last executing test programs:

1.985746099s ago: executing program 0 (id=4324):
r0 = socket$kcm(0x2, 0x3, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100001002"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x850)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a8c9684b73926e0f6728d7a04000", '\x00\x00=*', "1202000000040030"}, 0x38)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x37}}, 0x14)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000180)={0xfffffff9, 0xfffffffb, 0x6, 0x1}, 0x14)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000140)={'wlan0\x00', @local})
socket$can_raw(0x1d, 0x3, 0x1)

1.882910478s ago: executing program 0 (id=4325):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000740), 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18009fdb381f1e622f18cd1a9b83aad6b55ff5af55d5d2858f43ae500b5780a3ae50b49a942c050000000000ff000000000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x26}, 0x10)
r4 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r4, 0x2}, 0x20)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x42}, 0x8)
sendmsg$inet_sctp(r1, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1}], 0x1, 0x0, 0x0, 0x20000080}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

1.088635507s ago: executing program 1 (id=4341):
syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08060001080006040001aaaaaaaaaaaaac1414bb0180c2000000ffffffff6507a4"], 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000280)={0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, @random}]}) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={<r5=>0x0, @local, @local}, &(0x7f0000000040)=0xc)
socket$phonet(0x23, 0x2, 0x1) (async)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x79, r5})
r7 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async)
ioctl(r6, 0x8916, &(0x7f0000000000)) (async)
ioctl(r7, 0x8936, &(0x7f0000000000)) (async)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="1809858b7b5d663fc8a4ff31473eb440a9fa6d9d1508a2fb2278c0d9fd79db95599ec61565d47a14d9593b61fc621ac0a71aab4575bf28e357d84bdfa02201d5aba5d36c7f6a15264b760d08552dfab1fd9926cafcaf1dd7eb108d6cbb346bb1725d07496b30fcf782ea802af70b5f572db1a045d9d1a4af06"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0200001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000f9ffffff000000000000000000000000440105"], 0x26c}}, 0x0) (async)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x21000000}]}, @enum64={0x7, 0x1, 0x0, 0x13, 0x0, 0x4, [{0xa, 0x6, 0x5}]}]}}, 0x0, 0x4a}, 0x28) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x0, 0x703d30, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6, 0x9452283ea4d7f5d7}, {0xfff3, 0xc}, {0xfff3, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100127bd7000fcdbdf2501000000080001000100000008000100010000000800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10004194}, 0x4080)

1.002779175s ago: executing program 0 (id=4342):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33)

1.002502883s ago: executing program 1 (id=4343):
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4080)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000fc0)="c0", 0x9, 0x52, 0xb57, 0x8002, 0x9, 0x0, 0xd, 'syz1\x00'})

1.001741616s ago: executing program 0 (id=4344):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/mnt\x00') (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002e80)={{}, "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"}) (async)
ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000002e80)={{}, "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"})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r5, 0x2d322000) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r5, 0x2d322000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x88000100}, 0xc, &(0x7f0000000340)={&(0x7f00000010c0)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0x6d9173006b565571, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x300080c0}, 0x4080) (async)
sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f0000000380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x88000100}, 0xc, &(0x7f0000000340)={&(0x7f00000010c0)={0x14, 0x1, 0xa, 0x5, 0x0, 0x0, {0x6d9173006b565571, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x300080c0}, 0x4080)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r11, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (async)
getsockopt$bt_hci(r11, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x12a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r6}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2041, 0x0)

261.942464ms ago: executing program 2 (id=4357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4) (async)
setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000180)=0xbd0, 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d4", 0x7}], 0x1, 0x0, 0x30}}], 0x1, 0x4000084)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$rxrpc(r3, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r5, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000003e6894164cd43cd099ec57ad9b124b00"/41], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000240), &(0x7f0000000280)=@tcp, 0x3}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000002f109000100aaaaaaaaaaaaff0a1c0012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000002f109000100aaaaaaaaaaaaff0a1c0012800b00010065727370616e"], 0x48}, 0x1, 0x0, 0x0, 0x8005}, 0x0)

256.269ms ago: executing program 2 (id=4358):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
socket$l2tp(0x2, 0x2, 0x73)

192.914524ms ago: executing program 2 (id=4359):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0) (async, rerun: 64)
sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x6000810}, 0x0) (rerun: 64)

192.203197ms ago: executing program 2 (id=4360):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0xc51fa3115be71f4, 0x0) (async)
r2 = socket$unix(0x1, 0xc51fa3115be71f4, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_START_REQ(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd29, 0x20000, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0x301, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {0x3, 0xf}, {0x1, 0xfff3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0x301, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {0x3, 0xf}, {0x1, 0xfff3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

132.611463ms ago: executing program 1 (id=4361):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1f, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0)

132.008187ms ago: executing program 2 (id=4362):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
accept4(r0, 0x0, 0x0, 0x800)
accept(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0)

130.863505ms ago: executing program 2 (id=4363):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r5)
sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x50, r6, 0x1, 0x70bd27, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x48, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1955}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4040000)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000240)={@remote, @remote, @remote}, 0xc)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020002000000ffdbdf2510000000080009000101000008000600020000001400018008000100", @ANYRES32=r4, @ANYBLOB="0006000000000008000700050000000800090004000000"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x4005)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200))
socket$kcm(0x29, 0x0, 0x0)

130.234922ms ago: executing program 0 (id=4364):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0xf1c)
r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0xffffffffffffffff, 0x6c, 0x10}, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="1e000000030000000b0000000800000000020000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000200"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x25, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000084010000000000000500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000185a00000000000000000000000000001858000007000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ff08000000000000000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000050500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa402000000000007040000f0ffffffb7020000080000001823000099af97feb5e88c7c028546aecf39ccb9635b20ffdfa0c007dc71a93e7fe13a98f637a9a05cbd1e724486f1ef2ded092c02473e9b29825b638dc386d0b10f786c", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000950000000000000085000000060000009500000000000000"], &(0x7f0000001300)='GPL\x00', 0x8, 0x1b, &(0x7f0000001340)=""/27, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001800)={0x4, 0x0, 0x1, 0x1ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3], &(0x7f00000019c0)=[{0x3, 0x4, 0x1, 0x3}, {0x5, 0x4, 0x10, 0x8}, {0x3, 0x1, 0xb, 0x7}], 0x10, 0x2}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000ffffffffffffffff0095000000009d1f457300000044a012b94c44cc18284fb259f78f0ec0abe9e092ab3e777535aa8bbb37fea11981328c4a416f50ac25c3d7d9b593710bcf8acf2de457da938e1a6c17163109aaaa6ddc5170b3b4c44494365bed11f348a6b76c999b2fc0cb434e69e94d6af882e0eb30bc20e0f0f6029939f332fb654017adf0edb477b5c5b61c4e54306fb78d361746cd0b88a3fbc3c4d97a5b42d0fa3b792f8668b83ba530f846a0a36b5d4c3c8c2721561738e209010e53cbb5ee4d4f87b745fe10987e14a4a4"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000580)={0x0, @default, @bpq0, 0x4, 'syz0\x00', @bcast, 0x3, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @default]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000001180)='workqueue_execute_start\x00', r2, 0x0, 0x10080}, 0x18)
sendmsg$WG_CMD_GET_DEVICE(r4, 0x0, 0x20008000)
syz_emit_ethernet(0x74, &(0x7f0000001b00)={@random="9b0130ff0156", @empty, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@x25={0x805, {0x0, 0xff, 0x9, "ea54dca545577c4fe0c5070e5f32649069b3a3d6a85a106ff2d494f769801fd43baf239e23c154faf972f90f9555d9f3a1d13377d07f216bace77c91df0d0bc9ae1ab87a788795c785dfa71f2bf40f84c88805f1a3a0f11433155b5f4f1b6f"}}}}, &(0x7f0000001040)={0x0, 0x1, [0x972, 0x823, 0x17d, 0x272]})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001600010a4bbd7000fcdbdf25020000002ab30fb753ba0000"], 0x1c}}, 0x0)
sendmsg$netlink(r6, 0x0, 0x4000000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)

72.546644ms ago: executing program 1 (id=4365):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000feffffff850000002f0000001801000020a0642500000000002020207b1af8ff00000000bf0000000000000007010000f8ffffffb70200000800f9ffb7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000002080001400000000070000000180a01040000000000000000010000000900020073797a30090000000900010073797a3000000000"], 0xf8}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="233acba07f234ca73e61395994ab20e0be0a0b", 0x13, 0x10000000, &(0x7f00000001c0)={0xa, 0x4e22, 0x2d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r2 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x8, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800)
bind$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @local}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

67.482265ms ago: executing program 1 (id=4366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) (rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0xe3, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

61.231048ms ago: executing program 0 (id=4367):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}]}]}, 0x44}}, 0x4040810)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x84, 0x14, 0x10, 0x70bd25, 0x25dfdbff, {0xa, 0xc0, 0x16, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x612}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8}, @IFA_FLAGS={0x8, 0x8, 0x8}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_ADDRESS={0x14, 0x1, @private1}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x44000)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0), 0x8)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3abf, 0xf2, 0x3f, 0xda64}, {0x0, 0x10, 0x2, 0x6}]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94)

0s ago: executing program 1 (id=4368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x40)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x111, 0x4b4, 0x140, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffff00], 'vlan0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x88, 0x0, 0x0, 0x42}, 0x0, 0x120, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e22, 0x0, 0x0, 0x0, 0x100, 0x0, 0x4e23, 0xfffe]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0xffffff00], 'geneve1\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x5, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000001c0)={@broadcast, @empty, 0x0, "42a611090e13977200de16d23fe50e01d72658aa24d1930ba36f8a2f8c043ee9", 0x2, 0x8, 0x7fa, 0x1}, 0x3c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r8=>0x0})
r9 = socket$kcm(0x29, 0x0, 0x0)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000280)={r10})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf256300000008000300", @ANYRES32=r8, @ANYBLOB="4f8db1bd150205a87bcb4f7e24c5c2632e78b3b6ecc8137c55c8489247052a3f829d93b94d709f2a9e844a05154c3f3dc2f990f8db39e7c245cbf4e223a94e"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20000041)
close(r1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000400000000000000000005000038aa000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000100c0001400000000000000000140000001000010000000000000000000084000a"], 0xf0}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000f560400016b00802000000008000adb7a4f"], 0x14}, 0x1, 0x0, 0x0, 0x40400c5}, 0x11)
setsockopt(r11, 0xfffffffb, 0x8, &(0x7f00000004c0)="d38724a84a3d8ff0d2174e6db544115a96e580a90a390b49e04d05aa63f3b7a9dfb9b33896dcbdf69f57c6ed49b65039dbb3bf10d1fa6f8d894b42d2a821ab3e30c81eed4ca966", 0x47)

kernel console output (not intermixed with test programs):

