last executing test programs:

1.933941106s ago: executing program 1 (id=1173):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

1.879741838s ago: executing program 1 (id=1175):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x49, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)

1.767425097s ago: executing program 1 (id=1176):
r0 = socket$inet6(0xa, 0x5, 0x0)
sendmmsg$sock(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e21, 0x800000, @mcast1, 0xa}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="14fbbb256459", 0x6}, {&(0x7f0000000180)="1201ec2775ca09f0b8cc3ee02f0df322ed981d31eea777aa41629638c0fe43dddf275c87b76af9951c066fa29ed178ff66808e722b5c733f3ffc4fafc3acecd40d48bf641cc92bd7be0132a35d170e5c6d8861cd39a98dc55d7f2bc9fc86fe4acc630be2dd0c4f73576fe70d9d38623fb3e4fafb9821288d5f748cc84eaf38c3e49b14c7a24477735044d89bda6f2dec5c2742290e98d56904898ebae86c6a3680056f1f", 0xa4}, {&(0x7f0000000280)="4f7d6caf69a0fef510a573626796e851d1d648914568fbd80f3c5a41cfc34bae238236d92ab56925a9c099369d12e20003cd7c1b6a8637e5cc25908e3e7e72ce91f92badc5c9affe482a850edd23c4b98236e3374771a08e90b44a59e4ca04b394ca2e857cebae49a3663caca8f5e8ccaf4e1bcc4dff166584c6", 0x7a}, {&(0x7f0000000100)="ca917386637671751389eeec34a09b969654e397c653caf304ebd4e2f6e12e6b4a52771a3e8a957d5d94d17a", 0x2c}], 0x4}}], 0x1, 0x4000)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x4}, 0x20)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)

899.944458ms ago: executing program 1 (id=1185):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000390404000000feffffff00000000", @ANYRES32=r2, @ANYBLOB="41210100034d04001c0016801800018014000a00010000dff5306dd3880000000000ff00000000000000"], 0x3c}}, 0x40c0)
setsockopt$inet_opts(r0, 0x0, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000abaff9), 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x36, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a00010072616e67650000001c00028004000380010002400000000004000480080001400000000d0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x2d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6c0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x1, 0x2, 0x0, 0x3, 0x20, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xaf}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x79}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x3b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xff, &(0x7f00000006c0)=""/255, 0x41100, 0x3, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x7, 0x45}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000540)=[{0x5, 0x3, 0x7, 0xc}, {0x5, 0x4, 0x4, 0x3}, {0x5, 0x3, 0x5, 0x1}, {0x1, 0x5, 0x5, 0x1}, {0x4, 0x2, 0x4}, {0x2, 0x5, 0x0, 0xa}, {0x3, 0x2, 0xa, 0xb}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r10}, 0x10)
socket$kcm(0x21, 0x2, 0x2)

898.997898ms ago: executing program 1 (id=1186):
socket$rxrpc(0x21, 0x2, 0xa)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"})
close(0x4)

600.276979ms ago: executing program 2 (id=1192):
r0 = socket$rds(0x15, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001800)=""/183, 0xb7}], 0x1, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0)

598.843616ms ago: executing program 2 (id=1193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2d, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x6, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_AF_SPEC={0x20, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_BRIDGE={0x4}]}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0)

499.743255ms ago: executing program 0 (id=1194):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
sendto$rxrpc(r1, 0x0, 0x0, 0x10, 0x0, 0x0) (async)
bind$rxrpc(r1, &(0x7f00000002c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) (async)
mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107f000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"])
ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0)

498.696577ms ago: executing program 2 (id=1195):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$netlink(0x10, 0x3, 0x5)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc5d, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c000100299c7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="340000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="300000000002000014001280090501007665746800ffe4132c000280"], 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2000, 0x82, 0xde, 0x18}, {0x9, 0xf8, 0x3, 0x70}, {0x0, 0x1, 0x0, 0xc}, {0x0, 0x9d, 0x0, 0x4}]})

420.693921ms ago: executing program 0 (id=1196):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)}, 0x24040080)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}}], 0x2, 0x60, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x44}}, 0x4000)

349.60894ms ago: executing program 2 (id=1197):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000640)={0x4001, 0x8, 0x0, 0x3}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000056000bafdc5800000000000007"], 0x18}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000320500000a0001cf00bbbbbbbbbbbb00ddc177412128d4a1d253d825efd168142a653284775c7b2b945414152966344f6633a8041081a97abe362de4c3d88263d5055230599e33696d8ad4b5b773b9fe3e4efb5768b5ff969ec8a1ebc2b6b5f51b249dfc7c7f50decdf7745da99f680cb31181"], 0x2c}}, 0x28000000)

290.008321ms ago: executing program 2 (id=1198):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000301010200000000000000000000000a080408000340000008020800084000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000040)=0xb523, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200"], 0x10)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)
r7 = socket$tipc(0x1e, 0x2, 0x0)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r8, 0x400442c9, &(0x7f00000002c0)={0x4ca, @broadcast})
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004)
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
accept4(r11, 0x0, &(0x7f0000000000), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d7774bb705ab72f0e101e4b69d401f42dc172e27b83cc1b634b4bcb14318a78c7dbfe5a7e9fcccc09cdd073178d1ef5674c7ada88e466e94ae4394368fb7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$inet(0x10, 0x3, 0x0)

269.559145ms ago: executing program 0 (id=1199):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$kcm(0x10, 0x2, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d8606ff"], 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a", @ANYRESHEX=r1, @ANYRES16=r2], 0x138}, 0x1, 0x0, 0x0, 0x4008c84}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8)
unshare(0x2c060000)
unshare(0x24020400)
unshare(0x2000000)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x8000c, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000440)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001000000008000900010001001800018014000200776c616e30000000000000000000000008000800000002"], 0x3c}}, 0x0)
connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'})

149.497182ms ago: executing program 0 (id=1200):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="020000000400000000000058150000008004"], 0x48) (async)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='wP', 0x2}], 0x1, 0x3) (async)
close(r2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) (async)
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) (async)
r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000))
recvmsg$unix(r4, &(0x7f00000003c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000005c0)=""/132, 0x84}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x40)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={<r8=>0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000004c0)={r8, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90) (async)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000680)={'erspan0\x00', <r9=>0x0, 0x0, 0x8000, 0xffff061b, 0x5, {{0x2e, 0x4, 0x3, 0x9, 0xb8, 0x68, 0x0, 0xe, 0x29, 0x0, @multicast2, @private=0xa010101, {[@generic={0x44, 0xb, "36244329bb9a4e8c63"}, @lsrr={0x83, 0xb, 0x9, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x27}]}, @cipso={0x86, 0x1f, 0x0, [{0x1, 0xf, "2da19fd6b5335dd4e1b33a8f84"}, {0x6, 0xa, "2b091f7fda9ecbe3"}]}, @generic={0x1c, 0x7, "2a52411be3"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x80, 0x1, 0xc, [{@local, 0x10001}, {@remote, 0xcf}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0xfffffffb}]}, @rr={0x7, 0x7, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x27, 0xfd, [@loopback, @local, @broadcast, @remote, @private=0xa010100, @multicast2, @local, @broadcast, @broadcast]}]}}}}})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000480)={r9, 0x1, 0x6, @local}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, 0x0) (async)
sendmmsg$inet(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x61}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x38}}], 0x1, 0x2004c8d5)
r10 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e82d3e44", @ANYRES16=r13, @ANYBLOB="01000000000000000000070000000c001600000000000000000014000800000000000000000000000000000000000500140000000000"], 0x3c}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000798964000bbd0000000000000000000000150000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x8, 0x6]}, @tcp_ip4_spec={@multicast2, @broadcast, 0x4e20, 0x4e23, 0x7}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})

58.698342ms ago: executing program 0 (id=1201):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000004000000000000000000850000008e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async)
r2 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000440)="1743284a732ed237096e121014409f20b7747925dcb492f8b0", 0x19}, {&(0x7f0000000580)="694f5878330faef7bf2910e314818658041a2d7d2ef7af83d1560eabe2b0a7210e55116012c276ac9d8730ee640a2328c576662c", 0x34}, {&(0x7f0000000940)="9b072274f3bf36052e574bbbda0773d9b6a3797b5055347043e81bb1b46dcc5cc6bb2c62b51695fd2bf782d703c8cc6a7e1efdfb83460e6f744b10d11ffe5672d9763b83322e672a5f0dd73fe0ac7d41fb6b6f9e1a2ec51a1ea9b4caa7a04b98c74183c1df36ce35aeaa64c6887abf402b4eebaea7873072d56a2c24f0b3bfade6a0cb3bdbb1df576cbfd73c67ffcfb142c0b2b6348342d2406fe4f5c6dfaf6c66de6d5950a2a96a60ffb8d594e4255df774fe73724a73ad18201bd165d697b54e10fd865dc433757f536955526b44537a484cea6a86153f675c9157cff12df59db4fbe9a5a358a40997a8301e5a146e9c25487908a369af61b845db1bcd23b571d8b2c2dd9535505e1ee36c02810a24570087ecf6976a1485757d6e1523aab23e689766dbef4d33455e86e75f1acb21d644c6a7c917e0dadca407fa4d60e2d0e1f8a40cd9d39156f4eea48754ca106809d197aa262c95b11119cfc852ec1e966206b8ce635a3729a293332906ffd750c07d9c7d236c61193bd2d8a0696b03658afb5f53b015e5e64645564c11f616985eb94e3006516d46a36b89ab1b16082e085f6bb8bb28b9a7f41d49072d61535c6d5e744821ffeae8bfd3c83ebf21a95c00a32a145781cce7d5f656daa8091df34f6b25f309e104a20912da9d83a35135024c3d41e476077f8f9e0262502d2668e52afbe2ad30bb56c6a1e5bc4a8607a406967d79dfd395aec4a91d53a3be2aca9d74bdbfdbf4d85d9bd14db6a30bef1c356b41260dae0be43961291067c6b07edda8b8f0df23f7fc2aee8796ca749c5279da5e3e791f258b9c5251a4827e4e47da0420698240ff678c2781e8941614ab6f2c458b6a5c31c4085dd4a9cfc6c5d53adb81092397ca7b12be44e896d35c9d0beddf5194b9698d10bdaadc6836d6818488f7e39abf855a325717764b6768f00e993c815e6d7bcc547aaa6a589957049a78fd85e78042d750a9e8f1a879f91b9ef120537ef0359992239a50b87f61d4abeb51d29b88f4a152011a468e67b704941ba601a5e9387162e04e419d535494f5b50371c4274947ef7494c841ff998c4753844c84579a1c557e777aa170e4ff18050aefc45381aecedf7b83293b7378da9afb1a830f6958b105279f21e75f69658256abad23ed7340cab8f80195bb4e32d9925d9337c80193d31ea6f0dee33877c25467e2e2ce8643e22e6c72a533c01f8dc6feffb7915e86709383699e3b6bacf7183c23d470b63986cbeacc7978043dd1425df971ca10d998a5a40362f432e1d295a9687493463117b8f73c4b06b7792894d0b62c157948d7df6b405bcf72c1a64463adf41e8de62343fd56762fb90a534661df1eaae46b84d2eff17fc9ba993a6f43c0e009706b6bc403bcbbe4ecd00a3f02e7816f3be7a84d2c3da4ff15bde34cac531230dcdcec8c6a57a6825df3606ebe997ece3d65387bc129955c07ebbc9ba54c6f3f59ef1dbc369b4acde4a242196171903a56a425ba238d472ec3e3008e05fc88b2736a8ba2ab42731d61b6a2c33a22b4a27c12422d092628fea1782ebc3f8d4f8d8fa2798f692df883e9cef53c343a7790932f6135d12b9c6fd135dd4ca2f2d7152c2fd326378f58bb71d7ed1e26ea2eb8aa18629633b07df756acf5c12181f06df5fe612f6f18a0b46d0d40100ec88d00309882bc3b768b92e1bb9a911610b693a2a0c9bf738255063f9e0732aec0dfb927eabbcd12c31c4b69958c5c69f8a999bda3b06d69c24d1cd5a7798b03fc296d192e16472d39923c6874c8eedac16cdba192ff1e9893a5950eaffa64ab19cedf84578756e403afaa1cd5f1e6553fdb561fe74e29233b23b1faf80b0f1a958108d27d896e74b6fc1f78d0f414b5ea65328c58be6b488a444bc3df890133ee35f91554b9cd40fe96071316b91488626bfc91f0a60b6f08bfb446f4fd7a4097286be30d1af330da11f79beed8e40087bb255f73aae55f0c9e154a6c30f7d0b25b2fc6325772471feec220f32d99cb49d7a2f874d05b97c86ccc2a2f3e5354584af100c81d08204efbd82c3061a7f2f197134412c6ef2ee1a94bb26e829890cea2141912344d2811bec0b237b74355833196f2adb6a59a8b3c21893ad7e956dac3b97355485471cbb680fea73c22f47890709e30e60e84783f49b6910898a406d7e62479716a5ff3631857b5f35e12a0385cc5a79a85ad5b3269b56f1b52c573eac0c1a3ba3d1aa304dd4a35684fcffa9ef2743d428c2a309ae9f08310f7fc365aa01a35a5eaa8ed8a5909a62c3655451e11d602e02325e680f4fa748478ad0630a962c96c68350565c6a00290a2c6b0d7815a01ca518e7aa7f69ade073a5591c111ca842dce72a63b62f84afa35f45964cf9a52d402b4ba3c5079c3b767bb80eb54b43ba2d981bfc60d4558eb7ee0a3e6d9947957873518d1e5a7216c96e16a822b43a548981acb517b808fba258a68e4cf44ed386cdd81cc3097a055dd2d843bdbae5544e955178392cd7efcf86b4647b9b8d585b86d117f248d3fb84beb8178c00920ec2284100b200551231fa95a997987ee38e4edb4faa3b65ee7a21ef1595f468074ad49c9a69cfe41cc854b6f0da763711024ff67c0d985c3c16b4cf967b8208a856fc5bd6c035db871eab96912fc3319533e7e4e829808030bd74f2424a2695e59c526d4909dc9eb5ad9b8885d5091b0f390a358b660bfac12aa3748b8a9ffe46f3f078b9a1fc78ff3bc25bac44e6a89f07558b7f2fe42824c2d2429527923531f15014bc14f6633d740ca277d7d455a4611e241740c0142d22c16080ecae6af6d886147106dd380056d1d9d90e29eee8aa7a5b9e09be7b1878bd7e698aa019b5f7f8bcc43ed24c4392126052634507fb1dcb1c1e4adc20cd15051b5384881d5dda50769eaab54efe7ab3d8395bcd2d00f1b032e5cbd8e88e9b3ee4b6fb38bbc3b61f6ac74adda6da23d254f874b0cfd250e3885ea30d7d62b225f0e2881fdacc681efb5e7be81c2e6b5e3dd6a05e807990ae805072395665115f090503675a484b332e266d94efc621d778780ea4a03e30620593e450de43d1f4da2491ef34bed0d33a736019527fce2a4d63a2de741709a6fa2748aa3d786eff37f5bdf830f749962e310fba56eb8a173423b297b047644fb823fbcc3eaab8547fbd1e047b1c27c164807150f91e498dced8a69cbb000fb03083dab4cdbbb5affdfaf5a67cbbcfd4ee01bd9e5e1e77be43bb533fcd59e143ac81cbdb1db2cf5a11259da6ff259339c78ce2905ae8bb2f4388eccc2d95c13bed94e91cdc185c815c0aed8611b6829e754a9dd4c49ad741cd21ab3a0c32819e2c3dc0c4d304bd0c1612b36a151e67b26bc18b8aed3cf9669a7c7e156826434936fda75fd390dd1375b9d7326d5291d1af3260c74b886fa708a09d724ad8972672d861d38359f800ed0e7c66abeb02cd0c7f53d87d969888e5a49ac900470ed75f381bcc4579349dc0b8e5bb86cb13657dca6d24214c13f59057b8ff9d74ef3e7e57c19ffb04508c598e5a487d4c99d198c1f08a71ec4640da44b62903a4266d5cca8c7c1213b1ce095968a4d3af008879d28043a3f97e015c32d19e4574115b440de5d5b320e0ba437b5d9861ceba060fc1782f0881cf61c1f8f9e35b6043c741184d06bd8daa1bb0302747b2f62be5acf462211d22ea366a6a24cc7ecc20de3c7ef908ed3d5845bb57c1b4e0043b3e526b000d0865172d6e8967cb5522d983c0a6adac58024204ba1f049b734286c9d7d1b2f65e4e44b54cc17704335f02c4b76b0b4955e6c7446df3e9494600e801edcda608adb73c4d0961cf4c390cde9b2bbf7cc13b3fcc997b7dc465957865fa25db2027eab0c7726461177625177993c5eff3b38932ab2cfa93bf0337d8a81d54ebeca1661cdbd9045822fa86bdbeaf657d22cede53d110657c33eae7e48750e0cce3eefbd04e0f31bc27dccbed55faafb27cbdcc12f8a6071a2b12958f0a4f8c53c83cb14d3824ee06131ddfd60e6229fb8db6d9b0e63f2eeffd74ff8331a847c2693625071b78f466ccd257c2a65c7977a92fdcc2d2d821501091884ea11edfea1d572764fb9c010e879f1ed147e7b01e361dcfc7bf3852fc3066f0f86c9100b346f8850331859d96eb2231447e645ec0ee8f0ebadfa0b02a5798bac5fd781f553fcfe43d288466192df58bc79f043fae82791d6ab3526fccdbe45aa0bf4a6ca73a69fe24966715f9932c9bd8b19cf7dd3b03c8c7c44d3c3ba374c8c6f918c626b74f3be8e9b3cd981609ebdf0f2ae5b6bf6ffb5e2dc8e770cedee5998abb1eb945906576dcc6c500453431e6cbe698fc893958207e0eb81767bea7df42d3b51cd6ae09d008890db009b88774bd88974df3c34111c991a3384e806a79a797242a860fa31001b083d519011925e08e72c44e7b59e6c524d25d1ba081585b202ef9cb5d295ad43f1b02fe56159999f52cc5cfd078181f3f176ea6e95dd8d747a9383d3eaf8f3981315cdf9bc734bfada95db9f4863f2ee1b5b4eeae185d2a1b68c0e20bb1f8e14a1ae4f6c664eb9429f7086e2d0d3c82d3dc37de1df9c705e17f3fbb9aee348811dbd788211724348fe10a53926c303950761a95067f1292897ebac389521d7d010eb33fd6c3db8bb083c1700d25f32d57a7a6d15c0ac3d0ece88bcf6d1727ab273ab6bd07ebb434a66a9b7a70c0321058448975daac97e0f1b1c92473ea2f92d27fcf8d9cc6117318b3b8c06fe0a50d032cccc341913f82126483ef59e01cfacde9d622d54e19190d1456f964537430773cb7c000f59076d14b56b33a5b97e5f6d0fa39d78de752fad2abb797601200db59461583e51fd92648e502811da03d0d452a8c86cf6c3af14336ff16ff85ce58612ec1df1ef8ed07700293ef0b91b8135882974670cea9939311e0bede94d102aa2b867f0505fa7414145f8581f8d883e263d6fcef41aec5ffa55d7b629d6cdb1e1c3e792973c545333802e895adc5c6f7613cc64afd86f14a5d39c23431be3d3b564bfa9cc1539b05c391543a4e879370d59c6d2399d8109b6b04dcc7da8a1ae4069b17b89afe915da4f578a566993641d7b601a35e34e8cefcccfd3bae6ccf0e13445653bf3a393f7b080c48da68ca9b32c6af20905a77d923f3eab80dd5d24ea8a5086ec8d437c659f76eeb304af57771ebf1e7b1771fcdd4800b5ac996ae1e38b8e1b6d0bb1817b949c17778ab0e9b52fead0892a870644cb843a2e731e03583bae6f066f36f2bd9469226f146423d7a3fdaf50f875fdbbe8dedc5d0b68a70642318aecbeed89d6e6f1a09a2d3ec0598819c18af0b1749e3e4d7ada137fff2894d24c5b69957fe3ce40d0a9c2eae27eda7f5bde9216e92fd3c8927c49f8b7bd60f55236508efb23c68fbbb257bc922222cb0d630fb5aa373f0ae90cd2253db5ee39624297b474046f5e3115ffc55e27c37a23bed2aef9ba13761b8dec71f40d6ee352445e7a39382761f0ab8bf7b724dfa0831ef7fce0aaf882e0f763200716c9ec172f18d32f398810b1253351088fbb080cc936f4ed330dac790fb889f8efd4c9899d8a338d8f2486a3afd9c167dabd57f0329e96ec0e8193a76747bd7cb5ea49fdc9aa51cf453a698609db52bb66868f900197417c6153d9a16676882f9fd7b257b7bd0c2b68ee8e975abd79784ba4ba10ff1c6c17454f5df3c0a8e2d222b1c66bbe1c5440c5c750287daae7d2a7f000c8100b7ec9efd43d392d8f48fcce9ccb6fe9ae0917126dc381adfd7e80e132c7013cd08ac01a2eb478", 0x1000}], 0x4}}], 0x1, 0x2004000)
r3 = accept4(r2, 0x0, &(0x7f0000000200), 0x80000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8001, 0x8000}, 0x8) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r4, 0x4}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (async)
syz_emit_ethernet(0x43b, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRESDEC=r1], 0x0)

