large, truncated to 1048576
[   89.444812][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[   89.536995][ T8055] sctp: [Deprecated]: syz.1.621 (pid 8055) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.536995][ T8055] Use struct sctp_sack_info instead
[   89.551621][ T8055] sctp: [Deprecated]: syz.1.621 (pid 8055) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.551621][ T8055] Use struct sctp_sack_info instead
[   89.591236][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'.
[   89.735760][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'.
[   89.743323][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.626'.
[   89.816595][ T8075] tap0: tun_chr_ioctl cmd 1074025678
[   89.819233][ T8075] tap0: group set to 0
[   89.876020][ T8077] xt_recent: Unsupported userspace flags (00000048)
[   90.204325][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'.
[   90.650350][ T8082] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.660576][ T8085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.630'.
[   90.717036][ T8087] netlink: 256 bytes leftover after parsing attributes in process `syz.0.632'.
[   90.726588][ T8087] netlink: 676 bytes leftover after parsing attributes in process `syz.0.632'.
[   90.730390][ T8087] netlink: 676 bytes leftover after parsing attributes in process `syz.0.632'.
[   90.845176][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   90.883201][ T8102] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  118.567694][ T8145] __nla_validate_parse: 132 callbacks suppressed
[  118.567906][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'.
[  118.635840][ T8150] syz_tun: entered allmulticast mode
[  118.695783][ T8154] syz_tun: left allmulticast mode
[  118.800118][ T8158] ip6t_srh: unknown srh match flags  4000
[  118.802629][ T8158] netlink: 'syz.2.646': attribute type 22 has an invalid length.
[  118.913895][ T8167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.648'.
[  118.923344][ T8156] netlink: 'syz.0.645': attribute type 16 has an invalid length.
[  118.928701][ T8156] netlink: 'syz.0.645': attribute type 17 has an invalid length.
[  118.949479][ T8156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.959219][ T6190] lo speed is unknown, defaulting to 1000
[  118.999706][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'.
[  119.105568][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.652'.
[  119.150078][ T8182] lo speed is unknown, defaulting to 1000
[  119.278044][ T8188] xt_hashlimit: size too large, truncated to 1048576
[  119.572104][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'.
[  119.572714][ T8203] tipc: Started in network mode
[  119.578243][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'.
[  119.588028][ T8203] tipc: Node identity 5a6c10d14ea8, cluster identity 4711
[  119.591626][ T8203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.620500][ T8205] 8021q: adding VLAN 0 to HW filter on device bond4
[  119.625253][ T8206] tipc: Resetting bearer <eth:syzkaller0>
[  119.658046][ T8206] tipc: Disabling bearer <eth:syzkaller0>
[  119.871149][ T8234] netlink: 'syz.2.669': attribute type 3 has an invalid length.
[  121.244294][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'.
[  121.256379][ T8279] netlink: 16 bytes leftover after parsing attributes in process `syz.2.683'.
[  121.265247][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'.
[  121.388421][ T8286] netlink: 'syz.2.686': attribute type 1 has an invalid length.
[  121.620468][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'.
[  121.632764][ T8296] sctp: [Deprecated]: syz.0.691 (pid 8296) Use of int in max_burst socket option.
[  121.632764][ T8296] Use struct sctp_assoc_value instead
[  121.646013][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.710932][ T8300] pim6reg1: entered promiscuous mode
[  121.713307][ T8300] pim6reg1: entered allmulticast mode
[  121.896263][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.981847][ T8318] netlink: 'syz.0.698': attribute type 1 has an invalid length.
[  122.779765][ T8333] Cannot find set identified by id 1 to match
[  122.809835][ T8334] lo speed is unknown, defaulting to 1000
[  123.072723][ T8361] sctp: [Deprecated]: syz.0.711 (pid 8361) Use of int in maxseg socket option.
[  123.072723][ T8361] Use struct sctp_assoc_value instead
[  123.214364][ T8363] lo speed is unknown, defaulting to 1000
[  123.586181][ T8410] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  123.620007][ T8409] lo speed is unknown, defaulting to 1000
[  123.775890][ T8415] __nla_validate_parse: 12 callbacks suppressed
[  123.775913][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'.
[  123.811497][ T8415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.726'.
[  124.377707][ T8417] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  124.444288][ T8426] netlink: 'syz.1.730': attribute type 3 has an invalid length.
[  124.449205][ T8426] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  124.452627][ T8426] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.730'.
[  127.524258][ T8483] netlink: 'syz.1.745': attribute type 1 has an invalid length.
[  127.620628][ T8490] netlink: 308 bytes leftover after parsing attributes in process `syz.1.748'.
[  127.624182][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[  127.627996][ T8490] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  127.633970][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[  127.637255][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[  128.007594][ T8502] netlink: 52 bytes leftover after parsing attributes in process `syz.1.751'.
[  128.011389][ T8502] netlink: 'syz.1.751': attribute type 1 has an invalid length.
[  128.104235][ T8506] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  128.290796][ T8516] netlink: 260 bytes leftover after parsing attributes in process `syz.2.756'.
[  128.305805][ T8516] netlink: 'syz.2.756': attribute type 1 has an invalid length.
[  128.366604][ T8522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.758'.
[  128.522812][ T8519] syzkaller1: entered promiscuous mode
[  128.525480][ T8519] syzkaller1: entered allmulticast mode
[  128.700571][ T8551] bridge_slave_0: default FDB implementation only supports local addresses
[  128.710730][ T8550] netlink: 'syz.0.768': attribute type 12 has an invalid length.
[  128.850096][ T8568] tipc: Can't bind to reserved service type 0
[  128.856008][ T8568] __nla_validate_parse: 3 callbacks suppressed
[  128.856021][ T8568] netlink: 152 bytes leftover after parsing attributes in process `syz.0.771'.
