last executing test programs:

17.667681206s ago: executing program 0 (id=1346):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffece, &(0x7f0000000380)={&(0x7f0000000880)=@getqdisc={0x30, 0x26, 0x4, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0x2, 0xd}, {0x3, 0x6}}, [{0x4}, {0x4}, {0x4}, {}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0) (async)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000180)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880004d6c9db0000db15d088bd8b7000000000d9ce9bc7e28d94000200ff01800a0000ebfc0607bdfd5910547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840", 0x90) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4012}, 0x20000010) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003ec0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3}}, @TCA_FLOWER_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r10)
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=ANY=[@ANYBLOB="e1b0c833da81a1164b389e34f5639d3c01065a1155bf9004905ae514f1c76639a32f07b2fc9a45d9b3d695919a12695e166ba0de7bf609f367f8357340bcd98b7a646495583486a63ea41d61b45ac0f781e0ba9763131ae25cc34cd9aec58efb85f884a89e74dec510ed16b035e58f65e1ab158ff84a2fe4322352534a7b1f2bb4a198c27b1a9cb564beda82fd742acfe535f12c1952354fc891abb42b0f656f0714f2e90a2b24b1ca3e31dcebae5314185983e9a9199e8395dc5bca425b4770b8d0f9421a9bb0a81cf10784465372d447a017cb673c6303dbfec5b9b4c95897d45dd92a04ad1138bb4dfb08e48a8b8626b458f0dc46da537d0f8bf874900b36c9aae6f127d6b6eca20855ec8500024eebcaf1706759b7159613bcc73892909b624c45f80ca75c0deeb94fc73386bc444a71a992bd7741d1f840927b5cb767b594a91ffae2f3408eaec79a405d1d968ddbf7ec182286a54ab25e56a573c8c6346eca4bff12452b65ac83df13afdd7f4199bdf27d134722855946721e1fd47c3ac75021da250dc72bfb49e88f49b84e0852d61465a976746d3397b01335574cea53dff84e4579746c6ccae25fa782c6cd2cb233cb51f946c2c56635c7f0621d6d1a0b8b6cbd419522db677022d17e97cb83a54d916656103e685e4ad635c4536c98060ffdb426c7b48b38e619c6e840bbfdb76189c124c155b7c660d4d3664811088c9dcf2080f2af59d9132a401f1e42e4e2e2a2cbdae97ea2c0dfad2dfd6b500a40202c62c21d105a5b39265b4eceafa897b45f62643c3a861f33bf996c600fafd109b0c906eda330b75dbec1c6ea69afff724e25a29f8f017a004d9d40d89631f2d65d3bdc4c70c0048a346712edc155f279", @ANYRES16=r11, @ANYBLOB="410328bd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)

17.327065031s ago: executing program 0 (id=1347):
r0 = socket(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "2dc3fa5474cf6690", "50822f66b97a105f5b00d8edc5151b4a", "b2356f41", "06b950e7846e2394"}, 0x28)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x400c844)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18)
unshare(0x64000600)
r6 = socket$inet6(0x10, 0x2, 0x0)
write(r6, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x18, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0x80, 0xfffffffe, 0x80}})

16.619962731s ago: executing program 0 (id=1354):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r0 = socket$inet(0x2, 0x1, 0x4)
sendto$inet(r0, &(0x7f0000000000)="b1c7a81a32ddc49f332878a4d68b2086be9b2b566bef3ad6ff2530e7bada6d4ba3e5a6718b250699ca9066f67fb555fe6aad56fa1b6a61a1c1b89ad03ddb5dadfc6934e3ae8c5ce4af307917a81a424697b74591a45c6f92daeb0aca18cb99690afadaf9ba62892cce2f4379cbe4c3ef93bebda85015bfc2447a", 0x7a, 0x400c815, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0a00ff00000000711044000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="600000004e007f049eefc7b4d87c87406910f368911005ea366248266e311c32ba82fbd3eaef15cdd18a5e6d0d4452706ca39be850bc2da9e5d2", 0x3a}, {&(0x7f0000000180)="78cabf2dfb73fc0a512a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52bf06", 0x26}], 0x2}, 0x0)

16.558495924s ago: executing program 0 (id=1357):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r4=>0x0})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x22, 0x2000}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="54a14720d99eeacb18000000000000000000000040000000ea5cf562fa6d6fab8faf6306c3488bf0e028345db2ec6cd9be950547808df871a55faefef7f2f30b63e679c12272d3109064755e7e3d90e4b9db14535f93e9f2403c6846177bd600769d54bb70033c6826e3b0f80496e9b9ae6abc9123ed5a7096c6f9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xb}, 0x94)
r5 = accept4(r1, 0x0, &(0x7f0000000380), 0x80800)
sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4, @ANYBLOB="3b55e330c8b2ea1391078a9b09300ebf0378745f3304c9d9a717dd55577a6284666a51646cfdde2301a0750b8f3ea39a5e972c31ddf74a066c1a843ed0f544aaedbb6af998dda441468c19255eedf8f66bb1bc5ad184e549060c29299d7f1887f0e5c0d1da605927f44c3009"], 0x24}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x18)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
close(r9)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="0200000002"], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="0200000006"], 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40020)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x18}, {0xffff, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000640), r14)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x800)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r15, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

16.423577183s ago: executing program 0 (id=1360):
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x3f, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) (async)
r6 = socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fdfff"}) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
pipe(&(0x7f0000000040)={<r9=>0xffffffffffffffff})
close(r9) (async)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={<r11=>0x0, 0x9b, "ff95cf1b180f459c8bcbf90c6cfff9e41008dba78e50504980e1fa35d65c8f9ace5df83e96bc3ca7f70d18881c64d7810b08556744be4432444d590c1794add0e7678abd471b8cb531715268547941444260d65af306b409bf6623788417bb64a45b0ec088e051b577d8d150d1b02bbd2684a370938d82704f31989aea48e54a754c242deb7dfcc06f309e30eda3929af11fe9963d7bcb6aed07dc"}, &(0x7f0000000180)=0xa3)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000001c0)={r11, @in6={{0xa, 0x4e23, 0xf2d, @local, 0x3}}, 0x7, 0x7, 0x0, 0x6, 0x2}, &(0x7f0000000280)=0x98) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

16.357816009s ago: executing program 0 (id=1363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = socket(0x1, 0x806, 0x3d)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
close(r3)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004040)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)

16.040225764s ago: executing program 1 (id=1370):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x16, @multicast1, 0x4e21, 0x4, 'sed\x00', 0x0, 0x7, 0x15}, 0x2c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r3, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x9, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2b3}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x50}}, 0x44804)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a", 0x1)
r5 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000280))
bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0xb28, @none, 0x6, 0x1}, 0xe)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a", @ANYRES32=0x0, @ANYBLOB="00000013"], 0x24}}, 0x40000c0)

16.039942603s ago: executing program 2 (id=1371):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r4, 0x0, &(0x7f0000000a80))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r6=>0x0})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r11, 0xe, 0x80000000, 0x2e8a}, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r8)
r12 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r12, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r12, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x128, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x840}, 0x7d654d7d88bd122b)
sendmmsg(r12, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="e50000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="18005e800800020000000000040001"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0)

15.940278374s ago: executing program 1 (id=1372):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000009c0)=[{}], &(0x7f0000000a00)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0x7)
listen(r7, 0x8cd7)
sendmsg$nl_generic(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
getsockopt$sock_int(r10, 0x1, 0x10, 0x0, &(0x7f0000000080))
r11 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'nr0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r12, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448)
sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000c0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x200048c0)

15.815540843s ago: executing program 1 (id=1373):
socket$netlink(0x10, 0x3, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
socket(0xa, 0x4, 0x7)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9f216c1a9f00000000000000510000005100000002000000000000000400000d000000000000000001000000070000000200000004000000020000000000000005000000020000000000001205000000060000000100000f010000000200000037dd000002000000d50000000000"], 0x0, 0x6e, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r7 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r7, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000006fd9f4b2240012800b0001006d61637365630000140002800500080005"], 0x4c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYRES64=r6], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
listen(r7, 0x4)
listen(r7, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES16=r7, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x20044894)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'dummy0\x00', 0xdd20})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4044080}, 0x40091)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4a0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0001000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0)
setsockopt(r9, 0x8, 0x2547, &(0x7f0000001280)="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", 0x1000)

15.749085141s ago: executing program 1 (id=1374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x14, 0x1, 0x5, 0x701, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x1c}], 0x1}, 0x0)

15.748651753s ago: executing program 1 (id=1375):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=@newsa={0x150, 0x1a, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x6c}, {@in=@private=0xa010102, 0x0, 0x32}, @in=@multicast1, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x92, 0x80000, 0x81, 0x4}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0xa, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "25cac5216d3c8af0aa763c9a18bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779e16f}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000015000000000000170000400000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x7c, &(0x7f0000000200)=""/124, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000015000000000000170000400000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x7c, &(0x7f0000000200)=""/124, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
socket$l2tp(0x2, 0x2, 0x73) (async)
r1 = socket$l2tp(0x2, 0x2, 0x73)
socket$l2tp(0x2, 0x2, 0x73) (async)
r2 = socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0xc0000000, 0x240, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
syz_emit_ethernet(0x57, &(0x7f0000000000)={@broadcast, @remote, @void, {@llc={0x4, {@snap={0xab, 0x0, "fc", "3de061", 0xf8, "c8a47a1895ea8b1df6679901d582cd2507db88ef174b295caea0a98727404eeb81474a2ac4763eeed947b0c9ec9ca43510adf765354e0ef82f184f9e466694c749"}}}}}, 0x0)
close(r2)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7, 0x3, 0x3, 0x100, 0x7, 0x40440025, r6}) (async)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7, 0x3, 0x3, 0x100, 0x7, 0x40440025, r6})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0)

15.689170716s ago: executing program 1 (id=1376):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x887)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="05000600010000000f0007000000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0)

15.178987464s ago: executing program 2 (id=1377):
r0 = socket(0x15, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380e00000000000000000000000000000a000000140019800800010008620554a900a83282c200001000018017000280f3fd010006000000"], 0x38}}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0xf20f6000)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x400})
sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc004)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000940)={r4, "16c07cce7b8dad343e2b492bbd94970e"})

15.178644989s ago: executing program 2 (id=1378):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000b06eb950937aac41cc79bb55e23c7bbd4ea8227759a1bec144e95a9bf5cd8bd160f734eebcfc25a4d3c1c5186fb5cfff8924ff1da616e6c7117ffd2ec925eb154fd145163ede740362d5521a09e859ae14c4e870beb7ca6639d632a148bc5ac317a1449def07", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)
r1 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r5 = socket(0x23, 0x5, 0x0)
listen(r5, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='khugetlb +net_prio -\v\x00\x00\x00\x00\x00\x00 '], 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000800)={0xa0000006})
close(0x3)

15.108224412s ago: executing program 2 (id=1379):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000031000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x10}, 0x19}, 0x4100)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0xf7fc, 0x2, 0xb, {0x2, 0x6, @local}}, 0x24)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x4d)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0)

15.105898048s ago: executing program 2 (id=1380):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) (async)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0)
sendfile(r6, r8, &(0x7f0000000240)=0x6, 0x9)

14.989698192s ago: executing program 2 (id=1381):
syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0x4d}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x76171c1, @mcast2}}, 0x0, 0x1, [{{0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}]}, 0x110)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x800, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "04c2ad", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff8, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0)