arsing attributes in process `syz.1.2294'.
[  170.111094][T13676] lo speed is unknown, defaulting to 1000
[  170.147819][T13681] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2298'.
[  170.152702][T13681] netlink: 6932 bytes leftover after parsing attributes in process `syz.0.2298'.
[  170.156615][T13678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2299'.
[  170.191792][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  170.356748][T13693] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2302'.
[  170.557589][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2303'.
[  170.794526][T13713] netlink: 'syz.0.2308': attribute type 15 has an invalid length.
[  171.123060][T13719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.128260][T13719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.214388][T13730] netlink: 'syz.1.2312': attribute type 1 has an invalid length.
[  171.231857][T13730] 8021q: adding VLAN 0 to HW filter on device bond15
[  171.246096][T13730] bond15: (slave bridge13): making interface the new active one
[  171.249394][T13730] bond15: (slave bridge13): Enslaving as an active interface with an up link
[  171.258620][T13730] gretap0: entered promiscuous mode
[  171.263696][T13730] bond15: (slave gretap0): Enslaving as an active interface with an up link
[  171.274744][T13730] macvlan0: entered promiscuous mode
[  171.276525][T13730] macvlan0: entered allmulticast mode
[  171.278709][T13730] bond15: entered promiscuous mode
[  171.281783][T13730] bridge13: entered promiscuous mode
[  171.284050][T13730] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  171.286667][T13730] bond15: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  171.292054][T13730] bond15: left promiscuous mode
[  171.293801][T13730] bridge13: left promiscuous mode
[  171.468721][T13736] netlink: 'syz.1.2314': attribute type 13 has an invalid length.
[  171.493758][T13735] lo speed is unknown, defaulting to 1000
[  171.564702][T13734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.672189][T13744] netlink: 'syz.2.2316': attribute type 1 has an invalid length.
[  171.971196][T13782] lo speed is unknown, defaulting to 1000
[  171.975240][T13785] x_tables: duplicate underflow at hook 2
[  172.082456][T13789] GUP no longer grows the stack in syz.0.2329 (13789): 200000004000-200000008000 (200000002000)
[  172.089603][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.0.2329 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  172.089618][T13789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.089624][T13789] Call Trace:
[  172.089628][T13789]  <TASK>
[  172.089649][T13789]  dump_stack_lvl+0x189/0x250
[  172.089667][T13789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.089677][T13789]  ? __pfx__printk+0x10/0x10
[  172.089688][T13789]  ? find_vma+0xe7/0x160
[  172.089706][T13789]  __get_user_pages+0x2a60/0x30b0
[  172.089732][T13789]  ? __pfx___get_user_pages+0x10/0x10
[  172.089742][T13789]  ? __gup_longterm_locked+0x309/0x15b0
[  172.089752][T13789]  ? down_read_killable+0x1d1/0x350
[  172.089762][T13789]  ? try_get_folio+0x633/0x660
[  172.089774][T13789]  __gup_longterm_locked+0x3e3/0x15b0
[  172.089795][T13789]  gup_fast_fallback+0x1cd4/0x2260
[  172.089821][T13789]  ? __pfx_gup_fast_fallback+0x10/0x10
[  172.089833][T13789]  ? rcu_is_watching+0x15/0xb0
[  172.089845][T13789]  ? is_valid_gup_args+0x11f/0x200
[  172.089856][T13789]  ? pin_user_pages_fast+0x4d/0xb0
[  172.089867][T13789]  rds_cmsg_rdma_args+0x8f4/0x1240
[  172.089890][T13789]  rds_cmsg_send+0x33d/0x5c0
[  172.089906][T13789]  rds_sendmsg+0x1129/0x1f00
[  172.089925][T13789]  ? __pfx_rds_sendmsg+0x10/0x10
[  172.089934][T13789]  ? aa_sk_perm+0x81e/0x950
[  172.089949][T13789]  ? __pfx_aa_sk_perm+0x10/0x10
[  172.089961][T13789]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  172.089973][T13789]  ? aa_sock_msg_perm+0x94/0x160
[  172.089982][T13789]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  172.089992][T13789]  ? __pfx_rds_sendmsg+0x10/0x10
[  172.090004][T13789]  __sock_sendmsg+0x21c/0x270
[  172.090016][T13789]  ____sys_sendmsg+0x505/0x830
[  172.090031][T13789]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.090048][T13789]  ? import_iovec+0x74/0xa0
[  172.090061][T13789]  ___sys_sendmsg+0x21f/0x2a0
[  172.090074][T13789]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.090090][T13789]  ? futex_wait+0x285/0x360
[  172.090105][T13789]  ? __pfx_rds_bind+0x10/0x10
[  172.090116][T13789]  ? __might_fault+0xb0/0x130
[  172.090139][T13789]  __x64_sys_sendmsg+0x19b/0x260
[  172.090152][T13789]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.090170][T13789]  ? rcu_is_watching+0x15/0xb0
[  172.090181][T13789]  ? do_syscall_64+0xbe/0x3b0
[  172.090192][T13789]  do_syscall_64+0xfa/0x3b0
[  172.090200][T13789]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.090208][T13789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.090216][T13789]  ? exc_page_fault+0x9f/0xf0
[  172.090225][T13789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.090233][T13789] RIP: 0033:0x7f8a3d18e929
[  172.090242][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.090257][T13789] RSP: 002b:00007f8a3afd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.090267][T13789] RAX: ffffffffffffffda RBX: 00007f8a3d3b6080 RCX: 00007f8a3d18e929
[  172.090279][T13789] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 000000000000000c
[  172.090330][T13789] RBP: 00007f8a3d210ca1 R08: 0000000000000000 R09: 0000000000000000
[  172.090339][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.090349][T13789] R13: 0000000000000000 R14: 00007f8a3d3b6080 R15: 00007fff7c15adc8
[  172.090369][T13789]  </TASK>
[  173.144712][T13824] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  173.148661][T13824] x_tables: duplicate underflow at hook 2
[  173.879189][T13896] __nla_validate_parse: 18 callbacks suppressed
[  173.879201][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'.
[  173.885701][T13896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2363'.
[  173.888364][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'.
[  173.891185][T13896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2363'.
[  174.253302][T13906] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2365'.
[  174.253315][T13907] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2365'.
[  174.493181][T13912] bond_slave_0: entered allmulticast mode
[  174.587183][T13923] netlink: 'syz.1.2369': attribute type 11 has an invalid length.
[  174.590197][T13923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2369'.
[  174.698686][T13928] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2370'.
[  174.747162][T13930] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96
[  174.750656][T13930] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.761630][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'.
[  174.820715][T13940] ip_vti0: entered promiscuous mode
[  174.823779][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2371'.
[  174.890271][T13947] netlink: 'syz.2.2376': attribute type 11 has an invalid length.
[  175.169617][T13968] xt_TCPMSS: Only works on TCP SYN packets
[  175.581551][T13990] batman_adv: batadv0: Removing interface: ipvlan2
[  176.488928][T14008] 8021q: VLANs not supported on xfrm0
[  176.491025][T14008] netlink: 'syz.2.2396': attribute type 10 has an invalid length.
[  176.694015][T14030] lo speed is unknown, defaulting to 1000
[  177.579151][T14092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.035362][T14111] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  178.272460][T14128] xt_SECMARK: invalid mode: 0
[  178.319277][T14130] lo speed is unknown, defaulting to 1000
[  178.579595][T14134] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  178.708796][T14144] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  178.849533][T14147] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  178.859800][T14147] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  178.862777][T14147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  178.865297][T14147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  178.868203][T14147] geneve3: entered promiscuous mode
[  178.998464][T14152] netlink: 'syz.0.2438': attribute type 1 has an invalid length.
[  179.019781][T14152] 8021q: adding VLAN 0 to HW filter on device bond9
[  179.022434][T14161] __nla_validate_parse: 16 callbacks suppressed
[  179.022443][T14161] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2441'.
[  179.039108][T14151] bond9: (slave bridge6): making interface the new active one
[  179.043053][T14151] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  179.235896][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'.
[  179.318081][T14193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.522984][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2451'.
[  179.525851][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2451'.
[  179.546000][T14200] lo speed is unknown, defaulting to 1000
[  179.555984][   T33] audit: type=1800 audit(1752773233.794:9): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2449" name="cgroup.controllers" dev="tmpfs" ino=3986 res=0 errno=0
[  179.897397][T14217] nbd: must specify an index to disconnect
[  179.902720][T14215] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  179.909075][T14205] netlink: 'syz.2.2451': attribute type 6 has an invalid length.
[  179.998975][T14224] netlink: 'syz.0.2459': attribute type 12 has an invalid length.
[  180.208406][T14234] netlink: 'syz.0.2460': attribute type 9 has an invalid length.
[  180.215687][T14234] netlink: 'syz.0.2460': attribute type 6 has an invalid length.
[  180.218149][T14234] netlink: 'syz.0.2460': attribute type 7 has an invalid length.
[  180.221999][T14234] netlink: 'syz.0.2460': attribute type 8 has an invalid length.
[  180.273977][T14236] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  180.363174][T14243] netlink: 'syz.0.2463': attribute type 2 has an invalid length.
[  180.365815][T14243] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2463'.
[  180.372616][T14243] netlink: 'syz.0.2463': attribute type 2 has an invalid length.
[  180.382319][T14243] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2463'.
[  180.554753][T14254] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  180.567141][T14254] netlink: 'syz.0.2467': attribute type 1 has an invalid length.
[  180.597067][T14254] bond10: (slave bridge7): making interface the new active one
[  180.599819][T14254] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  181.422534][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'.
[  181.425488][T14284] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  181.427862][T14284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.432074][T14283] IPVS: length: 151 != 8
[  181.438396][T14284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.470056][T14282] tipc: Disabling bearer <eth:syzkaller0>
[  181.614708][T14294] bond11: entered promiscuous mode
[  181.616439][T14294] bond11: entered allmulticast mode
[  181.618245][T14294] 8021q: adding VLAN 0 to HW filter on device bond11
[  181.635867][T14297] bond12: entered promiscuous mode
[  181.637662][T14297] bond12: entered allmulticast mode
[  181.639513][T14297] 8021q: adding VLAN 0 to HW filter on device bond12
[  181.657341][T14292] veth9: entered promiscuous mode
[  181.700200][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.702747][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.005990][T14321] syzkaller1: entered promiscuous mode
[  182.007885][T14321] syzkaller1: entered allmulticast mode
[  182.124088][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'.
[  182.127100][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'.
[  182.182368][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'.
[  182.186698][T14336] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  182.224971][T14338] netlink: 'syz.1.2493': attribute type 2 has an invalid length.
[  182.228442][T14338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.311841][T14345] lo speed is unknown, defaulting to 1000
[  184.044197][T14446] lo speed is unknown, defaulting to 1000
[  184.112511][T14446] __nla_validate_parse: 8 callbacks suppressed
[  184.112527][T14446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2523'.
[  184.137238][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'.
[  184.233762][T14472] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  184.369374][T14494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2533'.
[  184.427308][T14503] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2535'.
[  184.630145][T14526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2540'.
[  184.634016][T14526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.696312][T14541] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  184.801092][T14553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2552'.
[  184.804372][T14553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.895604][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2555'.
[  184.907447][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'.
[  185.641858][T14590] netlink: 191664 bytes leftover after parsing attributes in process `syz.0.2565'.
[  185.646271][T14592] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  185.649478][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2566'.
[  185.881092][T14610] lo speed is unknown, defaulting to 1000
[  185.958110][T14619] validate_nla: 4 callbacks suppressed
[  185.958121][T14619] netlink: 'syz.1.2575': attribute type 4 has an invalid length.
[  187.037528][T14655] netlink: 'syz.1.2585': attribute type 83 has an invalid length.
[  187.316041][T14671] netlink: 'syz.1.2588': attribute type 1 has an invalid length.
[  187.547541][T14686] tap0: tun_chr_ioctl cmd 1074025676
[  187.554070][T14686] tap0: owner set to 0
[  187.567761][T14686] netlink: 'syz.1.2591': attribute type 21 has an invalid length.
[  187.570211][T14686] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  187.843352][T14704] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  188.021906][T14720] netlink: 'syz.0.2602': attribute type 1 has an invalid length.
[  188.024324][T14720] netlink: 'syz.0.2602': attribute type 1 has an invalid length.
[  188.066190][T14725] netlink: 'syz.2.2604': attribute type 1 has an invalid length.
[  188.232621][T14741] netlink: 'syz.0.2609': attribute type 1 has an invalid length.
[  188.739847][T14763] netlink: 'syz.0.2615': attribute type 3 has an invalid length.
[  188.787073][T14767] macsec0: entered promiscuous mode
[  188.789067][T14767] batadv0: entered promiscuous mode
[  188.806097][T14767] batadv0: left promiscuous mode
[  188.931555][T14776] syz.0.2619 uses old SIOCAX25GETINFO
[  188.963984][T14780] nbd: illegal input index 65508
[  189.054501][T14787] bond0: (slave team0): Enslaving as an active interface with a down link
[  189.088344][T14786] lo speed is unknown, defaulting to 1000
[  189.158668][T14793] __nla_validate_parse: 83 callbacks suppressed
[  189.158679][T14793] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.2625'.
[  189.522748][T14683] Set syz1 is full, maxelem 65536 reached
[  189.556363][T14801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2627'.
[  189.572907][T14801] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  190.053611][T14826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'.
[  190.158789][T14830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2635'.
[  190.162804][T14830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2635'.
[  190.241659][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2636'.
[  190.273727][T14836] IPVS: set_ctl: invalid protocol: 255 172.30.1.1:20001
[  190.276224][T14837] IPVS: set_ctl: invalid protocol: 255 172.30.1.1:20001
[  190.377112][T14841] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  190.380771][T14841] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  190.404605][T14848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2640'.
[  190.407370][T14848] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2640'.
[  190.412034][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'.
[  190.458649][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2638'.
[  190.776231][T14857] Cannot find set identified by id 3 to match
[  190.849365][T14863] 8021q: adding VLAN 0 to HW filter on device team0
[  190.854441][T14863] bond0: (slave team0): Enslaving as an active interface with an up link
[  190.857862][  T790] srz1: Port: 1 Link ACTIVE
[  191.330760][T14895] validate_nla: 9 callbacks suppressed
[  191.330770][T14895] netlink: 'syz.2.2652': attribute type 10 has an invalid length.
[  191.340005][T14895] 8021q: adding VLAN 0 to HW filter on device team0
[  191.346153][T14895] : (slave team0): Enslaving as an active interface with an up link
[  191.403869][T14901] bridge0: entered promiscuous mode
[  191.602679][T14911] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  191.943317][T14941] netlink: 'syz.0.2667': attribute type 2 has an invalid length.
[  191.977186][T14947] bridge2: entered allmulticast mode
[  192.028062][T14948] netlink: 'syz.0.2669': attribute type 21 has an invalid length.
[  192.030874][T14948] netlink: 'syz.0.2669': attribute type 22 has an invalid length.
[  192.033295][T14948] netlink: 'syz.0.2669': attribute type 23 has an invalid length.
[  192.035735][T14948] netlink: 'syz.0.2669': attribute type 25 has an invalid length.
[  192.087297][T14957] xt_hashlimit: size too large, truncated to 1048576
[  192.153761][T14955] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  192.213554][T14955] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  192.273189][T14955] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  192.373200][T14955] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  192.449123][T14955] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  192.458545][T14955] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  192.475257][T14955] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  192.483101][T14955] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  192.656513][T14984] bridge3: the hash_elasticity option has been deprecated and is always 16
[  192.659158][T14984] bridge3: entered allmulticast mode