[  128.862512][ T8565] xt_CT: No such helper "snmp_trap"
[  129.057454][ T8574] netlink: 'syz.2.774': attribute type 6 has an invalid length.
[  129.060619][ T8576] netlink: 'syz.2.774': attribute type 6 has an invalid length.
[  129.063424][ T8577] : renamed from bond_slave_0
[  129.069289][ T8574] netlink: 'syz.2.774': attribute type 6 has an invalid length.
[  129.119886][ T8583] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.777'.
[  129.423246][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'.
[  129.430230][ T8609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'.
[  129.499514][ T8615] netlink: 256 bytes leftover after parsing attributes in process `syz.1.786'.
[  129.547539][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'.
[  129.555794][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.560991][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.571178][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.575564][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.579861][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.584230][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.599766][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.611624][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.623121][ T8618] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  129.848704][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.794'.
[  129.934150][ T8650] C: renamed from team_slave_0 (while UP)
[  129.944942][ T8650] netlink: 'syz.2.795': attribute type 8 has an invalid length.
[  130.086484][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[  130.090241][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.799'.
[  130.180092][ T8671] netlink: 'syz.1.802': attribute type 10 has an invalid length.
[  130.188724][ T8671] veth0_vlan: left promiscuous mode
[  130.198626][ T8671] veth0_vlan: entered promiscuous mode
[  130.202508][ T8671] team0: Device veth0_vlan failed to register rx_handler
[  130.294064][ T8671] syz.1.802 (8671) used greatest stack depth: 19160 bytes left
[  130.333366][ T8687] netlink: 'syz.1.806': attribute type 39 has an invalid length.
[  130.360570][ T8690] netlink: 'syz.2.807': attribute type 3 has an invalid length.
[  130.430817][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  130.475456][ T8700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  130.758493][ T8734] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  130.761820][ T8736] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  130.832692][ T8743] netlink: 'syz.0.824': attribute type 2 has an invalid length.
[  130.836638][ T8743] netlink: 'syz.0.824': attribute type 1 has an invalid length.
[  130.893952][ T8751] ip6tnl0: Master is either lo or non-ether device
[  130.909911][ T6190] hid-generic 0005:0B57:0007.0002: collection stack underflow
[  130.921059][ T6190] hid-generic 0005:0B57:0007.0002: item 0 0 0 12 parsing failed
[  130.924914][ T6190] hid-generic 0005:0B57:0007.0002: probe with driver hid-generic failed with error -22
[  130.986271][ T8762] netlink: 'syz.1.831': attribute type 32 has an invalid length.
[  130.989843][ T8762] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  131.171776][ T8777] xt_cgroup: xt_cgroup: no path or classid specified
[  131.299609][ T8794] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.448611][ T8809] bond1: (slave batadv0): Releasing active interface
[  131.559426][ T8824] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.583276][ T8824] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.587213][ T8824] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  131.592193][ T8824] bond6: (slave vti0): Error -95 calling set_mac_address
[  131.604327][ T8827] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  131.692120][ T8836] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  131.860721][ T8848] netlink: 'syz.1.853': attribute type 1 has an invalid length.
[  132.528404][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.835815][ T8897] tipc: Started in network mode
[  132.840294][ T8897] tipc: Node identity 0e5805bbef61, cluster identity 4711
[  132.844375][ T8897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.881104][ T8897] syzkaller0: entered promiscuous mode
[  132.882946][ T8897] syzkaller0: entered allmulticast mode
[  132.886941][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[  132.901286][ T8896] tipc: Resetting bearer <eth:syzkaller0>
[  133.852938][ T8896] tipc: Disabling bearer <eth:syzkaller0>
[  133.932025][ T8921] __nla_validate_parse: 22 callbacks suppressed
[  133.932039][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'.
[  133.976344][ T8923] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.870'.
[  134.009371][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.871'.
[  134.540935][ T8958] net_ratelimit: 26 callbacks suppressed
[  134.540940][ T8958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.955686][ T8964] nbd2: detected capacity change from 0 to 63
[  134.961403][ T8965] block nbd2: NBD_DISCONNECT
[  134.963636][ T8965] block nbd2: Disconnected due to user request.
[  134.966774][ T8965] block nbd2: shutting down sockets
[  134.976096][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  134.979129][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  134.981554][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  134.984616][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  134.987145][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  134.990162][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  134.992820][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  134.995880][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  135.001424][ T8706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.010858][ T8706] Buffer I/O error on dev nbd2, logical block 0, async page read
[  135.017048][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'.
[  135.026273][ T8706] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.029417][ T8706] Buffer I/O error on dev nbd2, logical block 1, async page read
[  135.032339][ T8706] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.036672][ T8706] Buffer I/O error on dev nbd2, logical block 2, async page read
[  135.039533][ T8706] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.042536][ T8706] Buffer I/O error on dev nbd2, logical block 3, async page read
[  135.045630][ T8706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.063317][ T8974] !: renamed from dummy0 (while UP)
[  135.095536][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'.
[  135.102640][ T8706] Buffer I/O error on dev nbd2, logical block 0, async page read
[  135.107801][ T8706] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  135.111837][ T8706] Buffer I/O error on dev nbd2, logical block 1, async page read
[  135.118071][ T8706] ldm_validate_partition_table(): Disk read failed.
[  135.121400][ T8706] Dev nbd2: unable to read RDB block 0
[  135.125855][ T8706]  nbd2: unable to read partition table
[  135.138152][ T8706] ldm_validate_partition_table(): Disk read failed.
[  135.143217][ T8706] Dev nbd2: unable to read RDB block 0
[  135.149494][ T8706]  nbd2: unable to read partition table
[  135.880272][ T8978] netlink: 7 bytes leftover after parsing attributes in process `syz.2.891'.