57.707511ms ago: executing program 2 (id=1202):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
write$tun(r1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001900), &(0x7f0000001980)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x61, 0x30]}}, &(0x7f0000001180)=""/4096, 0x1d, 0x1000, 0x1, 0x6}, 0x28)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0)
r4 = socket(0x27, 0x6, 0x8)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
r6 = getpid()
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7)
sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}}, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r9, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000008000004000000000000613200000000000095b9c6ac547f4b261536b0411c296a12aa28239b9fe0ee6531764eb82dd13ba338e8e3c97c96339eff896e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64210000001400028008001c000900000005000e00000000000a041a5d501dec32816f71bdc3"], 0x44}}, 0x0)

56.632918ms ago: executing program 0 (id=1203):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000000)="5aa62d32aa43"}, 0x20)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000440000000500000008000900020000000c001600fbffffffffffffff060001000500000008000b000200000005001404fe00000008000c"], 0x48}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000001c0)={0x7, 0x8, 0x34e, 0xa0000000}, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xf, 0x4, 0x20004, 0x3}, 0x50)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="2f0000008d08410000000000000000000000000200009c09b4f2e1180aeb5e765d7d9478f724e6c2ce4f667100fe5784e6bde2a38d84de81b6da6e26528d24e10a133a4b8b0b306d70165027b1a6ad70c173f45730edf5d12f5d7ef1e00112f5c6cfaac803", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r12}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'bond0\x00', @local})

0s ago: executing program 1 (id=1204):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000120001"], 0x48}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000001f40)={0x0}}, 0x2000c810)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000000de83"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x18000000}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0xfdbe, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001640)=""/186, 0xb6}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/72, 0x49}, {&(0x7f0000000600)=""/4107, 0x100b}, {&(0x7f0000000340)=""/219, 0xdb}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0), 0x8)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2, 0x2}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendto$inet6(r11, &(0x7f0000000180)="9000000018001f2fb9269b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000b7000000000000000010000000000000004cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
setsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)
connect$tipc(r10, &(0x7f0000000140)=@id, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=r9, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