[  192.939917][T15016] netlink: 'syz.2.2689': attribute type 1 has an invalid length.
[  193.048899][T15032] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  193.115791][T15034] netlink: zone id is out of range
[  193.117492][T15034] netlink: zone id is out of range
[  193.119170][T15034] netlink: zone id is out of range
[  193.121309][T15034] netlink: zone id is out of range
[  193.122924][T15034] netlink: zone id is out of range
[  193.124625][T15034] netlink: zone id is out of range
[  193.126342][T15034] netlink: zone id is out of range
[  193.127912][T15034] netlink: zone id is out of range
[  193.191708][T15038] lo speed is unknown, defaulting to 1000
[  193.624333][T15074] xt_hashlimit: size too large, truncated to 1048576
[  193.634340][T15074] syz.1.2706: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  193.639542][T15074] CPU: 1 UID: 0 PID: 15074 Comm: syz.1.2706 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  193.639555][T15074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  193.639561][T15074] Call Trace:
[  193.639565][T15074]  <TASK>
[  193.639569][T15074]  dump_stack_lvl+0x189/0x250
[  193.639585][T15074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.639595][T15074]  ? __pfx__printk+0x10/0x10
[  193.639607][T15074]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  193.639618][T15074]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  193.639630][T15074]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  193.639642][T15074]  warn_alloc+0x214/0x310
[  193.639653][T15074]  ? __pfx_warn_alloc+0x10/0x10
[  193.639665][T15074]  ? __get_vm_area_node+0x28f/0x300
[  193.639678][T15074]  ? htable_create+0xfc/0x7a0
[  193.639689][T15074]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  193.639715][T15074]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  193.639730][T15074]  ? rcu_is_watching+0x15/0xb0
[  193.639740][T15074]  ? htable_create+0xfc/0x7a0
[  193.639748][T15074]  ? htable_create+0xfc/0x7a0
[  193.639754][T15074]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  193.639767][T15074]  ? htable_create+0xfc/0x7a0
[  193.639773][T15074]  ? hashlimit_pernet+0x23/0x240
[  193.639784][T15074]  htable_create+0xfc/0x7a0
[  193.639795][T15074]  hashlimit_mt_check_common+0x719/0xa10
[  193.639808][T15074]  xt_check_match+0x3d1/0xab0
[  193.639820][T15074]  ? __pfx___mutex_lock+0x10/0x10
[  193.639832][T15074]  ? __pfx_xt_check_match+0x10/0x10
[  193.639845][T15074]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  193.639862][T15074]  ? xt_find_match+0x1f7/0x250
[  193.639877][T15074]  translate_table+0x1553/0x2040
[  193.639905][T15074]  ? __pfx_translate_table+0x10/0x10
[  193.639918][T15074]  ? __might_fault+0xb0/0x130
[  193.639939][T15074]  ? _copy_from_user+0x94/0xb0
[  193.639953][T15074]  do_ip6t_set_ctl+0x970/0xce0
[  193.639968][T15074]  ? rcu_is_watching+0x15/0xb0
[  193.639977][T15074]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  193.639998][T15074]  ? __pfx___mutex_lock+0x10/0x10
[  193.640007][T15074]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  193.640026][T15074]  ? __lock_acquire+0xab9/0xd20
[  193.640037][T15074]  nf_setsockopt+0x26f/0x290
[  193.640053][T15074]  rawv6_setsockopt+0x23b/0x5b0
[  193.640062][T15074]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  193.640070][T15074]  ? aa_sock_opt_perm+0x74/0x110
[  193.640080][T15074]  ? sock_common_setsockopt+0x36/0xc0
[  193.640091][T15074]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  193.640101][T15074]  do_sock_setsockopt+0x17c/0x1b0
[  193.640116][T15074]  __x64_sys_setsockopt+0x13f/0x1b0
[  193.640131][T15074]  do_syscall_64+0xfa/0x3b0
[  193.640140][T15074]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.640148][T15074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.640156][T15074]  ? exc_page_fault+0x9f/0xf0
[  193.640165][T15074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.640173][T15074] RIP: 0033:0x7fa883b8e929
[  193.640181][T15074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.640213][T15074] RSP: 002b:00007fa884924038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  193.640222][T15074] RAX: ffffffffffffffda RBX: 00007fa883db5fa0 RCX: 00007fa883b8e929
[  193.640228][T15074] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005
[  193.640234][T15074] RBP: 00007fa883c10ca1 R08: 0000000000000588 R09: 0000000000000000
[  193.640239][T15074] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  193.640244][T15074] R13: 0000000000000000 R14: 00007fa883db5fa0 R15: 00007ffd4c2610b8
[  193.640258][T15074]  </TASK>
[  193.640261][T15074] Mem-Info:
[  193.721207][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  193.722694][T15074] active_anon:8644 inactive_anon:0 isolated_anon:0
[  193.722694][T15074]  active_file:1187 inactive_file:38261 isolated_file:0
[  193.722694][T15074]  unevictable:1768 dirty:104 writeback:0
[  193.722694][T15074]  slab_reclaimable:10061 slab_unreclaimable:73184
[  193.722694][T15074]  mapped:21043 shmem:5302 pagetables:904
[  193.722694][T15074]  sec_pagetables:0 bounce:0
[  193.722694][T15074]  kernel_misc_reclaimable:0
[  193.722694][T15074]  free:271882 free_pcp:18142 free_cma:0
[  193.764698][T15074] Node 0 active_anon:24796kB inactive_anon:0kB active_file:3784kB inactive_file:135352kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52164kB dirty:260kB writeback:0kB shmem:15308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7024kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  193.774377][T15074] Node 1 active_anon:9780kB inactive_anon:0kB active_file:964kB inactive_file:17692kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32008kB dirty:156kB writeback:0kB shmem:5900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5528kB pagetables:1276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  193.783854][T15074] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  193.792385][T15074] lowmem_reserve[]: 0 812 812 812 812
[  193.794035][T15074] Node 0 DMA32 free:206428kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24796kB inactive_anon:0kB active_file:3784kB inactive_file:135352kB unevictable:3536kB writepending:260kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:29344kB local_pcp:17568kB free_cma:0kB
[  193.803501][T15074] lowmem_reserve[]: 0 0 0 0 0
[  193.804970][T15074] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  193.813832][T15074] lowmem_reserve[]: 0 0 854 854 854
[  193.815476][T15074] Node 1 Normal free:407124kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9780kB inactive_anon:0kB active_file:964kB inactive_file:17692kB unevictable:3536kB writepending:156kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:43188kB local_pcp:23952kB free_cma:0kB
[  193.824996][T15074] lowmem_reserve[]: 0 0 0 0 0
[  193.826497][T15074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  193.830454][T15074] Node 0 DMA32: 587*4kB (UME) 108*8kB (ME) 448*16kB (UME) 383*32kB (UME) 235*64kB (UME) 102*128kB (UME) 44*256kB (UME) 20*512kB (UM) 15*1024kB (UME) 2*2048kB (M) 28*4096kB (UM) = 206380kB
[  193.836049][T15074] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  193.840778][T15074] Node 1 Normal: 1191*4kB (UM) 891*8kB (UME) 416*16kB (UM) 83*32kB (UME) 92*64kB (UME) 63*128kB (UME) 43*256kB (UM) 15*512kB (UME) 7*1024kB (UM) 1*2048kB (U) 84*4096kB (UM) = 407124kB
[  193.846132][T15074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  193.848823][T15074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  193.851738][T15074] 44750 total pagecache pages
[  193.853215][T15074] 0 pages in swap cache
[  193.854489][T15074] Free swap  = 124996kB
[  193.855710][T15074] Total swap = 124996kB
[  193.856968][T15074] 786301 pages RAM
[  193.858415][T15074] 0 pages HighMem/MovableOnly
[  193.867061][T15074] 241056 pages reserved
[  193.868390][T15074] 0 pages cma reserved
[  194.218868][T15098] sctp: [Deprecated]: syz.0.2712 (pid 15098) Use of int in max_burst socket option deprecated.
[  194.218868][T15098] Use struct sctp_assoc_value instead
[  194.397966][T15106] lo speed is unknown, defaulting to 1000
[  194.984735][T15125] __nla_validate_parse: 16 callbacks suppressed
[  194.984746][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'.
[  194.989522][T15125] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  195.143917][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'.
[  195.160191][T15130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'.
[  195.164848][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2720'.
[  195.207956][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'.
[  195.211185][T15132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2721'.
[  195.214051][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2721'.
[  195.217832][T15132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2721'.
[  195.271007][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'.
[  195.336782][T15148] netlink: 'syz.2.2728': attribute type 16 has an invalid length.
[  195.339176][T15148] netlink: 'syz.2.2728': attribute type 3 has an invalid length.
[  195.351498][T15148] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2728'.
[  195.499127][T15169] pim6reg1: entered promiscuous mode
[  195.500895][T15169] pim6reg1: entered allmulticast mode
[  195.598612][T15182] netlink: 'syz.2.2737': attribute type 5 has an invalid length.
[  195.672264][T15190] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  196.717701][T15230] validate_nla: 1 callbacks suppressed
[  196.717711][T15230] netlink: 'syz.1.2753': attribute type 1 has an invalid length.
[  196.856134][T15252] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.858483][T15252] syzkaller0: entered promiscuous mode
[  196.860150][T15252] syzkaller0: entered allmulticast mode
[  196.873602][T15252] tipc: Resetting bearer <eth:syzkaller0>
[  196.877245][T15251] tipc: Resetting bearer <eth:syzkaller0>
[  196.881316][T15255] net_ratelimit: 3 callbacks suppressed
[  196.881521][T15255] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  196.889676][T15255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.892978][T15251] tipc: Disabling bearer <eth:syzkaller0>
[  197.075195][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.275115][T15313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.303552][T15312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  197.307314][T15312] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  197.307342][T15306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  197.369144][T15319] syzkaller1: entered promiscuous mode
[  197.371697][T15319] syzkaller1: entered allmulticast mode
[  197.437275][T15330] netlink: 'syz.0.2779': attribute type 1 has an invalid length.
[  197.547548][T15339] syzkaller0: entered promiscuous mode
[  197.549297][T15339] syzkaller0: entered allmulticast mode
[  197.555334][T15343] netlink: 'syz.2.2782': attribute type 1 has an invalid length.
[  198.518416][T15362] netlink: 'syz.0.2787': attribute type 12 has an invalid length.
[  198.785315][T15386] netlink: 'syz.1.2793': attribute type 16 has an invalid length.
[  198.787722][T15386] netlink: 'syz.1.2793': attribute type 3 has an invalid length.
[  198.961298][T15406] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  198.964255][ T7952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.966614][ T7952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.794281][T15415] 8021q: adding VLAN 0 to HW filter on device bond13
[  199.816469][T15415] macvlan1: entered promiscuous mode
[  199.818106][T15415] macvlan1: entered allmulticast mode
[  199.822646][T15415] bond13: entered promiscuous mode
[  199.826422][T15415] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  199.832992][T15415] bond13: left promiscuous mode
[  201.040937][T15473] __nla_validate_parse: 25 callbacks suppressed
[  201.040948][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2818'.
[  201.045688][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'.
[  201.048385][T15473] netlink: 'syz.1.2818': attribute type 13 has an invalid length.
[  201.053536][T15473] netlink: 'syz.1.2818': attribute type 12 has an invalid length.
[  201.106779][T15480] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  201.109519][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'.
[  201.121378][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2819'.
[  201.127213][T15481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  201.129864][T15481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  201.135432][T15481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  201.138742][T15481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  201.279202][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'.
[  201.538812][T15529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2836'.
[  201.551322][T15528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2836'.
[  201.672729][T15549] netlink: 'syz.0.2841': attribute type 83 has an invalid length.
[  201.691556][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'.
[  201.695893][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'.
[  201.737443][T15557] netlink: 'syz.2.2844': attribute type 3 has an invalid length.
[  201.747332][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2844'.
[  201.782554][T15561] netlink: 'syz.2.2845': attribute type 1 has an invalid length.
[  201.790599][T15561] xt_policy: too many policy elements
[  201.941421][T15579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.944162][T15579] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  201.946720][T15579] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  201.965975][T15579] tipc: Resetting bearer <eth:syzkaller0>
[  202.027537][T15587] xt_l2tp: wrong L2TP version: 0
[  202.063326][T15597] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  202.068470][T15597] netlink: 'syz.1.2857': attribute type 2 has an invalid length.
[  202.135867][T15606] tun0: tun_chr_ioctl cmd 2147767507
[  202.148310][T15603] netlink: 'syz.1.2859': attribute type 1 has an invalid length.
[  202.151133][T15603] netlink: 'syz.1.2859': attribute type 2 has an invalid length.
[  202.639477][T15653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  202.892406][T15697] IPVS: Unknown mcast interface: vcan0
[  202.970480][ T5877] tipc: Node number set to 2886997007
[  202.990107][T15705] netlink: 'syz.1.2892': attribute type 7 has an invalid length.
[  202.993155][T15705] netlink: 'syz.1.2892': attribute type 8 has an invalid length.
[  203.081538][T15720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.102964][T15721] tipc: Disabling bearer <eth:syzkaller0>
[  203.315856][T15731] syzkaller0: entered allmulticast mode
[  203.397779][T15733] openvswitch: netlink: IP tunnel dst address not specified
[  203.406175][T15733] bridge15: entered allmulticast mode
[  204.503386][T15766] lo speed is unknown, defaulting to 1000
[  204.862760][T15786] netlink: 'syz.0.2917': attribute type 5 has an invalid length.
[  204.865311][T15786] netlink: 'syz.0.2917': attribute type 5 has an invalid length.
[  205.167257][T15806] Cannot find del_set index 0 as target
[  205.197268][T15807] delete_channel: no stack
[  205.558222][T15839] tun0: tun_chr_ioctl cmd 35108
[  205.765822][T15860] bond0: entered promiscuous mode
[  205.767648][T15860] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.787876][T15860] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.790135][T15860] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[  205.803056][T15860] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  205.816395][T15860] bond0: (slave vcan1): making interface the new active one
[  205.821028][T15860] vcan1: entered promiscuous mode
[  205.824817][T15860] bond0: (slave vcan1): Enslaving as an active interface with an up link
[  206.025721][T15872] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  206.463558][T15934] ieee802154 phy1 wpan1: encryption failed: -22
[  206.639430][T15957] __nla_validate_parse: 29 callbacks suppressed
[  206.639440][T15957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2966'.
[  206.737908][T15972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'.
[  206.797100][T15972] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2968'.
[  206.825127][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'.
[  206.864151][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'.
[  206.870665][T15986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2970'.
[  206.876876][T15982] ip6erspan0: entered allmulticast mode
[  206.942776][T15997] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2975'.
[  206.942838][T15995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2974'.
[  207.139122][T16004] lo speed is unknown, defaulting to 1000
[  207.234645][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2979'.
[  207.388739][T16018] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.2982'.
[  207.432612][T16020] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3)
[  207.464413][T16025] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  207.472427][T16026] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  207.638802][T16042] bridge: RTM_NEWNEIGH with invalid ether address
[  207.743076][T16056] xt_CT: No such helper "snmp"
[  207.763375][T16057] xt_CT: No such helper "snmp"
[  207.819574][T16063] tun0: tun_chr_ioctl cmd 2147767520
[  207.973230][T16080] lo speed is unknown, defaulting to 1000
[  208.107068][T16080] validate_nla: 2 callbacks suppressed
[  208.107080][T16080] netlink: 'syz.1.2999': attribute type 16 has an invalid length.
[  208.111449][T16080] netlink: 'syz.1.2999': attribute type 3 has an invalid length.
[  208.713468][T16090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.773795][T16089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.778429][T16095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  208.828646][T16090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.024947][T16108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.027464][T16108] syzkaller0: entered promiscuous mode
[  209.029132][T16108] syzkaller0: entered allmulticast mode
[  209.042146][T16108] tipc: Resetting bearer <eth:syzkaller0>
[  209.268981][T16129] netlink: 'syz.0.3013': attribute type 2 has an invalid length.
[  209.290281][T16129] : entered promiscuous mode