[  135.955180][ T8986] netlink: 'syz.0.893': attribute type 4 has an invalid length.
[  135.966639][  T791] lo speed is unknown, defaulting to 1000
[  135.969140][  T791] syz2: Port: 1 Link DOWN
[  135.972064][ T8986] netlink: 'syz.0.893': attribute type 4 has an invalid length.
[  135.980721][  T791] lo speed is unknown, defaulting to 1000
[  135.983160][  T791] syz2: Port: 1 Link ACTIVE
[  136.155475][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'.
[  136.230001][ T9020] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001
[  136.303268][ T9025] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'.
[  136.410171][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  136.414018][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'.
[  136.505906][ T9044] syz.0.909: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  136.519911][ T9044] CPU: 0 UID: 0 PID: 9044 Comm: syz.0.909 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  136.519925][ T9044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.519953][ T9044] Call Trace:
[  136.519958][ T9044]  <TASK>
[  136.519962][ T9044]  dump_stack_lvl+0x189/0x250
[  136.519978][ T9044]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.519988][ T9044]  ? __pfx__printk+0x10/0x10
[  136.519999][ T9044]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  136.520011][ T9044]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  136.520023][ T9044]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  136.520035][ T9044]  warn_alloc+0x214/0x310
[  136.520046][ T9044]  ? stack_depot_save_flags+0x40/0x900
[  136.520060][ T9044]  ? __pfx_warn_alloc+0x10/0x10
[  136.520070][ T9044]  ? kasan_save_track+0x4f/0x80
[  136.520080][ T9044]  ? xskq_create+0x56/0x170
[  136.520087][ T9044]  ? xsk_init_queue+0xb0/0x110
[  136.520098][ T9044]  ? xsk_setsockopt+0x43f/0x710
[  136.520108][ T9044]  ? do_sock_setsockopt+0x25a/0x3e0
[  136.520117][ T9044]  ? __x64_sys_setsockopt+0x18b/0x220
[  136.520125][ T9044]  ? do_syscall_64+0xfa/0x3b0
[  136.520132][ T9044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.520144][ T9044]  __vmalloc_node_range_noprof+0x125/0x12f0
[  136.520167][ T9044]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  136.520180][ T9044]  ? __kasan_kmalloc+0x93/0xb0
[  136.520190][ T9044]  vmalloc_user_noprof+0xad/0xf0
[  136.520201][ T9044]  ? xskq_create+0xbf/0x170
[  136.520208][ T9044]  xskq_create+0xbf/0x170
[  136.520215][ T9044]  xsk_init_queue+0xb0/0x110
[  136.520227][ T9044]  xsk_setsockopt+0x43f/0x710
[  136.520239][ T9044]  ? __pfx_xsk_setsockopt+0x10/0x10
[  136.520249][ T9044]  ? __lock_acquire+0xab9/0xd20
[  136.520261][ T9044]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  136.520268][ T9044]  ? __pfx_xsk_setsockopt+0x10/0x10
[  136.520278][ T9044]  do_sock_setsockopt+0x25a/0x3e0
[  136.520288][ T9044]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  136.520299][ T9044]  ? __fget_files+0x2a/0x420
[  136.520312][ T9044]  __x64_sys_setsockopt+0x18b/0x220
[  136.520323][ T9044]  do_syscall_64+0xfa/0x3b0
[  136.520330][ T9044]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.520336][ T9044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.520343][ T9044]  ? exc_page_fault+0x9f/0xf0
[  136.520354][ T9044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.520361][ T9044] RIP: 0033:0x7f610e38e929
[  136.520368][ T9044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  136.520375][ T9044] RSP: 002b:00007f610f21d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  136.520383][ T9044] RAX: ffffffffffffffda RBX: 00007f610e5b5fa0 RCX: 00007f610e38e929
[  136.520389][ T9044] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  136.520393][ T9044] RBP: 00007f610e410b39 R08: 0000000000000004 R09: 0000000000000000
[  136.520397][ T9044] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.520401][ T9044] R13: 0000000000000000 R14: 00007f610e5b5fa0 R15: 00007ffd1e284fe8
[  136.520412][ T9044]  </TASK>
[  136.520416][ T9044] Mem-Info:
[  136.653404][ T9044] active_anon:5533 inactive_anon:0 isolated_anon:0
[  136.653404][ T9044]  active_file:1101 inactive_file:38227 isolated_file:0
[  136.653404][ T9044]  unevictable:1768 dirty:167 writeback:0
[  136.653404][ T9044]  slab_reclaimable:9551 slab_unreclaimable:72986
[  136.653404][ T9044]  mapped:18406 shmem:2436 pagetables:969
[  136.653404][ T9044]  sec_pagetables:0 bounce:0
[  136.653404][ T9044]  kernel_misc_reclaimable:0
[  136.653404][ T9044]  free:281301 free_pcp:16878 free_cma:0
[  136.669501][ T9044] Node 0 active_anon:12516kB inactive_anon:0kB active_file:3372kB inactive_file:136576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29832kB dirty:528kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5404kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  136.680324][ T9044] Node 1 active_anon:9616kB inactive_anon:0kB active_file:1032kB inactive_file:16332kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43792kB dirty:140kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7288kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  136.692567][ T9044] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.702512][ T9044] lowmem_reserve[]: 0 812 812 812 812
[  136.704377][ T9044] Node 0 DMA32 free:223820kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12516kB inactive_anon:0kB active_file:3372kB inactive_file:136576kB unevictable:3536kB writepending:528kB present:1556484kB managed:831900kB mlocked:0kB bounce:0kB free_pcp:34776kB local_pcp:20156kB free_cma:0kB
[  136.714703][ T9044] lowmem_reserve[]: 0 0 0 0 0
[  136.716366][ T9044] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  136.734340][ T9044] lowmem_reserve[]: 0 0 854 854 854