98215][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.402722][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.406413][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.409686][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.412455][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.440127][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.444057][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.448030][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.452279][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.455514][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.567060][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   45.703164][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.707815][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.710311][ T5810] bridge_slave_0: entered allmulticast mode
[   45.713107][ T5810] bridge_slave_0: entered promiscuous mode
[   45.730911][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.733283][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.736872][ T5810] bridge_slave_1: entered allmulticast mode
[   45.739636][ T5810] bridge_slave_1: entered promiscuous mode
[   45.742492][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   45.775331][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.781670][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.792146][ T5814] chnl_net:caif_netlink_parms(): no params data found
[   45.818593][ T5810] team0: Port device team_slave_0 added
[   45.830231][ T5810] team0: Port device team_slave_1 added
[   45.883481][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.886267][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.888852][ T5816] bridge_slave_0: entered allmulticast mode
[   45.892772][ T5816] bridge_slave_0: entered promiscuous mode
[   45.902276][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.905822][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.917010][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.922411][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.925107][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.927524][ T5816] bridge_slave_1: entered allmulticast mode
[   45.931258][ T5816] bridge_slave_1: entered promiscuous mode
[   45.948937][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.951977][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.962373][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.001573][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.016739][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.020110][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.022555][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.026250][ T5814] bridge_slave_0: entered allmulticast mode
[   46.029697][ T5814] bridge_slave_0: entered promiscuous mode
[   46.033896][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.036957][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.039526][ T5814] bridge_slave_1: entered allmulticast mode
[   46.042356][ T5814] bridge_slave_1: entered promiscuous mode
[   46.092254][ T5816] team0: Port device team_slave_0 added
[   46.097943][ T5810] hsr_slave_0: entered promiscuous mode
[   46.100582][ T5810] hsr_slave_1: entered promiscuous mode
[   46.105122][ T5816] team0: Port device team_slave_1 added
[   46.119114][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.124283][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.168554][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.170985][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.180512][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.186827][ T5814] team0: Port device team_slave_0 added
[   46.189705][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.192018][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.200749][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.221818][ T5814] team0: Port device team_slave_1 added
[   46.272125][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.274421][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.283442][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.288426][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.291288][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.300672][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.313824][ T5816] hsr_slave_0: entered promiscuous mode
[   46.317115][ T5816] hsr_slave_1: entered promiscuous mode
[   46.319263][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.321789][ T5816] Cannot create hsr debugfs directory
[   46.405010][ T5814] hsr_slave_0: entered promiscuous mode
[   46.407650][ T5814] hsr_slave_1: entered promiscuous mode
[   46.410490][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.413682][ T5814] Cannot create hsr debugfs directory
[   46.518933][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.537750][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.551705][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.569693][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.623801][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.629376][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.647625][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.652561][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.707077][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.715347][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.719443][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.728698][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.778287][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.784561][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.806774][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   46.813698][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.816182][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.822789][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   46.832765][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.835165][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.848198][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.850459][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.854289][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.856609][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.874126][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.911104][ T5814] 8021q: adding VLAN 0 to HW filter on device team0
[   46.927002][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.933316][ T1919] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.935743][ T1919] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.939825][ T1919] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.942062][ T1919] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.039987][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.074139][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.080912][ T5816] veth0_vlan: entered promiscuous mode
[   47.102466][ T5816] veth1_vlan: entered promiscuous mode
[   47.112177][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.127330][ T5816] veth0_macvtap: entered promiscuous mode
[   47.131207][ T5816] veth1_macvtap: entered promiscuous mode
[   47.147194][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.153926][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.159685][ T5810] veth0_vlan: entered promiscuous mode
[   47.163153][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.168365][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.171264][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.174154][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.188066][ T5810] veth1_vlan: entered promiscuous mode
[   47.217373][ T5814] veth0_vlan: entered promiscuous mode
[   47.231943][ T5814] veth1_vlan: entered promiscuous mode
[   47.241712][ T5810] veth0_macvtap: entered promiscuous mode
[   47.257309][ T5810] veth1_macvtap: entered promiscuous mode
[   47.279118][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.281234][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.285221][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.300731][ T5814] veth0_macvtap: entered promiscuous mode
[   47.308844][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.311494][ T5814] veth1_macvtap: entered promiscuous mode
[   47.328626][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.336265][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.339863][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.342727][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.347923][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.350763][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.357951][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.361844][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.365197][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.366035][ T5814] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.370511][ T5814] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.373393][ T5814] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.396841][ T5812] Bluetooth: hci0: command tx timeout
[   47.414500][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.460357][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.462948][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.475057][ T5812] Bluetooth: hci1: command tx timeout
[   47.475453][   T54] Bluetooth: hci2: command tx timeout
[   47.492969][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.502055][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.521324][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.523886][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.532467][ T5877] batadv_slave_0: entered promiscuous mode
[   47.552004][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.558186][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.601749][ T5881] warning: `syz.2.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   47.940433][ T5887] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   47.947306][ T5887] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   48.081034][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   48.194168][ T5896] Zero length message leads to an empty skb
[   48.242673][ T5908] netlink: 'syz.1.8': attribute type 6 has an invalid length.
[   48.246958][ T5908] netlink: 'syz.1.8': attribute type 6 has an invalid length.
[   48.443700][ T5930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'.
[   48.739943][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'.
[   48.816659][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.819696][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16'.
[   48.878058][ T5980] netlink: 'syz.1.17': attribute type 11 has an invalid length.
[   48.880843][ T5980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'.
[   49.418137][ T6056] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   49.473968][ T6060] netlink: 'syz.1.23': attribute type 2 has an invalid length.
[   49.477225][   T54] Bluetooth: hci0: command tx timeout
[   49.512715][ T6060] netlink: 'syz.1.23': attribute type 7 has an invalid length.
[   49.519229][ T6060] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'.
[   49.536260][ T6056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   49.555068][   T54] Bluetooth: hci2: command tx timeout
[   49.557474][ T5812] Bluetooth: hci1: command tx timeout
[   49.699457][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'.
[   50.046619][ T6093] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET)
[   50.082571][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'.
[   50.181327][ T6118] netlink: 'syz.1.35': attribute type 24 has an invalid length.
[   50.245377][ T6125] netdevsim0: mtu less than device minimum
[   50.407010][ T6137] gretap1: entered promiscuous mode
[   50.408829][ T6137] gretap1: entered allmulticast mode
[   50.422160][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.565273][ T6148] netlink: 'syz.0.46': attribute type 39 has an invalid length.
[   50.633228][ T6156] netlink: 'syz.1.49': attribute type 12 has an invalid length.
[   50.694325][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'.
[   50.720815][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.732178][ T6159] netlink: 'syz.1.50': attribute type 4 has an invalid length.
[   51.117999][ T6179] lo speed is unknown, defaulting to 1000
[   51.121067][ T6180] rdma_rxe: rxe_newlink: failed to add lo
[   51.126381][ T6179] lo speed is unknown, defaulting to 1000
[   51.129062][ T6179] lo speed is unknown, defaulting to 1000
[   51.215550][   T10] lo speed is unknown, defaulting to 1000
[   51.217548][ T6179] infiniband syz0: set active
[   51.219142][ T6179] infiniband syz0: added lo
[   51.260563][ T6184] vlan2: entered promiscuous mode
[   51.262683][ T6184] vlan2: entered allmulticast mode
[   51.264720][ T6184] hsr_slave_1: entered allmulticast mode
[   51.266266][ T6179] RDS/IB: syz0: added
[   51.269145][ T6179] smc: adding ib device syz0 with port count 1
[   51.271199][ T6179] smc:    ib device syz0 port 1 has pnetid 
[   51.275324][  T789] lo speed is unknown, defaulting to 1000
[   51.280019][ T6179] lo speed is unknown, defaulting to 1000
[   51.334791][ T6191] netlink: 'syz.2.59': attribute type 1 has an invalid length.
[   51.391514][ T6191] vlan3: entered allmulticast mode
[   51.393383][ T6191] veth0_to_bond: entered allmulticast mode
[   51.407334][ T6179] lo speed is unknown, defaulting to 1000
[   51.516336][ T6179] lo speed is unknown, defaulting to 1000
[   51.565375][ T5812] Bluetooth: hci0: command tx timeout
[   51.635321][   T54] Bluetooth: hci2: command tx timeout
[   51.637576][ T5812] Bluetooth: hci1: command tx timeout
[   51.728450][ T6212] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   51.731907][ T6212] openvswitch: netlink: Duplicate key (type 0).
[   51.760065][ T6208] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.786517][ T6214] 8021q: adding VLAN 0 to HW filter on device bond2
[   51.799587][ T6218] lo speed is unknown, defaulting to 1000
[   52.297054][ T6250] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   52.484518][ T6252] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   52.487632][ T6252] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   52.604735][ T6260] lo speed is unknown, defaulting to 1000
[   52.791579][ T6271] smc: net device bond0 applied user defined pnetid SYZ2
[   52.997731][ T6281] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.009690][ T6281] bond1: (slave ip6gretap1): making interface the new active one
[   53.024361][ T6281] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   53.178457][ T6294] syzkaller0: entered promiscuous mode
[   53.180282][ T6294] syzkaller0: entered allmulticast mode
[   53.637048][ T5812] Bluetooth: hci0: command tx timeout
[   53.716799][   T54] Bluetooth: hci2: command tx timeout
[   53.718695][ T5812] Bluetooth: hci1: command tx timeout
[   53.788841][ T6303] bridge_slave_0: left allmulticast mode
[   53.790967][ T6303] bridge_slave_0: left promiscuous mode
[   53.793005][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.800080][ T6303] bridge_slave_1: left allmulticast mode
[   53.802191][ T6303] bridge_slave_1: left promiscuous mode
[   53.804264][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.813691][ T6303] bond0: (slave bond_slave_0): Releasing backup interface
[   53.835013][ T6303] bond0: (slave bond_slave_1): Releasing backup interface
[   53.848300][ T6303] team0: Port device team_slave_0 removed
[   53.854192][ T6303] team0: Port device team_slave_1 removed
[   53.857393][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.860085][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.863462][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.868418][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.901470][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.906680][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.141961][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.170481][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.220131][ T6325] __nla_validate_parse: 14 callbacks suppressed
[   54.220140][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'.
[   54.265968][ T6307] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.270507][ T6307] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.273695][ T6307] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.283698][ T6307] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.412718][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'.
[   54.422888][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   54.451199][ T6341] validate_nla: 3 callbacks suppressed
[   54.451212][ T6341] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   54.465127][ T6341] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   54.532956][ T6351] team0: Device gtp0 is of different type
[   54.606291][ T6355] netlink: 'syz.1.96': attribute type 5 has an invalid length.
[   54.683473][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   54.693950][ T6359] netlink: 72 bytes leftover after parsing attributes in process `syz.2.98'.
[   54.696056][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   54.700657][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   54.720274][ T6362] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   54.731615][ T6362] macsec1: entered promiscuous mode
[   54.733614][ T6362] macsec1: entered allmulticast mode
[   54.736391][ T6362] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   54.781579][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.808334][ T6369] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.100'.
[   54.822877][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   54.823007][ T6369] lo: entered promiscuous mode
[   54.834504][ T6369] tunl0: entered promiscuous mode
[   54.851133][ T6369] gre0: entered promiscuous mode
[   54.853344][ T6369] gretap0: entered promiscuous mode
[   54.863077][ T6369] erspan0: entered promiscuous mode
[   54.866986][ T6369] ip_vti0: entered promiscuous mode
[   54.869157][ T6369] ip6_vti0: entered promiscuous mode
[   54.877273][ T6369] sit0: entered promiscuous mode
[   54.879323][ T6369] ip6tnl0: entered promiscuous mode
[   54.894460][ T6376] netlink: 'syz.1.101': attribute type 1 has an invalid length.
[   54.897152][ T6369] ip6gre0: entered promiscuous mode
[   54.897623][ T6369] syz_tun: entered promiscuous mode
[   54.903619][ T6369] ip6gretap0: entered promiscuous mode
[   54.916797][ T6369] bridge0: entered promiscuous mode
[   54.926244][ T6369] vcan0: entered promiscuous mode
[   54.928559][ T6369] bond0: entered promiscuous mode
[   54.930362][ T6369] bond_slave_0: entered promiscuous mode
[   54.932339][ T6369] bond_slave_1: entered promiscuous mode
[   54.942583][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.945981][ T6369] team0: entered promiscuous mode
[   54.947730][ T6369] team_slave_0: entered promiscuous mode
[   54.949700][ T6369] team_slave_1: entered promiscuous mode
[   54.953003][ T6369] 8021q: adding VLAN 0 to HW filter on device team0
[   54.956983][ T6369] dummy0: entered promiscuous mode
[   54.959553][ T6369] nlmon0: entered promiscuous mode
[   54.962244][ T6369] caif0: entered promiscuous mode
[   54.964118][ T6369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   54.989709][ T6376] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.999070][ T6377] gretap1: entered promiscuous mode
[   55.046909][ T6384] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   55.303838][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[   55.310843][   T33] audit: type=1804 audit(1751933509.335:2): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.109" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=159 res=1 errno=0