[  209.496901][T16141] lo speed is unknown, defaulting to 1000
[  209.659080][T16156] --map-set only usable from mangle table
[  209.727902][T16161] netlink: 'syz.0.3023': attribute type 1 has an invalid length.
[  209.737689][T16160] netlink: 'syz.0.3023': attribute type 1 has an invalid length.
[  209.844592][T16169] lo speed is unknown, defaulting to 1000
[  209.974248][T16179] x_tables: duplicate underflow at hook 1
[  210.437178][T16151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.906399][T16215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.004784][T16224] netlink: 'syz.1.3039': attribute type 83 has an invalid length.
[  211.105700][T16236] lo speed is unknown, defaulting to 1000
[  211.888716][T16255] __nla_validate_parse: 24 callbacks suppressed
[  211.888731][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'.
[  211.915657][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3049'.
[  211.918710][T16258] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3049'.
[  211.979246][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3050'.
[  212.058033][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'.
[  212.060885][T16267] openvswitch: netlink: Missing key (keys=40, expected=100)
[  212.065710][T16267] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3053'.
[  212.090005][T16273] syzkaller0: entered promiscuous mode
[  212.092267][T16273] syzkaller0: entered allmulticast mode
[  212.098811][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3055'.
[  213.208185][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3063'.
[  213.226557][T16305] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3064'.
[  213.379515][T16311] netlink: 'syz.0.3065': attribute type 13 has an invalid length.
[  213.382777][T16311] netlink: 'syz.0.3065': attribute type 17 has an invalid length.
[  213.397152][T16311] erspan0: left allmulticast mode
[  213.425463][T16311] bridge0: left promiscuous mode
[  213.429107][T16311] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.515830][T16311] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  213.520833][   T47] lo speed is unknown, defaulting to 1000
[  213.523218][   T47] syz1: Port: 1 Link ACTIVE
[  213.528370][T16327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3068'.
[  213.559048][T16319] lo speed is unknown, defaulting to 1000
[  213.937492][T16372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.078230][T16380] pimreg: entered allmulticast mode
[  214.088429][T16380] dvmrp0: left allmulticast mode
[  214.090168][T16380] pimreg: left allmulticast mode
[  214.092120][T16380] dvmrp8: left allmulticast mode
[  214.198911][T16385] netlink: 'syz.1.3084': attribute type 1 has an invalid length.
[  214.227181][T16385] bond17: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  214.241504][T16385] veth15: entered promiscuous mode
[  214.245246][T16385] bond17: (slave veth15): Enslaving as a backup interface with a down link
[  214.249916][T16385] bond9: (slave erspan0): Releasing active interface
[  214.259424][T16385] bond0: (slave team0): Releasing backup interface
[  214.266522][T16385] bond9: (slave veth9): Releasing active interface
[  214.269893][T16385] bond10: (slave bond11): Releasing backup interface
[  214.275401][T16385] bond10: (slave bond11): the permanent HWaddr of slave - de:ba:f3:07:ae:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  214.282595][T16385] bond10: (slave gretap1): making interface the new active one
[  214.286157][T16385] bond10: (slave gretap1): Releasing backup interface
[  214.289402][T16385] bond14: (slave bridge12): Releasing backup interface
[  214.295517][T16385] bond15: (slave bridge13): Releasing active interface
[  214.297678][T16385] bond15: (slave bridge13): the permanent HWaddr of slave - 2a:da:17:9f:82:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  214.303151][T16385] bond15: (slave gretap0): making interface the new active one
[  214.308678][T16385] bond15: (slave gretap0): Releasing active interface
[  214.315870][T16385] bond17: (slave ip6gretap1): Releasing backup interface
[  214.318020][T16385] bond17: (slave ip6gretap1): the permanent HWaddr of slave - 3a:11:77:c9:e6:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  214.326837][T16385] bond17: (slave veth15): Releasing backup interface
[  214.333711][   T47] srz1: Port: 1 Link DOWN
[  214.581896][T16403] netlink: 'syz.1.3089': attribute type 5 has an invalid length.
[  214.587768][T16403] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  214.590274][T16403] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  214.595856][T16403] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  214.598382][T16403] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  214.601318][T16403] geneve4: entered promiscuous mode
[  214.602974][T16403] geneve4: entered allmulticast mode
[  214.903341][T16433] syzkaller1: entered promiscuous mode
[  214.905238][T16433] syzkaller1: entered allmulticast mode
[  214.952410][T16436] sctp: [Deprecated]: syz.1.3099 (pid 16436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.952410][T16436] Use struct sctp_sack_info instead
[  214.957622][T16440] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  214.959958][T16440] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  215.811424][T16460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.814784][T16460] SET target dimension over the limit!
[  215.883730][T16466] netlink: 'syz.0.3109': attribute type 2 has an invalid length.
[  216.077492][T16490] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  216.099531][T16490] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  216.102834][T16491] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  216.432315][T16500] : (slave team0): Releasing backup interface
[  216.436267][T16500] bond0: (slave vcan1): Releasing backup interface
[  216.438377][T16500] vcan1: left promiscuous mode
[  216.755582][T16502] netlink: 'syz.1.3119': attribute type 1 has an invalid length.
[  216.997949][T16514] __nla_validate_parse: 11 callbacks suppressed
[  216.997959][T16514] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3122'.
[  217.207851][T16534] syzkaller0: entered promiscuous mode
[  217.209621][T16534] syzkaller0: entered allmulticast mode
[  217.304404][T16548] x_tables: duplicate underflow at hook 3
[  218.238382][T16546] IPVS: Error connecting to the multicast addr
[  218.582416][T16579] netlink: 'syz.0.3140': attribute type 21 has an invalid length.
[  218.593049][T16580] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3139'.
[  218.647147][T16582] netlink: del zone limit has 8 unknown bytes
[  219.070457][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  219.754527][T16624] netlink: 'syz.0.3151': attribute type 30 has an invalid length.
[  219.802598][T16629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3152'.
[  220.048738][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'.
[  220.125943][T16649] netdevsim netdevsim2: Direct firmware load for .
[  220.125943][T16649]  failed with error -2
[  220.131209][T16649] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  220.131209][T16649] 
[  220.173600][T16654] netlink: 'syz.1.3162': attribute type 3 has an invalid length.
[  220.235031][T16663] syzkaller0: entered promiscuous mode
[  220.236758][T16663] syzkaller0: entered allmulticast mode
[  220.245558][T16665] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3165'.
[  220.294457][T16670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3164'.
[  220.363438][T16678] openvswitch: netlink: IP tunnel dst address not specified
[  220.812452][T16702] netlink: 'syz.0.3175': attribute type 1 has an invalid length.
[  220.814953][T16702] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3175'.
[  220.914209][T16707] netlink: 'syz.0.3176': attribute type 1 has an invalid length.
[  220.929700][T16707] 8021q: adding VLAN 0 to HW filter on device bond15
[  220.935181][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3176'.
[  220.946015][T16707] bond15: (slave bridge9): making interface the new active one
[  220.949263][T16707] bond15: (slave bridge9): Enslaving as an active interface with an up link
[  220.954166][T16707] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3176'.
[  220.993916][T16712] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3177'.
[  221.006926][T16715] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  221.237652][T16733] openvswitch: netlink: Duplicate or invalid key (type 0).
[  221.239857][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.103192][T16735] netlink: 'syz.2.3184': attribute type 3 has an invalid length.
[  222.110442][T16736] netlink: 'syz.2.3184': attribute type 3 has an invalid length.
[  222.199097][T16750] sctp: [Deprecated]: syz.1.3188 (pid 16750) Use of int in max_burst socket option deprecated.
[  222.199097][T16750] Use struct sctp_assoc_value instead
[  222.295761][T16760] __nla_validate_parse: 3 callbacks suppressed
[  222.295771][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'.
[  222.346891][T16765] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3192'.
[  222.375969][T16772] xt_TCPMSS: Only works on TCP SYN packets
[  222.445114][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.457506][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.460798][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.463842][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.466686][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.469595][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.472713][T16778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3197'.
[  222.475589][T16780] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3198'.
[  222.479233][T16778] pim6reg1: entered promiscuous mode
[  222.482122][T16778] pim6reg1: entered allmulticast mode
[  222.538848][T16782] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  222.542608][T16777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.545690][T16782] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  223.064739][T16809] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  223.067300][T16809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.102115][T16811] tc_dump_action: action bad kind
[  223.165605][T16817] netem: unknown loss type 13
[  223.167256][T16817] netem: change failed
[  223.961873][T16826] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  224.118459][T16837] netlink: 'syz.0.3214': attribute type 5 has an invalid length.
[  224.124838][T16837] bridge0: entered promiscuous mode
[  224.292113][T16859] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  224.923471][T16884] bridge16: entered allmulticast mode
[  225.099302][T16891] bond19: entered allmulticast mode
[  225.225967][T16900] 8021q: adding VLAN 0 to HW filter on device bond20
[  225.490590][T16933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.493465][T16933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.496287][T16933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.529249][T16942] SET target dimension over the limit!
[  225.657719][T16960] netlink: 'syz.1.3251': attribute type 16 has an invalid length.
[  225.839745][T16975] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  226.016983][T16988] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  226.494866][T17010] IPv6: Can't replace route, no match found
[  226.803502][T17011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.980766][T17025] netlink: 'syz.0.3272': attribute type 5 has an invalid length.
[  226.986698][T17025] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.989217][T17025] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.991859][T17025] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.994317][T17025] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.142747][T17041] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  227.145725][T17041] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  227.377618][T17068] __nla_validate_parse: 22 callbacks suppressed
[  227.377630][T17068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3283'.
[  227.569046][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3291'.
[  227.670099][T17104] nbd: couldn't find device at index 536870912
[  227.725603][T17110] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3295'.
[  227.897642][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'.
[  227.917336][T17133] netlink: 'syz.1.3301': attribute type 11 has an invalid length.
[  227.922316][T17133] netlink: 'syz.1.3301': attribute type 11 has an invalid length.
[  227.925257][T17133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3301'.
[  228.133908][T17157] netlink: 'syz.2.3310': attribute type 3 has an invalid length.
[  228.136800][T17157] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3310'.
[  228.189273][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3313'.
[  228.429458][T17187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3317'.
[  228.627494][T17191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3319'.
[  228.686875][T17195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3321'.
[  228.883346][T17211] netlink: 'syz.1.3325': attribute type 21 has an invalid length.
[  228.885809][T17211] IPv6: NLM_F_CREATE should be specified when creating new route
[  228.888240][T17211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.890597][T17211] IPv6: NLM_F_CREATE should be set when creating new route
[  228.892792][T17211] IPv6: NLM_F_CREATE should be set when creating new route
[  228.894919][T17211] IPv6: NLM_F_CREATE should be set when creating new route
[  229.995219][T17232] openvswitch: netlink: Key type 251 is out of range max 32
[  230.064909][T17242] sctp: [Deprecated]: syz.1.3332 (pid 17242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.064909][T17242] Use struct sctp_sack_info instead
[  230.635175][T17283] block nbd0: must specify backend
[  230.706731][T17285] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  230.710814][T17285] CPU: 0 UID: 0 PID: 17285 Comm: syz.0.3347 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  230.710830][T17285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.710836][T17285] Call Trace:
[  230.710840][T17285]  <TASK>
[  230.710845][T17285]  dump_stack_lvl+0x189/0x250
[  230.710862][T17285]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.710872][T17285]  ? __pfx__printk+0x10/0x10
[  230.710884][T17285]  ? kernfs_path_from_node+0x2c/0x260
[  230.710894][T17285]  ? kernfs_path_from_node+0x2c/0x260
[  230.710901][T17285]  ? kernfs_path_from_node+0x2c/0x260
[  230.710910][T17285]  ? kernfs_path_from_node+0x22c/0x260
[  230.710917][T17285]  ? kernfs_path_from_node+0x2c/0x260
[  230.710926][T17285]  sysfs_warn_dup+0x8e/0xa0
[  230.710939][T17285]  sysfs_do_create_link_sd+0xc0/0x110
[  230.710948][T17285]  device_add_class_symlinks+0x1cf/0x240
[  230.710962][T17285]  device_add+0x475/0xb50
[  230.710976][T17285]  wiphy_register+0x199a/0x26b0
[  230.710996][T17285]  ? __pfx_wiphy_register+0x10/0x10
[  230.711005][T17285]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  230.711021][T17285]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  230.711036][T17285]  ieee80211_register_hw+0x33e1/0x4120
[  230.711058][T17285]  ? ieee80211_register_hw+0x14c1/0x4120
[  230.711073][T17285]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  230.711087][T17285]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.711104][T17285]  ? __hrtimer_setup+0x187/0x210
[  230.711113][T17285]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  230.711129][T17285]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  230.711155][T17285]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  230.711166][T17285]  ? trace_kmalloc+0x1f/0xd0
[  230.711176][T17285]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  230.711188][T17285]  ? kstrndup+0xbf/0x160
[  230.711201][T17285]  hwsim_new_radio_nl+0xea4/0x1b10
[  230.711214][T17285]  ? __pfx___nla_validate_parse+0x10/0x10
[  230.711231][T17285]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  230.711248][T17285]  ? __nla_parse+0x40/0x60
[  230.711269][T17285]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  230.711284][T17285]  genl_family_rcv_msg_doit+0x215/0x300
[  230.711298][T17285]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  230.711314][T17285]  ? bpf_lsm_capable+0x9/0x20
[  230.711325][T17285]  ? security_capable+0x7e/0x2e0
[  230.711338][T17285]  genl_rcv_msg+0x60e/0x790
[  230.711349][T17285]  ? __pfx_genl_rcv_msg+0x10/0x10
[  230.711357][T17285]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  230.711376][T17285]  netlink_rcv_skb+0x208/0x470
[  230.711387][T17285]  ? __pfx_genl_rcv_msg+0x10/0x10
[  230.711396][T17285]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  230.711416][T17285]  ? down_read+0x1ad/0x2e0
[  230.711426][T17285]  genl_rcv+0x28/0x40
[  230.711434][T17285]  netlink_unicast+0x75c/0x8e0
[  230.711450][T17285]  netlink_sendmsg+0x805/0xb30
[  230.711466][T17285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.711479][T17285]  ? aa_sock_msg_perm+0x94/0x160
[  230.711489][T17285]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  230.711497][T17285]  ? __pfx_netlink_sendmsg+0x10/0x10
[  230.711510][T17285]  __sock_sendmsg+0x21c/0x270
[  230.711523][T17285]  ____sys_sendmsg+0x505/0x830
[  230.711538][T17285]  ? __pfx_____sys_sendmsg+0x10/0x10
[  230.711555][T17285]  ? import_iovec+0x74/0xa0
[  230.711607][T17285]  ___sys_sendmsg+0x21f/0x2a0
[  230.711622][T17285]  ? __pfx____sys_sendmsg+0x10/0x10
[  230.711654][T17285]  ? __fget_files+0x2a/0x420
[  230.711662][T17285]  ? __fget_files+0x3a0/0x420
[  230.711675][T17285]  __x64_sys_sendmsg+0x19b/0x260
[  230.711690][T17285]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  230.711709][T17285]  ? rcu_is_watching+0x15/0xb0
[  230.711721][T17285]  ? do_syscall_64+0xbe/0x3b0
[  230.711732][T17285]  do_syscall_64+0xfa/0x3b0
[  230.711741][T17285]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.711748][T17285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.711757][T17285]  ? exc_page_fault+0x9f/0xf0
[  230.711766][T17285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.711774][T17285] RIP: 0033:0x7f8a3d18e929