[  136.736370][ T9044] Node 1 Normal free:427532kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9616kB inactive_anon:0kB active_file:1032kB inactive_file:16332kB unevictable:3536kB writepending:140kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:33108kB local_pcp:21824kB free_cma:0kB
[  136.752484][ T9044] lowmem_reserve[]: 0 0 0 0 0
[  136.754201][ T9044] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.759088][ T9044] Node 0 DMA32: 235*4kB (UM) 242*8kB (M) 47*16kB (ME) 317*32kB (UME) 132*64kB (UM) 61*128kB (UME) 19*256kB (UM) 13*512kB (UM) 14*1024kB (UM) 4*2048kB (UM) 39*4096kB (M) = 223820kB
[  136.767015][ T9044] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  136.772276][ T9044] Node 1 Normal: 1077*4kB (UME) 705*8kB (UME) 561*16kB (UME) 301*32kB (UME) 47*64kB (UME) 14*128kB (UME) 11*256kB (UM) 6*512kB (UM) 5*1024kB (M) 3*2048kB (UM) 92*4096kB (M) = 427340kB
[  136.778298][ T9044] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.781309][ T9044] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.785820][ T9044] 41764 total pagecache pages
[  136.787451][ T9044] 0 pages in swap cache
[  136.795953][ T9044] Free swap  = 124996kB
[  136.797509][ T9044] Total swap = 124996kB
[  136.798889][ T9044] 786301 pages RAM
[  136.800152][ T9044] 0 pages HighMem/MovableOnly
[  136.801700][ T9044] 241078 pages reserved
[  136.803130][ T9044] 0 pages cma reserved
[  137.338261][ T9050] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  137.421324][ T9079] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  137.423830][ T9079] team0: Device macvtap1 is already an upper device of the team interface
[  137.442635][ T9081] netlink: 'syz.2.917': attribute type 4 has an invalid length.
[  137.580523][ T9079] veth0: entered promiscuous mode
[  137.791723][ T9112] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  138.044649][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  138.293371][ T9133] netlink: 'syz.0.932': attribute type 21 has an invalid length.
[  138.682206][ T9162] netlink: 'syz.2.943': attribute type 1 has an invalid length.
[  138.722514][ T9162] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  138.796303][ T9171] lo speed is unknown, defaulting to 1000
[  138.945786][ T9182] netlink: 'syz.2.949': attribute type 1 has an invalid length.
[  138.972031][ T9185] __nla_validate_parse: 8 callbacks suppressed
[  138.972045][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'.
[  138.976928][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.949'.
[  138.985767][ T9182] 8021q: adding VLAN 0 to HW filter on device bond8
[  139.120248][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.954'.
[  139.147122][ T9202] netlink: 168 bytes leftover after parsing attributes in process `syz.2.954'.
[  139.197499][ T9208] netlink: 'syz.1.955': attribute type 9 has an invalid length.
[  139.200747][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'.
[  139.217126][ T9208] hsr0: entered promiscuous mode
[  139.219128][ T9208] macvlan2: entered promiscuous mode
[  139.221017][ T9208] macvlan2: entered allmulticast mode
[  139.222775][ T9208] hsr0: entered allmulticast mode
[  139.224399][ T9208] hsr_slave_0: entered allmulticast mode
[  139.227288][ T9208] hsr_slave_1: entered allmulticast mode
[  139.305279][ T9217] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[  139.336035][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.397992][ T9226] netlink: 10 bytes leftover after parsing attributes in process `syz.1.962'.
[  139.492370][ T9228] lo speed is unknown, defaulting to 1000
[  139.545365][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'.
[  139.565744][ T9236] netlink: 144 bytes leftover after parsing attributes in process `syz.1.965'.
[  139.665659][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  139.668562][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[  139.717352][ T9253] ip6t_rpfilter: unknown options
[  139.933512][ T9271] netem: incorrect gi model size
[  139.943333][ T9271] netem: change failed
[  140.029454][ T9277] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  140.038257][ T9277] netlink: 'syz.2.980': attribute type 6 has an invalid length.
[  140.099050][ T9277] lo speed is unknown, defaulting to 1000
[  140.590758][ T9313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.618430][ T9313] syzkaller0: entered promiscuous mode
[  140.620795][ T9313] syzkaller0: entered allmulticast mode
[  140.624106][ T9313] tipc: Resetting bearer <eth:syzkaller0>
[  140.632631][ T9312] tipc: Resetting bearer <eth:syzkaller0>
[  141.608194][ T9312] tipc: Disabling bearer <eth:syzkaller0>
[  142.193899][ T9350] lo speed is unknown, defaulting to 1000
[  142.424005][ T9390] lo speed is unknown, defaulting to 1000
[  143.467111][ T5835] Bluetooth: hci2: link tx timeout
[  143.469690][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.473459][ T5835] Bluetooth: hci2: link tx timeout
[  143.475914][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.478982][ T5835] Bluetooth: hci2: link tx timeout
[  143.480633][ T5835] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.483131][ T5835] Bluetooth: hci2: link tx timeout
[  143.486007][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.737400][ T9487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.783064][ T9487] syzkaller0: entered promiscuous mode
[  143.785750][ T9487] syzkaller0: entered allmulticast mode
[  143.788794][ T9487] tipc: Resetting bearer <eth:syzkaller0>
[  143.796258][ T9486] tipc: Resetting bearer <eth:syzkaller0>
[  144.286149][ T9496] __nla_validate_parse: 63 callbacks suppressed
[  144.286163][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'.