0s ago: executing program 32 (id=1376):
r0 = socket$inet(0x2, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x887)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="05000600010000000f0007000000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0)

kernel console output (not intermixed with test programs):

x10
[   48.080304][ T5922]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   48.080315][ T5922]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   48.080342][ T5922]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   48.080352][ T5922]  warn_alloc+0x214/0x310
[   48.080363][ T5922]  ? stack_depot_save_flags+0x429/0x900
[   48.080375][ T5922]  ? __pfx_warn_alloc+0x10/0x10
[   48.080385][ T5922]  ? kasan_save_track+0x4f/0x80
[   48.080393][ T5922]  ? xskq_create+0x56/0x170
[   48.080403][ T5922]  ? xsk_init_queue+0xb0/0x110
[   48.080412][ T5922]  ? xsk_setsockopt+0x43f/0x710
[   48.080421][ T5922]  ? do_sock_setsockopt+0x25a/0x3e0
[   48.080429][ T5922]  ? __x64_sys_setsockopt+0x18b/0x220
[   48.080438][ T5922]  ? do_syscall_64+0xfa/0x3b0
[   48.080445][ T5922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.080454][ T5922]  __vmalloc_node_range_noprof+0x125/0x12f0
[   48.080476][ T5922]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   48.080488][ T5922]  ? __kasan_kmalloc+0x93/0xb0
[   48.080497][ T5922]  vmalloc_user_noprof+0xad/0xf0
[   48.080506][ T5922]  ? xskq_create+0xbf/0x170
[   48.080517][ T5922]  xskq_create+0xbf/0x170
[   48.080529][ T5922]  xsk_init_queue+0xb0/0x110
[   48.080541][ T5922]  xsk_setsockopt+0x43f/0x710
[   48.080552][ T5922]  ? __pfx_xsk_setsockopt+0x10/0x10
[   48.080562][ T5922]  ? __lock_acquire+0xab9/0xd20
[   48.080573][ T5922]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   48.080584][ T5922]  ? __pfx_xsk_setsockopt+0x10/0x10
[   48.080594][ T5922]  do_sock_setsockopt+0x25a/0x3e0
[   48.080610][ T5922]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   48.080621][ T5922]  ? __fget_files+0x2a/0x420
[   48.080635][ T5922]  __x64_sys_setsockopt+0x18b/0x220
[   48.080647][ T5922]  do_syscall_64+0xfa/0x3b0
[   48.080654][ T5922]  ? lockdep_hardirqs_on+0x9c/0x150
[   48.080665][ T5922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.080694][ T5922]  ? exc_page_fault+0x9f/0xf0
[   48.080707][ T5922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.080715][ T5922] RIP: 0033:0x7f7314f8e929
[   48.080723][ T5922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.080729][ T5922] RSP: 002b:00007f7315e8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   48.080737][ T5922] RAX: ffffffffffffffda RBX: 00007f73151b6080 RCX: 00007f7314f8e929
[   48.080743][ T5922] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   48.080748][ T5922] RBP: 00007f7315010b39 R08: 0000000000000004 R09: 0000000000000000
[   48.080753][ T5922] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   48.080758][ T5922] R13: 0000000000000000 R14: 00007f73151b6080 R15: 00007ffd0edd8be8
[   48.080769][ T5922]  </TASK>
[   48.080789][ T5922] Mem-Info:
[   48.182465][ T5922] active_anon:5023 inactive_anon:0 isolated_anon:0
[   48.182465][ T5922]  active_file:726 inactive_file:38201 isolated_file:0
[   48.182465][ T5922]  unevictable:1768 dirty:1412 writeback:0
[   48.182465][ T5922]  slab_reclaimable:9144 slab_unreclaimable:51141
[   48.182465][ T5922]  mapped:17966 shmem:2433 pagetables:914
[   48.182465][ T5922]  sec_pagetables:0 bounce:0
[   48.182465][ T5922]  kernel_misc_reclaimable:0
[   48.182465][ T5922]  free:300656 free_pcp:23886 free_cma:0
[   48.196894][ T5922] Node 0 active_anon:8460kB inactive_anon:0kB active_file:2392kB inactive_file:31128kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35120kB dirty:5048kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5676kB pagetables:2116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   48.207334][ T5922] Node 1 active_anon:11700kB inactive_anon:0kB active_file:512kB inactive_file:121676kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36744kB dirty:600kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5692kB pagetables:1540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   48.222960][ T5925] netlink: 'syz.1.13': attribute type 3 has an invalid length.
[   48.230886][ T5925] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13'.
[   48.237059][ T5922] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   48.239535][ T5921] Bluetooth: MGMT ver 1.23
[   48.250408][ T5923] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   48.250722][ T5922] lowmem_reserve[]: 0 812 812 812 812
[   48.256404][ T5922] Node 0 DMA32 free:434212kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8460kB inactive_anon:0kB active_file:2392kB inactive_file:31128kB unevictable:3536kB writepending:5048kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:23572kB local_pcp:20116kB free_cma:0kB
[   48.267341][ T5922] lowmem_reserve[]: 0 0 0 0 0
[   48.268946][ T5922] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   48.280507][ T5922] lowmem_reserve[]: 0 0 854 854 854
[   48.282397][ T5922] Node 1 Normal free:296012kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11880kB inactive_anon:0kB active_file:512kB inactive_file:121676kB unevictable:3536kB writepending:600kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:70424kB local_pcp:47852kB free_cma:0kB
[   48.293316][ T5922] lowmem_reserve[]: 0 0 0 0 0
[   48.295083][ T5922] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   48.299329][ T5922] Node 0 DMA32: 169*4kB (UME) 92*8kB (ME) 74*16kB (UME) 100*32kB (UME) 23*64kB (UM) 11*128kB (M) 2*256kB (ME) 4*512kB (UME) 1*1024kB (E) 0*2048kB 103*4096kB (M) = 434148kB
[   48.305311][ T5922] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   48.310629][ T5922] Node 1 Normal: 401*4kB (ME) 608*8kB (UME) 399*16kB (UME) 15*32kB (ME) 14*64kB (ME) 12*128kB (M) 9*256kB (UME) 7*512kB (ME) 6*1024kB (M) 5*2048kB (UM) 63*4096kB (M) = 296084kB
[   48.317182][ T5922] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   48.328313][ T5922] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   48.333776][ T5922] 41360 total pagecache pages
[   48.335612][ T5922] 0 pages in swap cache
[   48.337218][ T5922] Free swap  = 124996kB
[   48.338723][ T5922] Total swap = 124996kB
[   48.340117][ T5922] 786301 pages RAM
[   48.341369][ T5922] 0 pages HighMem/MovableOnly
[   48.343059][ T5922] 241085 pages reserved
[   48.344385][ T5922] 0 pages cma reserved
[   48.473730][ T5940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18'.
[   48.476634][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   48.478359][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.480386][ T5940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18'.
[   48.531481][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.537355][ T5947] IPVS: Error connecting to the multicast addr
[   48.655747][ T5952] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.670024][ T5948] wireguard0: entered promiscuous mode
[   48.671815][ T5948] wireguard0: entered allmulticast mode
[   49.169056][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   49.210042][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'.
[   49.419593][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'.
[   49.604462][ T5990] warning: `syz.1.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.623006][ T5830] Bluetooth: hci1: command tx timeout
[   49.693435][ T5830] Bluetooth: hci2: command tx timeout
[   49.844879][ T6004] xt_hashlimit: size too large, truncated to 1048576
[   49.899701][ T6006] : renamed from bridge_slave_0 (while UP)
[   49.945434][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'.
[   50.037574][ T6011] IPVS: Error joining to the multicast group
[   50.179907][ T6015] vlan2: entered promiscuous mode
[   50.181724][ T6015] bond0: entered promiscuous mode
[   50.183709][ T6015] bond_slave_0: entered promiscuous mode
[   50.185659][ T6015] bond_slave_1: entered promiscuous mode
[   50.235200][ T6018] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   50.305561][ T6023] netlink: 'syz.0.45': attribute type 3 has an invalid length.
[   50.343809][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   50.542779][ T5952] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.615114][ T6032] pimreg: entered allmulticast mode
[   50.620345][ T6032] pimreg: left allmulticast mode
[   50.867715][ T6045] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[   50.871849][ T6045] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   51.018151][ T5952] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.092318][ T5952] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.127231][ T6065] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET)
[   51.182437][ T5952] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.217787][ T5952] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.226974][ T5952] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.238072][ T6073] Zero length message leads to an empty skb
[   51.256395][ T5952] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.397289][ T6093] tipc: Started in network mode
[   51.398970][ T6093] tipc: Node identity 1a974679c391, cluster identity 4711
[   51.401360][ T6093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.406175][ T6093] tipc: Resetting bearer <eth:syzkaller0>
[   51.415532][ T6092] tipc: Disabling bearer <eth:syzkaller0>
[   51.615604][ T6116] netlink: 'syz.0.66': attribute type 4 has an invalid length.
[   51.693115][ T5220] Bluetooth: hci1: command tx timeout
[   51.775617][ T5220] Bluetooth: hci2: command tx timeout
[   51.848701][ T6139] netlink: 'syz.2.74': attribute type 39 has an invalid length.
[   51.892696][ T6141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   51.895202][ T6141] IPv6: NLM_F_CREATE should be set when creating new route
[   51.910282][ T6141] lo: entered allmulticast mode
[   51.912304][ T6141] tunl0: entered allmulticast mode
[   51.917516][ T6141] gre0: entered allmulticast mode
[   51.929696][ T6141] gretap0: entered allmulticast mode
[   51.935086][ T6141] erspan0: entered allmulticast mode
[   51.940473][ T6141] ip_vti0: entered allmulticast mode
[   51.944258][ T6141] ip6_vti0: entered allmulticast mode
[   51.949842][ T6141] sit0: entered allmulticast mode
[   51.956197][ T6141] ip6tnl0: entered allmulticast mode
[   51.962465][ T6141] ip6gre0: entered allmulticast mode
[   51.968804][ T6141] syz_tun: entered allmulticast mode
[   51.974345][ T6141] ip6gretap0: entered allmulticast mode
[   51.978740][ T6141] vcan0: entered allmulticast mode
[   51.983625][ T6141] bond0: entered allmulticast mode
[   51.985396][ T6141] bond_slave_0: entered allmulticast mode
[   51.987333][ T6141] bond_slave_1: entered allmulticast mode
[   51.996928][ T6141] team0: entered allmulticast mode
[   51.998725][ T6141] team_slave_0: entered allmulticast mode
[   52.000656][ T6141] team_slave_1: entered allmulticast mode
[   52.006278][ T6141] dummy0: entered allmulticast mode
[   52.012252][ T6141] nlmon0: entered allmulticast mode
[   52.018243][ T6141] caif0: entered allmulticast mode
[   52.020144][ T6141] batadv0: entered allmulticast mode
[   52.026262][ T6141] vxcan0: entered allmulticast mode
[   52.029139][ T6141] vxcan1: entered allmulticast mode
[   52.031856][ T6141] veth0: entered allmulticast mode
[   52.036935][ T6141] veth1: entered allmulticast mode
[   52.043320][ T6141] wg0: entered allmulticast mode
[   52.047381][ T6141] wg1: entered allmulticast mode
[   52.051304][ T6141] wg2: entered allmulticast mode
[   52.054377][ T6141] veth0_to_bridge: entered allmulticast mode
[   52.057543][ T6141] bridge_slave_0: entered allmulticast mode
[   52.060797][ T6141] veth1_to_bridge: entered allmulticast mode
[   52.070578][ T6141] bridge_slave_1: entered allmulticast mode
[   52.075042][ T6141] veth0_to_bond: entered allmulticast mode
[   52.081241][ T6141] veth1_to_bond: entered allmulticast mode
[   52.087211][ T6141] veth0_to_team: entered allmulticast mode
[   52.098499][ T6141] veth1_to_team: entered allmulticast mode
[   52.105946][ T6141] veth0_to_batadv: entered allmulticast mode
[   52.111703][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.114912][ T6141] batadv_slave_0: entered allmulticast mode
[   52.120711][ T6141] veth1_to_batadv: entered allmulticast mode
[   52.130405][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.134983][ T6141] batadv_slave_1: entered allmulticast mode
[   52.141591][ T6141] xfrm0: entered allmulticast mode
[   52.146736][ T6141] veth0_to_hsr: entered allmulticast mode
[   52.156192][ T6141] hsr_slave_0: entered allmulticast mode
[   52.159991][ T6141] veth1_to_hsr: entered allmulticast mode
[   52.168464][ T6141] hsr_slave_1: entered allmulticast mode
[   52.175230][ T6141] hsr0: entered allmulticast mode
[   52.179938][ T6141] veth1_virt_wifi: entered allmulticast mode
[   52.185307][ T6141] veth0_virt_wifi: entered allmulticast mode
[   52.188349][ T6141] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   52.190915][ T6141] veth1_vlan: entered allmulticast mode
[   52.198152][ T6141] veth0_vlan: entered allmulticast mode
[   52.209909][ T6141] vlan0: entered allmulticast mode
[   52.211698][ T6141] vlan1: entered allmulticast mode
[   52.213911][ T6141] macvlan0: entered allmulticast mode
[   52.219222][ T6141] macvlan1: entered allmulticast mode
[   52.223528][ T6141] ipvlan0: entered allmulticast mode
[   52.225346][ T6141] ipvlan1: entered allmulticast mode
[   52.227307][ T6141] veth1_macvtap: entered allmulticast mode
[   52.230492][ T6141] veth0_macvtap: entered allmulticast mode
[   52.239712][ T6141] macvtap0: entered allmulticast mode
[   52.245185][ T6141] macsec0: entered allmulticast mode
[   52.250428][ T6141] geneve0: entered allmulticast mode
[   52.256732][ T6141] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.259608][ T6141] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.262424][ T6141] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.265590][ T6141] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.268598][ T6141] geneve1: entered allmulticast mode
[   52.274421][ T6141] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   52.281504][ T6141] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   52.287258][ T6141] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   52.292144][ T6141] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   52.302046][ T6141] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   52.309219][ T6141] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   52.313695][ T6141] vlan2: left promiscuous mode