[  230.711783][T17285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.711790][T17285] RSP: 002b:00007f8a3aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  230.711800][T17285] RAX: ffffffffffffffda RBX: 00007f8a3d3b5fa0 RCX: 00007f8a3d18e929
[  230.711807][T17285] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  230.711812][T17285] RBP: 00007f8a3d210ca1 R08: 0000000000000000 R09: 0000000000000000
[  230.711818][T17285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.711823][T17285] R13: 0000000000000000 R14: 00007f8a3d3b5fa0 R15: 00007fff7c15adc8
[  230.711836][T17285]  </TASK>
[  230.953067][T17298] netlink: 'syz.0.3351': attribute type 1 has an invalid length.
[  231.003330][T17303] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.056895][T17306] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  231.061989][T17305] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  231.128586][T17311] lo speed is unknown, defaulting to 1000
[  231.203191][T17311] bridge0: port 1(macvlan1) entered blocking state
[  231.205407][T17311] bridge0: port 1(macvlan1) entered disabled state
[  231.207622][T17311] macvlan1: entered allmulticast mode
[  231.209223][T17311] bridge0: entered allmulticast mode
[  231.213307][T17311] macvlan1: left allmulticast mode
[  231.214933][T17311] bridge0: left allmulticast mode
[  231.322892][T17316] IPVS: Unknown mcast interface: vlan0
[  231.384906][T17319] lo speed is unknown, defaulting to 1000
[  231.776265][T17338] tipc: Failed to remove unknown binding: 66,1,1/2886997007:737383085/737383087
[  232.549130][T17354] bond16: entered promiscuous mode
[  232.638201][T17364] __nla_validate_parse: 9 callbacks suppressed
[  232.638211][T17364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'.
[  232.643585][T17364] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  232.726963][T17369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3373'.
[  232.795432][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'.
[  232.906426][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3382'.
[  232.909216][T17399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3382'.
[  232.935194][T17401] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3383'.
[  232.978622][T17405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3385'.
[  233.009979][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'.
[  233.122947][T17415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3388'.
[  233.164821][T17421] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3390'.
[  233.223106][T17429] netlink: 'syz.0.3393': attribute type 5 has an invalid length.
[  233.229186][T17429] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  233.232819][T17429] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  233.235401][T17429] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  233.238133][T17429] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  233.240951][T17429] geneve3: entered promiscuous mode
[  233.242689][T17429] geneve3: entered allmulticast mode
[  233.270053][T17434] netlink: 'syz.0.3395': attribute type 1 has an invalid length.
[  233.363736][T17446] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  233.379188][T17448] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  233.426667][T17449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  233.429574][T17449] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  233.483016][T17457] netlink: 'syz.0.3400': attribute type 17 has an invalid length.
[  233.524760][T17460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.530288][T17462] netlink: 'syz.2.3402': attribute type 1 has an invalid length.
[  233.852543][T17502] x_tables: duplicate underflow at hook 2
[  233.854972][T17504] 0X: renamed from gretap0
[  233.857874][T17504] 0X: entered allmulticast mode
[  233.860214][T17504] A link change request failed with some changes committed already. Interface 30X may have been left with an inconsistent configuration, please check.
[  233.935737][T17506] syzkaller1: entered promiscuous mode
[  233.937702][T17506] syzkaller1: entered allmulticast mode
[  234.000218][T17504] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  234.334483][T17528] atomic_op ffff888119ec9998 conn xmit_atomic 0000000000000000
[  234.348737][T17533] netlink: 'syz.0.3423': attribute type 3 has an invalid length.
[  234.708359][T17583] x_tables: duplicate underflow at hook 1
[  234.955898][T17599] x_tables: duplicate entry at hook 2
[  235.061882][T17612] team0: Device is already in use.
[  235.231635][T17625] smc: net device bond0 erased user defined pnetid S
[  235.344325][T17632] syzkaller1: entered promiscuous mode
[  235.346057][T17632] syzkaller1: entered allmulticast mode
[  235.349240][T17631] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  235.727241][T17657] ip6t_srh: unknown srh invflags 4449
[  235.906312][T17680] sock: sock_set_timeout: `syz.2.3467' (pid 17680) tries to set negative timeout
[  236.196600][T17709] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  236.200942][T17709] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  236.243671][T17709] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  236.247516][T17709] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  236.294098][T17709] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  236.297247][T17709] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  236.334408][T17709] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  236.337532][T17709] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  236.416416][T17709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  236.419073][T17709] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  236.427762][T17709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  236.430704][T17709] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  236.438370][T17709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  236.442009][T17709] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  236.449876][T17709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  236.452716][T17709] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  236.534827][T17724] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  236.573093][T17731] tun0: tun_chr_ioctl cmd 1074025677
[  236.574924][T17731] tun0: linktype set to 768
[  236.985161][T17772] netlink: 'syz.0.3495': attribute type 5 has an invalid length.
[  237.142689][T17784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.174188][T17797] Can't find ip_set type haDٮ~ort
[  237.196916][T17784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.254818][T17807] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  237.262925][T17807] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  237.819590][T17835] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.824117][T17835] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  237.871350][T17835] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.874394][T17835] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  237.886624][T17842] __nla_validate_parse: 80 callbacks suppressed
[  237.886633][T17842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3514'.
[  237.924525][T17835] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.932329][T17835] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  237.966527][T17859] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3519'.
[  237.969393][T17859] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3519'.
[  237.974472][T17859] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3519'.
[  237.986151][T17835] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.989280][T17835] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  238.016013][T17864] netlink: 'syz.1.3520': attribute type 11 has an invalid length.
[  238.018466][T17864] netlink: 'syz.1.3520': attribute type 4 has an invalid length.
[  238.027377][T17864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3520'.
[  238.036998][T17835] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.051794][T17835] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  238.063993][T17835] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.069243][T17835] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  238.085512][T17835] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.089508][T17835] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  238.102132][T17835] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.104651][T17835] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  238.242196][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3528'.
[  238.245080][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3528'.
[  238.259523][T17895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3529'.
[  238.264621][T17880] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3525'.
[  238.268693][T17880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3525'.
[  238.388362][T17917] netlink: 'syz.2.3535': attribute type 10 has an invalid length.
[  238.393911][T17917] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  238.396786][T17917] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  238.412160][T17917] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  238.414914][T17917] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  238.419245][T17917] team0: Port device geneve0 added
[  238.468350][T17935] netlink: 'syz.0.3540': attribute type 21 has an invalid length.
[  238.543889][ T5836] Bluetooth: hci2: link tx timeout
[  238.545573][ T5836] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  238.798008][T17956] SET target dimension over the limit!
[  238.834322][T17956] sctp: [Deprecated]: syz.1.3545 (pid 17956) Use of int in maxseg socket option.
[  238.834322][T17956] Use struct sctp_assoc_value instead
[  238.932294][T17960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.935909][T17965] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  239.217307][T17987] 0X: left allmulticast mode
[  239.222946][T17987] erspan0: left allmulticast mode
[  239.227675][T17987] ip_vti0: left promiscuous mode
[  239.245320][T17987] 8021q: adding VLAN 0 to HW filter on device team0
[  239.249256][T17987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.479917][T18011] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  239.492568][T18011] netlink: 'syz.0.3558': attribute type 12 has an invalid length.
[  239.530259][T18025] netlink: 'syz.0.3563': attribute type 4 has an invalid length.
[  239.612604][T18033] No such timeout policy "syz0"
[  239.647265][T18036] netlink: 'syz.2.3561': attribute type 4 has an invalid length.
[  239.655936][T18036] netlink: 'syz.2.3561': attribute type 4 has an invalid length.
[  239.782644][T18038] netlink: 'syz.0.3567': attribute type 13 has an invalid length.
[  239.785441][T18038] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  239.792366][T18038] tc_dump_action: action bad kind
[  240.215219][T18076] team1: entered promiscuous mode
[  240.217137][T18076] team1: entered allmulticast mode
[  240.510626][T18096] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  240.591378][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  241.080292][T18120] netlink: 'syz.1.3596': attribute type 12 has an invalid length.
[  241.084051][T18120] Cannot find add_set index 4 as target
[  241.224418][T18129] nbd: nbd1 already in use
[  241.226176][T18129] block nbd1: NBD_DISCONNECT
[  241.227811][T18129] block nbd1: Send disconnect failed -32
[  241.446412][T18139] bridge_slave_0: entered promiscuous mode
[  241.448707][T18139] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  241.567791][T18145] No such timeout policy "syz0"
[  241.682290][T18160] veth11: entered promiscuous mode
[  242.026798][T18207] SET target dimension over the limit!
[  242.043231][T18211] netlink: 'syz.0.3623': attribute type 12 has an invalid length.
[  242.046556][T18211] Cannot find add_set index 4 as target
[  242.453223][T18232] unsupported nla_type 65024
[  242.949102][T18243] __nla_validate_parse: 84 callbacks suppressed
[  242.949113][T18243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3632'.
[  242.999381][T18246] netlink: 9280 bytes leftover after parsing attributes in process `syz.0.3633'.
[  243.005181][T18246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3633'.
[  243.123991][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3636'.
[  243.138665][T18257] 8021q: adding VLAN 0 to HW filter on device bond18
[  243.153885][T18253] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3637'.
[  243.213322][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  243.215859][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3640'.
[  243.216429][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3639'.
[  243.218959][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3640'.
[  243.225877][T18263] tipc: Enabling of bearer <et:g> rejected, media not registered
[  243.271982][T18269] bond3: entered allmulticast mode
[  243.273773][T18272] netlink: 'syz.0.3642': attribute type 4 has an invalid length.
[  243.287946][T18272] netlink: 'syz.0.3642': attribute type 1 has an invalid length.
[  243.290715][T18272] netlink: 'syz.0.3642': attribute type 1 has an invalid length.
[  243.400797][T18289] xt_socket: unknown flags 0xd0
[  243.411201][T18288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.435910][   T33] audit: type=1800 audit(1752773297.664:10): pid=18296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6400 res=0 errno=0
[  243.511245][T18307] syzkaller1: entered promiscuous mode
[  243.517200][T18307] syzkaller1: entered allmulticast mode
[  243.664426][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'.
[  243.821589][T18340] lo speed is unknown, defaulting to 1000
[  243.986224][T18340] netlink: 'syz.0.3660': attribute type 12 has an invalid length.
[  244.137054][T18356] netlink: 'syz.0.3665': attribute type 10 has an invalid length.
[  244.335364][T18372] delete_channel: no stack
[  244.391390][T18378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.534781][T18386] netlink: 'syz.0.3675': attribute type 1 has an invalid length.
[  244.537128][T18386] netlink: 'syz.0.3675': attribute type 2 has an invalid length.
[  244.565380][T18390] bridge_slave_1: default FDB implementation only supports local addresses
[  244.596595][T18395] SET target dimension over the limit!
[  244.698146][T18401] syzkaller1: entered promiscuous mode
[  244.699859][T18401] syzkaller1: entered allmulticast mode
[  245.166542][T18438] set match dimension is over the limit!
[  245.169264][T18438] netlink: 'syz.0.3689': attribute type 1 has an invalid length.
[  245.185005][T18438] 8021q: adding VLAN 0 to HW filter on device bond19
[  245.319461][T18448] can: request_module (can-proto-3) failed.
[  245.773776][T18469] netlink: 'syz.1.3698': attribute type 21 has an invalid length.
[  245.797679][T18471] !: renamed from dummy0 (while UP)
[  245.872565][T18476] lo speed is unknown, defaulting to 1000
[  246.986543][T18519] 0X: left allmulticast mode
[  246.991715][T18519] erspan0: left promiscuous mode
[  247.003487][T18519] 8021q: adding VLAN 0 to HW filter on device 
[  247.007021][T18519] 8021q: adding VLAN 0 to HW filter on device team0
[  247.066766][T18519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  247.085798][T18520] lo speed is unknown, defaulting to 1000
[  248.233460][T18571] Unknown options in mask 700
[  248.257863][T18565] validate_nla: 3 callbacks suppressed
[  248.257896][T18565] netlink: 'syz.1.3722': attribute type 13 has an invalid length.
[  248.262506][T18565] netlink: 'syz.1.3722': attribute type 17 has an invalid length.
[  248.273816][T18565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.314992][T18565] lo speed is unknown, defaulting to 1000
[  248.358366][T18578] __nla_validate_parse: 15 callbacks suppressed
[  248.358377][T18578] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3726'.
[  248.389521][T18580] lo speed is unknown, defaulting to 1000
[  248.444591][T18565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3722'.
[  248.559647][T18590] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  248.628227][T18594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3729'.
[  248.754974][T18603] lo speed is unknown, defaulting to 1000
[  248.996273][T18611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3732'.
[  249.398813][T18635] xt_TCPMSS: Only works on TCP SYN packets
[  249.398866][T18636] xt_TCPMSS: Only works on TCP SYN packets
[  249.479322][T18642] wg0: entered promiscuous mode
[  250.346162][T18659] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  250.351267][T18659] syzkaller0: left promiscuous mode
[  250.362949][T18660] syzkaller1: entered promiscuous mode
[  250.365086][T18660] syzkaller1: entered allmulticast mode
[  250.412606][T18662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3746'.
[  250.488187][T18666] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode
[  250.564332][T18678] netlink: 'syz.2.3749': attribute type 21 has an invalid length.
[  250.615617][T18688] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3752'.
[  250.692480][T18690] 8021q: VLANs not supported on xfrm0
[  250.694328][T18690] netlink: 'syz.0.3753': attribute type 10 has an invalid length.
[  250.731387][T18704] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3756'.
[  250.734685][T18704] 0X: renamed from gretap0 (while UP)
[  250.751377][T18704] 0X: entered allmulticast mode
[  250.753218][T18704] A link change request failed with some changes committed already. Interface 30X may have been left with an inconsistent configuration, please check.
[  250.833962][T18711] openvswitch: netlink: Flow actions attr not present in new flow.
[  250.943100][T18728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3763'.
[  250.952652][T18728] netlink: 'syz.0.3763': attribute type 39 has an invalid length.
[  251.078775][T18739] openvswitch: netlink: Missing valid actions attribute.
[  251.081080][T18739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.147896][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3767'.
[  251.166465][T18741] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3767'.
[  251.284890][T18753] netlink: 'syz.0.3770': attribute type 1 has an invalid length.
[  251.319652][T18763] netlink: 'syz.0.3772': attribute type 11 has an invalid length.
[  251.491369][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.875890][T18785] syzkaller1: entered promiscuous mode