[  144.756920][ T9486] tipc: Disabling bearer <eth:syzkaller0>
[  144.884268][ T9506] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.053198][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'.
[  145.056799][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'.
[  145.178194][ T9543] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1057'.
[  145.266239][ T9550] netlink: 'syz.2.1061': attribute type 9 has an invalid length.
[  145.269656][   T33] audit: type=1800 audit(1752064798.077:5): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1060" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1971 res=0 errno=0
[  145.278113][ T9550] netlink: 'syz.2.1061': attribute type 6 has an invalid length.
[  145.285363][ T9550] netlink: 'syz.2.1061': attribute type 7 has an invalid length.
[  145.290220][ T9550] netlink: 'syz.2.1061': attribute type 8 has an invalid length.
[  145.311020][ T9550] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  145.350284][ T9554] syzkaller0: entered promiscuous mode
[  145.353895][ T9554] syzkaller0: entered allmulticast mode
[  145.359264][ T9553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.367889][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.371662][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.392403][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.397967][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'.
[  145.411427][ T9554] tipc: Resetting bearer <eth:syzkaller0>
[  145.420165][ T9554] tipc: Disabling bearer <eth:syzkaller0>
[  145.564767][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  145.635503][   T33] audit: type=1800 audit(1752064798.447:6): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1066" name="memory.events" dev="tmpfs" ino=1982 res=0 errno=0
[  145.862353][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  145.942454][ T9594] xt_ecn: cannot match TCP bits for non-tcp packets
[  145.981732][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  146.297649][ T9618] netlink: 'syz.0.1083': attribute type 11 has an invalid length.
[  146.301214][ T9618] netlink: 'syz.0.1083': attribute type 11 has an invalid length.
[  146.358443][ T9622] netlink: 'syz.1.1085': attribute type 178 has an invalid length.
[  146.849591][ T9655] ip6erspan0: entered allmulticast mode
[  146.967746][ T9668] 8021q: VLANs not supported on wg0
[  146.993385][ T9670] Timeout policy `syz1' can only be used by L3 protocol number 0
[  147.282174][ T9689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.314805][ T9689] syzkaller0: entered promiscuous mode
[  147.317049][ T9689] syzkaller0: entered allmulticast mode
[  147.319980][ T9689] tipc: Resetting bearer <eth:syzkaller0>
[  147.372674][ T9688] tipc: Resetting bearer <eth:syzkaller0>
[  147.645950][ T5220] Bluetooth: hci2: command 0x0405 tx timeout
[  148.268486][ T9688] tipc: Disabling bearer <eth:syzkaller0>
[  148.308886][ T9706] tipc: Invalid UDP bearer configuration
[  148.308914][ T9706] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.440117][ T9715] set match dimension is over the limit!
[  148.505432][ T9727] vlan0: entered allmulticast mode
[  148.508040][ T9727] erspan0: entered allmulticast mode
[  148.629008][ T9740] x_tables: duplicate underflow at hook 3
[  148.681244][ T9742] netlink: 'syz.0.1121': attribute type 1 has an invalid length.
[  148.705702][ T9747] xt_bpf: check failed: parse error
[  149.307336][ T9808] netlink: 'syz.1.1138': attribute type 1 has an invalid length.
[  149.310053][ T9808] netlink: 'syz.1.1138': attribute type 1 has an invalid length.
[  149.374560][ T9815] __nla_validate_parse: 18 callbacks suppressed
[  149.374576][ T9815] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1140'.
[  149.871833][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1145'.
[  149.948418][ T9841] bridge0: port 1(macvlan2) entered blocking state
[  149.950852][ T9841] bridge0: port 1(macvlan2) entered disabled state
[  149.953222][ T9841] macvlan2: entered allmulticast mode
[  149.955170][ T9841] bridge0: entered allmulticast mode
[  149.958581][ T9841] macvlan2: left allmulticast mode
[  149.960242][ T9841] bridge0: left allmulticast mode
[  150.089434][ T9842] netlink: 'syz.0.1148': attribute type 2 has an invalid length.
[  150.102897][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1150'.
[  150.265691][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[  150.353179][ T9868] netlink: 'syz.0.1155': attribute type 6 has an invalid length.
[  150.360761][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[  150.404882][ T9878] netlink: 'syz.1.1158': attribute type 1 has an invalid length.
[  150.407557][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'.
[  150.417143][ T9878] netlink: 'syz.1.1158': attribute type 178 has an invalid length.
[  150.426033][ T9878] netlink: 'syz.1.1158': attribute type 1 has an invalid length.
[  150.429377][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'.
[  150.499452][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'.
[  150.747314][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'.
[  150.826195][ T9925] 8021q: adding VLAN 0 to HW filter on device bond3
[  151.560506][ T9951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1180'.
[  151.770337][ T9965] netlink: 'syz.2.1184': attribute type 1 has an invalid length.
[  151.812024][ T9965] 8021q: adding VLAN 0 to HW filter on device bond9
[  151.826593][ T9965] ipvlan2: entered allmulticast mode
[  151.828808][ T9965] bond9: entered allmulticast mode
[  152.062073][ T9984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.103135][ T9984] syzkaller0: entered promiscuous mode
[  152.106852][ T9984] syzkaller0: entered allmulticast mode
[  152.109913][ T9984] tipc: Resetting bearer <eth:syzkaller0>
[  152.119680][ T9982] tipc: Resetting bearer <eth:syzkaller0>
[  153.045156][ T9982] tipc: Disabling bearer <eth:syzkaller0>
[  153.148978][T10003] vlan0: entered promiscuous mode
[  153.150718][T10003] bridge0: entered promiscuous mode
[  153.152756][T10003] vlan0: entered allmulticast mode
[  153.214014][T10014] xfrm1: entered promiscuous mode
[  153.217150][T10014] xfrm1: entered allmulticast mode
[  153.230979][T10014] xt_hashlimit: size too large, truncated to 1048576
[  153.269771][T10021] IPVS: Unknown mcast interface: wg0
[  153.799456][T10057] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  154.276080][T10081] ieee802154 phy0 wpan0: encryption failed: -22
[  154.560613][T10113] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  154.585835][ T5893] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.764806][ T6190] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  154.829619][T10130] netlink: 'syz.2.1230': attribute type 4 has an invalid length.