[   55.330888][   T33] audit: type=1800 audit(1751933509.335:3): pid=6418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="cgroup.controllers" dev="tmpfs" ino=159 res=0 errno=0
[   55.351777][   T33] audit: type=1800 audit(1751933509.335:4): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.109" name="cgroup.controllers" dev="tmpfs" ino=159 res=0 errno=0
[   55.431128][ T6425] syzkaller0: entered promiscuous mode
[   55.434349][ T6425] syzkaller0: entered allmulticast mode
[   55.466826][ T6436] netlink: 'syz.2.114': attribute type 21 has an invalid length.
[   55.487239][ T6436] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   55.549361][ T6438] syzkaller1: entered promiscuous mode
[   55.551135][ T6438] syzkaller1: entered allmulticast mode
[   56.253501][ T6449] IPv6: sit1: Disabled Multicast RS
[   56.299840][ T6454] netpci0: tun_chr_ioctl cmd 1074025681
[   56.477276][ T6471] netlink: 'syz.1.125': attribute type 1 has an invalid length.
[   56.482012][ T6471] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   56.521913][ T6480] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   56.541025][ T6480] 8021q: adding VLAN 0 to HW filter on device bond2
[   56.560581][ T6480] bond2: (slave veth3): Enslaving as an active interface with a down link
[   56.592247][ T6480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.646113][   T10] IPVS: starting estimator thread 0...
[   56.648896][ T6492] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[   56.705750][ T6500] netlink: 'syz.2.132': attribute type 4 has an invalid length.
[   56.736123][ T6494] IPVS: using max 80 ests per chain, 192000 per kthread
[   56.918789][ T6520] team0: Cannot enslave team device to itself
[   56.950770][ T6523] @: renamed from vlan0 (while UP)
[   56.993443][  T790] lo speed is unknown, defaulting to 1000
[   56.996180][  T790] syz0: Port: 1 Link DOWN
[   57.005435][  T790] lo speed is unknown, defaulting to 1000
[   57.015744][ T5874] lo speed is unknown, defaulting to 1000
[   57.017609][ T5874] syz0: Port: 1 Link ACTIVE
[   57.053947][ T6528] 8021q: VLANs not supported on wpan0
[   57.092803][ T6530] vxcan0: entered promiscuous mode
[   57.124099][ T6533] raw_sendmsg: syz.1.142 forgot to set AF_INET. Fix it!
[   57.284587][ T6540] lo speed is unknown, defaulting to 1000
[   57.628621][ T6560] 8021q: adding VLAN 0 to HW filter on device bond2
[   57.656888][ T6565] 8021q: adding VLAN 0 to HW filter on device bond2
[   57.659337][ T6565] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[   57.663164][ T6565] bond2: (slave vti0): Error -95 calling set_mac_address
[   57.696787][ T6560] pimreg3: entered allmulticast mode
[   57.729996][ T6569] wireguard1: entered promiscuous mode
[   57.731878][ T6569] wireguard1: entered allmulticast mode
[   57.914179][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.349815][ T6592] lo speed is unknown, defaulting to 1000
[   58.502546][ T6598] : entered promiscuous mode
[   58.886247][ T6619] 8021q: adding VLAN 0 to HW filter on device bond3
[   58.903421][ T6621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.921160][ T6619] 8021q: adding VLAN 0 to HW filter on device bond3
[   58.923442][ T6619] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   58.928105][ T6619] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   58.964788][ T6621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.052802][ T6621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.100290][ T6621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.182860][ T6621] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.192784][ T6621] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.201714][ T6621] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.212091][ T6621] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.285535][ T6631] __nla_validate_parse: 23 callbacks suppressed
[   59.285549][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'.
[   59.290544][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'.
[   59.522484][ T6640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.528523][ T6640] netlink: 248 bytes leftover after parsing attributes in process `syz.1.168'.
[   59.587056][ T6641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.587603][ T6642] netlink: 248 bytes leftover after parsing attributes in process `syz.1.168'.
[   59.917798][ T6649] validate_nla: 6 callbacks suppressed
[   59.917808][ T6649] netlink: 'syz.2.170': attribute type 10 has an invalid length.
[   59.922300][ T6649] bridge_slave_1: left allmulticast mode
[   59.924236][ T6649] bridge_slave_1: left promiscuous mode
[   59.935012][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.952125][ T6649] bridge_slave_1: entered promiscuous mode
[   59.954790][ T6649] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   59.988515][ T6649] bridge_slave_0: left allmulticast mode
[   59.990601][ T6649] bridge_slave_0: left promiscuous mode
[   59.994663][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.999893][ T6649] bond0: (slave bridge_slave_1): Releasing backup interface
[   60.003043][ T6649] bridge_slave_1: left promiscuous mode
[   60.008600][ T6649] bond0: (slave bond_slave_0): Releasing backup interface
[   60.011192][ T6649] bond_slave_0: left promiscuous mode
[   60.013884][ T6649] bond0: (slave bond_slave_1): Releasing backup interface
[   60.019237][ T6649] bond_slave_1: left promiscuous mode
[   60.021910][ T6649] team_slave_0: left promiscuous mode
[   60.026432][ T6649] team0: Port device team_slave_0 removed
[   60.029060][ T6649] team_slave_1: left promiscuous mode
[   60.032257][ T6649] team0: Port device team_slave_1 removed
[   60.034514][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.038249][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.044294][ T6653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.051973][ T5874] lo speed is unknown, defaulting to 1000
[   60.054643][ T5874] syz0: Port: 1 Link DOWN
[   60.058117][ T5874] lo speed is unknown, defaulting to 1000
[   60.064792][ T6655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   60.119049][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[   60.126080][ T5874] IPVS: starting estimator thread 0...
[   60.167571][ T6666] rdma_op ffff8880388cc1f0 conn xmit_rdma 0000000000000000
[   60.215233][ T6662] IPVS: using max 81 ests per chain, 194400 per kthread
[   60.274449][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'.
[   60.278557][ T1087] wlan0: Trigger new scan to find an IBSS to join
[   60.551274][ T6682] lo speed is unknown, defaulting to 1000
[   60.787183][ T6682] netlink: 248 bytes leftover after parsing attributes in process `syz.2.180'.
[   60.864144][ T6703] lo speed is unknown, defaulting to 1000
[   60.870520][ T6682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.180'.
[   60.873262][ T6682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.180'.
[   61.050318][ T6710] pim6reg1: entered allmulticast mode
[   61.054176][ T6710] Bluetooth: MGMT ver 1.23
[   61.136817][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'.
[   61.229028][ T6717] tipc: Started in network mode
[   61.238808][ T6717] tipc: Node identity 468cb356340a, cluster identity 4711
[   61.242409][ T6717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.245757][ T6717] syzkaller0: entered promiscuous mode
[   61.247560][ T6717] syzkaller0: entered allmulticast mode
[   61.269348][ T6717] tipc: Resetting bearer <eth:syzkaller0>
[   61.301750][ T6716] tipc: Resetting bearer <eth:syzkaller0>
[   61.309484][ T6716] tipc: Disabling bearer <eth:syzkaller0>
[   61.388054][ T6726] Bluetooth: MGMT ver 1.23
[   61.428539][ T6726] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   61.728923][ T6746] tap0: tun_chr_ioctl cmd 1074025676
[   61.730749][ T6746] tap0: owner set to 0
[   61.734761][ T6746] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[   61.738896][ T6746] bond3: (slave vcan0): Error -95 calling set_mac_address
[   61.899890][ T6752] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   61.943187][ T6754] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.007619][ T6754] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.048866][ T6754] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.098608][ T6754] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.337770][ T6773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.577508][ T6789] pim6reg1: entered allmulticast mode
[   63.016920][ T6807] vlan0: entered promiscuous mode
[   63.018636][ T6807] vlan0: entered allmulticast mode
[   63.020250][ T6807] bond0: entered allmulticast mode
[   63.097550][ T6814] 8021q: adding VLAN 0 to HW filter on device bond4
[   63.100239][ T6816] syzkaller0: entered promiscuous mode
[   63.103106][ T6816] syzkaller0: entered allmulticast mode
[   63.180433][ T6819] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   63.184152][ T6819] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   63.199430][ T6819] bond5: entered promiscuous mode
[   63.201564][ T6819] 8021q: adding VLAN 0 to HW filter on device bond5
[   63.228830][ T6824] netlink: 'syz.2.216': attribute type 4 has an invalid length.
[   63.314985][ T6024] wlan0: Trigger new scan to find an IBSS to join
[   63.755824][ T6754] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.763645][ T6754] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.771154][ T6754] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.778512][ T6754] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.809570][ T6834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.812346][ T6834] syzkaller0: entered promiscuous mode
[   63.814075][ T6834] syzkaller0: entered allmulticast mode
[   63.818248][ T6834] netlink: 'syz.1.219': attribute type 3 has an invalid length.
[   63.830794][ T6834] tipc: Resetting bearer <eth:syzkaller0>
[   63.834461][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[   63.843788][ T6833] tipc: Disabling bearer <eth:syzkaller0>
[   64.111945][ T6836] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   64.115849][ T6838] smc: net device bond0 erased user defined pnetid SYZ2
[   64.146133][ T6836] 8021q: adding VLAN 0 to HW filter on device bond6
[   64.157081][ T6836] ipvlan3: entered allmulticast mode
[   64.158843][ T6836] bond6: entered allmulticast mode
[   64.169011][ T6836] bond6: (slave gretap2): making interface the new active one
[   64.171634][ T6836] gretap2: entered allmulticast mode
[   64.174680][ T6836] bond6: (slave gretap2): Enslaving as an active interface with an up link
[   64.182849][ T6848] netpci0: tun_chr_ioctl cmd 1074025681
[   64.191916][ T6836] syz.0.220 (6836) used greatest stack depth: 18992 bytes left
[   64.230575][ T6853] netlink: 'syz.2.224': attribute type 1 has an invalid length.
[   64.244104][ T6853] 8021q: adding VLAN 0 to HW filter on device bond3
[   64.258132][ T6853] bond3: (slave veth3): Enslaving as an active interface with a down link
[   64.342207][ T6862] __nla_validate_parse: 14 callbacks suppressed
[   64.342218][ T6862] netlink: 104 bytes leftover after parsing attributes in process `syz.2.226'.
[   64.771028][ T6885] erspan0: left promiscuous mode
[   64.774767][ T6885] netlink: 136 bytes leftover after parsing attributes in process `syz.2.231'.
[   65.742735][ T6908] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.237'.
[   65.751978][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   65.834246][ T6918] lo speed is unknown, defaulting to 1000
[   65.878031][ T6919] netlink: 32 bytes leftover after parsing attributes in process `syz.2.240'.
[   66.202664][ T6934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'.
[   66.203740][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'.
[   66.211890][ T6932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'.
[   66.369301][ T1919] wlan0: Trigger new scan to find an IBSS to join
[   66.384636][ T6942] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.246'.
[   66.389845][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'.
[   66.407543][ T6942] netlink: 'syz.2.246': attribute type 4 has an invalid length.
[   66.413193][ T6942] netlink: 'syz.2.246': attribute type 4 has an invalid length.
[   66.473024][ T6949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.179803][ T6958] xt_hashlimit: size too large, truncated to 1048576
[   67.234966][   T54] Bluetooth: hci2: command tx timeout
[   67.328474][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.414235][ T6965] netlink: 'syz.2.252': attribute type 10 has an invalid length.
[   67.448364][ T6965] vcan1: entered promiscuous mode
[   68.359621][ T6992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.800045][ T7016] macsec1: entered promiscuous mode
[   68.802123][ T7016] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   68.806443][ T7016] macsec1: entered allmulticast mode
[   68.808583][ T7016] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   68.834197][ T7018] netlink: 'syz.2.268': attribute type 1 has an invalid length.
[   68.859478][ T7018] 8021q: adding VLAN 0 to HW filter on device bond4
[   68.874566][ T7018] bond4: (slave gretap1): making interface the new active one
[   68.879387][ T7018] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   68.895152][ T7018] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   69.068998][ T7024] lo speed is unknown, defaulting to 1000
[   69.297563][ T7027] syzkaller0: entered promiscuous mode
[   69.299424][ T7027] syzkaller0: entered allmulticast mode
[   69.316267][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   69.565548][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.620077][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.681409][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.127584][ T7031] lo speed is unknown, defaulting to 1000
[   70.231888][ T7039] __nla_validate_parse: 9 callbacks suppressed
[   70.231898][ T7039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'.
[   70.248396][ T7039] nft_compat: unsupported protocol 0
[   70.262674][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[   70.269363][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'.
[   70.376836][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'.
[   70.519235][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'.
[   70.670066][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'.
[   70.749450][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'.
[   70.758639][ T7080] bridge_slave_1: left allmulticast mode
[   70.760498][ T7080] bridge_slave_1: left promiscuous mode
[   70.762343][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.769239][ T7080] bridge_slave_0: left allmulticast mode
[   70.771096][ T7080] bridge_slave_0: left promiscuous mode
[   70.773001][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.369183][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'.
[   71.372842][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'.
[   71.376474][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'.
[   71.503342][ T7110] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   71.588370][ T7119] trusted_key: syz.1.299 sent an empty control message without MSG_MORE.
[   72.722352][ T7151] netlink: 'syz.1.308': attribute type 1 has an invalid length.
[   72.731135][ T7151] C: renamed from team_slave_0
[   72.735246][ T7151] netlink: 'syz.1.308': attribute type 3 has an invalid length.
[   72.860857][ T7162] netlink: 'syz.1.311': attribute type 1 has an invalid length.
[   72.882421][ T7162] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   72.888020][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   72.888532][ T7162] 8021q: adding VLAN 0 to HW filter on device bond4
[   72.931735][ T7165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.938858][ T7165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.009599][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   73.116149][ T7184] x_tables: duplicate underflow at hook 2
[   73.116744][ T7185] x_tables: duplicate underflow at hook 2
[   73.119360][ T7180] erspan0: entered promiscuous mode
[   73.125087][ T7180] batadv_slave_1: entered promiscuous mode
[   73.127684][ T7180] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[   73.130931][ T7180] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.170131][ T7190] bond0: Unable to set down delay as MII monitoring is disabled
[   73.202162][ T7194] lo speed is unknown, defaulting to 1000
[   73.235836][ T7196] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 49169 - 0
[   73.238569][ T7196] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 49169 - 0
[   73.241274][ T7196] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 49169 - 0
[   73.243935][ T7196] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 49169 - 0
[   73.248019][ T7196] geneve2: entered promiscuous mode
[   73.249672][ T7196] geneve2: entered allmulticast mode
[   73.256928][ T7196] netlink: 'syz.2.321': attribute type 21 has an invalid length.
[   73.259399][ T7196] netlink: 'syz.2.321': attribute type 22 has an invalid length.
[   73.262444][ T7196] netlink: 'syz.2.321': attribute type 23 has an invalid length.
[   73.550977][ T7208] netlink: 'syz.2.326': attribute type 2 has an invalid length.
[   73.606407][ T7215] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   73.686635][ T7225] netlink: 'syz.2.333': attribute type 3 has an invalid length.
[   73.689275][ T7227] xt_TCPMSS: Only works on TCP SYN packets
[   73.776807][ T7242] netlink: 'syz.1.337': attribute type 4 has an invalid length.
[   73.776809][ T7240] netlink: 'syz.1.337': attribute type 4 has an invalid length.
[   73.791267][ T7240] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[   73.802057][ T7243] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[   73.816409][ T7243] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface
[   73.821522][ T7243] bond5 (unregistering): Released all slaves
[   73.876841][ T7249] 8021q: adding VLAN 0 to HW filter on device bond5
[   73.884663][ T7249] bond5: (slave batadv1): Opening slave failed
[   73.963773][ T7256] xt_nat: multiple ranges no longer supported
[   74.047898][ T7260] bond2: (slave veth3): Releasing active interface
[   74.052766][ T7260] bond4: (slave ip6gretap1): Removing an active aggregator
[   74.057941][ T7260] bond4: (slave ip6gretap1): Releasing backup interface
[   74.101315][ T7264] macvtap1: entered promiscuous mode
[   74.103237][ T7264] macvtap1: entered allmulticast mode
[   74.105425][ T7264] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   74.143314][ T7266] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   74.179702][ T7266] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   74.202236][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv1
[   74.205302][ T7267] batadv1: entered promiscuous mode
[   74.207778][ T7267] team0: Port device batadv1 added
[   74.242110][ T7266] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   74.289311][ T7266] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   74.367783][ T7266] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 49169 - 0
[   74.372065][ T5840] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   74.377968][ T5840] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   74.391230][ T7266] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 49169 - 0
[   74.395116][  T789] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   74.407944][ T7266] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 49169 - 0
[   74.415942][ T7266] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 49169 - 0