[   52.315311][ T6141] bond0: left promiscuous mode
[   52.316885][ T6141] bond_slave_0: left promiscuous mode
[   52.318789][ T6141] bond_slave_1: left promiscuous mode
[   52.320680][ T6141] vlan2: entered allmulticast mode
[   52.322390][ T6141] vxlan0: entered allmulticast mode
[   52.325016][ T6141] syzkaller0: entered allmulticast mode
[   52.483635][ T6146] __nla_validate_parse: 14 callbacks suppressed
[   52.483645][ T6146] netlink: 124 bytes leftover after parsing attributes in process `syz.1.75'.
[   52.809090][ T6168] GUP no longer grows the stack in syz.1.81 (6168): 200000006000-20000000a000 (200000005000)
[   52.812781][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.1.81 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   52.812793][ T6168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   52.812798][ T6168] Call Trace:
[   52.812802][ T6168]  <TASK>
[   52.812806][ T6168]  dump_stack_lvl+0x189/0x250
[   52.812826][ T6168]  ? __pfx_dump_stack_lvl+0x10/0x10
[   52.812835][ T6168]  ? __pfx__printk+0x10/0x10
[   52.812843][ T6168]  ? find_vma+0xe7/0x160
[   52.812873][ T6168]  __get_user_pages+0x2a60/0x30b0
[   52.812896][ T6168]  ? __pfx___get_user_pages+0x10/0x10
[   52.812903][ T6168]  ? __gup_longterm_locked+0xbf7/0x15b0
[   52.812911][ T6168]  ? down_read_killable+0x1d1/0x350
[   52.812919][ T6168]  ? try_get_folio+0x633/0x660
[   52.812928][ T6168]  __gup_longterm_locked+0xd66/0x15b0
[   52.812937][ T6168]  ? try_grab_folio_fast+0x1be/0x4f0
[   52.812949][ T6168]  ? gup_fast_fallback+0x1afc/0x2260
[   52.812958][ T6168]  gup_fast_fallback+0x1cd4/0x2260
[   52.812980][ T6168]  ? __pfx_gup_fast_fallback+0x10/0x10
[   52.812986][ T6168]  ? trace_contention_end+0x39/0x120
[   52.812996][ T6168]  ? __mutex_lock+0x330/0xe80
[   52.813005][ T6168]  ? is_valid_gup_args+0x11f/0x200
[   52.813013][ T6168]  ? get_user_pages_fast+0x4d/0xb0
[   52.813021][ T6168]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   52.813033][ T6168]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   52.813043][ T6168]  ? wait_for_space+0x24d/0x2d0
[   52.813053][ T6168]  iov_iter_get_pages2+0x5e/0xa0
[   52.813062][ T6168]  __se_sys_vmsplice+0x548/0x10d0
[   52.813079][ T6168]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   52.813088][ T6168]  ? __pfx_futex_wait+0x10/0x10
[   52.813100][ T6168]  ? __lock_acquire+0xab9/0xd20
[   52.813122][ T6168]  ? do_pipe2+0xf7/0x170
[   52.813132][ T6168]  ? rcu_is_watching+0x15/0xb0
[   52.813143][ T6168]  ? do_syscall_64+0xbe/0x3b0
[   52.813152][ T6168]  do_syscall_64+0xfa/0x3b0
[   52.813158][ T6168]  ? lockdep_hardirqs_on+0x9c/0x150
[   52.813168][ T6168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.813175][ T6168]  ? exc_page_fault+0x9f/0xf0
[   52.813186][ T6168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.813193][ T6168] RIP: 0033:0x7f73b558e929
[   52.813200][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.813206][ T6168] RSP: 002b:00007f73b6390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   52.813215][ T6168] RAX: ffffffffffffffda RBX: 00007f73b57b6080 RCX: 00007f73b558e929
[   52.813220][ T6168] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d
[   52.813224][ T6168] RBP: 00007f73b5610b39 R08: 0000000000000000 R09: 0000000000000000
[   52.813228][ T6168] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   52.813232][ T6168] R13: 0000000000000000 R14: 00007f73b57b6080 R15: 00007fff7f886938
[   52.813244][ T6168]  </TASK>
[   52.907756][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   52.910674][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   52.918208][ T6167] ip6tnl1: entered promiscuous mode
[   52.920065][ T6167] ip6tnl1: entered allmulticast mode
[   53.413270][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'.
[   53.416940][ T6179] hsr_slave_0: left promiscuous mode
[   53.419273][ T6179] hsr_slave_1: left promiscuous mode
[   53.693109][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   53.772974][ T5836] Bluetooth: hci1: command tx timeout
[   53.853544][ T5836] Bluetooth: hci2: command 0x0419 tx timeout
[   53.948210][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.950770][ T6194] bridge0: port 1() entered disabled state
[   53.997549][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.006549][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.069805][ T6194] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.075278][ T6194] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.078321][ T6194] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.081096][ T6194] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.099783][ T6194] ip6tnl1: left promiscuous mode
[   54.101440][ T6194] ip6tnl1: left allmulticast mode
[   54.182553][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'.
[   54.236104][ T6198] netlink: 'syz.1.89': attribute type 30 has an invalid length.
[   54.905324][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'.
[   54.936354][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'.
[   54.964316][  T789] cfg80211: failed to load regulatory.db
[   55.009627][ T6238] netlink: 84 bytes leftover after parsing attributes in process `syz.1.102'.
[   55.022718][ T6242] netlink: 'syz.0.100': attribute type 13 has an invalid length.
[   55.025801][ T6242] netlink: 'syz.0.100': attribute type 17 has an invalid length.
[   55.028320][ T6242] lo: left allmulticast mode
[   55.034982][ T6242] tunl0: left allmulticast mode
[   55.037343][ T6242] gre0: left allmulticast mode
[   55.038289][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.103'.
[   55.040070][ T6242] gretap0: left allmulticast mode
[   55.048641][ T6242] erspan0: left allmulticast mode
[   55.055055][ T6242] ip_vti0: left allmulticast mode
[   55.057428][ T6242] ip6_vti0: left allmulticast mode
[   55.059909][ T6242] sit0: left allmulticast mode
[   55.064925][ T6242] ip6tnl0: left allmulticast mode
[   55.067452][ T6242] ip6gre0: left allmulticast mode
[   55.069860][ T6242] syz_tun: left allmulticast mode
[   55.077968][ T6242] ip6gretap0: left allmulticast mode
[   55.084765][ T6242] vcan0: left allmulticast mode
[   55.088120][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.091397][ T6242] team0: left allmulticast mode
[   55.093703][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[   55.096502][ T6242] dummy0: left allmulticast mode
[   55.099312][ T6242] nlmon0: left allmulticast mode
[   55.101851][ T6242] caif0: left allmulticast mode
[   55.104183][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.146234][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'.
[   55.154306][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.211107][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.267634][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   55.892847][ T6265] netlink: 'syz.1.108': attribute type 25 has an invalid length.
[   55.935268][ T5836] Bluetooth: hci2: command 0x0419 tx timeout
[   56.296211][ T6242] syz.0.100 (6242) used greatest stack depth: 19192 bytes left
[   56.527028][ T6321] netlink: 'syz.0.119': attribute type 14 has an invalid length.
[   57.270348][ T6355] xt_TPROXY: Can be used only with -p tcp or -p udp
[   57.329494][ T6359] bridge_slave_0: left allmulticast mode
[   57.331387][ T6359] bridge_slave_0: left promiscuous mode
[   57.342750][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.347355][ T6359] bridge_slave_1: left allmulticast mode
[   57.349218][ T6359] bridge_slave_1: left promiscuous mode
[   57.351109][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.361402][ T6359] bond0: (slave bond_slave_0): Releasing backup interface
[   57.366679][ T6359] bond0: (slave bond_slave_1): Releasing backup interface
[   57.378550][ T6359] team0: Port device team_slave_0 removed
[   57.384756][ T6359] team0: Port device team_slave_1 removed
[   57.387201][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.391904][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.396431][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.407136][ T6359] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.478457][ T6366] syzkaller0: entered allmulticast mode
[   57.532396][ T6379] __nla_validate_parse: 12 callbacks suppressed
[   57.532406][ T6379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.137'.
[   57.532754][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   57.550680][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.138'.
[   57.559054][ T6383] netlink: 204 bytes leftover after parsing attributes in process `syz.2.139'.
[   57.562205][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'.
[   57.581800][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   57.591306][ T6385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   57.646419][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'.
[   57.651566][ T6395] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'.
[   57.770100][ T6403] netlink: 84 bytes leftover after parsing attributes in process `syz.0.144'.
[   57.957612][ T6431] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   58.002391][ T6439] macsec0: entered promiscuous mode
[   58.016547][ T6439] veth1_macvtap: left promiscuous mode
[   58.035015][ T6439] macsec0 (unregistering): left promiscuous mode
[   58.121174][ T6443] team0 (unregistering): Port device team_slave_0 removed
[   58.126174][ T6443] team0 (unregistering): Port device team_slave_1 removed
[   58.502142][ T6489] Cannot find add_set index 0 as target
[   58.584761][ T6499] : left allmulticast mode
[   58.586295][ T6499] : left promiscuous mode
[   58.587889][ T6499] bridge0: port 1() entered disabled state
[   58.603978][ T6499] bridge_slave_1: left allmulticast mode
[   58.605860][ T6499] bridge_slave_1: left promiscuous mode
[   58.607772][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.612141][ T6499] bond0: (slave bond_slave_0): Releasing backup interface
[   58.618218][ T6499] bond0: (slave bond_slave_1): Releasing backup interface
[   58.622762][ T6499] team0: Port device team_slave_0 removed
[   58.626379][ T6499] team0: Port device team_slave_1 removed
[   58.628421][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.631154][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[   59.098873][ T6505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.207329][ T6509] netlink: 'syz.2.166': attribute type 21 has an invalid length.
[   59.209882][ T6509] netlink: 'syz.2.166': attribute type 22 has an invalid length.
[   59.212368][ T6509] netlink: 'syz.2.166': attribute type 23 has an invalid length.
[   59.216325][ T6509] netlink: 'syz.2.166': attribute type 25 has an invalid length.
[   59.218852][ T6509] netlink: 'syz.2.166': attribute type 26 has an invalid length.
[   59.277049][ T6513] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   59.298978][ T6513] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   59.305174][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   59.309995][ T6513] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.321826][ T6513] veth3: entered promiscuous mode
[   59.326468][ T6513] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   59.338733][ T6513] bond1: (slave ip6gretap1): Removing an active aggregator
[   59.342238][ T6513] bond1: (slave ip6gretap1): Releasing backup interface
[   59.344923][ T6513] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 9a:c5:01:48:70:41 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   59.352211][ T6513] bond1: (slave veth3): Releasing backup interface
[   59.785995][ T6549] lo speed is unknown, defaulting to 1000
[   59.795819][ T6549] lo speed is unknown, defaulting to 1000
[   59.801205][ T6549] lo speed is unknown, defaulting to 1000
[   59.870980][ T6557] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[   59.878235][ T6557] netlink: 'syz.1.181': attribute type 4 has an invalid length.
[   59.885062][ T6549] infiniband syz0: set active
[   59.887354][ T5892] lo speed is unknown, defaulting to 1000
[   59.889281][ T6549] infiniband syz0: added lo
[   59.908265][ T6549] RDS/IB: syz0: added
[   59.909881][ T6549] smc: adding ib device syz0 with port count 1
[   59.912009][ T6549] smc:    ib device syz0 port 1 has pnetid 
[   59.914749][ T5892] lo speed is unknown, defaulting to 1000
[   59.917855][ T6549] lo speed is unknown, defaulting to 1000
[   60.007098][ T6549] lo speed is unknown, defaulting to 1000
[   60.090834][ T6549] lo speed is unknown, defaulting to 1000
[   60.315824][ T6570] lo speed is unknown, defaulting to 1000
[   60.358128][ T6571] netlink: 'syz.2.186': attribute type 13 has an invalid length.
[   60.360615][ T6571] netlink: 'syz.2.186': attribute type 17 has an invalid length.
[   60.440000][ T5297] lo speed is unknown, defaulting to 1000
[   60.848830][ T6615] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   60.928687][ T6620] lo speed is unknown, defaulting to 1000
[   60.978491][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.019142][ T6626] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   61.745164][ T6634] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   61.752378][ T6634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   61.825672][ T6640] tipc: Started in network mode
[   61.827230][ T6640] tipc: Node identity 767f0b76e174, cluster identity 4711
[   61.832094][ T6640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.835659][ T6640] syzkaller0: entered promiscuous mode
[   61.837336][ T6640] syzkaller0: entered allmulticast mode
[   61.844732][ T6640] syzkaller1: entered promiscuous mode
[   61.846804][ T6640] syzkaller1: entered allmulticast mode
[   61.943838][ T6639] tipc: Resetting bearer <eth:syzkaller0>
[   61.951362][ T6639] tipc: Disabling bearer <eth:syzkaller0>
[   62.100342][ T6655] ip6gretap2: entered promiscuous mode
[   62.284851][ T6664] vxcan1: left allmulticast mode
[   62.474806][ T6679] hsr_slave_0: left promiscuous mode
[   62.477117][ T6679] hsr_slave_1: left promiscuous mode
[   62.498444][ T6685] bridge0: port 1(gretap0) entered blocking state
[   62.500738][ T6685] bridge0: port 1(gretap0) entered disabled state
[   62.503073][ T6685] gretap0: entered allmulticast mode
[   62.505550][ T6685] gretap0: entered promiscuous mode
[   62.512697][ T6685] vlan3: entered promiscuous mode
[   62.516288][ T6685] bridge0: entered promiscuous mode
[   62.518061][ T6685] vlan3: entered allmulticast mode