[  155.144223][T10132] openvswitch: netlink: IP tunnel dst address not specified
[  155.150120][T10132] syzkaller1: entered allmulticast mode
[  155.243347][T10135] netlink: 'syz.0.1232': attribute type 21 has an invalid length.
[  155.356589][T10140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.381301][T10140] syzkaller0: entered promiscuous mode
[  155.383342][T10140] syzkaller0: entered allmulticast mode
[  155.386448][T10140] tipc: Resetting bearer <eth:syzkaller0>
[  155.403343][T10140] tipc: Resetting bearer <eth:syzkaller0>
[  156.296781][T10140] tipc: Disabling bearer <eth:syzkaller0>
[  156.305610][T10152] IPv6: sit3: Disabled Multicast RS
[  156.308149][T10152] sit3: entered allmulticast mode
[  156.378149][T10156] __nla_validate_parse: 10 callbacks suppressed
[  156.378166][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1239'.
[  156.391720][T10156] sctp: [Deprecated]: syz.0.1239 (pid 10156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.391720][T10156] Use struct sctp_sack_info instead
[  156.450190][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1242'.
[  156.453320][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'.
[  156.638197][T10176] can: request_module (can-proto-5) failed.
[  157.329370][T10183] netlink: 'syz.1.1248': attribute type 1 has an invalid length.
[  157.441077][T10194] netlink: 'syz.0.1251': attribute type 32 has an invalid length.
[  157.454832][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'.
[  157.458840][T10194] (unnamed net_device) (uninitialized): option coupled_control: invalid value (115)
[  157.512318][T10196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1252'.
[  157.524289][T10200] openvswitch: netlink: Flow actions attr not present in new flow.
[  157.648308][T10208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.704813][T10208] syzkaller0: entered promiscuous mode
[  157.707170][T10208] syzkaller0: entered allmulticast mode
[  157.710003][T10208] tipc: Resetting bearer <eth:syzkaller0>
[  157.716808][T10207] tipc: Resetting bearer <eth:syzkaller0>
[  157.783178][T10214] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1259'.
[  157.849665][T10217] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1259'.
[  158.614696][T10207] tipc: Disabling bearer <eth:syzkaller0>
[  158.620726][T10214] 0: renamed from hsr0 (while UP)
[  158.626463][T10214] 0: entered allmulticast mode
[  158.628519][T10214] hsr_slave_0: entered allmulticast mode
[  158.630889][T10214] hsr_slave_1: entered allmulticast mode
[  158.633536][T10214] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  158.640349][T10217] 1: renamed from 70 (while UP)
[  158.646703][T10217] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  158.669495][T10222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1261'.
[  158.740895][T10233] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.791803][T10238] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1262'.
[  158.807459][T10233] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.830433][T10238] 8021q: adding VLAN 0 to HW filter on device batadv1
[  158.867251][T10238] team0: Port device batadv1 added
[  158.884833][T10246] netlink: 'syz.2.1262': attribute type 1 has an invalid length.
[  158.891186][T10233] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.904829][T10245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.913086][T10244] tipc: Disabling bearer <eth:syzkaller0>
[  158.937972][T10233] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.988945][T10255] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1272'.
[  159.013227][T10255] lo speed is unknown, defaulting to 1000
[  159.043229][T10233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.051308][T10233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.060127][T10233] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.079466][T10233] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.356185][T10264] lo speed is unknown, defaulting to 1000
[  159.460096][T10277] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  159.464721][T10277] C: renamed from team_slave_0 (while UP)
[  159.469027][T10277] netlink: 'syz.1.1276': attribute type 1 has an invalid length.
[  159.472352][T10277] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  159.865397][T10294] ip6gre1: entered promiscuous mode
[  160.050215][T10308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.071889][    T9] lo speed is unknown, defaulting to 1000
[  160.074358][    T9] syz2: Port: 1 Link DOWN
[  160.080485][T10308] netlink: 'syz.0.1283': attribute type 10 has an invalid length.
[  160.290241][T10329] syzkaller1: entered promiscuous mode
[  160.292650][T10329] syzkaller1: entered allmulticast mode
[  160.388785][T10331] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  160.420230][T10331] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.750137][T10357] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  161.158739][T10392] lo speed is unknown, defaulting to 1000
[  161.160645][T10392] lo speed is unknown, defaulting to 1000
[  161.162816][T10392] lo speed is unknown, defaulting to 1000
[  161.173334][T10392] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  161.192036][T10392] lo speed is unknown, defaulting to 1000
[  161.197371][T10392] lo speed is unknown, defaulting to 1000
[  161.200195][T10392] lo speed is unknown, defaulting to 1000
[  161.253464][T10396] netlink: 'syz.2.1312': attribute type 5 has an invalid length.
[  161.259737][T10396] netlink: 'syz.2.1312': attribute type 5 has an invalid length.
[  161.319554][T10398] syzkaller1: entered promiscuous mode
[  161.322165][T10398] syzkaller1: entered allmulticast mode
[  161.484613][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  161.868214][T10400] __nla_validate_parse: 9 callbacks suppressed
[  161.868234][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  161.876762][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  161.961526][T10406] delete_channel: no stack
[  162.196648][T10424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1321'.