[  251.877609][T18785] syzkaller1: entered allmulticast mode
[  252.144252][T18807] lo speed is unknown, defaulting to 1000
[  252.386063][T18820] openvswitch: netlink: Flow key attr not present in new flow.
[  252.564045][T18829] netlink: 'syz.0.3790': attribute type 11 has an invalid length.
[  252.596764][T18832] netlink: 'syz.0.3791': attribute type 12 has an invalid length.
[  252.665530][T18835] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.668403][T18835] syzkaller0: entered promiscuous mode
[  252.726129][T18840] netlink: 'syz.2.3794': attribute type 1 has an invalid length.
[  252.821499][T18845] netlink: 'syz.2.3796': attribute type 39 has an invalid length.
[  252.893895][T18851] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0
[  252.896808][T18851] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0
[  252.899493][T18851] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0
[  252.904620][T18851] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0
[  252.911626][T18851] team0: Port device geneve0 removed
[  253.159537][T18869] xt_hashlimit: size too large, truncated to 1048576
[  253.265784][T18873] syzkaller1: entered promiscuous mode
[  253.267587][T18873] syzkaller1: entered allmulticast mode
[  253.363748][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.365771][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.368263][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.378983][T18875] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  253.393724][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.396497][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.401310][T18875] syzkaller0 speed is unknown, defaulting to 1000
[  253.419724][T18880] __nla_validate_parse: 13 callbacks suppressed
[  253.419735][T18880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3806'.
[  253.426000][T18880] netlink: 'syz.1.3806': attribute type 7 has an invalid length.
[  253.428841][T18880] netlink: 'syz.1.3806': attribute type 8 has an invalid length.
[  253.432466][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3806'.
[  253.497979][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3808'.
[  253.502478][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'.
[  253.505076][T18891] netlink: 'syz.2.3808': attribute type 13 has an invalid length.
[  253.507951][T18891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3808'.
[  253.546600][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'.
[  253.550111][T18895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3809'.
[  253.595470][T18904] ip6t_srh: unknown srh match flags  5294
[  253.649739][T18910] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3814'.
[  253.687561][T18914] x_tables: duplicate underflow at hook 3
[  253.715330][T18916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3816'.
[  253.718214][T18918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3812'.
[  253.869800][T18937] ip6gretap0: entered promiscuous mode
[  253.873704][T18937] macsec2: entered promiscuous mode
[  253.875346][T18937] macsec2: entered allmulticast mode
[  253.876869][T18937] ip6gretap0: entered allmulticast mode
[  253.904762][T18940] netlink: 'syz.2.3825': attribute type 1 has an invalid length.
[  254.013536][T18946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.015979][T18946] syzkaller0: entered promiscuous mode
[  254.024989][T18946] syzkaller0: entered allmulticast mode
[  254.046192][T18946] tipc: Resetting bearer <eth:syzkaller0>
[  254.052860][T18945] tipc: Resetting bearer <eth:syzkaller0>
[  254.073438][T18945] tipc: Disabling bearer <eth:syzkaller0>
[  254.353017][T18973] netlink: 'syz.2.3836': attribute type 1 has an invalid length.
[  254.582696][T18992] netlink: 'syz.2.3842': attribute type 1 has an invalid length.
[  254.584987][T18992] netlink: 'syz.2.3842': attribute type 1 has an invalid length.
[  254.587280][T18992] netlink: 'syz.2.3842': attribute type 2 has an invalid length.
[  255.115407][T19034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.216099][T19044] netlink: 'syz.0.3855': attribute type 14 has an invalid length.
[  255.472773][T19071] veth19: entered allmulticast mode
[  255.489061][T19071] sctp: [Deprecated]: syz.1.3863 (pid 19071) Use of int in max_burst socket option.
[  255.489061][T19071] Use struct sctp_assoc_value instead
[  255.707795][T19099] netlink: 'syz.2.3869': attribute type 13 has an invalid length.
[  255.721211][T19099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.835516][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.876744][T19096] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  255.879358][T19096] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  255.882411][T19096] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  255.884910][T19096] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  255.898126][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.911402][T19099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.933758][T19096] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  255.936862][T19096] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  255.939449][T19096] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  255.942404][T19096] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  255.962652][T19091] lo speed is unknown, defaulting to 1000
[  255.975442][T19091] syzkaller0 speed is unknown, defaulting to 1000
[  256.270455][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  257.296056][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.298646][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.302926][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.305830][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.308380][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.312500][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.315155][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.317573][T19147] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  257.796822][T19167] 8021q: adding VLAN 0 to HW filter on device bond4
[  257.799695][T19167] bridge0: port 1(bond4) entered blocking state
[  257.802629][T19167] bridge0: port 1(bond4) entered disabled state
[  257.805026][T19167] bond4: entered allmulticast mode
[  257.816291][T19167] veth1: entered promiscuous mode
[  257.818364][T19167] veth0: entered promiscuous mode
[  257.821473][T19167] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  257.824878][T19167] hsr1: Slave B (veth0) is not up; please bring it up to get a fully working HSR network
[  257.829757][T19167] bridge0: port 2(hsr1) entered blocking state
[  257.832559][T19167] bridge0: port 2(hsr1) entered disabled state
[  257.834591][T19167] hsr1: entered allmulticast mode
[  257.836216][T19167] veth1: entered allmulticast mode
[  257.838052][T19167] veth0: entered allmulticast mode
[  257.841872][T19167] hsr1: entered promiscuous mode
[  257.843797][T19167] bond4: entered promiscuous mode
[  258.177508][T19198] syzkaller1: entered promiscuous mode
[  258.179265][T19198] syzkaller1: entered allmulticast mode
[  258.530006][T19220] __nla_validate_parse: 25 callbacks suppressed
[  258.530018][T19220] netlink: 410 bytes leftover after parsing attributes in process `syz.1.3905'.
[  258.980913][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3909'.
[  259.121231][T19241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3912'.
[  259.123961][T19241] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  259.126636][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3912'.
[  259.129540][T19242] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  259.326486][T19261] validate_nla: 2 callbacks suppressed
[  259.326503][T19261] netlink: 'syz.0.3917': attribute type 30 has an invalid length.
[  259.335892][T19260] pimreg: entered allmulticast mode
[  259.342586][T19260] dvmrp0: left allmulticast mode
[  259.344185][T19260] pimreg: left allmulticast mode
[  259.425189][T19271] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3920'.
[  259.441821][T19279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3922'.
[  259.548846][T19294] netlink: 'syz.1.3927': attribute type 2 has an invalid length.
[  259.554896][T19288] warn_alloc: 1 callbacks suppressed
[  259.554905][T19288] syz.0.3925: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  259.564096][T19288] CPU: 1 UID: 0 PID: 19288 Comm: syz.0.3925 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  259.564109][T19288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  259.564115][T19288] Call Trace:
[  259.564119][T19288]  <TASK>
[  259.564123][T19288]  dump_stack_lvl+0x189/0x250
[  259.564139][T19288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.564149][T19288]  ? __pfx__printk+0x10/0x10
[  259.564161][T19288]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  259.564173][T19288]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  259.564184][T19288]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  259.564196][T19288]  warn_alloc+0x214/0x310
[  259.564205][T19288]  ? stack_depot_save_flags+0x40/0x900
[  259.564215][T19288]  ? __pfx_warn_alloc+0x10/0x10
[  259.564224][T19288]  ? kasan_save_track+0x4f/0x80
[  259.564236][T19288]  ? xskq_create+0x56/0x170
[  259.564243][T19288]  ? xsk_init_queue+0xb0/0x110
[  259.564249][T19288]  ? xsk_setsockopt+0x43f/0x710
[  259.564261][T19288]  ? do_sock_setsockopt+0x17c/0x1b0
[  259.564272][T19288]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  259.564289][T19288]  ? do_syscall_64+0xfa/0x3b0
[  259.564297][T19288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.564309][T19288]  __vmalloc_node_range_noprof+0x125/0x12f0
[  259.564336][T19288]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  259.564349][T19288]  ? xskq_create+0x56/0x170
[  259.564358][T19288]  ? __kasan_kmalloc+0x93/0xb0
[  259.564370][T19288]  vmalloc_user_noprof+0xad/0xf0
[  259.564383][T19288]  ? xskq_create+0xbf/0x170
[  259.564391][T19288]  xskq_create+0xbf/0x170
[  259.564400][T19288]  xsk_init_queue+0xb0/0x110
[  259.564409][T19288]  xsk_setsockopt+0x43f/0x710
[  259.564427][T19288]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.564440][T19288]  ? __fget_files+0x2a/0x420
[  259.564448][T19288]  ? aa_sock_opt_perm+0x74/0x110
[  259.564458][T19288]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  259.564467][T19288]  ? __pfx_xsk_setsockopt+0x10/0x10
[  259.564480][T19288]  do_sock_setsockopt+0x17c/0x1b0
[  259.564494][T19288]  __x64_sys_setsockopt+0x13f/0x1b0
[  259.564509][T19288]  do_syscall_64+0xfa/0x3b0
[  259.564517][T19288]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.564525][T19288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.564533][T19288]  ? exc_page_fault+0x9f/0xf0
[  259.564542][T19288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.564550][T19288] RIP: 0033:0x7f8a3d18e929
[  259.564558][T19288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.564566][T19288] RSP: 002b:00007f8a3aff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  259.564575][T19288] RAX: ffffffffffffffda RBX: 00007f8a3d3b5fa0 RCX: 00007f8a3d18e929
[  259.564581][T19288] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  259.564585][T19288] RBP: 00007f8a3d210ca1 R08: 0000000000000004 R09: 0000000000000000
[  259.564591][T19288] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.564596][T19288] R13: 0000000000000000 R14: 00007f8a3d3b5fa0 R15: 00007fff7c15adc8
[  259.564609][T19288]  </TASK>
[  259.564630][T19288] Mem-Info:
[  259.661898][T19288] active_anon:6438 inactive_anon:0 isolated_anon:0
[  259.661898][T19288]  active_file:1270 inactive_file:38289 isolated_file:0
[  259.661898][T19288]  unevictable:1768 dirty:185 writeback:0
[  259.661898][T19288]  slab_reclaimable:10366 slab_unreclaimable:140675
[  259.661898][T19288]  mapped:18138 shmem:2478 pagetables:916
[  259.661898][T19288]  sec_pagetables:0 bounce:0
[  259.661898][T19288]  kernel_misc_reclaimable:0
[  259.661898][T19288]  free:199675 free_pcp:26053 free_cma:0
[  259.675560][T19288] Node 0 active_anon:15504kB inactive_anon:0kB active_file:3980kB inactive_file:135356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41804kB dirty:568kB writeback:0kB shmem:5248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6984kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  259.685271][T19288] Node 1 active_anon:11268kB inactive_anon:0kB active_file:1100kB inactive_file:17800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30748kB dirty:172kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5876kB pagetables:1388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  259.695189][T19288] Node 0 DMA free:14904kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:452kB local_pcp:68kB free_cma:0kB
[  259.703722][T19288] lowmem_reserve[]: 0 812 812 812 812
[  259.705675][T19288] Node 0 DMA32 free:202504kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18836kB inactive_anon:0kB active_file:3980kB inactive_file:135356kB unevictable:3536kB writepending:568kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:43680kB local_pcp:16580kB free_cma:0kB
[  259.715888][T19288] lowmem_reserve[]: 0 0 0 0 0
[  259.717385][T19288] Node 1 DMA32 free:442256kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:16068kB local_pcp:5084kB free_cma:0kB
[  259.727196][T19288] lowmem_reserve[]: 0 0 854 854 854
[  259.729477][T19288] Node 1 Normal free:131332kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11268kB inactive_anon:0kB active_file:1100kB inactive_file:17800kB unevictable:3536kB writepending:172kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:46584kB local_pcp:27940kB free_cma:0kB
[  259.749150][T19288] lowmem_reserve[]: 0 0 0 0 0
[  259.750991][T19288] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14908kB
[  259.755644][T19288] Node 0 DMA32: 840*4kB (UM) 745*8kB (UE) 196*16kB (UME) 1001*32kB (UME) 339*64kB (UME) 102*128kB (UM) 89*256kB (UME) 52*512kB (UME) 27*1024kB (UM) 11*2048kB (UM) 6*4096kB (UM) = 203400kB
[  259.770555][T19288] Node 1 DMA32: 4*4kB (UM) 4*8kB (UM) 4*16kB (UM) 59*32kB (UM) 5*64kB (UM) 3*128kB (UM) 5*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 103*4096kB (UM) = 442256kB
[  259.775655][T19288] Node 1 Normal: 1003*4kB (UME) 397*8kB (UE) 461*16kB (U) 874*32kB (UM) 257*64kB (UME) 109*128kB (UM) 50*256kB (UM) 13*512kB (UME) 8*1024kB (UME) 9*2048kB (UM) 3*4096kB (U) = 131300kB
[  259.781207][T19288] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  259.790190][T19288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  259.793133][T19288] 42785 total pagecache pages
[  259.794750][T19288] 0 pages in swap cache
[  259.796095][T19288] Free swap  = 124996kB
[  259.797527][T19288] Total swap = 124996kB
[  259.798783][T19288] 786301 pages RAM
[  259.799941][T19288] 0 pages HighMem/MovableOnly
[  259.801596][T19288] 241056 pages reserved
[  259.802867][T19288] 0 pages cma reserved
[  259.974522][T19307] net_ratelimit: 57 callbacks suppressed
[  259.974534][T19307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.129812][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'.
[  260.134629][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'.
[  260.137255][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'.
[  260.139957][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3932'.
[  260.173225][T19324] netlink: 'syz.2.3935': attribute type 1 has an invalid length.
[  260.176631][T19324] netlink: 'syz.2.3935': attribute type 2 has an invalid length.
[  260.257435][T19331] ipt_REJECT: TCP_RESET invalid for non-tcp
[  260.342858][T19332] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  260.657055][T19351] lo speed is unknown, defaulting to 1000
[  260.662448][T19351] syzkaller0 speed is unknown, defaulting to 1000
[  261.173156][T19378] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  261.242127][T19387] netlink: 'syz.1.3953': attribute type 3 has an invalid length.
[  261.244467][T19387] netlink: 'syz.1.3953': attribute type 3 has an invalid length.
[  261.273289][T19391] netlink: 'syz.0.3955': attribute type 39 has an invalid length.
[  261.306605][T19395] x_tables: duplicate underflow at hook 2
[  261.314774][T19394] delete_channel: no stack
[  261.359789][T19399] netlink: 'syz.0.3958': attribute type 1 has an invalid length.
[  261.368754][T19398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.389564][T19401] netlink: 'syz.1.3959': attribute type 29 has an invalid length.
[  261.392994][T19401] netlink: 'syz.1.3959': attribute type 29 has an invalid length.
[  261.545150][T19413] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  261.966198][T19420] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  261.969530][T19420] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  263.118152][T19453] syzkaller1: entered promiscuous mode
[  263.120152][T19453] syzkaller1: entered allmulticast mode
[  263.139720][T19455] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.143658][T19455] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.146064][T19455] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.148459][T19455] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.265730][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.647331][T19526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.679277][T19529] __nla_validate_parse: 10 callbacks suppressed
[  263.679288][T19529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'.
[  263.685090][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'.
[  263.689593][T19529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3995'.
[  263.696760][T19529] macvlan1: entered promiscuous mode
[  263.698400][T19529] hsr0: entered promiscuous mode
[  263.699961][T19529] macvlan1: entered allmulticast mode
[  263.704734][T19529] hsr0: entered allmulticast mode
[  263.706432][T19529] hsr_slave_0: entered allmulticast mode
[  263.784693][T19535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3996'.
[  263.845829][T19539] delete_channel: no stack
[  264.090223][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'.
[  264.094046][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'.
[  264.253255][T19566] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4008'.
[  264.305911][T19569] lo speed is unknown, defaulting to 1000