[   62.519713][ T6685] bridge0: entered allmulticast mode
[   62.534521][ T6686] lo speed is unknown, defaulting to 1000
[   62.693389][ T6694] __nla_validate_parse: 28 callbacks suppressed
[   62.693399][ T6694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.221'.
[   62.722694][ T6695] veth3: entered promiscuous mode
[   62.754829][ T6697] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   62.806654][ T6707] netlink: 'syz.1.224': attribute type 23 has an invalid length.
[   62.969831][ T6722] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   62.977249][ T6723] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   63.121909][ T6733] netlink: 312 bytes leftover after parsing attributes in process `syz.2.231'.
[   63.194614][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'.
[   63.197392][ T6735] netlink: 152 bytes leftover after parsing attributes in process `syz.2.232'.
[   63.201976][ T6735] netlink: 'syz.2.232': attribute type 1 has an invalid length.
[   63.342670][ T6744] netlink: 'syz.2.235': attribute type 4 has an invalid length.
[   63.346393][ T6744] netlink: 17 bytes leftover after parsing attributes in process `syz.2.235'.
[   63.406983][ T6744] tipc: Can't bind to reserved service type 0
[   63.460762][ T6750] macsec0: entered allmulticast mode
[   63.462540][ T6750] macvlan0: entered allmulticast mode
[   63.464327][ T6750] veth1_vlan: entered allmulticast mode
[   63.467473][ T6750] macvlan0: left allmulticast mode
[   63.469201][ T6750] veth1_vlan: left allmulticast mode
[   63.507763][ T6750] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   63.510581][ T6750] netlink: 120 bytes leftover after parsing attributes in process `syz.2.236'.
[   63.527080][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[   63.582272][ T6760] netlink: 165 bytes leftover after parsing attributes in process `syz.2.239'.
[   63.638319][ T6762] lo speed is unknown, defaulting to 1000
[   63.734592][ T6764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.766963][ T5871] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   63.774890][ T5871] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   63.798988][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.862159][ T6762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.894660][ T1089] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[   63.989434][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'.
[   63.995158][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'.
[   64.003046][ T1089] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[   64.113048][ T1089] wlan1: authentication with 08:02:11:00:00:00 timed out
[   64.927492][ T6822] netlink: 'syz.2.255': attribute type 83 has an invalid length.
[   64.959313][ T6827] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   65.006122][ T6831] xt_TCPMSS: Only works on TCP SYN packets
[   65.048319][ T6836] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   65.051214][ T6836] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   65.053859][ T6835] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   65.056907][ T6835] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[   65.063462][ T6837] netlink: 'syz.0.260': attribute type 10 has an invalid length.
[   65.066565][ T6837] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   65.076285][ T6837] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   65.109965][ T6839] syzkaller1: entered promiscuous mode
[   65.112488][ T6839] syzkaller1: entered allmulticast mode
[   65.234494][ T6851] netem: change failed
[   65.304253][ T6853] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   65.391971][ T6858] lo speed is unknown, defaulting to 1000
[   65.435034][ T6859] netlink: 'syz.2.268': attribute type 13 has an invalid length.
[   65.437406][ T6859] netlink: 'syz.2.268': attribute type 17 has an invalid length.
[   65.629244][ T6865] netlink: 'syz.2.270': attribute type 29 has an invalid length.
[   65.976901][ T6876] netlink: 'syz.1.273': attribute type 5 has an invalid length.
[   66.309728][ T6900] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   66.315294][ T6897] lo speed is unknown, defaulting to 1000
[   66.352013][ T6902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.417370][ T6903] lo speed is unknown, defaulting to 1000
[   66.542143][ T6917] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.550968][ T6917] bond2: (slave gretap1): making interface the new active one
[   66.554089][ T6917] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   66.973697][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.114071][ T6958] xt_TPROXY: Can be used only with -p tcp or -p udp
[   67.117201][ T6958] netlink: zone id is out of range
[   67.118828][ T6958] netlink: zone id is out of range
[   67.120515][ T6958] netlink: zone id is out of range
[   67.122196][ T6958] netlink: zone id is out of range
[   67.123858][ T6958] netlink: zone id is out of range
[   67.125415][ T6958] netlink: zone id is out of range
[   67.126991][ T6958] netlink: zone id is out of range
[   67.128576][ T6958] netlink: zone id is out of range
[   67.238217][ T6965] lo speed is unknown, defaulting to 1000
[   67.567005][ T6997] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.585685][ T5892] syz1: Port: 1 Link ACTIVE
[   67.586460][ T6994] lo speed is unknown, defaulting to 1000
[   67.707696][ T7003] __nla_validate_parse: 28 callbacks suppressed
[   67.707705][ T7003] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.308'.
[   67.707716][ T7005] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.308'.
[   67.726445][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[   67.730154][ T7007] netlink: 88 bytes leftover after parsing attributes in process `syz.0.309'.
[   67.869038][ T7017] macvtap1: entered allmulticast mode
[   67.871509][ T7017] veth0_macvtap: entered allmulticast mode
[   67.944640][ T7026] pim6reg: entered allmulticast mode
[   67.968529][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   68.002750][ T7022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'.
[   68.043897][ T7024] netem: change failed
[   68.208005][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   68.209132][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.213646][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.261817][ T7045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.369687][ T7061] syzkaller0: entered promiscuous mode
[   68.371441][ T7061] syzkaller0: entered allmulticast mode
[   69.145005][ T7066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.147395][ T7071] syzkaller0: entered promiscuous mode
[   69.149325][ T7071] syzkaller0: entered allmulticast mode
[   69.159166][ T7064] tipc: Resetting bearer <eth:syzkaller0>
[   69.162283][ T7063] tipc: Resetting bearer <eth:syzkaller0>
[   69.170570][ T7063] tipc: Disabling bearer <eth:syzkaller0>
[   69.180811][ T7079] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.329'.
[   69.253127][ T7089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.330'.
[   69.366042][ T5892] hid-generic 0005:046D:0A0E.0001: collection stack underflow
[   69.372282][ T5892] hid-generic 0005:046D:0A0E.0001: item 0 0 0 12 parsing failed
[   69.377339][ T5892] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[   69.420786][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'.
[   69.834478][ T7115] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   69.923418][ T7119] wireguard0: entered promiscuous mode
[   69.925218][ T7119] wireguard0: entered allmulticast mode
[   70.099850][ T7128] lo speed is unknown, defaulting to 1000
[   70.302968][ T7139] syz.0.349: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   70.308151][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.0.349 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   70.308163][ T7139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.308168][ T7139] Call Trace:
[   70.308172][ T7139]  <TASK>
[   70.308177][ T7139]  dump_stack_lvl+0x189/0x250
[   70.308192][ T7139]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.308201][ T7139]  ? __pfx__printk+0x10/0x10
[   70.308212][ T7139]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.308223][ T7139]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   70.308233][ T7139]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   70.308244][ T7139]  warn_alloc+0x214/0x310
[   70.308254][ T7139]  ? stack_depot_save_flags+0x40/0x900
[   70.308267][ T7139]  ? __pfx_warn_alloc+0x10/0x10
[   70.308277][ T7139]  ? kasan_save_track+0x4f/0x80
[   70.308285][ T7139]  ? xskq_create+0x56/0x170
[   70.308296][ T7139]  ? xsk_init_queue+0xb0/0x110
[   70.308305][ T7139]  ? xsk_setsockopt+0x43f/0x710
[   70.308314][ T7139]  ? do_sock_setsockopt+0x25a/0x3e0
[   70.308323][ T7139]  ? __x64_sys_setsockopt+0x18b/0x220
[   70.308330][ T7139]  ? do_syscall_64+0xfa/0x3b0
[   70.308337][ T7139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.308347][ T7139]  __vmalloc_node_range_noprof+0x125/0x12f0
[   70.308369][ T7139]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   70.308381][ T7139]  ? __kasan_kmalloc+0x93/0xb0
[   70.308391][ T7139]  vmalloc_user_noprof+0xad/0xf0
[   70.308401][ T7139]  ? xskq_create+0xbf/0x170
[   70.308412][ T7139]  xskq_create+0xbf/0x170
[   70.308424][ T7139]  xsk_init_queue+0xb0/0x110
[   70.308435][ T7139]  xsk_setsockopt+0x43f/0x710
[   70.308446][ T7139]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.308455][ T7139]  ? __lock_acquire+0xab9/0xd20
[   70.308466][ T7139]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   70.308476][ T7139]  ? __pfx_xsk_setsockopt+0x10/0x10
[   70.308487][ T7139]  do_sock_setsockopt+0x25a/0x3e0
[   70.308497][ T7139]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   70.308507][ T7139]  ? __fget_files+0x2a/0x420
[   70.308520][ T7139]  __x64_sys_setsockopt+0x18b/0x220
[   70.308534][ T7139]  do_syscall_64+0xfa/0x3b0
[   70.308541][ T7139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.308548][ T7139]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   70.308557][ T7139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.308563][ T7139] RIP: 0033:0x7f759998e929
[   70.308571][ T7139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   70.308577][ T7139] RSP: 002b:00007f759a79e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   70.308586][ T7139] RAX: ffffffffffffffda RBX: 00007f7599bb5fa0 RCX: 00007f759998e929
[   70.308591][ T7139] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[   70.308595][ T7139] RBP: 00007f7599a10b39 R08: 0000000000000004 R09: 0000000000000000
[   70.308599][ T7139] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.308626][ T7139] R13: 0000000000000000 R14: 00007f7599bb5fa0 R15: 00007ffcf6194188
[   70.308639][ T7139]  </TASK>
[   70.308643][ T7139] Mem-Info:
[   70.423237][ T7139] active_anon:7206 inactive_anon:0 isolated_anon:0
[   70.423237][ T7139]  active_file:944 inactive_file:38210 isolated_file:0
[   70.423237][ T7139]  unevictable:1768 dirty:1444 writeback:0
[   70.423237][ T7139]  slab_reclaimable:9422 slab_unreclaimable:87064
[   70.423237][ T7139]  mapped:21837 shmem:5315 pagetables:885
[   70.423237][ T7139]  sec_pagetables:0 bounce:0
[   70.423237][ T7139]  kernel_misc_reclaimable:0
[   70.423237][ T7139]  free:257500 free_pcp:22840 free_cma:0
[   70.436878][ T7139] Node 0 active_anon:7368kB inactive_anon:0kB active_file:2616kB inactive_file:31132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35440kB dirty:5128kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5872kB pagetables:1908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.447457][ T7139] Node 1 active_anon:23020kB inactive_anon:0kB active_file:1160kB inactive_file:121708kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51908kB dirty:648kB writeback:0kB shmem:16212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5836kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   70.457623][ T7139] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   70.466372][ T7139] lowmem_reserve[]: 0 812 812 812 812
[   70.468134][ T7139] Node 0 DMA32 free:396416kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7368kB inactive_anon:0kB active_file:2616kB inactive_file:31132kB unevictable:3536kB writepending:5128kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:41660kB local_pcp:25752kB free_cma:0kB
[   70.477835][ T7139] lowmem_reserve[]: 0 0 0 0 0
[   70.479309][ T7139] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   70.488373][ T7139] lowmem_reserve[]: 0 0 854 854 854
[   70.490108][ T7139] Node 1 Normal free:156208kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26284kB inactive_anon:0kB active_file:1160kB inactive_file:121708kB unevictable:3536kB writepending:648kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48528kB local_pcp:19268kB free_cma:0kB
[   70.503761][ T7139] lowmem_reserve[]: 0 0 0 0 0
[   70.505277][ T7139] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   70.509121][ T7139] Node 0 DMA32: 473*4kB (UM) 320*8kB (UME) 282*16kB (UME) 423*32kB (UME) 139*64kB (UME) 48*128kB (UME) 18*256kB (UE) 12*512kB (UE) 8*1024kB (UM) 4*2048kB (UM) 81*4096kB (UM) = 396452kB
[   70.515633][ T7139] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   70.520793][ T7139] Node 1 Normal: 320*4kB (UE) 245*8kB (U) 505*16kB (U) 40*32kB (UME) 10*64kB (UE) 5*128kB (UM) 1*256kB (U) 1*512kB (M) 4*1024kB (UM) 7*2048kB (UM) 30*4096kB (M) = 155960kB
[   70.526461][ T7139] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.529372][ T7139] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   70.532228][ T7139] 44469 total pagecache pages
[   70.534717][ T7139] 0 pages in swap cache
[   70.536014][ T7139] Free swap  = 124996kB
[   70.537432][ T7139] Total swap = 124996kB
[   70.538814][ T7139] 786301 pages RAM
[   70.540016][ T7139] 0 pages HighMem/MovableOnly
[   70.541478][ T7139] 241085 pages reserved
[   70.542820][ T7139] 0 pages cma reserved
[   70.556402][ T7142] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   70.635858][ T7146] gretap1: entered promiscuous mode
[   70.775444][ T7158] validate_nla: 72 callbacks suppressed
[   70.775454][ T7158] netlink: 'syz.0.355': attribute type 2 has an invalid length.
[   70.815547][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.001777][ T7171] sctp: [Deprecated]: syz.2.360 (pid 7171) Use of int in max_burst socket option.
[   71.001777][ T7171] Use struct sctp_assoc_value instead
[   71.029733][ T7174] netlink: 'syz.0.361': attribute type 25 has an invalid length.