[   74.636559][ T7285] bond7: (slave gretap3): making interface the new active one
[   74.639542][ T7285] bond7: (slave gretap3): Enslaving as an active interface with an up link
[   74.643548][ T7282] syz.2.351: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.652395][ T7282] CPU: 1 UID: 0 PID: 7282 Comm: syz.2.351 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   74.652411][ T7282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.652432][ T7282] Call Trace:
[   74.652436][ T7282]  <TASK>
[   74.652440][ T7282]  dump_stack_lvl+0x189/0x250
[   74.652460][ T7282]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.652471][ T7282]  ? __pfx__printk+0x10/0x10
[   74.652480][ T7282]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.652489][ T7282]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.652497][ T7282]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   74.652506][ T7282]  warn_alloc+0x214/0x310
[   74.652518][ T7282]  ? __pfx_warn_alloc+0x10/0x10
[   74.652530][ T7282]  ? __get_vm_area_node+0x28f/0x300
[   74.652538][ T7282]  ? nf_tables_newset+0x132b/0x2530
[   74.652551][ T7282]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   74.652569][ T7282]  ? nft_hash_estimate+0x102/0x260
[   74.652578][ T7282]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.652588][ T7282]  ? rcu_is_watching+0x15/0xb0
[   74.652601][ T7282]  ? nf_tables_newset+0x132b/0x2530
[   74.652609][ T7282]  ? nf_tables_newset+0x132b/0x2530
[   74.652617][ T7282]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   74.652625][ T7282]  ? nf_tables_newset+0x132b/0x2530
[   74.652634][ T7282]  ? nft_table_lookup+0x211/0x230
[   74.652642][ T7282]  ? nft_set_lookup+0x128/0x150
[   74.652652][ T7282]  ? nft_hash_privsize+0x6f/0xf0
[   74.652661][ T7282]  nf_tables_newset+0x132b/0x2530
[   74.652675][ T7282]  ? __pfx_nf_tables_newset+0x10/0x10
[   74.652692][ T7282]  ? __nla_parse+0x40/0x60
[   74.652705][ T7282]  nfnetlink_rcv+0x1132/0x2520
[   74.652728][ T7282]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   74.652744][ T7282]  ? ref_tracker_free+0x63a/0x7d0
[   74.652766][ T7282]  ? __netlink_deliver_tap+0x807/0x850
[   74.652778][ T7282]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.652785][ T7282]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.652795][ T7282]  netlink_unicast+0x75b/0x8d0
[   74.652806][ T7282]  netlink_sendmsg+0x805/0xb30
[   74.652818][ T7282]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.652827][ T7282]  ? aa_sock_msg_perm+0x94/0x160
[   74.652839][ T7282]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.652849][ T7282]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.652858][ T7282]  __sock_sendmsg+0x21c/0x270
[   74.652871][ T7282]  ____sys_sendmsg+0x505/0x830
[   74.652882][ T7282]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.652894][ T7282]  ? import_iovec+0x74/0xa0
[   74.652903][ T7282]  ___sys_sendmsg+0x21f/0x2a0
[   74.652912][ T7282]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.652935][ T7282]  ? __fget_files+0x2a/0x420
[   74.652943][ T7282]  ? __fget_files+0x3a0/0x420
[   74.652955][ T7282]  __x64_sys_sendmsg+0x19b/0x260
[   74.652964][ T7282]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.652977][ T7282]  ? rcu_is_watching+0x15/0xb0
[   74.652989][ T7282]  ? do_syscall_64+0xbe/0x3b0
[   74.652998][ T7282]  do_syscall_64+0xfa/0x3b0
[   74.653004][ T7282]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.653014][ T7282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.653021][ T7282]  ? exc_page_fault+0x9f/0xf0
[   74.653031][ T7282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.653038][ T7282] RIP: 0033:0x7f8cb158e929
[   74.653046][ T7282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.653052][ T7282] RSP: 002b:00007f8cb23fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.653061][ T7282] RAX: ffffffffffffffda RBX: 00007f8cb17b6080 RCX: 00007f8cb158e929
[   74.653066][ T7282] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[   74.653070][ T7282] RBP: 00007f8cb1610b39 R08: 0000000000000000 R09: 0000000000000000
[   74.653074][ T7282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.653078][ T7282] R13: 0000000000000000 R14: 00007f8cb17b6080 R15: 00007ffc59d12818
[   74.653089][ T7282]  </TASK>
[   74.653191][ T7282] Mem-Info:
[   74.781076][ T7282] active_anon:4457 inactive_anon:0 isolated_anon:0
[   74.781076][ T7282]  active_file:1160 inactive_file:38213 isolated_file:0
[   74.781076][ T7282]  unevictable:1768 dirty:234 writeback:0
[   74.781076][ T7282]  slab_reclaimable:9577 slab_unreclaimable:56483
[   74.781076][ T7282]  mapped:18045 shmem:2445 pagetables:893
[   74.781076][ T7282]  sec_pagetables:0 bounce:0
[   74.781076][ T7282]  kernel_misc_reclaimable:0
[   74.781076][ T7282]  free:298727 free_pcp:17385 free_cma:0
[   74.795666][ T7282] Node 0 active_anon:10812kB inactive_anon:0kB active_file:3972kB inactive_file:150388kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38976kB dirty:652kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4700kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.800944][ T7294] syz0: rxe_newlink: already configured on lo
[   74.805926][ T7282] Node 1 active_anon:7016kB inactive_anon:0kB active_file:668kB inactive_file:2464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33204kB dirty:284kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7412kB pagetables:1596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.805951][ T7282] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.805974][ T7282] lowmem_reserve[]: 0 815 815 815 815
[   74.805991][ T7282] Node 0 DMA32 free:292820kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10880kB inactive_anon:0kB active_file:3972kB inactive_file:150388kB unevictable:3536kB writepending:652kB present:1556484kB managed:834736kB mlocked:0kB bounce:0kB free_pcp:33024kB local_pcp:17296kB free_cma:0kB
[   74.806012][ T7282] lowmem_reserve[]: 0 0 0 0 0
[   74.806029][ T7282] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   74.806049][ T7282] lowmem_reserve[]: 0 0 854 854 854
[   74.806065][ T7282] Node 1 Normal free:427852kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7016kB inactive_anon:0kB active_file:668kB inactive_file:2464kB unevictable:3536kB writepending:284kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:36284kB local_pcp:16028kB free_cma:0kB
[   74.806086][ T7282] lowmem_reserve[]: 0 0 0 0 0
[   74.806102][ T7282] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   74.806224][ T7282] Node 0 DMA32: 871*4kB (UME) 993*8kB (UME) 419*16kB (UME) 182*32kB (UME) 96*64kB (UM) 30*128kB (UM) 17*256kB (UM) 11*512kB (ME) 7*1024kB (M) 4*2048kB (UME) 57*4096kB 
[   74.809576][  T789] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   74.818518][ T7282] (M) = 292756kB
[   74.883132][ T7282] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   74.888348][ T7282] Node 1 Normal: 63*4kB (ME) 154*8kB (UME) 134*16kB (UME) 66*32kB (ME) 45*64kB (UME) 17*128kB (UM) 7*256kB (UM) 3*512kB (UM) 2*1024kB (M) 3*2048kB (UME) 99*4096kB (M) = 427820kB
[   74.893880][ T7282] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.897751][ T7282] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.900748][ T7282] 41818 total pagecache pages
[   74.902210][ T7282] 0 pages in swap cache
[   74.903502][ T7282] Free swap  = 124996kB
[   74.904947][ T7282] Total swap = 124996kB
[   74.906311][ T7282] 786301 pages RAM
[   74.907563][ T7282] 0 pages HighMem/MovableOnly
[   74.909076][ T7282] 240369 pages reserved
[   74.910446][ T7282] 0 pages cma reserved
[   75.017951][  T789] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   75.313660][ T7332] __nla_validate_parse: 35 callbacks suppressed
[   75.313671][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.367'.
[   75.338054][ T7332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.367'.
[   75.549464][ T7362] ..@: renamed from bond_slave_0
[   75.575654][ T7366] No such timeout policy "syz0"
[   75.609213][ T7376] syzkaller0: entered promiscuous mode
[   75.614485][ T7376] syzkaller0: entered allmulticast mode
[   75.677865][ T7379] syzkaller0: entered allmulticast mode
[   75.882156][ T7398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.384'.
[   75.886209][ T7398] netlink: 56 bytes leftover after parsing attributes in process `syz.1.384'.
[   75.896185][ T7398] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   75.901035][ T7398] gretap2: entered promiscuous mode
[   75.902946][ T7398] gretap2: entered allmulticast mode
[   76.316881][ T7415] macvtap0: entered promiscuous mode
[   76.319505][ T7415] macvtap0: refused to change device tx_queue_len
[   76.432959][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'.
[   76.449869][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'.
[   76.452769][ T7421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'.
[   76.462311][ T7421] syz_tun: entered promiscuous mode
[   76.464810][ T7421] batadv_slave_1: entered promiscuous mode
[   76.467626][ T7421] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[   76.472251][ T7421] Cannot create hsr debugfs directory
[   76.509303][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'.
[   76.592989][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'.
[   76.662912][ T7435] netlink: 136 bytes leftover after parsing attributes in process `syz.0.397'.
[   76.707319][ T7438] bridge0: port 1(erspan0) entered blocking state
[   76.709731][ T7438] bridge0: port 1(erspan0) entered disabled state
[   76.717873][ T7438] erspan0: entered allmulticast mode
[   76.720479][ T7438] erspan0: entered promiscuous mode
[   76.723804][ T7438] bridge0: port 1(erspan0) entered blocking state
[   76.726287][ T7438] bridge0: port 1(erspan0) entered forwarding state
[   76.730662][ T7438] erspan0: left allmulticast mode
[   76.732534][ T7438] erspan0: left promiscuous mode
[   76.734369][ T7438] bridge0: port 1(erspan0) entered disabled state
[   76.746941][ T7438] tipc: Can't bind to reserved service type 2
[   76.915932][ T7460] bond0: (slave bond_slave_0): Releasing backup interface
[   76.921736][ T7460] bond0: (slave bond_slave_1): Releasing backup interface
[   76.933055][ T7460] team0: Port device team_slave_0 removed
[   76.940937][ T7460] team0: Port device team_slave_1 removed
[   76.943614][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.946585][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.950253][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.952986][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.963308][ T7460] bond1: (slave ip6gretap1): Releasing active interface
[   76.970776][ T7460] bond6: (slave gretap2): Releasing active interface
[   76.973466][ T7460] gretap2: left allmulticast mode
[   76.980741][ T7460] bond7: (slave gretap3): Releasing active interface
[   77.000234][ T7465] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   77.018692][ T7465] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   77.078609][ T7472] 8021q: adding VLAN 0 to HW filter on device bond5
[   77.118624][ T7472] bond5: (slave veth7): Enslaving as an active interface with a down link
[   77.161061][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.339276][ T7491] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   77.346225][ T5826] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   77.346339][ T7491] 8021q: adding VLAN 0 to HW filter on device bond8
[   77.362874][ T7491] veth7: entered promiscuous mode
[   77.366590][ T7491] bond8: (slave veth7): Enslaving as a backup interface with a down link
[   77.394438][ T7494] No such timeout policy "syz1"
[   77.399409][ T7494] openvswitch: netlink: Multiple metadata blocks provided
[   77.404210][ T7494] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   77.465161][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   77.678302][ T7505] x_tables: duplicate underflow at hook 4
[   77.691616][ T7505] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.694451][ T7505] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.698086][ T7505] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.700983][ T7505] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.642547][ T7522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   78.698868][ T7522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   78.750446][ T7522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   78.810312][ T7522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49169 - 0
[   78.835034][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[   78.869272][ T7522] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 49169 - 0
[   78.877206][ T7522] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 49169 - 0
[   78.884450][ T7522] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 49169 - 0
[   78.891882][ T7522] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 49169 - 0
[   78.957453][ T7529] validate_nla: 8 callbacks suppressed
[   78.957465][ T7529] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[   78.983901][ T7529] 8021q: adding VLAN 0 to HW filter on device bond9
[   79.000358][ T7529] bond9: (slave veth9): Enslaving as an active interface with a down link
[   79.035203][ T7529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.508422][ T7536] netlink: 'syz.2.428': attribute type 1 has an invalid length.
[   79.538053][ T7540] netlink: 'syz.1.429': attribute type 10 has an invalid length.
[   79.632767][ T7549] netlink: 'syz.2.433': attribute type 16 has an invalid length.
[   79.636879][ T7549] netlink: 'syz.2.433': attribute type 17 has an invalid length.
[   79.675006][ T7549] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   79.677231][ T7549] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   79.707287][ T7549] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 49169 - 0
[   79.709953][ T7549] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 49169 - 0
[   79.716139][ T7549] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 49169 - 0
[   79.721526][ T7549] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 49169 - 0
[   79.735862][ T7557] xt_hashlimit: overflow, try lower: 72057594037927936/255
[   79.757805][ T7542] lo speed is unknown, defaulting to 1000
[   79.801744][ T7559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.819286][ T7561] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   80.113445][ T7588] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   80.145662][ T7588] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[   80.245063][ T7600] x_tables: unsorted entry at hook 3
[   80.326699][ T7612] __nla_validate_parse: 19 callbacks suppressed
[   80.326712][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'.
[   80.412480][ T7621] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[   80.415513][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.455'.
[   80.446744][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[   80.463687][ T7628] 8021q: adding VLAN 0 to HW filter on device bond8
[   80.470728][ T7633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.459'.
[   80.474024][ T7628] bridge0: port 1(bond8) entered blocking state
[   80.476296][ T7628] bridge0: port 1(bond8) entered disabled state
[   80.478611][ T7628] bond8: entered allmulticast mode
[   80.481443][ T7628] bond8: entered promiscuous mode
[   80.486154][ T7633] netlink: 'syz.0.459': attribute type 10 has an invalid length.
[   80.490970][ T7630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'.
[   80.493257][ T7633] 8021q: adding VLAN 0 to HW filter on device team0
[   80.499538][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.457'.
[   80.501270][ T7633] bond0: (slave team0): Enslaving as an active interface with an up link
[   80.502928][ T7628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'.
[   80.561129][ T7641] netlink: 'syz.2.462': attribute type 1 has an invalid length.
[   80.577705][ T7641] 8021q: adding VLAN 0 to HW filter on device bond9
[   80.592711][ T7641] bond9: (slave veth9): Enslaving as an active interface with a down link
[   80.595999][ T7635] veth1_to_team: entered allmulticast mode
[   80.602672][ T7641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.608487][ T7635] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   80.642305][ T7645] netlink: 92 bytes leftover after parsing attributes in process `syz.0.463'.
[   80.647896][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'.
[   80.650774][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'.
[   80.776715][ T7660] pim6reg1: entered allmulticast mode
[   80.820620][ T7660] macsec0: entered promiscuous mode
[   80.822839][ T7660] macsec1: entered allmulticast mode
[   80.824601][ T7660] macsec0: entered allmulticast mode
[   80.826551][ T7660] veth1_macvtap: entered allmulticast mode
[   81.085757][ T1851] cfg80211: failed to load regulatory.db
[   81.358157][ T7705] 8021q: adding VLAN 0 to HW filter on device bond6
[   81.409623][ T7705] bond6: (slave veth5): Enslaving as an active interface with a down link
[   81.421470][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.428189][ T7734] bond0 (unregistering): (slave team0): Releasing backup interface
[   82.432930][ T7734] bond0 (unregistering): Released all slaves
[   82.515551][ T7737] xt_CT: No such helper "snmp"
[   82.603077][ T7748] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.813276][ T7768] 8021q: adding VLAN 0 to HW filter on device team0
[   82.819924][ T7768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.826489][    T9] lo speed is unknown, defaulting to 1000
[   82.835544][    T9] syz0: Port: 1 Link ACTIVE
[   82.838424][    T9] lo speed is unknown, defaulting to 1000
[   82.938237][ T7781] 8021q: adding VLAN 0 to HW filter on device bond10
[   82.969133][ T7781] bond10: (slave veth11): Enslaving as an active interface with a down link
[   82.979866][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.139392][ T7792] xt_CT: No such helper "pptp"
[   84.114500][ T7825] validate_nla: 6 callbacks suppressed
[   84.114512][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.122869][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.126829][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.129663][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.132456][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.137888][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.140594][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.143386][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.147131][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.149703][ T7825] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   84.202752][ T7828] lo speed is unknown, defaulting to 1000
[   84.713821][ T7845] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   84.841229][ T7861] 8021q: adding VLAN 0 to HW filter on device bond7
[   84.856271][ T7861] bond7: (slave veth7): Enslaving as an active interface with a down link
[   84.862809][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.338493][ T7883] __nla_validate_parse: 88 callbacks suppressed
[   85.338503][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'.
[   85.345053][ T7883] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.538'.
[   85.348501][ T7883] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   85.351566][ T7883] openvswitch: netlink: Duplicate key (type 0).
[   85.409292][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'.
[   85.493271][ T7889] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   85.660671][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'.
[   86.191612][ T7903] 8021q: adding VLAN 0 to HW filter on device bond10