[  162.203367][T10425] netlink: 'syz.1.1322': attribute type 1 has an invalid length.
[  162.232005][T10425] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.250430][T10425] 8021q: adding VLAN 0 to HW filter on device bond5
[  162.254370][T10425] bond5: (slave vxcan2): The slave device specified does not support setting the MAC address
[  162.260751][T10425] bond5: (slave vxcan2): Error -95 calling set_mac_address
[  162.303240][T10428] veth3: entered promiscuous mode
[  162.311665][T10428] bond5: (slave veth3): Enslaving as an active interface with a down link
[  162.317634][T10425] erspan0: entered allmulticast mode
[  162.342646][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.348945][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.356988][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.362844][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.371300][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.379219][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.385543][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.390268][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.394893][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.399342][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.404106][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.409350][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.414035][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.419883][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.427301][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.432026][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.998495][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'.
[  163.064120][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'.
[  163.137864][T10450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.171498][T10450] syzkaller0: entered promiscuous mode
[  163.173982][T10450] syzkaller0: entered allmulticast mode
[  163.178270][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  163.187053][T10449] tipc: Resetting bearer <eth:syzkaller0>
[  164.337238][T10449] tipc: Disabling bearer <eth:syzkaller0>
[  164.483434][T10465] lo speed is unknown, defaulting to 1000
[  164.496332][T10465] lo speed is unknown, defaulting to 1000
[  164.512050][T10468] tun0: tun_chr_ioctl cmd 1074025675
[  164.514327][T10468] tun0: persist enabled
[  164.516933][T10468] tun0: tun_chr_ioctl cmd 1074025675
[  164.517239][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'.
[  164.519784][T10468] tun0: persist disabled
[  164.634840][T10477] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  164.709493][T10477] netlink: 'syz.0.1338': attribute type 10 has an invalid length.
[  164.712114][T10477] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  164.731268][T10477] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  164.737324][T10477] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  164.823140][T10487] lo speed is unknown, defaulting to 1000
[  164.828883][T10487] lo speed is unknown, defaulting to 1000
[  164.910475][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'.
[  165.116158][T10505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.156787][T10505] syzkaller0: entered promiscuous mode
[  165.159061][T10505] syzkaller0: entered allmulticast mode
[  165.162131][T10505] tipc: Resetting bearer <eth:syzkaller0>
[  165.169923][T10504] tipc: Resetting bearer <eth:syzkaller0>
[  166.147365][ T5893] tipc: Node number set to 348393681
[  166.268041][T10504] tipc: Disabling bearer <eth:syzkaller0>
[  166.273326][T10513] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  166.283327][T10513] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1350'.
[  166.404865][T10539] netlink: 'syz.1.1356': attribute type 1 has an invalid length.
[  166.407672][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'.
[  166.436308][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'.
[  173.487076][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  180.687444][ T5220] Bluetooth: hci1: command 0x0406 tx timeout
[  182.287492][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  182.291492][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  182.294717][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  182.298688][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  182.301833][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  182.516609][T10559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  182.520447][T10559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  182.524341][T10559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  182.527574][T10559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  182.530715][T10559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  182.533380][T10559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  182.536820][T10559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  182.539323][T10559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  182.542442][T10559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  182.546449][T10559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.967710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.289419][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  242.294330][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  242.298789][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  242.302458][   T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  242.306287][   T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.543969][T10579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.550983][T10579] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  243.556791][T10579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.560248][T10579] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  243.565067][T10579] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.568089][T10579] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  243.572248][T10579] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  243.575801][T10579] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  243.582715][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.595041][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.324452][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
SYZFAIL: failed to recv rpc
[  271.326853][    C0] rcu: 	0-...!: (10500 ticks this GP) idle=a634/1/0x4000000000000000 softirq=36402/36402 fqs=0
[  271.332189][    C0] rcu: 	(t=10500 jiffies g=26273 q=3019 ncpus=2)
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  271.334592][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g26273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  271.338596][    C0] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=11519
[  271.341686][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g26273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  271.345467][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  271.349030][    C0] rcu: RCU grace-period kthread stack dump:
[  271.351059][    C0] task:rcu_preempt     state:I stack:27320 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  271.355230][    C0] Call Trace:
[  271.356581][    C0]  <TASK>
[  271.357736][    C0]  __schedule+0x16f5/0x4d00
[  271.359191][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  271.360788][    C0]  ? schedule+0x165/0x360
[  271.362248][    C0]  ? __lock_acquire+0xab9/0xd20
[  271.363955][    C0]  ? __pfx___schedule+0x10/0x10
[  271.365503][    C0]  ? schedule+0x91/0x360
[  271.366824][    C0]  schedule+0x165/0x360