[   71.062048][ T7179] netlink: 'syz.1.363': attribute type 1 has an invalid length.
[   71.143729][ T7184] netlink: 'syz.0.365': attribute type 11 has an invalid length.
[   71.268642][ T5891] IPVS: starting estimator thread 0...
[   71.274352][ T7193] tap0: tun_chr_ioctl cmd 1074025677
[   71.276417][ T7193] tap0: linktype set to 823
[   71.336542][ T7196] net_ratelimit: 5 callbacks suppressed
[   71.336552][ T7196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.363360][ T7194] IPVS: using max 79 ests per chain, 189600 per kthread
[   71.659598][ T7222] IPVS: persistence engine module ip_vs_pe_ not found
[   71.664651][ T5871] IPVS: starting estimator thread 0...
[   71.691910][ T7226] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   71.694683][ T7226] netlink: 'syz.1.375': attribute type 10 has an invalid length.
[   71.697253][ T7226] netlink: 'syz.1.375': attribute type 4 has an invalid length.
[   71.762976][ T7224] IPVS: using max 78 ests per chain, 187200 per kthread
[   71.955774][ T7245] wireguard0: entered promiscuous mode
[   71.957825][ T7245] wireguard0: entered allmulticast mode
[   72.151896][ T7263] netlink: 'syz.0.386': attribute type 72 has an invalid length.
[   72.173061][ T5830] Bluetooth: hci2: command 0x0419 tx timeout
[   72.234525][ T7265] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.238545][ T7265] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   72.240853][ T7265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   72.249027][ T7265] bridge0: port 2(syz_tun) entered blocking state
[   72.252545][ T7265] bridge0: port 2(syz_tun) entered disabled state
[   72.255831][ T7265] syz_tun: entered allmulticast mode
[   72.261555][ T7265] syz_tun: entered promiscuous mode
[   72.303726][ T7273] x_tables: duplicate underflow at hook 2
[   72.580108][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   72.697345][ T7294] netlink: 'syz.1.395': attribute type 7 has an invalid length.
[   72.699990][ T7294] netlink: 'syz.1.395': attribute type 8 has an invalid length.
[   72.765689][ T7300] __nla_validate_parse: 21 callbacks suppressed
[   72.765699][ T7300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.397'.
[   72.784720][ T7296] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[   72.788489][ T7296] netlink: 224 bytes leftover after parsing attributes in process `syz.2.396'.
[   72.808952][ T7302] netlink: 203396 bytes leftover after parsing attributes in process `syz.1.398'.
[   72.911399][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   72.945654][ T7317] netlink: 52 bytes leftover after parsing attributes in process `syz.2.402'.
[   72.949537][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[   72.952574][ T7319] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   72.959880][ T7319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.005389][ T7324] gretap0: entered promiscuous mode
[   73.008593][ T7324] batman_adv: batadv0: Adding interface: macvlan2
[   73.010882][ T7324] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.020175][ T7324] batman_adv: batadv0: Interface activated: macvlan2
[   73.026668][ T7321] tipc: Started in network mode
[   73.028419][ T7321] tipc: Node identity , cluster identity 4711
[   73.030589][ T7321] tipc: Failed to obtain node identity
[   73.032477][ T7321] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   73.040919][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'.
[   73.143581][ T7328] block nbd0: server does not support multiple connections per device.
[   73.146881][ T7328] block nbd0: shutting down sockets
[   73.151041][ T7332] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   73.190887][ T7334] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'.
[   73.202823][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   73.281713][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.412'.
[   73.354252][ T7350] lo speed is unknown, defaulting to 1000
[   73.376677][ T7346] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   73.688690][ T7368] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.691545][ T7367] ieee802154 phy0 wpan0: encryption failed: -22
[   73.693687][ T7367] ieee802154 phy0 wpan0: encryption failed: -22
[   73.699229][ T7367] ieee802154 phy0 wpan0: encryption failed: -22
[   73.731341][ T7366] ieee802154 phy0 wpan0: encryption failed: -22
[   73.839212][ T7373] openvswitch: netlink: Actions may not be safe on all matching packets
[   74.066465][ T7394] 8021q: adding VLAN 0 to HW filter on device bond3
[   74.083949][ T7394] 8021q: adding VLAN 0 to HW filter on device bond4
[   74.096414][ T7395] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[   74.099023][ T7395] CPU: 0 UID: 0 PID: 7395 Comm: syz.1.424 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   74.099034][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.099039][ T7395] Call Trace:
[   74.099042][ T7395]  <TASK>
[   74.099047][ T7395]  dump_stack_lvl+0x189/0x250
[   74.099062][ T7395]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.099071][ T7395]  ? __pfx__printk+0x10/0x10
[   74.099082][ T7395]  ? kernfs_path_from_node+0x2c/0x260
[   74.099093][ T7395]  ? kernfs_path_from_node+0x2c/0x260
[   74.099103][ T7395]  ? kernfs_path_from_node+0x2c/0x260
[   74.099114][ T7395]  ? kernfs_path_from_node+0x22c/0x260
[   74.099125][ T7395]  ? kernfs_path_from_node+0x2c/0x260
[   74.099137][ T7395]  sysfs_warn_dup+0x8e/0xa0
[   74.099148][ T7395]  sysfs_do_create_link_sd+0xc0/0x110
[   74.099159][ T7395]  device_add_class_symlinks+0x1cf/0x240
[   74.099170][ T7395]  device_add+0x475/0xb50
[   74.099181][ T7395]  wiphy_register+0x199a/0x26b0
[   74.099196][ T7395]  ? __pfx_wiphy_register+0x10/0x10
[   74.099205][ T7395]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   74.099218][ T7395]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   74.099229][ T7395]  ieee80211_register_hw+0x33e1/0x4120
[   74.099246][ T7395]  ? ieee80211_register_hw+0x14a1/0x4120
[   74.099259][ T7395]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   74.099270][ T7395]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   74.099284][ T7395]  ? __hrtimer_setup+0x187/0x210
[   74.099292][ T7395]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   74.099303][ T7395]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   74.099324][ T7395]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   74.099332][ T7395]  ? trace_kmalloc+0x1f/0xd0
[   74.099340][ T7395]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   74.099349][ T7395]  ? kstrndup+0xbf/0x160
[   74.099363][ T7395]  hwsim_new_radio_nl+0xea4/0x1b10
[   74.099373][ T7395]  ? __pfx___nla_validate_parse+0x10/0x10
[   74.099387][ T7395]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   74.099400][ T7395]  ? __nla_parse+0x40/0x60
[   74.099409][ T7395]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   74.099434][ T7395]  genl_family_rcv_msg_doit+0x215/0x300
[   74.099448][ T7395]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   74.099464][ T7395]  ? bpf_lsm_capable+0x9/0x20
[   74.099473][ T7395]  ? security_capable+0x7e/0x2e0
[   74.099488][ T7395]  genl_rcv_msg+0x60e/0x790
[   74.099501][ T7395]  ? __pfx_genl_rcv_msg+0x10/0x10
[   74.099512][ T7395]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   74.099528][ T7395]  netlink_rcv_skb+0x208/0x470
[   74.099538][ T7395]  ? __pfx_genl_rcv_msg+0x10/0x10
[   74.099550][ T7395]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   74.099566][ T7395]  ? down_read+0x1ad/0x2e0
[   74.099575][ T7395]  genl_rcv+0x28/0x40
[   74.099584][ T7395]  netlink_unicast+0x75c/0x8e0
[   74.099619][ T7395]  netlink_sendmsg+0x805/0xb30
[   74.099634][ T7395]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.099645][ T7395]  ? aa_sock_msg_perm+0x94/0x160
[   74.099658][ T7395]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.099669][ T7395]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.099679][ T7395]  __sock_sendmsg+0x21c/0x270
[   74.099688][ T7395]  ____sys_sendmsg+0x505/0x830
[   74.099700][ T7395]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.099714][ T7395]  ? import_iovec+0x74/0xa0
[   74.099726][ T7395]  ___sys_sendmsg+0x21f/0x2a0
[   74.099742][ T7395]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.099766][ T7395]  ? __fget_files+0x2a/0x420
[   74.099776][ T7395]  ? __fget_files+0x3a0/0x420
[   74.099791][ T7395]  __x64_sys_sendmsg+0x19b/0x260
[   74.099801][ T7395]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.099819][ T7395]  ? do_syscall_64+0xbe/0x3b0
[   74.099829][ T7395]  do_syscall_64+0xfa/0x3b0
[   74.099836][ T7395]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.099847][ T7395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.099854][ T7395]  ? exc_page_fault+0x9f/0xf0
[   74.099866][ T7395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.099872][ T7395] RIP: 0033:0x7f73b558e929
[   74.099880][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.099886][ T7395] RSP: 002b:00007f73b63b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.099895][ T7395] RAX: ffffffffffffffda RBX: 00007f73b57b5fa0 RCX: 00007f73b558e929
[   74.099900][ T7395] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[   74.099904][ T7395] RBP: 00007f73b5610b39 R08: 0000000000000000 R09: 0000000000000000
[   74.099909][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.099913][ T7395] R13: 0000000000000000 R14: 00007f73b57b5fa0 R15: 00007fff7f886938
[   74.099924][ T7395]  </TASK>
[   74.361734][ T7410] wireguard0: entered promiscuous mode
[   74.363756][ T7410] wireguard0: entered allmulticast mode
[   74.487666][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.490374][ T7431] syzkaller0: entered promiscuous mode
[   74.492149][ T7431] syzkaller0: entered allmulticast mode
[   74.494589][ T7433] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[   74.518820][ T7431] sch_fq: defrate 257 ignored.
[   74.526658][ T7431] tipc: Resetting bearer <eth:syzkaller0>
[   74.529840][ T7430] tipc: Resetting bearer <eth:syzkaller0>
[   74.548033][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[   74.705573][ T7461] bond2 (unregistering): Released all slaves
[   74.718503][ T7458] lo speed is unknown, defaulting to 1000
[   74.737326][ T7470] bond1: (slave gretap1): making interface the new active one
[   74.740113][ T7470] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   75.057087][ T7512] raw_sendmsg: syz.2.457 forgot to set AF_INET. Fix it!
[   75.106753][ T7518] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   75.609407][ T7563] 8021q: adding VLAN 0 to HW filter on device bond5
[   75.612186][ T7561] lo speed is unknown, defaulting to 1000
[   75.627502][ T7563] bond5: (slave bridge2): making interface the new active one
[   75.631192][ T7563] bond5: (slave bridge2): Enslaving as an active interface with an up link
[   75.646063][ T7563] gretap2: entered promiscuous mode
[   75.650077][ T7563] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   75.658378][ T7563] macvlan3: entered promiscuous mode
[   75.660099][ T7563] macvlan3: entered allmulticast mode
[   75.662077][ T7563] bond5: entered promiscuous mode
[   75.663927][ T7563] bridge2: entered promiscuous mode
[   75.666086][ T7563] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   75.668637][ T7563] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   75.675164][ T7563] bond5: left promiscuous mode
[   75.677261][ T7563] bridge2: left promiscuous mode
[   75.695077][ T7564] macvlan3: entered promiscuous mode
[   75.697540][ T7564] macvlan3: entered allmulticast mode
[   75.699637][ T7564] bond5: entered promiscuous mode
[   75.701240][ T7564] bridge2: entered promiscuous mode
[   75.703644][ T7564] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   75.706297][ T7564] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   75.711538][ T7564] bond5: left promiscuous mode
[   75.713857][ T7564] bridge2: left promiscuous mode
[   75.805991][ T7568] validate_nla: 8 callbacks suppressed
[   75.806000][ T7568] netlink: 'syz.2.474': attribute type 12 has an invalid length.
[   75.869738][ T7568] syzkaller1: entered promiscuous mode
[   75.871567][ T7568] syzkaller1: entered allmulticast mode
[   75.874999][ T7570] netlink: 'syz.1.475': attribute type 15 has an invalid length.
[   76.006926][ T7582] netlink: 'syz.1.478': attribute type 1 has an invalid length.
[   76.112376][ T7593] lo speed is unknown, defaulting to 1000
[   76.132120][ T7595] netlink: 'syz.0.483': attribute type 1 has an invalid length.
[   76.229921][ T7601] lo speed is unknown, defaulting to 1000
[   76.503697][ T7628] netlink: 'syz.1.494': attribute type 1 has an invalid length.
[   76.574361][ T5830] Bluetooth: hci2: command 0x0419 tx timeout
[   77.172977][ T7643] netlink: 'syz.0.499': attribute type 1 has an invalid length.
[   77.219131][ T7643] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.248729][ T7643] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.251164][ T7643] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   77.255441][ T7643] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   77.341880][ T7650] sctp: [Deprecated]: syz.2.501 (pid 7650) Use of int in maxseg socket option.
[   77.341880][ T7650] Use struct sctp_assoc_value instead
[   77.458355][ T7671] !: renamed from dummy0
[   77.495958][ T7677] lo speed is unknown, defaulting to 1000
[   78.175877][ T7744] __nla_validate_parse: 28 callbacks suppressed
[   78.175887][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'.
[   78.183865][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'.
[   78.186919][ T7755] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   78.425912][ T7791] x_tables: ip_tables: osf match: only valid for protocol 6
[   78.441697][ T7791] netlink: 'syz.0.518': attribute type 1 has an invalid length.
[   78.451717][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[   78.486551][ T7800] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   78.529243][ T7804] xt_hashlimit: size too large, truncated to 1048576
[   78.618026][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.521'.
[   78.620896][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[   78.624000][ T7815] netlink: 'syz.0.521': attribute type 5 has an invalid length.
[   78.637681][ T7804] xt_bpf: check failed: parse error
[   78.690292][ T7824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.525'.
[   78.701917][ T7827] netlink: 72 bytes leftover after parsing attributes in process `syz.2.527'.