[   86.203231][ T7903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.543'.
[   86.280324][ T7913] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.543'.
[   86.440631][ T7920] 8021q: adding VLAN 0 to HW filter on device bond11
[   86.485577][ T7923] 8021q: adding VLAN 0 to HW filter on device bond11
[   86.516127][ T7925] bond11: (slave veth11): Enslaving as an active interface with a down link
[   86.532557][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.639121][ T7930] netlink: 196 bytes leftover after parsing attributes in process `syz.0.551'.
[   86.642603][ T7930] netlink: 196 bytes leftover after parsing attributes in process `syz.0.551'.
[   86.645841][ T7930] netlink: 19 bytes leftover after parsing attributes in process `syz.0.551'.
[   87.193940][ T7956] lo speed is unknown, defaulting to 1000
[   87.552538][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'.
[   87.782755][ T7997] ip6t_rpfilter: unknown options
[   87.795262][ T7997] ip6t_rpfilter: unknown options
[   87.908862][ T8003] bond8: (slave ip6gretap2): Removing an active aggregator
[   87.911676][ T8003] bond8: (slave ip6gretap2): Releasing backup interface
[   87.914039][ T8003] bond8: (slave ip6gretap2): the permanent HWaddr of slave - ee:d3:b5:75:53:d6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   87.922622][ T8003] bond8: (slave veth7): Releasing backup interface
[   87.927738][ T8003] bond9: (slave veth9): Releasing active interface
[   87.933377][ T8003] bond10: (slave veth11): Releasing active interface
[   88.110661][ T8015] batman_adv: batadv0: Adding interface: ip6gretap2
[   88.120299][ T8015] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.133185][ T8015] batman_adv: batadv0: Interface activated: ip6gretap2
[   88.955264][ T8065] bond9: entered promiscuous mode
[   88.958781][ T8065] 8021q: adding VLAN 0 to HW filter on device bond9
[   88.979314][ T8065] bond9: (slave bridge1): making interface the new active one
[   88.985260][ T8065] bridge1: entered promiscuous mode
[   88.987762][ T8065] bond9: (slave bridge1): Enslaving as an active interface with an up link
[   89.003641][ T8071] pimreg3: entered allmulticast mode
[   89.032613][ T8072] 8021q: adding VLAN 0 to HW filter on device bond12
[   89.040253][ T8075] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 2942. macoff=82
[   89.052079][ T8072] 8021q: adding VLAN 0 to HW filter on device bond12
[   89.055293][ T8072] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[   89.060853][ T8072] bond12: (slave vxcan1): Error -95 calling set_mac_address
[   89.119653][ T8081] veth13: entered promiscuous mode
[   89.122909][ T8081] bond12: (slave veth13): Enslaving as an active interface with a down link
[   89.162809][ T8090] validate_nla: 64 callbacks suppressed
[   89.162819][ T8090] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[   89.176768][ T8090] 8021q: adding VLAN 0 to HW filter on device bond12
[   89.207694][ T8090] bond12: (slave veth19): Enslaving as an active interface with a down link
[   89.223106][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.286625][ T8098] gtp0: entered promiscuous mode
[   89.288604][ T8098] gtp0: entered allmulticast mode
[   89.804724][ T8131] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.827683][ T8133] sctp: [Deprecated]: syz.2.612 (pid 8133) Use of int in max_burst socket option deprecated.
[   89.827683][ T8133] Use struct sctp_assoc_value instead
[   89.993477][ T8147] netlink: 'syz.2.616': attribute type 7 has an invalid length.
[   90.092569][ T8155] batman_adv: batadv0: Interface deactivated: ip6gretap2
[   90.127819][ T8157] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   90.186456][ T8159] wg2: entered promiscuous mode
[   90.502489][ T8173] bond10: entered promiscuous mode
[   90.504177][ T8173] bond10: entered allmulticast mode
[   90.510561][ T8173] 8021q: adding VLAN 0 to HW filter on device bond10
[   90.617518][ T8176] netlink: 'syz.2.624': attribute type 10 has an invalid length.
[   90.621412][ T8176] __nla_validate_parse: 49 callbacks suppressed
[   90.621436][ T8176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.624'.
[   90.656261][ T8183] tipc: Started in network mode
[   90.657954][ T8183] tipc: Node identity 5ae39733dbde, cluster identity 4711
[   90.660776][ T8183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.663442][ T8183] syzkaller0: entered promiscuous mode
[   90.666867][ T8183] syzkaller0: entered allmulticast mode
[   90.682910][ T8183] tipc: Resetting bearer <eth:syzkaller0>
[   90.689914][ T8182] tipc: Resetting bearer <eth:syzkaller0>
[   90.703045][ T8182] tipc: Disabling bearer <eth:syzkaller0>
[   90.780852][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'.
[   90.878400][ T8189] vlan1: entered promiscuous mode
[   90.880237][ T8189] bridge0: entered promiscuous mode
[   90.981529][ T8195] hsr2: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   90.985905][ T8195] hsr2: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   90.989405][ T8195] hsr2: entered allmulticast mode
[   90.991099][ T8195] syz_tun: entered allmulticast mode
[   90.992784][ T8195] batadv_slave_0: entered allmulticast mode
[   91.021470][ T8197] netlink: 'syz.2.631': attribute type 4 has an invalid length.
[   91.026102][ T8197] netlink: 'syz.2.631': attribute type 4 has an invalid length.
[   91.069160][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'.
[   91.072140][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.632'.
[   91.108094][ T8203] bridge0: port 2(erspan0) entered blocking state
[   91.110469][ T8203] bridge0: port 2(erspan0) entered disabled state
[   91.112817][ T8203] erspan0: entered allmulticast mode
[   91.116764][ T8203] erspan0: left allmulticast mode
[   91.119312][ T8203] xt_ipcomp: unknown flags F7
[   91.169574][ T8205] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   91.252618][ T8220] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[   91.260360][ T8220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.272877][ T8171] Bluetooth: hci2: Opcode 0x0401 failed: -4
[   91.363480][ T8223] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   91.369061][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   91.380819][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.640'.
[   91.396428][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'.
[   91.445562][ T8228] veth1_macvtap (unregistering): left allmulticast mode
[   91.459148][ T8228] macsec0 (unregistering): left allmulticast mode
[   91.682284][ T8248] bond12: (slave veth13): Releasing active interface
[   91.694210][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.645'.
[   91.799441][ T8234] netlink: 148 bytes leftover after parsing attributes in process `syz.1.642'.
[   91.803069][ T8234] netlink: 'syz.1.642': attribute type 9 has an invalid length.
[   91.812156][ T8252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'.
[   91.914373][ T8259] netlink: 'syz.2.648': attribute type 1 has an invalid length.
[   91.931825][ T8259] 8021q: adding VLAN 0 to HW filter on device bond13
[   91.946031][ T8259] bond13: (slave veth21): Enslaving as an active interface with a down link
[   91.968967][ T8259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.273861][ T8267] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001
[   92.397865][ T8277] lo speed is unknown, defaulting to 1000
[   92.596025][ T5812] Bluetooth: hci2: command 0x0405 tx timeout
[   92.629857][ T8295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.759461][ T8307] Cannot find add_set index 0 as target
[   92.855375][ T8312] net veth1_virt_wifi : renamed from virt_wifi0
[   92.888320][ T8316] xt_hashlimit: size too large, truncated to 1048576
[   92.902169][ T8319] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[   92.911020][ T8320] 8021q: adding VLAN 0 to HW filter on device bond14
[   92.924086][ T8319] veth9: entered promiscuous mode
[   93.104064][ T8342] bridge_slave_1: default FDB implementation only supports local addresses
[   93.112502][ T8342] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   93.115510][ T8342] CPU: 1 UID: 0 PID: 8342 Comm: syz.2.672 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   93.115522][ T8342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.115527][ T8342] Call Trace:
[   93.115531][ T8342]  <TASK>
[   93.115536][ T8342]  dump_stack_lvl+0x189/0x250
[   93.115554][ T8342]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.115566][ T8342]  ? __pfx__printk+0x10/0x10
[   93.115575][ T8342]  ? kernfs_path_from_node+0x2c/0x260
[   93.115585][ T8342]  ? kernfs_path_from_node+0x2c/0x260
[   93.115592][ T8342]  ? kernfs_path_from_node+0x2c/0x260
[   93.115619][ T8342]  ? kernfs_path_from_node+0x22c/0x260
[   93.115628][ T8342]  ? kernfs_path_from_node+0x2c/0x260
[   93.115637][ T8342]  sysfs_warn_dup+0x8e/0xa0
[   93.115645][ T8342]  sysfs_do_create_link_sd+0xc0/0x110
[   93.115655][ T8342]  device_add_class_symlinks+0x1cf/0x240
[   93.115664][ T8342]  device_add+0x475/0xb50
[   93.115674][ T8342]  wiphy_register+0x199a/0x26b0
[   93.115691][ T8342]  ? __pfx_wiphy_register+0x10/0x10
[   93.115699][ T8342]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   93.115711][ T8342]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   93.115723][ T8342]  ieee80211_register_hw+0x33e1/0x4120
[   93.115740][ T8342]  ? ieee80211_register_hw+0x13f1/0x4120
[   93.115752][ T8342]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   93.115763][ T8342]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.115777][ T8342]  ? __hrtimer_setup+0x187/0x210
[   93.115788][ T8342]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   93.115798][ T8342]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   93.115822][ T8342]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   93.115832][ T8342]  ? trace_kmalloc+0x1f/0xd0
[   93.115838][ T8342]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   93.115845][ T8342]  ? kstrndup+0xbf/0x160
[   93.115865][ T8342]  hwsim_new_radio_nl+0xea4/0x1b10
[   93.115874][ T8342]  ? __pfx___nla_validate_parse+0x10/0x10
[   93.115891][ T8342]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.115926][ T8342]  ? __nla_parse+0x40/0x60
[   93.115939][ T8342]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   93.115953][ T8342]  genl_family_rcv_msg_doit+0x215/0x300
[   93.115966][ T8342]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   93.115982][ T8342]  ? bpf_lsm_capable+0x9/0x20
[   93.115989][ T8342]  ? security_capable+0x7e/0x2e0
[   93.116001][ T8342]  genl_rcv_msg+0x60e/0x790
[   93.116015][ T8342]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.116025][ T8342]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   93.116040][ T8342]  netlink_rcv_skb+0x208/0x470
[   93.116049][ T8342]  ? __pfx_genl_rcv_msg+0x10/0x10
[   93.116066][ T8342]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   93.116083][ T8342]  ? down_read+0x1ad/0x2e0
[   93.116092][ T8342]  genl_rcv+0x28/0x40
[   93.116102][ T8342]  netlink_unicast+0x75b/0x8d0
[   93.116115][ T8342]  netlink_sendmsg+0x805/0xb30
[   93.116128][ T8342]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.116137][ T8342]  ? aa_sock_msg_perm+0x94/0x160
[   93.116148][ T8342]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   93.116156][ T8342]  ? __pfx_netlink_sendmsg+0x10/0x10
[   93.116165][ T8342]  __sock_sendmsg+0x21c/0x270
[   93.116177][ T8342]  ____sys_sendmsg+0x505/0x830
[   93.116188][ T8342]  ? __pfx_____sys_sendmsg+0x10/0x10
[   93.116201][ T8342]  ? import_iovec+0x74/0xa0
[   93.116209][ T8342]  ___sys_sendmsg+0x21f/0x2a0
[   93.116219][ T8342]  ? __pfx____sys_sendmsg+0x10/0x10
[   93.116243][ T8342]  ? __fget_files+0x2a/0x420
[   93.116251][ T8342]  ? __fget_files+0x3a0/0x420
[   93.116263][ T8342]  __x64_sys_sendmsg+0x19b/0x260
[   93.116272][ T8342]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   93.116289][ T8342]  ? do_syscall_64+0xbe/0x3b0
[   93.116298][ T8342]  do_syscall_64+0xfa/0x3b0
[   93.116303][ T8342]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.116313][ T8342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.116320][ T8342]  ? exc_page_fault+0x9f/0xf0
[   93.116331][ T8342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.116338][ T8342] RIP: 0033:0x7f8cb158e929
[   93.116346][ T8342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.116352][ T8342] RSP: 002b:00007f8cb241f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   93.116360][ T8342] RAX: ffffffffffffffda RBX: 00007f8cb17b5fa0 RCX: 00007f8cb158e929
[   93.116365][ T8342] RDX: 000000002400c040 RSI: 0000200000000040 RDI: 0000000000000006
[   93.116370][ T8342] RBP: 00007f8cb1610b39 R08: 0000000000000000 R09: 0000000000000000
[   93.116374][ T8342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.116378][ T8342] R13: 0000000000000000 R14: 00007f8cb17b5fa0 R15: 00007ffc59d12818
[   93.116390][ T8342]  </TASK>
[   93.346605][ T8350] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   94.235863][ T8355] lo speed is unknown, defaulting to 1000
[   94.313257][ T8369] netlink: 'syz.2.677': attribute type 10 has an invalid length.
[   94.396777][ T8372] netlink: 'syz.1.680': attribute type 13 has an invalid length.
[   94.399523][ T8372] netlink: 'syz.1.680': attribute type 17 has an invalid length.
[   94.463625][ T8372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.469688][ T8378] bond3: (slave veth3): Releasing active interface
[   94.473176][ T8378] bond4: (slave gretap1): Releasing active interface
[   94.477614][ T8378] batadv1: left promiscuous mode
[   94.482231][ T8378] team0: Port device batadv1 removed
[   94.487081][ T8378] bond5: (slave veth7): Releasing active interface
[   94.489992][ T8378] bond8: left allmulticast mode
[   94.493033][ T8378] bond8: left promiscuous mode
[   94.495408][ T8378] bridge0: port 1(bond8) entered disabled state
[   94.518445][ T8378] bond9: (slave veth9): Releasing active interface
[   94.521747][ T8378] bond11: (slave veth11): Releasing active interface
[   94.524591][ T8378] batman_adv: batadv0: Removing interface: ip6gretap2
[   94.528706][ T8378] bond12: (slave veth19): Releasing active interface
[   94.532311][ T8378] bond13: (slave veth21): Releasing active interface
[   94.575315][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.582583][ T8379] lo speed is unknown, defaulting to 1000
[   94.622754][ T8387] netlink: 'syz.0.685': attribute type 2 has an invalid length.
[   94.636041][ T8387] vlan0: entered allmulticast mode
[   94.637975][ T8387] bridge_slave_0: entered allmulticast mode
[   94.638826][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.725932][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.738136][ T8394] netlink: 'syz.0.688': attribute type 1 has an invalid length.
[   94.886805][ T8405] bridge0: port 1(erspan0) entered blocking state
[   94.889022][ T8405] bridge0: port 1(erspan0) entered disabled state
[   94.891341][ T8405] erspan0: entered allmulticast mode
[   94.893924][ T8405] erspan0: left allmulticast mode
[   95.065836][ T8415] tipc: Cannot configure node identity twice
[   95.498525][ T8428] lo speed is unknown, defaulting to 1000
[   95.705789][ T8436] __nla_validate_parse: 25 callbacks suppressed
[   95.705802][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.704'.
[   95.878799][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[   95.917983][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.707'.
[   96.152597][ T8467] team0: Device vlan2 is already an upper device of the team interface
[   96.212645][ T8470] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.717'.
[   96.217032][ T8470] netlink: zone id is out of range
[   96.219033][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[   96.219371][ T8470] netlink: zone id is out of range
[   96.222038][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[   96.222071][ T8471] netlink: 52 bytes leftover after parsing attributes in process `syz.2.715'.
[   96.232765][ T8470] netlink: get zone limit has 8 unknown bytes
[   96.239775][ T8470] netlink: 52 bytes leftover after parsing attributes in process `syz.1.717'.
[   96.247828][ T8471] netlink: 'syz.2.715': attribute type 4 has an invalid length.
[   96.266340][ T8471] netlink: 'syz.2.715': attribute type 4 has an invalid length.
[   96.280635][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.718'.
[   96.295494][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'.
[   96.874489][ T8506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.928560][ T8506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.976129][ T8506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.033399][ T8506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.086528][ T8506] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.095183][ T8506] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.102024][ T8506] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.109569][ T8506] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.368165][ T8526] netlink: 'syz.2.735': attribute type 11 has an invalid length.
[   97.418432][ T8528] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   97.634024][ T8560] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[   97.667982][ T8560] 8021q: adding VLAN 0 to HW filter on device bond15
[   97.678176][ T8562] macsec3: entered promiscuous mode
[   97.680617][ T8562] macsec3: entered allmulticast mode
[   97.695869][ T8560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.930976][ T8590] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.978742][ T8590] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.018239][ T8590] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.058254][ T8590] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.395662][ T8604] vlan1: entered promiscuous mode
[   98.767686][ T8636] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[   98.770269][ T8636] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[   98.939643][ T8649] netlink: 'syz.2.771': attribute type 1 has an invalid length.
[   99.398208][ T8681] IPVS: Scheduler module ip_vs_sip not found
[   99.470372][ T8687] bond17: entered promiscuous mode
[   99.472232][ T8687] bond17: entered allmulticast mode
[   99.474608][ T8687] 8021q: adding VLAN 0 to HW filter on device bond17
[   99.752173][ T8711] lo speed is unknown, defaulting to 1000
[   99.816308][ T8590] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.823509][ T8590] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.851646][ T8590] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.865424][ T8590] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.940470][ T8722] netlink: 'syz.1.795': attribute type 1 has an invalid length.
[  100.198439][ T8747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  100.552689][ T8753] openvswitch: netlink: Flow actions attr not present in new flow.
[  100.559591][ T8753] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[  100.938771][ T8780] netem: change failed
[  100.950774][   T33] audit: type=1800 audit(1751933554.975:5): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.809" name="memory.events" dev="tmpfs" ino=1360 res=0 errno=0
[  100.978946][   T33] audit: type=1804 audit(1751933554.985:6): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.809" name="memory.events" dev="tmpfs" ino=1360 res=1 errno=0
[  100.988496][ T8780] __nla_validate_parse: 31 callbacks suppressed
[  100.988506][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'.
[  100.998587][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'.
[  101.001818][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'.