[  264.308595][T19569] syzkaller0 speed is unknown, defaulting to 1000
[  264.469145][T19589] lo speed is unknown, defaulting to 1000
[  264.472052][T19589] syzkaller0 speed is unknown, defaulting to 1000
[  264.514360][T19595] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  264.516643][T19595] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  264.584388][T19599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4020'.
[  264.680137][T19614] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[  264.684157][T19616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4025'.
[  264.687844][T19614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4024'.
[  265.067935][T19657] veth0_to_bond: entered allmulticast mode
[  265.558184][T19708] validate_nla: 60 callbacks suppressed
[  265.558221][T19708] netlink: 'syz.2.4052': attribute type 1 has an invalid length.
[  265.602480][T19711] netlink: 'syz.1.4053': attribute type 4 has an invalid length.
[  265.635721][T19708] 8021q: adding VLAN 0 to HW filter on device bond6
[  265.654748][T19708] veth13: entered promiscuous mode
[  265.658626][T19708] bond6: (slave veth13): Enslaving as a backup interface with a down link
[  265.710069][T19723] lo speed is unknown, defaulting to 1000
[  265.713631][T19723] syzkaller0 speed is unknown, defaulting to 1000
[  265.730099][T19728] netlink: 'syz.0.4057': attribute type 1 has an invalid length.
[  265.796146][T19728] macvlan3: entered promiscuous mode
[  265.797800][T19728] macvlan3: entered allmulticast mode
[  265.801956][T19728] bond20: entered promiscuous mode
[  265.804545][T19728] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  265.812055][T19728] bond20: left promiscuous mode
[  265.879392][T19744] batadv_slave_0: entered promiscuous mode
[  265.932836][T19751] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.935805][T19751] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  265.947226][T19755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.965722][T19754] lo speed is unknown, defaulting to 1000
[  265.968321][T19754] syzkaller0 speed is unknown, defaulting to 1000
[  265.976637][T19751] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.979514][T19751] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  265.992254][T19756] netlink: 'syz.0.4061': attribute type 1 has an invalid length.
[  266.025416][T19756] 8021q: adding VLAN 0 to HW filter on device bond21
[  266.025829][T19762] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  266.037267][T19756] vlan0: entered allmulticast mode
[  266.038834][T19756] geneve1: entered allmulticast mode
[  266.043131][T19756] bond21: (slave vlan0): Opening slave failed
[  266.062873][T19751] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.065858][T19751] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.088527][T19766] netlink: 'syz.2.4066': attribute type 2 has an invalid length.
[  266.095220][T19766] netlink: 'syz.2.4066': attribute type 8 has an invalid length.
[  266.099728][T19769] netlink: 'syz.2.4066': attribute type 2 has an invalid length.
[  266.102572][T19769] netlink: 'syz.2.4066': attribute type 8 has an invalid length.
[  266.116579][T19751] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.119956][T19751] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  266.212362][T19751] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.214965][T19751] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  266.223744][T19751] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.226255][T19751] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  266.236524][T19751] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.239601][T19751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  266.248248][T19751] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.251930][T19751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  266.492346][T19794] netlink: 'syz.0.4079': attribute type 10 has an invalid length.
[  266.495555][T19794] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  266.498970][T19794] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  266.503379][T19794] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  266.506027][T19794] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  266.510526][T19794] team0: Port device geneve0 added
[  266.896201][T19830] lo speed is unknown, defaulting to 1000
[  266.898716][T19830] syzkaller0 speed is unknown, defaulting to 1000
[  267.000128][T19834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.066888][T19834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.132170][T19834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.188734][T19845] macvlan1: left allmulticast mode
[  267.190838][T19845] hsr0: left allmulticast mode
[  267.192297][T19845] hsr_slave_0: left allmulticast mode
[  267.217270][T19834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  267.243876][T19849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.279417][T19851] lo speed is unknown, defaulting to 1000
[  267.288442][T19851] lo speed is unknown, defaulting to 1000
[  267.291055][T19851] lo speed is unknown, defaulting to 1000
[  267.317441][T19834] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  267.328934][T19834] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  267.341775][T19834] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  267.345432][T19852] 0X: left allmulticast mode
[  267.351184][T19852] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  267.364612][T19834] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  267.403945][   T47] lo speed is unknown, defaulting to 1000
[  267.406009][T19851] infiniband syz0: set active
[  267.407753][T19851] infiniband syz0: added lo
[  267.435261][T19851] RDS/IB: syz0: added
[  267.436981][T19851] smc: adding ib device syz0 with port count 1
[  267.438930][T19851] smc:    ib device syz0 port 1 has pnetid 
[  267.448205][   T47] lo speed is unknown, defaulting to 1000
[  267.451698][T19851] lo speed is unknown, defaulting to 1000
[  267.552989][T19851] lo speed is unknown, defaulting to 1000
[  267.653195][T19851] lo speed is unknown, defaulting to 1000
[  267.940491][T19879] netlink: 'syz.2.4102': attribute type 26 has an invalid length.
[  268.887702][T19904] __nla_validate_parse: 33 callbacks suppressed
[  268.887719][T19904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'.
[  268.902630][T19897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4103'.
[  268.905829][T19897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4103'.
[  268.908725][T19897] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4103'.
[  268.940147][T19908] IPVS: set_ctl: invalid protocol: 0 172.20.20.28:20002
[  268.989645][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'.
[  268.995521][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'.
[  269.036586][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4110'.
[  269.039525][T19918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4110'.
[  269.042481][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4110'.
[  269.045373][T19918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4110'.
[  269.347968][T19938] xt_TPROXY: Can be used only with -p tcp or -p udp
[  270.415333][T19961] set match dimension is over the limit!
[  270.493813][T19969] IPVS: Unknown mcast interface: lo
[  270.689177][T19985] lo speed is unknown, defaulting to 1000
[  270.692948][T19985] syzkaller0 speed is unknown, defaulting to 1000
[  270.697603][T19985] lo speed is unknown, defaulting to 1000
[  271.080958][T19996] lo speed is unknown, defaulting to 1000
[  271.083717][T19996] syzkaller0 speed is unknown, defaulting to 1000
[  271.086509][T19996] lo speed is unknown, defaulting to 1000
[  271.213259][T20008] validate_nla: 29 callbacks suppressed
[  271.213271][T20008] netlink: 'syz.2.4131': attribute type 29 has an invalid length.
[  271.217920][T20008] netlink: 'syz.2.4131': attribute type 29 has an invalid length.
[  271.524933][T20026] IPVS: set_ctl: invalid protocol: 44 172.20.20.60:20004
[  271.690094][T20045] netlink: 'syz.2.4142': attribute type 1 has an invalid length.
[  271.697005][T20045] netlink: 'syz.2.4142': attribute type 2 has an invalid length.
[  272.081374][T20069] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  272.420145][T20088] ip6tnl4: entered promiscuous mode
[  272.427233][T20088] ip6tnl4: entered allmulticast mode
[  272.537691][T20108] netlink: 'syz.1.4160': attribute type 4 has an invalid length.
[  272.565680][T20111] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  272.626267][T20122] x_tables: unsorted underflow at hook 4
[  272.628817][T20124] netlink: 'syz.2.4164': attribute type 19 has an invalid length.
[  272.726721][T20137] netlink: 'syz.1.4168': attribute type 10 has an invalid length.
[  272.769190][T20143] netlink: 'syz.2.4167': attribute type 13 has an invalid length.
[  272.803111][T20134] lo speed is unknown, defaulting to 1000
[  272.805699][T20134] syzkaller0 speed is unknown, defaulting to 1000
[  272.808484][T20134] lo speed is unknown, defaulting to 1000
[  272.910830][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  272.968586][T20133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.990671][T20152] netlink: 'syz.1.4173': attribute type 13 has an invalid length.
[  272.993329][T20152] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  273.019184][T20155] x_tables: duplicate underflow at hook 1
[  273.085523][T20163] netlink: 'syz.1.4176': attribute type 1 has an invalid length.
[  273.088484][T20163] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  273.246959][T20177] tipc: Enabled bearer <eth:gre0>, priority 11
[  273.341665][T20183] bond0: (slave rose0): Enslaving as an active interface with an up link
[  273.632033][T20200] syzkaller1: entered promiscuous mode
[  273.633792][T20200] syzkaller1: entered allmulticast mode
[  274.239836][T20209] __nla_validate_parse: 25 callbacks suppressed
[  274.239847][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4188'.
[  274.370452][ T5832] tipc: Node number set to 671450722
[  274.589311][T20213] veth0_to_bond: left allmulticast mode
[  274.596312][T20213] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  274.599481][T20213] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  274.603722][T20213] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  274.606520][T20213] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  274.612297][T20213] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  274.616222][T20213] macvlan0: left promiscuous mode
[  274.617966][T20213] macvlan0: left allmulticast mode
[  274.621984][T20213] veth11: left allmulticast mode
[  274.627107][T20213] bond8: left promiscuous mode
[  274.628739][T20213] bond8: left allmulticast mode
[  274.643767][T20213] tipc: Resetting bearer <eth:syzkaller0>
[  274.645830][T20213] syzkaller0: left promiscuous mode
[  274.647464][T20213] syzkaller0: left allmulticast mode
[  274.656833][T20213] bond11: left promiscuous mode
[  274.658401][T20213] bond11: left allmulticast mode
[  274.662022][T20213] bond12: left promiscuous mode
[  274.663571][T20213] bond12: left allmulticast mode
[  274.679710][T20213] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.682427][T20213] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.684962][T20213] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.687528][T20213] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.693980][T20213] bond16: left promiscuous mode
[  274.695659][T20213] mac80211_hwsim hwsim31 wlan1: left allmulticast mode
[  274.698190][T20213] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  274.701782][T20213] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  274.704266][T20213] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  274.706761][T20213] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  274.709392][T20213] geneve3: left promiscuous mode
[  274.711418][T20213] geneve3: left allmulticast mode
[  274.715949][T20213] team1: left promiscuous mode
[  274.717478][T20213] team1: left allmulticast mode
[  274.731887][T20213] hsr0: left promiscuous mode
[  274.733655][T20213] macvlan1: left promiscuous mode
[  274.740287][ T5832] lo speed is unknown, defaulting to 1000
[  274.742573][ T5832] syz0: Port: 1 Link DOWN
[  274.744526][ T5832] lo speed is unknown, defaulting to 1000
[  274.829751][T20229] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4196'.
[  274.984469][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4201'.
[  275.001140][T20247] 8021q: adding VLAN 0 to HW filter on device bond7
[  275.006426][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4201'.
[  275.146046][T20267] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4205'.
[  275.148969][T20267] batadv_slave_1: entered promiscuous mode
[  275.321867][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4211'.
[  275.324931][T20286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4211'.
[  275.357977][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4212'.
[  275.413441][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4212'.
[  276.113963][T20294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  276.203664][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4215'.
[  276.245508][T20307] validate_nla: 2 callbacks suppressed
[  276.245521][T20307] netlink: 'syz.0.4217': attribute type 1 has an invalid length.
[  277.189303][T20319] lo speed is unknown, defaulting to 1000
[  277.197683][T20319] syzkaller0 speed is unknown, defaulting to 1000
[  277.206645][T20319] lo speed is unknown, defaulting to 1000
[  277.612734][T20355] netlink: 'syz.2.4230': attribute type 1 has an invalid length.
[  277.631794][T20355] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  277.635786][T20355] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  277.684423][T20357] gretap0: entered promiscuous mode
[  277.689358][T20357] bond8: (slave gretap0): making interface the new active one
[  277.700802][T20357] bond8: (slave gretap0): Enslaving as an active interface with an up link
[  277.708992][T20355] macvlan0: entered promiscuous mode
[  277.710843][T20355] macvlan0: entered allmulticast mode
[  277.712909][T20355] bond8: entered promiscuous mode
[  277.714931][T20355] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  277.718812][T20355] bond8: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0
[  277.724224][T20355] bond8: left promiscuous mode
[  278.019284][T20380] netlink: 'syz.2.4237': attribute type 2 has an invalid length.
[  278.027392][T20380] `: entered promiscuous mode
[  278.084649][T20388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.087022][T20388] IPv6: NLM_F_CREATE should be set when creating new route
[  278.204863][T20400] netlink: 'syz.1.4243': attribute type 13 has an invalid length.
[  278.207782][T20399] netlink: 'syz.1.4243': attribute type 13 has an invalid length.
[  278.588344][T20430] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  278.683830][T20447] netlink: 'syz.2.4254': attribute type 1 has an invalid length.
[  278.725552][T20451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.728526][T20451] syzkaller0: entered promiscuous mode
[  278.730267][T20451] syzkaller0: entered allmulticast mode
[  278.737293][T20451] tipc: Resetting bearer <eth:syzkaller0>
[  278.740906][T20450] tipc: Resetting bearer <eth:syzkaller0>
[  278.756909][T20450] tipc: Disabling bearer <eth:syzkaller0>
[  278.757882][T20458] x_tables: duplicate underflow at hook 2
[  278.796427][   T33] audit: type=1107 audit(1752773333.034:11): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3xG"'
[  278.852017][T20464] delete_channel: no stack
[  279.093689][T20493] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  279.101715][T20493] netlink: 'syz.0.4269': attribute type 1 has an invalid length.
[  279.245538][T20510] dvmrp0: entered allmulticast mode
[  279.249162][T20512] netlink: 'syz.1.4276': attribute type 2 has an invalid length.
[  279.252642][T20512] netlink: 'syz.1.4276': attribute type 1 has an invalid length.
[  279.255941][T20512] netlink: 'syz.1.4276': attribute type 1 has an invalid length.
[  279.304602][T20514] 8021q: adding VLAN 0 to HW filter on device bond22
[  279.314249][ T5832] lo speed is unknown, defaulting to 1000
[  279.316115][ T5832] syz0: Port: 1 Link ACTIVE
[  279.318386][ T5832] lo speed is unknown, defaulting to 1000
[  279.456885][T20532] __nla_validate_parse: 83 callbacks suppressed
[  279.456896][T20532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'.
[  279.464117][T20532] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.641657][T20542] xt_CT: You must specify a L4 protocol and not use inversions on it
[  279.828966][T20561] 8021q: adding VLAN 0 to HW filter on device bond9
[  280.737947][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4296'.
[  280.752456][T20584] nbd: nbd0 already in use
[  280.758084][T20584] syzkaller1: entered promiscuous mode
[  280.759806][T20584] syzkaller1: entered allmulticast mode
[  280.938725][T20606] lo speed is unknown, defaulting to 1000
[  280.944111][T20606] syzkaller0 speed is unknown, defaulting to 1000
[  280.946897][T20606] lo speed is unknown, defaulting to 1000
[  281.024075][T20612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.119506][T20628] xt_CT: You must specify a L4 protocol and not use inversions on it
[  281.255973][T20647] validate_nla: 9 callbacks suppressed
[  281.255983][T20647] netlink: 'syz.2.4312': attribute type 1 has an invalid length.
[  281.284907][T20647] bond10: (slave gretap3): making interface the new active one
[  281.288039][T20647] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  281.953643][T20662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4316'.
[  281.985331][T20664] bond0: (slave team0): Releasing active interface
[  281.990117][T20664] team0: Port device geneve0 removed
[  281.993283][T20664] bond9: (slave bridge6): Releasing active interface
[  281.996629][T20664] bond10: (slave bridge7): Releasing active interface
[  281.999860][T20664] bond15: (slave bridge9): Releasing active interface
[  282.008962][T20664] team0: Mode changed to "activebackup"
[  282.080121][T20673] vlan0: entered promiscuous mode
[  282.084271][T20673] bridge0: entered promiscuous mode
[  282.085977][T20673] vlan0: entered allmulticast mode
[  282.087562][T20673] bridge0: entered allmulticast mode