[   78.704538][ T7822] lo speed is unknown, defaulting to 1000
[   78.724774][ T7827] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   78.729014][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'.
[   78.762722][ T7833] netlink: 'syz.2.529': attribute type 142 has an invalid length.
[   78.767117][ T7829] netlink: 'syz.1.528': attribute type 21 has an invalid length.
[   78.774986][ T7833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.529'.
[   78.778297][ T7833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.529'.
[   79.230615][ T7879] batman_adv: batadv0: Interface deactivated: macvlan2
[   79.235006][ T7879] batman_adv: batadv0: Removing interface: macvlan2
[   79.325466][ T7887] wg0: entered promiscuous mode
[   79.328359][ T7887] wg0: entered allmulticast mode
[   80.256876][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.265362][ T7952] bond0: (slave rose0): Enslaving as an active interface with an up link
[   80.334168][ T1088] wlan0: Trigger new scan to find an IBSS to join
[   80.372511][ T7959] xt_CT: No such helper "syz0"
[   80.441646][ T7969] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   80.543514][ T7975] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.545909][ T7977] tipc: Started in network mode
[   80.547445][ T7977] tipc: Node identity cad8fa1e4609, cluster identity 4711
[   80.549815][ T7977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.556651][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv1
[   80.559929][ T7975] bond4: (slave batadv1): making interface the new active one
[   80.563171][ T7975] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   80.566123][ T7973] lo speed is unknown, defaulting to 1000
[   80.568311][ T7977] netlink: zone id is out of range
[   80.570174][ T7977] netlink: zone id is out of range
[   80.571825][ T7977] netlink: zone id is out of range
[   80.575083][ T7977] netlink: zone id is out of range
[   80.576742][ T7977] netlink: zone id is out of range
[   80.578339][ T7977] netlink: zone id is out of range
[   80.580047][ T7977] netlink: zone id is out of range
[   80.586837][ T7977] netlink: zone id is out of range
[   80.588479][ T7977] netlink: zone id is out of range
[   80.590144][ T7977] netlink: zone id is out of range
[   80.594917][ T7979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.615530][ T7977] syzkaller0: MTU too low for tipc bearer
[   80.617380][ T7977] tipc: Disabling bearer <eth:syzkaller0>
[   80.659361][ T7979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.718917][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.271321][ T7990] lo speed is unknown, defaulting to 1000
[   81.511002][ T7995] IPv6: NLM_F_REPLACE set, but no existing node found!
[   81.548459][ T7995] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   81.715102][ T8018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.717734][ T8018] syzkaller0: entered promiscuous mode
[   81.719472][ T8018] syzkaller0: entered allmulticast mode
[   81.742435][ T8018] tipc: Resetting bearer <eth:syzkaller0>
[   81.750978][ T8017] tipc: Resetting bearer <eth:syzkaller0>
[   81.758537][ T8017] tipc: Disabling bearer <eth:syzkaller0>
[   81.802613][ T8023] validate_nla: 8 callbacks suppressed
[   81.802622][ T8023] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[   81.827084][ T8025] can: request_module (can-proto-0) failed.
[   81.916555][ T8036] netlink: 'syz.0.589': attribute type 10 has an invalid length.
[   81.919225][ T8036] dummy0: entered promiscuous mode
[   81.920936][ T8036] dummy0: entered allmulticast mode
[   81.936264][ T8036] batadv_slave_0: entered promiscuous mode
[   81.949326][ T8036] batadv_slave_0 (unregistering): left promiscuous mode
[   81.951646][ T8036] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.182620][ T8070] lo speed is unknown, defaulting to 1000
[   82.377797][ T8077] erspan1: entered promiscuous mode
[   82.379767][ T8077] erspan1: entered allmulticast mode
[   82.454948][ T8081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.532650][ T8085] netlink: 'syz.2.600': attribute type 13 has an invalid length.
[   82.535563][ T8085] netlink: 'syz.2.600': attribute type 17 has an invalid length.
[   82.567099][ T8088] !: renamed from dummy0 (while UP)
[   82.730192][ T8101] lo speed is unknown, defaulting to 1000
[   83.015384][ T8118] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   83.139212][ T8137] netlink: 'syz.2.607': attribute type 21 has an invalid length.
[   83.296392][ T7774] wlan0: Trigger new scan to find an IBSS to join
[   83.319695][ T8155] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[   83.337301][ T8155] veth5: entered promiscuous mode
[   83.375993][ T8162] erspan0: entered allmulticast mode
[   83.429906][ T8173] xt_SECMARK: invalid mode: 0
[   83.520778][ T8179] sctp: [Deprecated]: syz.2.612 (pid 8179) Use of int in max_burst socket option.
[   83.520778][ T8179] Use struct sctp_assoc_value instead
[   83.631937][ T8192] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[   83.636516][ T8192] __nla_validate_parse: 15 callbacks suppressed
[   83.636524][ T8192] netlink: 68 bytes leftover after parsing attributes in process `syz.1.618'.
[   83.681720][ T8193] netlink: 'syz.0.615': attribute type 5 has an invalid length.
[   83.684514][ T8193] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.615'.
[   83.794235][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[   84.032701][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[   84.180510][ T8230] netlink: 120 bytes leftover after parsing attributes in process `syz.1.629'.
[   84.393210][ T8240] netlink: 'syz.1.632': attribute type 1 has an invalid length.
[   84.395724][ T8240] netlink: 236 bytes leftover after parsing attributes in process `syz.1.632'.
[   84.584929][ T8242] netlink: 68 bytes leftover after parsing attributes in process `syz.0.633'.
[   84.588419][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'.
[   84.638542][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[   84.641780][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[   85.192782][ T8262] dummy0: entered allmulticast mode
[   85.195422][ T8260] wg2: left allmulticast mode
[   85.209607][ T8260] wg2: entered promiscuous mode
[   85.211238][ T8260] wg2: entered allmulticast mode
[   85.244601][ T8272] lo speed is unknown, defaulting to 1000
[   85.246653][ T8272] lo speed is unknown, defaulting to 1000
[   85.248806][ T8272] lo speed is unknown, defaulting to 1000
[   85.258677][ T8272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   85.272370][ T8272] lo speed is unknown, defaulting to 1000
[   85.275915][ T8272] lo speed is unknown, defaulting to 1000
[   85.278745][ T8272] lo speed is unknown, defaulting to 1000
[   85.294820][ T8272] gretap0: Device is already in use.
[   86.104896][ T8289] netlink: 'syz.1.646': attribute type 1 has an invalid length.
[   86.123129][ T8289] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   86.128038][ T8289] bond2: (slave ip6gretap2): Releasing backup interface
[   86.154674][ T8292] net_ratelimit: 11 callbacks suppressed
[   86.154684][ T8292] openvswitch: netlink: Flow key attr not present in new flow.
[   86.205335][ T8294] 8021q: adding VLAN 0 to HW filter on device bond5
[   86.222384][ T8294] macvlan0: entered promiscuous mode
[   86.225541][ T8294] macvlan0: entered allmulticast mode
[   86.227877][ T8294] bond5: (slave macvlan0): Opening slave failed
[   86.253184][ T7779] wlan0: Trigger new scan to find an IBSS to join
[   86.422213][ T8308] tun0: tun_chr_ioctl cmd 1074025675
[   86.424112][ T8308] tun0: persist enabled
[   86.425605][ T8308] tun0: tun_chr_ioctl cmd 1074025675
[   86.427346][ T8308] tun0: persist enabled
[   86.513579][ T8315] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[   86.860303][ T8325] syzkaller1: entered promiscuous mode
[   86.865603][ T8325] syzkaller1: entered allmulticast mode
[   87.183635][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.312082][ T8344] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   87.354391][ T8350] validate_nla: 4 callbacks suppressed
[   87.354401][ T8350] netlink: 'syz.2.666': attribute type 10 has an invalid length.
[   87.358730][ T8350] netlink: 'syz.2.666': attribute type 10 has an invalid length.
[   87.377496][ T8352] netlink: 'syz.1.667': attribute type 4 has an invalid length.
[   87.398450][ T8354] veth0: entered promiscuous mode
[   87.401218][ T8354] veth0: left promiscuous mode
[   87.426078][ T8350] netlink: 'syz.2.666': attribute type 10 has an invalid length.
[   87.638276][ T8389] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   87.638402][ T8387] IPVS: stopping backup sync thread 8389 ...
[   87.811022][ T8406] netlink: 'syz.1.684': attribute type 64 has an invalid length.
[   88.666290][ T8473] : renamed from dummy0 (while UP)
[   88.739153][ T8478] lo speed is unknown, defaulting to 1000
[   88.832710][ T8478] lo speed is unknown, defaulting to 1000
[   88.977665][ T8495] netlink: 'syz.2.699': attribute type 142 has an invalid length.
[   89.056877][ T8499] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[   89.058180][ T8501] __nla_validate_parse: 29 callbacks suppressed
[   89.058189][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.2.702'.
[   89.082279][ T8499] bond3: (slave bridge0): making interface the new active one
[   89.085266][ T8499] bond3: (slave bridge0): Enslaving as an active interface with an up link
[   89.354499][ T8530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.709'.
[   89.358632][ T8530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.709'.
[   89.361479][ T8530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.709'.
[   89.368105][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'.
[   89.370843][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'.
[   89.380265][ T8532] 8021q: VLANs not supported on lo
[   89.426252][ T8527] delete_channel: no stack
[   89.495905][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[   89.509023][ T8553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   89.615908][ T8562] netlink: 'syz.1.717': attribute type 4 has an invalid length.
[   89.660015][ T8572] netlink: 'syz.0.722': attribute type 3 has an invalid length.
[   89.668578][ T8572] netlink: 56 bytes leftover after parsing attributes in process `syz.0.722'.
[   89.748169][ T8579] netlink: 'syz.0.724': attribute type 1 has an invalid length.
[   89.750780][ T8579] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.724'.
[   89.909821][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'.
[   90.362166][ T8618] netlink: 'syz.1.737': attribute type 11 has an invalid length.
[   90.370089][ T8618] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   90.372348][ T8618] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   90.656206][ T1091] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.659163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.662698][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   90.665502][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.059262][ T8630] lo: entered allmulticast mode
[   91.163196][ T8636] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   91.194673][ T8638] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   91.400815][ T8661] No such timeout policy "syz1"
[   91.480891][ T8670] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   91.807522][ T8696] bridge3: entered promiscuous mode
[   91.809386][ T8696] bridge3: entered allmulticast mode
[   91.886422][ T8701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.889476][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   91.892989][ T8629] lo: left allmulticast mode
[   91.928396][ T8701] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   91.931844][ T8701] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   91.975722][ T5830] Bluetooth: hci2: link tx timeout
[   91.978033][ T5830] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   91.981273][ T5836] Bluetooth: hci2: link tx timeout
[   91.983080][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   92.011350][ T8710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.014512][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   92.277705][ T8722] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   92.355285][ T8723] syz.0.763 (8723) used greatest stack depth: 18840 bytes left
[   92.433820][ T8734] validate_nla: 6 callbacks suppressed
[   92.433829][ T8734] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[   92.476185][ T8734] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   92.485002][ T5857] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.490269][ T8734] 8021q: adding VLAN 0 to HW filter on device bond7
[   92.515108][ T8734] veth5: entered promiscuous mode
[   92.518255][ T8734] bond7: (slave veth5): Enslaving as a backup interface with a down link
[   92.525842][ T8734] gretap0: left allmulticast mode
[   92.527484][ T8734] gretap0: left promiscuous mode
[   92.531293][ T8734] bridge0: port 1(gretap0) entered disabled state
[   92.538247][ T8734] syz_tun: left allmulticast mode
[   92.539940][ T8734] syz_tun: left promiscuous mode
[   92.543162][ T8734] bridge0: port 2(syz_tun) entered disabled state
[   92.549894][ T8734] bond0: (slave bond_slave_0): Releasing backup interface
[   92.556265][ T8734] bond0: (slave bond_slave_1): Releasing backup interface
[   92.559960][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.565921][ T8734] bond1: (slave gretap1): Releasing backup interface
[   92.570167][ T8734] bond4: (slave batadv1): Releasing active interface
[   92.576338][ T8734] bond7: (slave ip6gretap1): Removing an active aggregator
[   92.579141][ T8734] bond7: (slave ip6gretap1): Releasing backup interface
[   92.581342][ T8734] bond7: (slave ip6gretap1): the permanent HWaddr of slave - 6e:11:4c:3c:18:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   92.589269][ T8734] bond7: (slave veth5): Releasing backup interface
[   92.593284][ T5892] lo speed is unknown, defaulting to 1000
[   92.629647][ T8746] netlink: 'syz.0.767': attribute type 1 has an invalid length.
[   92.648369][ T8746] veth0: entered promiscuous mode
[   92.676034][ T8751] netlink: 'syz.1.768': attribute type 14 has an invalid length.
[   92.772633][ T8745] veth0: left promiscuous mode
[   92.816970][ T8764] veth0_to_bond: entered allmulticast mode
[   92.855333][ T8767] netlink: 'syz.2.772': attribute type 39 has an invalid length.