[  101.023837][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'.
[  101.094704][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.097629][ T8805] IPv6: NLM_F_CREATE should be set when creating new route
[  101.099983][ T8805] IPv6: NLM_F_CREATE should be set when creating new route
[  101.102250][ T8805] IPv6: NLM_F_CREATE should be set when creating new route
[  101.108068][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.164633][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.811'.
[  101.308214][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.815'.
[  101.373325][ T8816] netlink: 'syz.2.816': attribute type 1 has an invalid length.
[  101.393991][ T8816] 8021q: adding VLAN 0 to HW filter on device bond18
[  101.417571][ T8816] veth23: entered promiscuous mode
[  101.424365][ T8816] bond18: (slave veth23): Enslaving as a backup interface with a down link
[  101.475163][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.817'.
[  101.527026][ T8829] netlink: 'syz.1.820': attribute type 10 has an invalid length.
[  101.532254][ T8829] 8021q: adding VLAN 0 to HW filter on device team0
[  101.666402][ T8838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'.
[  101.811207][ T8845] sch_fq: defrate 0 ignored.
[  101.821819][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'.
[  102.030035][ T8856] sctp: [Deprecated]: syz.0.829 (pid 8856) Use of int in max_burst socket option deprecated.
[  102.030035][ T8856] Use struct sctp_assoc_value instead
[  102.067979][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  102.184600][ T8879] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.260054][ T8879] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.329444][ T8879] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.338844][ T8883] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  102.359522][ T8879] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.471997][ T8879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.489279][ T8879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.513319][ T8879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.540811][ T8879] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.638071][ T8902] lo speed is unknown, defaulting to 1000
[  103.061417][ T8932] netlink: 'syz.1.845': attribute type 10 has an invalid length.
[  103.071635][ T8932] wlan1: mtu greater than device maximum
[  103.073467][ T8932] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  103.223188][ T8955] netlink: 'syz.1.849': attribute type 1 has an invalid length.
[  103.259798][ T8955] 8021q: adding VLAN 0 to HW filter on device bond13
[  103.292235][ T8955] veth13: entered promiscuous mode
[  103.300032][ T8955] bond13: (slave veth13): Enslaving as an active interface with a down link
[  103.311925][ T8955] bond13: entered allmulticast mode
[  103.427921][ T8970] netlink: 'syz.0.853': attribute type 1 has an invalid length.
[  103.442358][ T8970] 8021q: adding VLAN 0 to HW filter on device bond14
[  103.455832][   T47] tipc: Node number set to 2168297267
[  103.523416][ T8972] netlink: 'syz.1.852': attribute type 2 has an invalid length.
[  103.526367][ T8970] netlink: 'syz.0.853': attribute type 12 has an invalid length.
[  103.670032][ T8978] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  103.672754][ T8978] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  103.675749][ T8978] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  103.678522][ T8978] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  103.792979][ T8984] syzkaller1: entered promiscuous mode
[  103.795502][ T8984] syzkaller1: entered allmulticast mode
[  104.001148][ T8992] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  104.004022][ T8991] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  104.008512][ T8991] netlink: 'syz.2.859': attribute type 1 has an invalid length.
[  104.250465][ T9006] batadv_slave_0: entered promiscuous mode
[  104.354354][ T9014] lo speed is unknown, defaulting to 1000
[  104.385723][ T9016] vlan2: entered allmulticast mode
[  104.387428][ T9016] bond14: entered allmulticast mode
[  104.551696][ T9030] lo speed is unknown, defaulting to 1000
[  104.701343][ T9043] vlan1: entered allmulticast mode
[  104.703208][ T9043] veth1: entered allmulticast mode
[  107.315830][ T1086] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  125.278177][ T9055] pimreg: entered allmulticast mode
[  125.294017][ T9060] Bluetooth: MGMT ver 1.23
[  125.295769][ T9055] pimreg: left allmulticast mode
[  125.298922][ T9060] __nla_validate_parse: 19 callbacks suppressed
[  125.298938][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.879'.
[  125.382071][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  125.388718][ T9070] openvswitch: netlink: Multiple metadata blocks provided
[  125.392677][ T9070] validate_nla: 3 callbacks suppressed
[  125.392685][ T9070] netlink: 'syz.2.884': attribute type 21 has an invalid length.
[  125.503867][ T9075] lo speed is unknown, defaulting to 1000
[  125.550905][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.607366][ T9077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.683030][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.304080][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  126.403657][ T9086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.408633][ T9086] syzkaller0: entered promiscuous mode
[  126.410845][ T9086] syzkaller0: entered allmulticast mode
[  126.416272][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  126.431910][ T9088] bond18: (slave veth23): Releasing backup interface
[  126.446701][ T9085] tipc: Resetting bearer <eth:syzkaller0>
[  126.456641][ T9085] tipc: Disabling bearer <eth:syzkaller0>
[  126.462091][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  126.466657][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  126.480351][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'.
[  126.485080][ T9090] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  126.493919][   T47] lo speed is unknown, defaulting to 1000
[  126.496186][   T47] syz0: Port: 1 Link DOWN
[  126.497603][   T47] lo speed is unknown, defaulting to 1000
[  126.527596][ T9092] netlink: 'syz.2.893': attribute type 1 has an invalid length.
[  126.558054][ T9092] 8021q: adding VLAN 0 to HW filter on device bond19
[  126.589184][ T9094] netlink: 'syz.0.892': attribute type 10 has an invalid length.
[  126.592097][ T9094] netlink: 'syz.0.892': attribute type 10 has an invalid length.
[  126.594522][ T9094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'.
[  126.598490][ T9094] batadv0: entered promiscuous mode
[  126.600264][ T9094] batadv0: entered allmulticast mode
[  126.602010][ T9094] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  126.630202][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.897'.
[  126.714358][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'.
[  126.728266][ T9117] netlink: 'syz.0.900': attribute type 10 has an invalid length.
[  126.932999][ T9144] lo speed is unknown, defaulting to 1000
[  127.400367][ T9157] SET target dimension over the limit!
[  127.487905][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.914'.
[  127.494133][ T9164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.502150][ T9159] lo speed is unknown, defaulting to 1000
[  127.620252][ T9170] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.623389][ T9170] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.672996][ T9170] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.679250][ T9170] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.717943][ T9170] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.721425][ T9170] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.759173][ T9170] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.762384][ T9170] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  127.849383][ T9170] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  127.852164][ T9170] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  127.860201][ T9170] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  127.862853][ T9170] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  127.873759][ T9170] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  127.877011][ T9170] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  127.887071][ T9170] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  127.889750][ T9170] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  128.165633][ T9199] block nbd0: server does not support multiple connections per device.
[  128.169504][ T9199] block nbd0: shutting down sockets
[  128.216348][ T9211] sit0: left promiscuous mode
[  128.237820][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.300254][ T9226] netlink: 'syz.0.932': attribute type 5 has an invalid length.
[  128.328545][ T9228] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999
[  128.331006][   T10] IPVS: starting estimator thread 0...
[  128.332908][ T9228] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004
[  128.348453][ T9232] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  128.420542][ T9229] IPVS: using max 79 ests per chain, 189600 per kthread
[  128.456958][ T9241] bond0: Device is already in use.
[  128.520458][ T9253] 8021q: adding VLAN 0 to HW filter on device bond15
[  128.592300][ T9253] bond15 (unregistering): Released all slaves
[  128.610502][ T9254] syzkaller1: entered promiscuous mode
[  128.612528][ T9254] syzkaller1: entered allmulticast mode
[  128.678821][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  128.848923][ T9286] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  128.864640][ T9287] lo speed is unknown, defaulting to 1000
[  129.228062][ T9331] netlink: 'syz.2.963': attribute type 1 has an invalid length.
[  129.243354][ T9331] 8021q: adding VLAN 0 to HW filter on device bond20
[  129.246664][ T9333] vlan0: entered promiscuous mode
[  129.262749][ T9331] bond20: (slave veth25): Enslaving as an active interface with a down link
[  129.269826][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.488506][ T9343] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003
[  129.520019][ T9347] bond0: entered promiscuous mode
[  129.522559][ T9347] bond_slave_0: entered promiscuous mode
[  129.524746][ T9347] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  129.529181][ T9347] Cannot create hsr debugfs directory
[  129.531113][ T9347] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  129.536563][ T9347] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network
[  129.539892][ T9347] hsr1: entered promiscuous mode
[  129.877624][ T9374] netlink: 'syz.0.976': attribute type 1 has an invalid length.
[  129.891995][ T9374] 8021q: adding VLAN 0 to HW filter on device bond17
[  129.897634][ T9376] Driver unsupported XDP return value 0 on prog  (id 391) dev N/A, expect packet loss!
[  129.933050][ T9381] tipc: Started in network mode
[  129.934755][ T9381] tipc: Node identity de6d797f37e9, cluster identity 4711
[  129.937873][ T9381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.940355][ T9384] syzkaller1: left promiscuous mode
[  129.942274][ T9384] syzkaller1: left allmulticast mode
[  129.958323][ T9379] tipc: Disabling bearer <eth:syzkaller0>
[  130.030476][ T9389] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[  130.055911][ T9389] 8021q: adding VLAN 0 to HW filter on device bond21
[  130.058323][ T9399] lo speed is unknown, defaulting to 1000
[  130.060781][ T9399] lo speed is unknown, defaulting to 1000
[  130.071981][ T9389] bond21: (slave veth27): Enslaving as an active interface with a down link
[  130.081529][ T9399] lo speed is unknown, defaulting to 1000
[  130.086348][ T9399] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  130.100141][ T9399] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  130.122259][ T9399] lo speed is unknown, defaulting to 1000
[  130.127715][ T9399] lo speed is unknown, defaulting to 1000
[  130.132110][ T9399] lo speed is unknown, defaulting to 1000
[  130.198113][ T9389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.857764][ T9418] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  130.864774][ T9418] lo: left promiscuous mode
[  130.868286][ T9418] tunl0: left promiscuous mode
[  130.871288][ T9418] gre0: left promiscuous mode
[  130.873523][ T9418] gretap0: left promiscuous mode
[  130.875994][ T9418] ip_vti0: left promiscuous mode
[  130.878311][ T9418] ip6_vti0: left promiscuous mode
[  130.880749][ T9418] ip6tnl0: left promiscuous mode
[  130.882948][ T9418] ip6gre0: left promiscuous mode
[  130.885380][ T9418] ip6gretap0: left promiscuous mode
[  130.887878][ T9418] nlmon0: left promiscuous mode
[  130.890135][ T9418] caif0: left promiscuous mode
[  130.892744][ T9418] wg2: left promiscuous mode
[  130.899118][ T9418] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  130.902162][ T9418] vlan2: left promiscuous mode
[  130.904052][ T9418] vlan2: left allmulticast mode
[  130.906020][ T9418] hsr_slave_1: left allmulticast mode
[  130.908487][ T9418] vlan0: left promiscuous mode
[  130.910424][ T9418] vlan0: left allmulticast mode
[  130.912203][ T9418] bond0: left allmulticast mode
[  130.914551][ T9418] vcan1: left promiscuous mode
[  130.920601][ T9418] macsec1: left promiscuous mode
[  130.922659][ T9418] macsec1: left allmulticast mode
[  130.924768][ T9418] geneve2: left promiscuous mode
[  130.926699][ T9418] geneve2: left allmulticast mode
[  130.928674][ T9418] macvtap1: left promiscuous mode
[  130.930388][ T9418] macvtap1: left allmulticast mode
[  130.936254][ T9418] hsr2: left allmulticast mode
[  130.937910][ T9418] syz_tun: left allmulticast mode
[  130.939596][ T9418] batadv_slave_0: left allmulticast mode
[  130.946327][ T9418] tipc: Resetting bearer <eth:syzkaller0>
[  130.950842][ T9418] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  130.953290][ T9418] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  130.967684][ T9418] bond17: left promiscuous mode
[  130.969461][ T9418] bond17: left allmulticast mode
[  130.973807][ T9418] veth23: left promiscuous mode
[  130.977854][ T9418] vlan1: left allmulticast mode
[  130.979542][ T9418] veth1: left allmulticast mode
[  131.051644][ T9423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.057831][ T9425] __nla_validate_parse: 18 callbacks suppressed
[  131.057840][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'.
[  131.113821][ T9427] xt_l2tp: missing protocol rule (udp|l2tpip)
[  131.116799][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'.
[  131.120906][ T9427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.126515][ T9429] SET target dimension over the limit!
[  131.138439][ T9427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.992'.
[  131.150775][ T9433] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  131.154065][ T9433] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  131.169500][ T9436] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  131.175313][ T9433] 8021q: adding VLAN 0 to HW filter on device bond22
[  131.190112][ T9436] 8021q: adding VLAN 0 to HW filter on device bond15
[  131.204676][ T9436] 8021q: adding VLAN 0 to HW filter on device bond15
[  131.208286][ T9436] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.212625][ T9436] bond15: (slave vxcan3): Error -95 calling set_mac_address
[  131.256988][ T9436] bond15: (slave bridge5): Enslaving as an active interface with a down link
[  131.313607][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'.
[  131.318123][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  131.321234][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  131.352695][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'.
[  131.357513][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.359613][ T9452] vlan2: entered allmulticast mode
[  131.361806][ T9452] bridge_slave_0: entered allmulticast mode
[  131.371760][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'.
[  131.380379][ T9450] : entered promiscuous mode
[  131.382198][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.388084][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.392179][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.395729][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.398654][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.401591][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.404659][ T9450] netlink: 'syz.2.999': attribute type 7 has an invalid length.
[  131.482340][ T9459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1002'.
[  131.509445][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[  131.692748][ T9488] bond18: entered promiscuous mode
[  131.694808][ T9488] 8021q: adding VLAN 0 to HW filter on device bond18
[  131.764096][ T9495] bridge3: entered allmulticast mode
[  131.870356][ T9508] syzkaller1: entered allmulticast mode
[  132.327292][ T9543] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  133.478588][ T9561] wireguard1: entered promiscuous mode
[  133.480559][ T9561] wireguard1: entered allmulticast mode
[  133.790654][ T9580] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.793297][ T9580] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.796155][ T9580] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.798667][ T9580] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.808275][ T9580] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.811335][ T9580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  133.814496][ T9580] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  133.869816][ T9580] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.872955][ T9580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  133.876256][ T9580] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  133.918474][ T9580] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.921691][ T9580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  133.925133][ T9580] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  133.956457][ T9587] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  133.968332][ T9580] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.971498][ T9580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  133.974643][ T9580] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  134.041591][ T9580] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.044393][ T9580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  134.047305][ T9580] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  134.054607][ T9580] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.057617][ T9580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  134.060306][ T9580] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  134.068571][ T9580] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.071258][ T9580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  134.073932][ T9580] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  134.088535][ T9580] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.091178][ T9580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  134.103103][ T9580] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  134.754552][ T9608] lo speed is unknown, defaulting to 1000
[  134.834035][ T9608] lo speed is unknown, defaulting to 1000
[  134.961183][ T9615] netlink: 'syz.0.1047': attribute type 11 has an invalid length.
[  135.206821][ T9626] tipc: Resetting bearer <eth:syzkaller0>
[  135.475389][   T10] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  135.635505][ T7594] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  135.638049][ T7594] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  135.665790][   T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  135.813645][ T9641] lo speed is unknown, defaulting to 1000