[  271.368119][    C0]  schedule_timeout+0x12b/0x270
[  271.369666][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  271.371606][    C0]  ? __pfx_process_timeout+0x10/0x10
[  271.373450][    C0]  ? prepare_to_swait_event+0x341/0x380
[  271.375602][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[  271.377232][    C0]  ? __pfx_rcu_gp_init+0x10/0x10
[  271.378792][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.380442][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  271.382247][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  271.384323][    C0]  ? finish_swait+0xcd/0x1f0
[  271.386185][    C0]  rcu_gp_kthread+0x99/0x390
[  271.387808][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.389647][    C0]  ? __kthread_parkme+0x7b/0x200
[  271.391449][    C0]  ? __kthread_parkme+0x1a1/0x200
[  271.393058][    C0]  kthread+0x711/0x8a0
[  271.394357][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  271.396039][    C0]  ? __pfx_kthread+0x10/0x10
[  271.397566][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.399275][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.400919][    C0]  ? __pfx_kthread+0x10/0x10
[  271.402439][    C0]  ret_from_fork+0x3fc/0x770
[  271.403958][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  271.405557][    C0]  ? __switch_to_asm+0x39/0x70
[  271.407116][    C0]  ? __switch_to_asm+0x33/0x70
[  271.408695][    C0]  ? __pfx_kthread+0x10/0x10
[  271.410198][    C0]  ret_from_fork_asm+0x1a/0x30
[  271.411734][    C0]  </TASK>
[  271.412884][    C0] CPU: 0 UID: 0 PID: 10532 Comm: syz.0.1355 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  271.412897][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.412904][    C0] RIP: 0010:check_preemption_disabled+0x6/0x120
[  271.412917][    C0] Code: c7 c6 a0 8f e2 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <48> 83 ec 10 65 48 8b 05 3e 2e 31 07 48 89 44 24 08 65 8b 05 46 2e
[  271.412951][    C0] RSP: 0018:ffffc900031e70f0 EFLAGS: 00000202
[  271.412963][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff88803bae3980
[  271.412970][    C0] RDX: ffff88803bae3980 RSI: ffffffff8be28fa0 RDI: ffffffff8be28f60
[  271.412977][    C0] RBP: 0000000000000001 R08: ffff88803bae3980 R09: 0000000000000002
[  271.412983][    C0] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810e811838
[  271.412990][    C0] R13: dffffc0000000000 R14: ffff8880203ca000 R15: ffff888111ff8478
[  271.412997][    C0] FS:  00007f610f21d6c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  271.413005][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  271.413012][    C0] CR2: 000000110c2ab2e1 CR3: 0000000020e00000 CR4: 00000000000006f0
[  271.413040][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  271.413047][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  271.413053][    C0] Call Trace:
[  271.413058][    C0]  <TASK>
[  271.413064][    C0]  rcu_is_watching+0x15/0xb0
[  271.413078][    C0]  rcu_read_lock_held+0x15/0x50
[  271.413090][    C0]  qdisc_lookup_rcu+0x32b/0x6d0
[  271.413109][    C0]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  271.413119][    C0]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  271.413132][    C0]  sfq_init+0x1a0f/0x2530
[  271.413161][    C0]  ? __pfx_sfq_init+0x10/0x10
[  271.413175][    C0]  qdisc_create+0x7ac/0xea0
[  271.413192][    C0]  tc_modify_qdisc+0x1426/0x2010
[  271.413210][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  271.413240][    C0]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  271.413249][    C0]  rtnetlink_rcv_msg+0x77c/0xb70
[  271.413263][    C0]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  271.413274][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.413283][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  271.413293][    C0]  ? __copy_skb_header+0xa7/0x550
[  271.413308][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  271.413324][    C0]  netlink_rcv_skb+0x208/0x470
[  271.413338][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  271.413350][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  271.413371][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.413382][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  271.413398][    C0]  netlink_unicast+0x75b/0x8d0
[  271.413416][    C0]  netlink_sendmsg+0x805/0xb30
[  271.413434][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.413449][    C0]  ? aa_sock_msg_perm+0x94/0x160
[  271.413465][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.413475][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.413488][    C0]  __sock_sendmsg+0x21c/0x270
[  271.413500][    C0]  ____sys_sendmsg+0x505/0x830
[  271.413517][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.413536][    C0]  ? import_iovec+0x74/0xa0
[  271.413551][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  271.413566][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.413602][    C0]  ? __fget_files+0x2a/0x420
[  271.413616][    C0]  ? __fget_files+0x3a0/0x420
[  271.413632][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  271.413641][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.413653][    C0]  ? rcu_is_watching+0x15/0xb0
[  271.413663][    C0]  ? do_syscall_64+0xbe/0x3b0
[  271.413671][    C0]  do_syscall_64+0xfa/0x3b0
[  271.413677][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.413683][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.413694][    C0]  ? exc_page_fault+0x9f/0xf0
[  271.413704][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.413711][    C0] RIP: 0033:0x7f610e38e929
[  271.413719][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.413724][    C0] RSP: 002b:00007f610f21d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.413731][    C0] RAX: ffffffffffffffda RBX: 00007f610e5b5fa0 RCX: 00007f610e38e929
[  271.413735][    C0] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003
[  271.413740][    C0] RBP: 00007f610e410b39 R08: 0000000000000000 R09: 0000000000000000
[  271.413746][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.413752][    C0] R13: 0000000000000000 R14: 00007f610e5b5fa0 R15: 00007ffd1e284fe8
[  271.413769][    C0]  </TASK>

VM DIAGNOSIS:
12:42:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff88801faa8237 R9 =1ffff11003f55046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af78ec R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f610f21d6c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ab2e1 CR3=0000000020e00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f610e584478 00007f610e584450 XMM03=00007f610e584488 00007f610e584480
XMM04=00007f610f0ed100 00007f610e584440 XMM05=00007f610e584458 00007f610e5844a0
XMM06=00007f610e584498 00007f610e584490 XMM07=00007f610e584488 00007f610e584480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f610e411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc90002ff6e30 RCX=2e646bf2f16a2000 RDX=0000000000000003
RSI=ffffffff8db8459e RDI=ffffc90002ff6de8 RBP=ffffc90002ff6e70 RSP=ffffc90002ff6dc8
R8 =ffffc90002ff7e78 R9 =0000000000000000 R10=ffffc90002ff6e38 R11=fffff520005fedc9
R12=ffff888020e63980 R13=1ffff920005fede8 R14=dffffc0000000000 R15=1ffff920005fedc6
RIP=ffffffff8172993b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60ffce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f60ff1846a3 00007f60ff1846a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000001df8a
XMM06=0cd0030010000cc0 030210000000002f XMM07=c810000b00000000 10000a0000000000
XMM08=1f00080000000000 6e6bc02a0000002e XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