[   93.021879][ T8780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.033714][ T5892] lo speed is unknown, defaulting to 1000
[   93.035563][ T5892] syz0: Port: 1 Link DOWN
[   93.037353][ T5892] lo speed is unknown, defaulting to 1000
[   93.096082][ T8785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.106318][ T8785] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[   93.114648][ T8785] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[   93.142149][ T8785] tipc: Resetting bearer <eth:syzkaller0>
[   93.391077][ T8798] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.394229][ T8798] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.396922][ T8798] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.399630][ T8798] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.415884][ T8798] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.419083][ T8798] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.421842][ T8798] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.424873][ T8798] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   93.754076][ T8805] netlink: del zone limit has 8 unknown bytes
[   93.763444][ T8805] sit1: entered promiscuous mode
[   93.795744][ T8805] netlink: 'syz.0.785': attribute type 9 has an invalid length.
[   93.909626][ T8825] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[   93.912055][ T8825] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[   94.013360][ T5836] Bluetooth: hci2: command 0x0419 tx timeout
[   94.066448][ T8843] __nla_validate_parse: 25 callbacks suppressed
[   94.066458][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[   94.071484][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[   94.086348][ T8843] netlink: 100 bytes leftover after parsing attributes in process `syz.0.795'.
[   94.089393][ T8843] netlink: 100 bytes leftover after parsing attributes in process `syz.0.795'.
[   94.128820][ T5872] tipc: Node number set to 2534083446
[   94.137237][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'.
[   94.167900][ T8849] 8021q: adding VLAN 0 to HW filter on device team0
[   94.195873][ T8851] trusted_key: syz.0.798 sent an empty control message without MSG_MORE.
[   94.229266][ T8856] lo speed is unknown, defaulting to 1000
[   94.276310][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[   94.284242][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.348048][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.357833][ T8856] lo speed is unknown, defaulting to 1000
[   94.482020][ T8864] syz.1.801: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   94.487385][ T8864] CPU: 1 UID: 0 PID: 8864 Comm: syz.1.801 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   94.487397][ T8864] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   94.487402][ T8864] Call Trace:
[   94.487405][ T8864]  <TASK>
[   94.487408][ T8864]  dump_stack_lvl+0x189/0x250
[   94.487422][ T8864]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.487432][ T8864]  ? __pfx__printk+0x10/0x10
[   94.487443][ T8864]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   94.487460][ T8864]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   94.487471][ T8864]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   94.487482][ T8864]  warn_alloc+0x214/0x310
[   94.487492][ T8864]  ? stack_depot_save_flags+0x40/0x900
[   94.487505][ T8864]  ? __pfx_warn_alloc+0x10/0x10
[   94.487516][ T8864]  ? kasan_save_track+0x4f/0x80
[   94.487524][ T8864]  ? xskq_create+0x56/0x170
[   94.487557][ T8864]  ? xsk_init_queue+0xb0/0x110
[   94.487567][ T8864]  ? xsk_setsockopt+0x43f/0x710
[   94.487577][ T8864]  ? do_sock_setsockopt+0x25a/0x3e0
[   94.487586][ T8864]  ? __x64_sys_setsockopt+0x18b/0x220
[   94.487594][ T8864]  ? do_syscall_64+0xfa/0x3b0
[   94.487600][ T8864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.487612][ T8864]  __vmalloc_node_range_noprof+0x125/0x12f0
[   94.487634][ T8864]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   94.487646][ T8864]  ? __kasan_kmalloc+0x93/0xb0
[   94.487656][ T8864]  vmalloc_user_noprof+0xad/0xf0
[   94.487666][ T8864]  ? xskq_create+0xbf/0x170
[   94.487677][ T8864]  xskq_create+0xbf/0x170
[   94.487689][ T8864]  xsk_init_queue+0xb0/0x110
[   94.487700][ T8864]  xsk_setsockopt+0x43f/0x710
[   94.487710][ T8864]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.487720][ T8864]  ? __lock_acquire+0xab9/0xd20
[   94.487731][ T8864]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   94.487741][ T8864]  ? __pfx_xsk_setsockopt+0x10/0x10
[   94.487752][ T8864]  do_sock_setsockopt+0x25a/0x3e0
[   94.487761][ T8864]  ? __pfx_do_sock_setsockopt+0x10/0x10
[   94.487772][ T8864]  ? __fget_files+0x2a/0x420
[   94.487785][ T8864]  __x64_sys_setsockopt+0x18b/0x220
[   94.487796][ T8864]  do_syscall_64+0xfa/0x3b0
[   94.487803][ T8864]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.487813][ T8864]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.487820][ T8864]  ? exc_page_fault+0x9f/0xf0
[   94.487831][ T8864]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.487838][ T8864] RIP: 0033:0x7f73b558e929
[   94.487845][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.487851][ T8864] RSP: 002b:00007f73b63b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   94.487859][ T8864] RAX: ffffffffffffffda RBX: 00007f73b57b5fa0 RCX: 00007f73b558e929
[   94.487865][ T8864] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[   94.487869][ T8864] RBP: 00007f73b5610b39 R08: 0000000000000004 R09: 0000000000000000
[   94.487873][ T8864] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   94.487877][ T8864] R13: 0000000000000000 R14: 00007f73b57b5fa0 R15: 00007fff7f886938
[   94.487888][ T8864]  </TASK>
[   94.487891][ T8864] Mem-Info:
[   94.590493][ T8864] active_anon:4375 inactive_anon:0 isolated_anon:0
[   94.590493][ T8864]  active_file:1079 inactive_file:38222 isolated_file:0
[   94.590493][ T8864]  unevictable:1768 dirty:200 writeback:0
[   94.590493][ T8864]  slab_reclaimable:9550 slab_unreclaimable:92731
[   94.590493][ T8864]  mapped:18066 shmem:2447 pagetables:909
[   94.590493][ T8864]  sec_pagetables:0 bounce:0
[   94.590493][ T8864]  kernel_misc_reclaimable:0
[   94.590493][ T8864]  free:238063 free_pcp:34573 free_cma:0
[   94.605056][ T8864] Node 0 active_anon:7824kB inactive_anon:0kB active_file:3156kB inactive_file:31164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35920kB dirty:672kB writeback:0kB shmem:5048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6384kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.615976][ T8864] Node 1 active_anon:9676kB inactive_anon:0kB active_file:1160kB inactive_file:121724kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36344kB dirty:128kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5864kB pagetables:1588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   94.626718][ T8864] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   94.635953][ T8864] lowmem_reserve[]: 0 812 812 812 812
[   94.637699][ T8864] Node 0 DMA32 free:344604kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7824kB inactive_anon:0kB active_file:3156kB inactive_file:31164kB unevictable:3536kB writepending:672kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:52760kB local_pcp:15604kB free_cma:0kB
[   94.648043][ T8864] lowmem_reserve[]: 0 0 0 0 0
[   94.649649][ T8864] Node 1 DMA32 free:431200kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:25256kB local_pcp:25080kB free_cma:0kB
[   94.659243][ T8864] lowmem_reserve[]: 0 0 854 854 854
[   94.660985][ T8864] Node 1 Normal free:161088kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9676kB inactive_anon:0kB active_file:1160kB inactive_file:121724kB unevictable:3536kB writepending:128kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:60276kB local_pcp:40516kB free_cma:0kB
[   94.671071][ T8864] lowmem_reserve[]: 0 0 0 0 0
[   94.672685][ T8864] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   94.676821][ T8864] Node 0 DMA32: 1254*4kB (UM) 303*8kB (UME) 351*16kB (UME) 545*32kB (UME) 104*64kB (UME) 62*128kB (UME) 14*256kB (UME) 10*512kB (UME) 14*1024kB (UME) 7*2048kB (UME) 64*4096kB (UM) = 344608kB
[   94.682609][ T8864] Node 1 DMA32: 7*4kB (U) 9*8kB (UM) 11*16kB (UM) 9*32kB (UME) 11*64kB (UM) 13*128kB (UME) 11*256kB (UME) 7*512kB (UME) 8*1024kB (UME) 6*2048kB (UME) 98*4096kB (UM) = 431220kB
[   94.688631][ T8864] Node 1 Normal: 1161*4kB (UE) 843*8kB (UME) 825*16kB (UME) 442*32kB (UME) 158*64kB (UME) 95*128kB (UME) 33*256kB (UM) 9*512kB (UM) 15*1024kB (UM) 9*2048kB (UM) 13*4096kB (UM) = 161100kB
[   94.695018][ T8864] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[   94.698033][ T8864] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   94.700937][ T8864] 41748 total pagecache pages
[   94.702435][ T8864] 0 pages in swap cache
[   94.704223][ T8864] Free swap  = 124996kB
[   94.705557][ T8864] Total swap = 124996kB
[   94.706911][ T8864] 786301 pages RAM
[   94.708136][ T8864] 0 pages HighMem/MovableOnly
[   94.709624][ T8864] 241085 pages reserved
[   94.710941][ T8864] 0 pages cma reserved
[   95.021519][ T8895] netlink: 270 bytes leftover after parsing attributes in process `syz.1.807'.
[   95.044378][ T8893] netlink: 'syz.0.806': attribute type 25 has an invalid length.
[   95.097846][ T8893] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.806'.
[   95.111058][ T8901] gretap1: entered promiscuous mode
[   95.112952][ T8901] gretap1: entered allmulticast mode
[   95.124724][ T8903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.148680][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'.
[   95.245503][ T8918] IPv6: addrconf: prefix option has invalid lifetime
[   95.289347][ T8924] netlink: 'syz.1.818': attribute type 2 has an invalid length.
[   95.291862][ T8923] netlink: 'syz.1.818': attribute type 2 has an invalid length.
[   95.297624][ T8929] Bluetooth: MGMT ver 1.23
[   95.378423][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.823'.
[   95.615496][ T8975] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[   95.618285][ T8975] netlink: 'syz.1.834': attribute type 1 has an invalid length.
[   95.731052][ T8988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.733902][ T8988] syzkaller0: entered promiscuous mode
[   95.735640][ T8988] syzkaller0: entered allmulticast mode
[   95.748328][ T8988] tipc: Resetting bearer <eth:syzkaller0>
[   95.751379][ T8987] tipc: Resetting bearer <eth:syzkaller0>
[   95.757894][ T8987] tipc: Disabling bearer <eth:syzkaller0>
[   95.826984][ T8990] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.883799][ T8999] lo speed is unknown, defaulting to 1000
[   95.969291][ T8999] lo speed is unknown, defaulting to 1000
[   96.358346][ T9040] gtp1: entered promiscuous mode
[   96.360154][ T9040] gtp1: entered allmulticast mode
[   96.387930][ T9042] xt_l2tp: invalid flags combination: 4
[   96.510716][ T9061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.602453][ T9076] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[   96.684621][ T9085] lo speed is unknown, defaulting to 1000
[   96.715836][ T9084] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   96.718450][ T9084] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   96.760950][ T9093] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   96.784203][ T9085] lo speed is unknown, defaulting to 1000
[   96.841247][ T9098] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   97.228443][ T9145] !: left promiscuous mode
[   97.230239][ T9145] !: left allmulticast mode
[   97.232592][ T9145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.343830][ T9156] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   97.409182][ T9163] siw: device registration error -23
[   97.447465][ T9169] lo speed is unknown, defaulting to 1000
[   97.466006][ T9170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.546470][ T9169] lo speed is unknown, defaulting to 1000
[   97.699910][ T9186] validate_nla: 66 callbacks suppressed
[   97.699921][ T9186] netlink: 'syz.1.899': attribute type 4 has an invalid length.
[   97.707083][ T9186] netlink: 'syz.1.899': attribute type 4 has an invalid length.
[   97.867475][ T9199] xt_CT: You must specify a L4 protocol and not use inversions on it
[   98.039513][ T9221] sctp: [Deprecated]: syz.1.907 (pid 9221) Use of int in max_burst socket option.
[   98.039513][ T9221] Use struct sctp_assoc_value instead
[   98.140050][ T9234] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[   98.144265][ T9234] netlink: 'syz.1.911': attribute type 2 has an invalid length.
[   98.170844][ T9237] openvswitch: netlink: Message has 9 unknown bytes.
[   98.291334][ T9247] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[   98.295740][ T9247] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[   98.378191][ T9252] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   98.389738][ T9254] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   99.209925][ T9278] __nla_validate_parse: 104 callbacks suppressed
[   99.209935][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.927'.
[   99.217139][ T9278] nbd: must specify a size in bytes for the device
[   99.246629][ T9280] sch_fq: defrate 0 ignored.
[   99.271251][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.929'.
[   99.472043][ T9300] syzkaller1: entered promiscuous mode
[   99.475327][ T9300] syzkaller1: entered allmulticast mode
[   99.548434][ T9302] netlink: 'syz.0.934': attribute type 12 has an invalid length.
[  100.091371][ T9307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.936'.
[  100.099117][ T9307] wg2: entered promiscuous mode
[  100.100830][ T9307] wg2: entered allmulticast mode
[  100.224754][ T9321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.247733][ T9326] netlink: 288 bytes leftover after parsing attributes in process `syz.1.942'.
[  100.291332][ T9323] bond0: (slave wlan1): Releasing backup interface
[  100.309933][ T9337] batadv_slave_1: entered promiscuous mode
[  100.312093][ T9337] batadv_slave_1: left promiscuous mode
[  100.439289][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'.
[  100.534202][ T9359] netlink: 68 bytes leftover after parsing attributes in process `syz.2.950'.
[  100.592316][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'.
[  100.595967][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[  100.611237][ T9367] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  100.659746][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'.