[  135.907747][ T9641] lo speed is unknown, defaulting to 1000
[  135.975462][   T47] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  135.990431][ T9650] syzkaller1: left allmulticast mode
[  136.136382][ T9659] geneve2: entered allmulticast mode
[  136.355053][ T1851] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  136.421939][ T9675] __nla_validate_parse: 14 callbacks suppressed
[  136.421951][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'.
[  136.430242][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'.
[  136.440864][ T9677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.529255][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'.
[  136.534743][ T9688] validate_nla: 7 callbacks suppressed
[  136.534752][ T9688] netlink: 'syz.1.1069': attribute type 10 has an invalid length.
[  136.549014][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.551760][ T9688] wlan1: mtu greater than device maximum
[  136.553744][ T9688] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  136.566531][ T9688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  136.569606][ T9688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  136.759185][ T9691] lo speed is unknown, defaulting to 1000
[  136.840487][ T9691] lo speed is unknown, defaulting to 1000
[  137.172449][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'.
[  137.234134][ T9710] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1075'.
[  137.243841][ T9709] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.249027][ T9709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.252475][ T9709] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  137.267582][ T9711] 8021q: adding VLAN 0 to HW filter on device batadv2
[  137.271468][ T9711] team0: Port device batadv2 added
[  137.299148][ T9709] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.302475][ T9709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.306056][ T9709] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  137.349039][ T9709] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.352372][ T9709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.362595][ T9709] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  137.410652][ T9709] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.413839][ T9709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  137.417713][ T9709] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  137.473949][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'.
[  137.480161][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'.
[  137.483481][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1078'.
[  137.494272][ T9709] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.498065][ T9709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  137.503064][ T9709] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  137.515992][ T9709] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.518743][ T9709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  137.521410][ T9709] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  137.531417][ T9709] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.534091][ T9709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  137.538824][ T9709] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  137.557754][ T9709] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.560420][ T9709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  137.563014][ T9709] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  137.607783][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1080'.
[  137.615958][ T9728] netlink: 'syz.2.1081': attribute type 1 has an invalid length.
[  137.618653][ T9728] netlink: 'syz.2.1081': attribute type 2 has an invalid length.
[  137.693802][ T9741] 8021q: adding VLAN 0 to HW filter on device bond23
[  137.699923][ T9741] bridge0: port 1(bond23) entered blocking state
[  137.702785][ T9741] bridge0: port 1(bond23) entered disabled state
[  137.705026][ T9741] bond23: entered allmulticast mode
[  137.708770][ T9741] bond23: entered promiscuous mode
[  137.735507][ T9741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'.
[  137.834628][ T9755] bridge7: entered promiscuous mode
[  137.841105][ T9755] bridge7: entered allmulticast mode
[  137.861459][ T9752] wireguard1: entered promiscuous mode
[  137.863333][ T9752] wireguard1: entered allmulticast mode
[  137.959864][ T9750] lo speed is unknown, defaulting to 1000
[  137.989984][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.077944][ T9750] lo speed is unknown, defaulting to 1000
[  138.078462][ T9774] lo speed is unknown, defaulting to 1000
[  138.223690][ T9774] lo speed is unknown, defaulting to 1000
[  138.390590][ T9782] xt_TCPMSS: Only works on TCP SYN packets
[  138.487418][ T9787] netlink: 'syz.0.1094': attribute type 1 has an invalid length.
[  138.496531][ T9785] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  138.510990][ T9790] netlink: 'syz.0.1095': attribute type 1 has an invalid length.
[  138.586504][ T9803] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  138.644411][ T9809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  138.648096][ T9809] gretap2: entered promiscuous mode
[  138.649792][ T9809] gretap2: entered allmulticast mode
[  138.688650][ T1086] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  138.877914][ T9849] netlink: 'syz.2.1112': attribute type 10 has an invalid length.
[  139.179122][ T9880] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  139.212317][ T9882] netlink: 'syz.2.1122': attribute type 2 has an invalid length.
[  139.216177][ T9882] netlink: 'syz.2.1122': attribute type 1 has an invalid length.
[  139.240276][ T9885] netlink: 'syz.2.1123': attribute type 7 has an invalid length.
[  139.289741][ T9889] tipc: Resetting bearer <eth:syzkaller0>
[  139.292601][ T9889] bond20: (slave veth25): Releasing active interface
[  139.298251][ T9889] bond21: (slave veth27): Releasing active interface
[  139.302055][ T9889] bond23: left allmulticast mode
[  139.303741][ T9889] bond23: left promiscuous mode
[  139.308334][ T9889] bridge0: port 1(bond23) entered disabled state
[  139.328001][ T9889] tipc: Resetting bearer <eth:syzkaller0>
[  139.371875][ T9893] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  139.720040][ T9901] lo speed is unknown, defaulting to 1000
[  139.805363][ T9901] lo speed is unknown, defaulting to 1000
[  139.854106][ T9901] smc: removing ib device syz0
[  139.955320][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  140.247977][ T9906] bridge8: entered allmulticast mode
[  140.595306][ T1851] IPVS: sh: UDP 127.0.0.1:0 - no destination available
[  140.930784][ T9920] pim6reg1: entered promiscuous mode
[  140.932851][ T9920] pim6reg1: entered allmulticast mode
[  141.049068][ T9927] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  141.051928][ T9927] openvswitch: netlink: Duplicate key (type 0).
[  141.320632][ T9939] bond6: (slave veth5): Releasing active interface
[  141.325687][ T9939] bond7: (slave veth7): Releasing active interface
[  141.330699][ T9939] bond9: (slave bridge1): Releasing backup interface
[  141.333062][ T9939] bridge1: left promiscuous mode
[  141.342575][ T9939] bond13: (slave veth13): Releasing active interface
[  141.348889][ T9939] bond15: (slave bridge5): Releasing active interface
[  141.478489][ T9961] 8021q: VLANs not supported on syzkaller1
[  141.483020][ T9961] __nla_validate_parse: 27 callbacks suppressed
[  141.483031][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  141.556924][ T9970] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  141.559957][ T9970] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  141.562845][ T9970] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  141.566067][ T9970] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  141.571821][ T9970] bond25: (slave geneve4): making interface the new active one
[  141.576317][ T9970] bond25: (slave geneve4): Enslaving as an active interface with an up link
[  141.579322][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'.
[  141.597147][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1148'.
[  141.614776][ T9970] 8021q: adding VLAN 0 to HW filter on device bond25
[  141.620416][ T9977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'.
[  141.743762][ T9993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'.
[  141.809655][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1158'.
[  141.867907][T10014] validate_nla: 4 callbacks suppressed
[  141.867917][T10014] netlink: 'syz.0.1160': attribute type 1 has an invalid length.
[  141.900926][T10014] bond20: entered promiscuous mode
[  141.903566][T10014] 8021q: adding VLAN 0 to HW filter on device bond20
[  141.926694][T10014] bond20: (slave bridge5): making interface the new active one
[  141.929229][T10014] bridge5: entered promiscuous mode
[  141.936573][T10014] bond20: (slave bridge5): Enslaving as an active interface with an up link
[  141.950609][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'.
[  142.011303][T10025] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  142.014096][T10025] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  142.027517][T10025] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  142.030685][T10025] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  142.033866][T10025] geneve5: entered promiscuous mode
[  142.057396][T10022] netlink: 'syz.0.1163': attribute type 1 has an invalid length.
[  142.061841][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'.
[  142.102089][T10037] 8021q: VLANs not supported on syzkaller1
[  142.140658][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  142.153503][T10048] macvtap0: entered promiscuous mode
[  142.158054][T10048] team0: entered promiscuous mode
[  142.160202][T10048] macvtap0: entered allmulticast mode
[  142.161957][T10048] team0: entered allmulticast mode
[  142.163954][T10048] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  142.168734][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1170'.
[  142.173072][T10048] team0: left allmulticast mode
[  142.174685][T10048] team0: left promiscuous mode
[  142.229636][T10059] IPv6: NLM_F_REPLACE set, but no existing node found!
[  142.231773][T10043] lo speed is unknown, defaulting to 1000
[  142.289978][T10065] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  142.293118][T10068] netlink: 'syz.1.1173': attribute type 1 has an invalid length.
[  142.318887][T10068] 8021q: adding VLAN 0 to HW filter on device bond17
[  142.354157][T10074] lo speed is unknown, defaulting to 1000
[  142.358540][T10074] lo speed is unknown, defaulting to 1000
[  142.363674][T10074] lo speed is unknown, defaulting to 1000
[  142.372187][T10074] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  142.399020][T10074] lo speed is unknown, defaulting to 1000
[  142.401751][T10074] lo speed is unknown, defaulting to 1000
[  142.404667][T10074] lo speed is unknown, defaulting to 1000
[  142.408579][T10074] lo speed is unknown, defaulting to 1000
[  142.701900][T10102] netlink: 'syz.0.1181': attribute type 1 has an invalid length.
[  142.739333][T10104] lo speed is unknown, defaulting to 1000
[  142.742050][T10104] lo speed is unknown, defaulting to 1000
[  142.964309][T10112] xt_hashlimit: size too large, truncated to 1048576
[  143.319829][T10116] wg2: entered promiscuous mode
[  143.426283][T10120] pim6reg1: entered allmulticast mode
[  143.629843][T10138] rdma_op ffff88801ea321f0 conn xmit_rdma 0000000000000000
[  143.769963][T10144] wg1: entered promiscuous mode
[  143.771712][T10144] wg1: entered allmulticast mode
[  143.995904][T10157] netlink: 'syz.0.1199': attribute type 4 has an invalid length.
[  144.000245][T10157] netlink: 'syz.0.1199': attribute type 4 has an invalid length.
[  144.007423][   T10] lo speed is unknown, defaulting to 1000
[  144.010927][   T10] syz2: Port: 1 Link ACTIVE
[  144.233922][T10173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.240066][T10171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  144.243439][T10171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  144.258875][T10173] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  144.263689][T10173] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  144.267001][T10173] CPU: 1 UID: 0 PID: 10173 Comm: syz.0.1203 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  144.271459][T10173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.274790][T10173] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  144.276948][T10173] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[  144.283448][T10173] RSP: 0018:ffffc90002aaf0c8 EFLAGS: 00010202
[  144.285487][T10173] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  144.288081][T10173] RDX: ffff888038cf9cc0 RSI: 0000000000000000 RDI: 0000000000000000
[  144.290720][T10173] RBP: 0000000000000000 R08: ffff888038cf9cc0 R09: 0000000000000002
[  144.293508][T10173] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  144.296038][T10173] R13: ffff88810837f000 R14: dffffc0000000000 R15: ffff88810837f000
[  144.298607][T10173] FS:  00007f29e269b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  144.301614][T10173] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.303829][T10173] CR2: 00007f8cb1574980 CR3: 000000003b9dc000 CR4: 00000000000006f0
[  144.306554][T10173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  144.309287][T10173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  144.312015][T10173] Call Trace:
[  144.313265][T10173]  <TASK>
[  144.314269][T10173]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  144.316193][T10173]  pie_change+0x96d/0xca0
[  144.317811][T10173]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  144.319861][T10173]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.321646][T10173]  ? __pfx_pie_change+0x10/0x10
[  144.323306][T10173]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.325301][T10173]  ? timer_init_key+0x171/0x2d0
[  144.326930][T10173]  ? __pfx_pie_init+0x10/0x10
[  144.328527][T10173]  pie_init+0x2a3/0x3f0
[  144.329946][T10173]  qdisc_create+0x7ac/0xea0
[  144.331504][T10173]  tc_modify_qdisc+0x1426/0x2010
[  144.333159][T10173]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  144.334952][T10173]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  144.336726][T10173]  rtnetlink_rcv_msg+0x77c/0xb70
[  144.338391][T10173]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  144.340087][T10173]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  144.341921][T10173]  ? ref_tracker_free+0x63a/0x7d0
[  144.343637][T10173]  ? __copy_skb_header+0xa7/0x550
[  144.345344][T10173]  ? __pfx_ref_tracker_free+0x10/0x10
[  144.347201][T10173]  netlink_rcv_skb+0x208/0x470
[  144.348858][T10173]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  144.350725][T10173]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.352518][T10173]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.354460][T10173]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.356657][T10173]  netlink_unicast+0x75b/0x8d0
[  144.358673][T10173]  netlink_sendmsg+0x805/0xb30
[  144.360676][T10173]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.362767][T10173]  ? aa_sock_msg_perm+0x94/0x160
[  144.364628][T10173]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.366427][T10173]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.367074][T10178] netlink: 'syz.1.1204': attribute type 15 has an invalid length.
[  144.368199][T10173]  __sock_sendmsg+0x21c/0x270
[  144.368242][T10173]  ____sys_sendmsg+0x505/0x830
[  144.368253][T10173]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.368263][T10173]  ? import_iovec+0x74/0xa0
[  144.368272][T10173]  ___sys_sendmsg+0x21f/0x2a0
[  144.368280][T10173]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.368296][T10173]  ? __fget_files+0x2a/0x420
[  144.383688][T10173]  ? __fget_files+0x3a0/0x420
[  144.385294][T10173]  __x64_sys_sendmsg+0x19b/0x260
[  144.387156][T10173]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.389425][T10173]  ? rcu_is_watching+0x15/0xb0
[  144.391227][T10173]  ? do_syscall_64+0xbe/0x3b0
[  144.393172][T10173]  do_syscall_64+0xfa/0x3b0
[  144.395099][T10173]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.397108][T10173]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.399083][T10173]  ? exc_page_fault+0x9f/0xf0
[  144.401033][T10173]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.403508][T10173] RIP: 0033:0x7f29e178e929
[  144.405348][T10173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.412414][T10173] RSP: 002b:00007f29e269b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.415291][T10173] RAX: ffffffffffffffda RBX: 00007f29e19b5fa0 RCX: 00007f29e178e929
[  144.418144][T10173] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000008
[  144.420791][T10173] RBP: 00007f29e1810b39 R08: 0000000000000000 R09: 0000000000000000
[  144.423807][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.427053][T10173] R13: 0000000000000000 R14: 00007f29e19b5fa0 R15: 00007ffe81e801f8
[  144.430109][T10173]  </TASK>
[  144.431187][T10173] Modules linked in:
[  144.432834][T10173] ---[ end trace 0000000000000000 ]---
[  144.434673][T10173] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  144.436896][T10173] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[  144.444380][T10173] RSP: 0018:ffffc90002aaf0c8 EFLAGS: 00010202
[  144.446752][T10173] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  144.449574][T10173] RDX: ffff888038cf9cc0 RSI: 0000000000000000 RDI: 0000000000000000
[  144.452265][T10173] RBP: 0000000000000000 R08: ffff888038cf9cc0 R09: 0000000000000002
[  144.454988][T10173] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002
[  144.457637][T10173] R13: ffff88810837f000 R14: dffffc0000000000 R15: ffff88810837f000
[  144.460271][T10173] FS:  00007f29e269b6c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  144.463225][T10173] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.465491][T10173] CR2: 00007f8cb1574980 CR3: 000000003b9dc000 CR4: 00000000000006f0
[  144.468075][T10173] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  144.470769][T10173] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  144.473409][T10173] Kernel panic - not syncing: Fatal exception in interrupt
[  144.476584][T10173] Kernel Offset: disabled
[  144.477991][T10173] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:13:18  Registers:
info registers vcpu 0

CPU#0
RAX=85fb747080be8800 RBX=ffffffff81974d58 RCX=85fb747080be8800 RDX=0000000000000001
RSI=ffffffff8be28d20 RDI=ffffffff81974d58 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66c4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c382c17 CR3=000000004741e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7c28a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b9205 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001739 RDI=000000000000173a RBP=ffffc90002aaea30 RSP=ffffc90002aae858
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff85474540
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff854745b7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f29e269b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8cb1574980 CR3=000000003b9dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffff00 ffff00ff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f29e24ed100 00007f29e1984440 XMM05=00007f29e1984458 00007f29e19844a0
XMM06=00007f29e1984498 00007f29e1984490 XMM07=00007f29e1984488 00007f29e1984480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f29e1811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