[  282.174229][T20682] pim6reg1: entered promiscuous mode
[  282.175918][T20682] pim6reg1: entered allmulticast mode
[  282.209811][T20684] mac80211_hwsim hwsim3 : renamed from wlan0
[  282.221993][T20682] netlink: 'syz.2.4323': attribute type 212 has an invalid length.
[  282.231993][T20682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4323'.
[  282.250267][T20682] 8021q: adding VLAN 0 to HW filter on device bond11
[  282.256479][T20682] team0: Port device bond11 added
[  282.297151][T20691] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4325'.
[  282.396382][T20702] veth0: entered promiscuous mode
[  282.398244][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4327'.
[  282.415425][T20702] veth0 (unregistering): left promiscuous mode
[  282.467966][T20707] netlink: 'syz.2.4328': attribute type 1 has an invalid length.
[  282.507142][T20707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4328'.
[  282.590856][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  282.688491][T20729] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4331'.
[  282.695283][T20732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4332'.
[  282.733372][T20732] netlink: 'syz.1.4332': attribute type 10 has an invalid length.
[  283.089084][T20763] netlink: 'syz.2.4340': attribute type 11 has an invalid length.
[  283.095143][T20763] netlink: 'syz.2.4340': attribute type 11 has an invalid length.
[  283.107686][T20763] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4340'.
[  283.329149][T20785] bond12: entered promiscuous mode
[  283.331565][T20785] 8021q: adding VLAN 0 to HW filter on device bond12
[  283.382709][T20792] netlink: 'syz.2.4349': attribute type 1 has an invalid length.
[  283.478162][T20799] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  283.486469][T20800] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  283.537686][T20802] wg0: left promiscuous mode
[  283.539587][T20802] bridge_slave_0: left promiscuous mode
[  283.544211][T20802] bond_slave_0: left allmulticast mode
[  283.546512][T20802] batadv_slave_1: left promiscuous mode
[  283.558222][T20802] bond2: left promiscuous mode
[  283.559834][T20802] bond2: left allmulticast mode
[  283.561923][T20802] xfrm1: left promiscuous mode
[  283.563539][T20802] xfrm1: left allmulticast mode
[  283.565277][T20802] macsec0: left promiscuous mode
[  283.566917][T20802] macsec0: left allmulticast mode
[  283.569576][T20802] sit2: left allmulticast mode
[  283.571965][T20802] macsec1: left promiscuous mode
[  283.574332][T20802] macsec1: left allmulticast mode
[  283.576647][T20802] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  283.579316][T20802] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  283.582517][T20802] bridge2: left allmulticast mode
[  283.584316][T20802] bridge3: left allmulticast mode
[  283.587272][T20802] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.590139][T20802] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.594331][T20802] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.597516][T20802] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  283.610696][T20802] bond0: left promiscuous mode
[  283.614644][T20802] ip6erspan0: left allmulticast mode
[  283.616620][T20802] veth11: left promiscuous mode
[  283.619481][T20802] bond3: left allmulticast mode
[  283.622271][T20802] ip6gretap0: left allmulticast mode
[  283.624202][T20802] macsec2: left promiscuous mode
[  283.625915][T20802] macsec2: left allmulticast mode
[  283.662336][T20802] veth13: left promiscuous mode
[  283.665985][T20802] ip6tnl4: left promiscuous mode
[  283.667919][T20802] ip6tnl4: left allmulticast mode
[  283.675083][T20802] gretap0: left promiscuous mode
[  283.684929][T20802] bond12: left promiscuous mode
[  284.161800][T20834] 
[  284.162622][T20834] ======================================================
[  284.164761][T20834] WARNING: possible circular locking dependency detected
[  284.166851][T20834] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[  284.169349][T20834] ------------------------------------------------------
[  284.172062][T20834] syz.2.4363/20834 is trying to acquire lock:
[  284.173922][T20834] ffffffff8e223be8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0
[  284.176842][T20834] 
[  284.176842][T20834] but task is already holding lock:
[  284.179101][T20834] ffff888020526278 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  284.182212][T20834] 
[  284.182212][T20834] which lock already depends on the new lock.
[  284.182212][T20834] 
[  284.185354][T20834] 
[  284.185354][T20834] the existing dependency chain (in reverse order) is:
[  284.188094][T20834] 
[  284.188094][T20834] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  284.190624][T20834]        lock_acquire+0x120/0x360
[  284.192171][T20834]        blk_alloc_queue+0x538/0x620
[  284.193736][T20834]        __blk_mq_alloc_disk+0x162/0x340
[  284.195410][T20834]        nbd_dev_add+0x476/0xb00
[  284.196915][T20834]        nbd_init+0x21a/0x2d0
[  284.198322][T20834]        do_one_initcall+0x236/0x820
[  284.199958][T20834]        do_initcall_level+0x137/0x1f0
[  284.201630][T20834]        do_initcalls+0x69/0xd0
[  284.203127][T20834]        kernel_init_freeable+0x3d9/0x570
[  284.204861][T20834]        kernel_init+0x1d/0x1d0
[  284.206346][T20834]        ret_from_fork+0x3fc/0x770
[  284.207932][T20834]        ret_from_fork_asm+0x1a/0x30
[  284.209556][T20834] 
[  284.209556][T20834] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  284.211768][T20834]        lock_acquire+0x120/0x360
[  284.213311][T20834]        fs_reclaim_acquire+0x72/0x100
[  284.214976][T20834]        prepare_alloc_pages+0x153/0x610
[  284.216682][T20834]        __alloc_frozen_pages_noprof+0x123/0x370
[  284.218584][T20834]        __alloc_pages_noprof+0xa/0x30
[  284.220229][T20834]        pcpu_populate_chunk+0x182/0xb30
[  284.221938][T20834]        pcpu_alloc_noprof+0xcbf/0x16b0
[  284.223654][T20834]        bpf_map_alloc_percpu+0xbc/0x1b0
[  284.225359][T20834]        prealloc_init+0x225/0x630
[  284.226928][T20834]        htab_map_alloc+0x6ce/0xc70
[  284.228527][T20834]        map_create+0xaa3/0x1310
[  284.230026][T20834]        __sys_bpf+0x67e/0x860
[  284.231501][T20834]        __x64_sys_bpf+0x7c/0x90
[  284.232995][T20834]        do_syscall_64+0xfa/0x3b0
[  284.234550][T20834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.236510][T20834] 
[  284.236510][T20834] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  284.238844][T20834]        validate_chain+0xb9b/0x2140
[  284.240474][T20834]        __lock_acquire+0xab9/0xd20
[  284.242053][T20834]        lock_acquire+0x120/0x360
[  284.243604][T20834]        __mutex_lock+0x182/0xe80
[  284.245107][T20834]        pcpu_alloc_noprof+0x286/0x16b0
[  284.246748][T20834]        sbitmap_init_node+0x1e1/0x630
[  284.248419][T20834]        sbitmap_queue_init_node+0x41/0x660
[  284.250219][T20834]        blk_mq_init_tags+0x110/0x280
[  284.251875][T20834]        blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  284.253701][T20834]        blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  284.255635][T20834]        nbd_start_device+0x16c/0xac0
[  284.257259][T20834]        nbd_genl_connect+0x1250/0x1930
[  284.258953][T20834]        genl_family_rcv_msg_doit+0x215/0x300
[  284.260789][T20834]        genl_rcv_msg+0x60e/0x790
[  284.262313][T20834]        netlink_rcv_skb+0x208/0x470
[  284.263945][T20834]        genl_rcv+0x28/0x40
[  284.265334][T20834]        netlink_unicast+0x75c/0x8e0
[  284.266953][T20834]        netlink_sendmsg+0x805/0xb30
[  284.268574][T20834]        __sock_sendmsg+0x21c/0x270
[  284.270166][T20834]        ____sys_sendmsg+0x505/0x830
[  284.271781][T20834]        ___sys_sendmsg+0x21f/0x2a0
[  284.273369][T20834]        __x64_sys_sendmsg+0x19b/0x260
[  284.275041][T20834]        do_syscall_64+0xfa/0x3b0
[  284.276582][T20834]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.278483][T20834] 
[  284.278483][T20834] other info that might help us debug this:
[  284.278483][T20834] 
[  284.281434][T20834] Chain exists of:
[  284.281434][T20834]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#50
[  284.281434][T20834] 
[  284.285402][T20834]  Possible unsafe locking scenario:
[  284.285402][T20834] 
[  284.287607][T20834]        CPU0                    CPU1
[  284.289162][T20834]        ----                    ----
[  284.290802][T20834]   lock(&q->q_usage_counter(io)#50);
[  284.292456][T20834]                                lock(fs_reclaim);
[  284.294431][T20834]                                lock(&q->q_usage_counter(io)#50);
[  284.296802][T20834]   lock(pcpu_alloc_mutex);
[  284.298192][T20834] 
[  284.298192][T20834]  *** DEADLOCK ***
[  284.298192][T20834] 
[  284.300638][T20834] 7 locks held by syz.2.4363/20834:
[  284.302171][T20834]  #0: ffffffff8f581df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  284.304606][T20834]  #1: ffffffff8f581c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  284.307243][T20834]  #2: ffff8880205cfa30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  284.310258][T20834]  #3: ffff8880205cf988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  284.313663][T20834]  #4: ffff8880205cf8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x49/0x14c0
[  284.316964][T20834]  #5: ffff888020526278 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  284.320176][T20834]  #6: ffff8880205262b0 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xac0
[  284.323474][T20834] 
[  284.323474][T20834] stack backtrace:
[  284.325288][T20834] CPU: 1 UID: 0 PID: 20834 Comm: syz.2.4363 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  284.325300][T20834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.325307][T20834] Call Trace:
[  284.325312][T20834]  <TASK>
[  284.325318][T20834]  dump_stack_lvl+0x189/0x250
[  284.325330][T20834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.325340][T20834]  ? __pfx__printk+0x10/0x10
[  284.325357][T20834]  ? print_lock_name+0xde/0x100
[  284.325368][T20834]  print_circular_bug+0x2ee/0x310
[  284.325399][T20834]  check_noncircular+0x134/0x160
[  284.325411][T20834]  validate_chain+0xb9b/0x2140
[  284.325426][T20834]  __lock_acquire+0xab9/0xd20
[  284.325437][T20834]  ? pcpu_alloc_noprof+0x286/0x16b0
[  284.325449][T20834]  lock_acquire+0x120/0x360
[  284.325457][T20834]  ? pcpu_alloc_noprof+0x286/0x16b0
[  284.325470][T20834]  __mutex_lock+0x182/0xe80
[  284.325479][T20834]  ? pcpu_alloc_noprof+0x286/0x16b0
[  284.325491][T20834]  ? kasan_save_track+0x4f/0x80
[  284.325501][T20834]  ? kasan_save_track+0x3e/0x80
[  284.325511][T20834]  ? __kmalloc_cache_node_noprof+0x234/0x3d0
[  284.325523][T20834]  ? pcpu_alloc_noprof+0x286/0x16b0
[  284.325533][T20834]  ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  284.325543][T20834]  ? blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  284.325553][T20834]  ? __pfx___mutex_lock+0x10/0x10
[  284.325561][T20834]  ? genl_rcv+0x28/0x40
[  284.325569][T20834]  ? __sock_sendmsg+0x21c/0x270
[  284.325577][T20834]  ? ____sys_sendmsg+0x505/0x830
[  284.325591][T20834]  pcpu_alloc_noprof+0x286/0x16b0
[  284.325605][T20834]  sbitmap_init_node+0x1e1/0x630
[  284.325617][T20834]  ? __kasan_kmalloc+0x93/0xb0
[  284.325628][T20834]  sbitmap_queue_init_node+0x41/0x660
[  284.325638][T20834]  ? __raw_spin_lock_init+0x45/0x100
[  284.325649][T20834]  blk_mq_init_tags+0x110/0x280
[  284.325662][T20834]  blk_mq_alloc_map_and_rqs+0xbd/0x9f0
[  284.325674][T20834]  ? blk_mq_update_nr_hw_queues+0x678/0x14c0
[  284.325685][T20834]  ? kfree+0x18e/0x440
[  284.325695][T20834]  blk_mq_update_nr_hw_queues+0x76a/0x14c0
[  284.325709][T20834]  nbd_start_device+0x16c/0xac0
[  284.325720][T20834]  ? __nla_parse+0x40/0x60
[  284.325731][T20834]  nbd_genl_connect+0x1250/0x1930
[  284.325742][T20834]  ? __pfx_nbd_genl_connect+0x10/0x10
[  284.325754][T20834]  ? __nla_parse+0x40/0x60
[  284.325763][T20834]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  284.325774][T20834]  genl_family_rcv_msg_doit+0x215/0x300
[  284.325784][T20834]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  284.325797][T20834]  genl_rcv_msg+0x60e/0x790
[  284.325806][T20834]  ? __pfx_genl_rcv_msg+0x10/0x10
[  284.325813][T20834]  ? __pfx_nbd_genl_connect+0x10/0x10
[  284.325825][T20834]  netlink_rcv_skb+0x208/0x470
[  284.325836][T20834]  ? __pfx_genl_rcv_msg+0x10/0x10
[  284.325843][T20834]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  284.325857][T20834]  ? down_read+0x1ad/0x2e0
[  284.325866][T20834]  genl_rcv+0x28/0x40
[  284.325873][T20834]  netlink_unicast+0x75c/0x8e0
[  284.325884][T20834]  netlink_sendmsg+0x805/0xb30
[  284.325897][T20834]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.325908][T20834]  ? aa_sock_msg_perm+0x94/0x160
[  284.325917][T20834]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  284.325926][T20834]  ? __pfx_netlink_sendmsg+0x10/0x10
[  284.325936][T20834]  __sock_sendmsg+0x21c/0x270
[  284.325946][T20834]  ____sys_sendmsg+0x505/0x830
[  284.325958][T20834]  ? __pfx_____sys_sendmsg+0x10/0x10
[  284.325971][T20834]  ? import_iovec+0x74/0xa0
[  284.325983][T20834]  ___sys_sendmsg+0x21f/0x2a0
[  284.325994][T20834]  ? __pfx____sys_sendmsg+0x10/0x10
[  284.326013][T20834]  ? __fget_files+0x2a/0x420
[  284.326019][T20834]  ? __fget_files+0x3a0/0x420
[  284.326028][T20834]  __x64_sys_sendmsg+0x19b/0x260
[  284.326040][T20834]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  284.326054][T20834]  ? rcu_is_watching+0x15/0xb0
[  284.326064][T20834]  ? do_syscall_64+0xbe/0x3b0
[  284.326073][T20834]  do_syscall_64+0xfa/0x3b0
[  284.326082][T20834]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.326089][T20834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.326097][T20834]  ? exc_page_fault+0x9f/0xf0
[  284.326105][T20834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.326114][T20834] RIP: 0033:0x7f86d118e929
[  284.326124][T20834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.326132][T20834] RSP: 002b:00007f86d2022038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  284.326141][T20834] RAX: ffffffffffffffda RBX: 00007f86d13b5fa0 RCX: 00007f86d118e929
[  284.326148][T20834] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000009
[  284.326154][T20834] RBP: 00007f86d1210ca1 R08: 0000000000000000 R09: 0000000000000000
[  284.326160][T20834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.326165][T20834] R13: 0000000000000000 R14: 00007f86d13b5fa0 R15: 00007fff0c522df8
[  284.326174][T20834]  </TASK>
[  284.540680][T20834] nbd1: detected capacity change from 0 to 127
[  284.545557][T20854] block nbd1: Receive control failed (result -32)
[  284.546487][T20438] block nbd1: Send control failed (result -32)
[  284.550144][T20438] block nbd1: Request send failed, requeueing
[  284.552484][T20438] block nbd1: Send control failed (result -32)
[  284.557749][T20438] block nbd1: Request send failed, requeueing
[  284.559797][  T127] block nbd1: Dead connection, failed to find a fallback
[  284.560848][ T9714] block nbd1: Receive control failed (result -32)
[  284.565109][  T127] block nbd1: shutting down sockets
[  284.566742][  T127] blk_print_req_error: 138 callbacks suppressed
[  284.566749][  T127] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.571593][  T127] buffer_io_error: 138 callbacks suppressed
[  284.571599][  T127] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.576925][T20438] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.579710][T20438] Buffer I/O error on dev nbd1, logical block 2, async page read
[  284.582742][  T127] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.585410][  T127] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.591015][T20438] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.593693][T20438] Buffer I/O error on dev nbd1, logical block 3, async page read
[  284.596000][T20438] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.598733][T20438] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.604259][T20438] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.607080][T20438] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.609473][T20438] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.612454][T20438] Buffer I/O error on dev nbd1, logical block 2, async page read
[  284.615103][T20438] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.617974][T20438] Buffer I/O error on dev nbd1, logical block 3, async page read
[  284.621640][T20438] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.624423][T20438] Buffer I/O error on dev nbd1, logical block 0, async page read
[  284.626810][T20438] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  284.629529][T20438] Buffer I/O error on dev nbd1, logical block 1, async page read
[  284.632806][T20438] ldm_validate_partition_table(): Disk read failed.
[  284.635426][T20438] Dev nbd1: unable to read RDB block 0
[  284.637782][T20438]  nbd1: unable to read partition table
[  284.642182][T20438] ldm_validate_partition_table(): Disk read failed.
[  284.644723][T20438] Dev nbd1: unable to read RDB block 0
[  284.646914][T20438]  nbd1: unable to read partition table

VM DIAGNOSIS:
17:28:58  Registers:
info registers vcpu 0

CPU#0
RAX=140e36106f7c2100 RBX=ffffffff81976c78 RCX=140e36106f7c2100 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8a3afd4fc8 CR3=000000001e0f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8a3d386478 00007f8a3d386450 XMM03=00007f8a3d386488 00007f8a3d386480
XMM04=00007f8a3deed100 00007f8a3d386440 XMM05=00007f8a3d386458 00007f8a3d3864a0
XMM06=00007f8a3d386498 00007f8a3d386490 XMM07=00007f8a3d386488 00007f8a3d386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8a3d211df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000035a3 RDI=00000000000035a4 RBP=00000000000003f8 RSP=ffffc90002bde390
R8 =ffff888108a60237 R9 =1ffff1102114c046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee898 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f86d20226c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd69d1c9bc6 CR3=000000003a6fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00ff0000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffff0000
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=000000000000ff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