[  100.662503][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.955'.
[  100.671181][ T9376] veth0_to_team: entered promiscuous mode
[  100.675132][ T9376] veth0_to_team: entered allmulticast mode
[  100.678435][ T9378] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  100.719446][ T9384] nbd: must specify an index to disconnect
[  100.781198][ T9394] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.817055][ T9382] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  100.822009][ T9382] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  100.826747][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.841345][ T9398] SET target dimension over the limit!
[  100.850308][ T9400] netlink: 'syz.0.965': attribute type 1 has an invalid length.
[  100.898638][ T9400] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  101.112738][    C0] Unknown status report in ack skb
[  101.790400][ T5871] tipc: Node number set to 2362571294
[  101.993731][ T9520] gretap0: entered promiscuous mode
[  101.997080][ T9520] 0XD: renamed from gretap0
[  102.000567][ T9520] 0XD: left promiscuous mode
[  102.002565][ T9520] 0XD: entered allmulticast mode
[  102.006696][ T9520] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check.
[  102.017428][ T9520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.328954][ T9559] lo speed is unknown, defaulting to 1000
[  102.396250][ T9560] veth0: entered promiscuous mode
[  102.417724][ T9560] veth0 (unregistering): left promiscuous mode
[  102.447607][ T9559] lo speed is unknown, defaulting to 1000
[  102.632014][ T9572] 8021q: adding VLAN 0 to HW filter on device bond7
[  102.816772][ T9595] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  103.183791][ T9636] validate_nla: 4 callbacks suppressed
[  103.183800][ T9636] netlink: 'syz.2.1027': attribute type 4 has an invalid length.
[  103.227840][ T9647] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  103.355394][ T9658] @: renamed from veth0_vlan (while UP)
[  103.392597][ T9665] netlink: 'syz.1.1037': attribute type 2 has an invalid length.
[  103.429408][ T9669] xt_hashlimit: size too large, truncated to 1048576
[  103.567724][ T9674] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.570344][ T9674] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.573710][ T9674] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.576377][ T9674] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.594161][ T9674] veth0_macvtap: left allmulticast mode
[  103.691039][ T9689] netlink: 'syz.2.1044': attribute type 10 has an invalid length.
[  103.697804][ T9689] macvtap2: entered allmulticast mode
[  103.699579][ T9689] veth0_macvtap: entered allmulticast mode
[  104.181230][ T9755] lo speed is unknown, defaulting to 1000
[  104.281966][ T9755] lo speed is unknown, defaulting to 1000
[  104.351547][ T9767] Driver unsupported XDP return value 0 on prog  (id 296) dev N/A, expect packet loss!
[  104.838283][ T9789] __nla_validate_parse: 78 callbacks suppressed
[  104.838292][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'.
[  104.899055][ T9791] SET target dimension over the limit!
[  105.003860][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.092739][ T9804] wg1: entered promiscuous mode
[  105.094729][ T9804] wg1: entered allmulticast mode
[  105.118935][ T9807] netlink: 'syz.1.1073': attribute type 10 has an invalid length.
[  105.297796][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'.
[  105.300799][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'.
[  105.582131][ T9831] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1081'.
[  105.585791][ T9831] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  105.648109][ T9840] bridge5: entered allmulticast mode
[  105.687112][ T9844] netlink: 'syz.2.1084': attribute type 4 has an invalid length.
[  105.703369][   T33] audit: type=1800 audit(1752358061.886:2): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1792 res=0 errno=0
[  105.712058][   T33] audit: type=1800 audit(1752358061.896:3): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1085" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1792 res=0 errno=0
[  105.720106][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1084'.
[  105.744351][ T9848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.758460][ T9848] netlink: 724 bytes leftover after parsing attributes in process `syz.0.1086'.
[  105.761362][ T9848] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1086'.
[  105.806879][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'.
[  105.817197][ T9852] _Z`Ԁ@: entered promiscuous mode
[  106.068039][ T9861] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1090'.
[  106.740324][ T9891] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.743353][ T9891] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.745992][ T9891] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.748726][ T9891] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.751918][ T9891] vxlan0: entered promiscuous mode
[  106.753636][ T9891] vxlan0: entered allmulticast mode
[  106.787889][ T9893] macsec0: entered allmulticast mode
[  106.789677][ T9893] macvlan0: entered allmulticast mode
[  106.792985][ T9893] macvlan0: left allmulticast mode
[  106.850210][ T9897] netlink: 'syz.2.1101': attribute type 10 has an invalid length.
[  106.881315][ T9902] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  106.937554][ T9907] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.979689][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  106.997098][ T9907] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.038159][ T9907] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.115215][ T9907] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  107.205239][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.208640][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.225732][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.227995][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.229833][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.232101][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.239209][ T9907] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.249738][ T9907] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.253876][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.255943][ T9922] tun0: tun_chr_ioctl cmd 1074025675
[  107.259015][ T9922] tun0: persist enabled
[  107.261484][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.264529][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.267584][ T9922] tun0: tun_chr_ioctl cmd 1074025675
[  107.269425][ T9922] tun0: persist disabled
[  107.277905][ T9907] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.281534][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.284414][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.286815][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.289163][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.296006][ T9907] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.299037][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.301297][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.311184][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.313779][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.316138][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.318063][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.320161][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.322076][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.325139][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.332170][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.335853][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.337658][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.342380][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.344528][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.346254][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.347979][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.354904][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.356677][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.358327][ T9924] tun0: tun_chr_ioctl cmd 1074025673
[  107.449624][ T9955] tipc: Invalid UDP bearer configuration
[  107.449649][ T9955] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  107.642563][ T9985] netlink: 'syz.0.1122': attribute type 4 has an invalid length.
[  107.649076][ T9987] syz_tun: entered promiscuous mode
[  107.652377][ T9987] batadv_slave_0: entered promiscuous mode
[  107.657833][ T9987] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  107.661041][ T9987] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  107.664870][ T9987] hsr1: entered allmulticast mode
[  107.666573][ T9987] syz_tun: entered allmulticast mode
[  107.668662][ T9987] batadv_slave_0: entered allmulticast mode
[  107.674765][ T9987] netlink: 'syz.1.1124': attribute type 1 has an invalid length.
[  107.758615][ T9991] xt_hashlimit: size too large, truncated to 1048576
[  107.858599][T10002] 0XD: left allmulticast mode
[  107.866998][T10002] wg0: left promiscuous mode
[  107.868723][T10002] wg0: left allmulticast mode
[  107.872209][T10002] wg1: left promiscuous mode
[  107.875632][T10002] wg1: left allmulticast mode
[  107.879220][T10002] veth0_to_team: left promiscuous mode
[  107.881041][T10002] veth0_to_team: left allmulticast mode
[  107.885135][T10002] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  107.893374][T10002] bridge3: left promiscuous mode
[  107.895020][T10002] bridge3: left allmulticast mode
[  107.897586][T10002] gretap1: left promiscuous mode
[  107.899216][T10002] gretap1: left allmulticast mode
[  107.911221][T10002] hsr1: left allmulticast mode
[  107.913722][T10002] syz_tun: left allmulticast mode
[  107.915578][T10002] batadv_slave_0: left allmulticast mode
[  108.005227][T10010] netlink: 'syz.2.1131': attribute type 7 has an invalid length.
[  108.201070][T10040] xt_bpf: check failed: parse error
[  108.335636][T10043] validate_nla: 1 callbacks suppressed
[  108.335646][T10043] netlink: 'syz.2.1140': attribute type 10 has an invalid length.
[  108.357886][T10054] openvswitch: netlink: Flow key attr not present in new flow.
[  108.497086][T10075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.501828][T10075] syzkaller0: entered promiscuous mode
[  108.503778][T10075] syzkaller0: entered allmulticast mode
[  108.525804][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  108.529846][T10075] netlink: 'syz.1.1152': attribute type 10 has an invalid length.
[  108.534377][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  108.544812][T10074] tipc: Disabling bearer <eth:syzkaller0>
[  108.688677][T10092] : entered promiscuous mode
[  109.083981][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.086664][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.113271][ T5872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.383267][ T5872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.415920][T10095] netlink: 'syz.2.1160': attribute type 12 has an invalid length.
[  109.426901][T10097] netem: unknown loss type 13
[  109.428740][T10097] netem: change failed
[  109.449602][T10097] tipc: Enabling <ib:lo> not permitted
[  109.451514][T10097] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  109.482046][T10099] netlink: 'syz.2.1163': attribute type 39 has an invalid length.
[  109.573923][T10112] lo speed is unknown, defaulting to 1000
[  109.670145][T10112] lo speed is unknown, defaulting to 1000
[  109.789236][T10135] netlink: 'syz.1.1172': attribute type 7 has an invalid length.
[  109.911590][T10147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.916244][T10147] syzkaller0: entered promiscuous mode
[  109.918081][T10147] syzkaller0: entered allmulticast mode
[  109.938626][T10147] tipc: Resetting bearer <eth:syzkaller0>
[  109.955946][T10147] tipc: Resetting bearer <eth:syzkaller0>
[  109.965712][T10147] tipc: Disabling bearer <eth:syzkaller0>
[  110.015066][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.069529][T10161] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.072700][T10161] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.077482][T10161] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.080436][T10161] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.084116][T10161] geneve3: entered promiscuous mode
[  110.090103][T10164] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  110.097050][T10164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  110.101479][T10164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  110.104675][T10164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  110.108114][T10164] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.111707][T10164] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.115002][T10164] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.118707][T10164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  110.122619][T10164] geneve2: entered promiscuous mode
[  110.124578][T10164] geneve2: entered allmulticast mode
[  110.234484][T10173] __nla_validate_parse: 151 callbacks suppressed
[  110.234516][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'.
[  110.240165][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1184'.
[  110.350949][T10181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'.
[  110.368082][T10182] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1187'.
[  111.321725][T10195] lo speed is unknown, defaulting to 1000
[  111.423805][T10195] lo speed is unknown, defaulting to 1000
[  112.119609][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'.
[  112.122522][T10215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'.
[  112.127606][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1197'.
[  112.130582][T10215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'.
[  112.164118][T10217] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  112.196659][T10217] bond8: (slave bridge6): making interface the new active one
[  112.200529][T10217] bond8: (slave bridge6): Enslaving as an active interface with an up link
[  112.263815][T10223] netlink: 'syz.2.1200': attribute type 6 has an invalid length.
[  112.292631][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'.
[  112.349280][T10229] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  112.507552][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1206'.
[  112.536111][T10243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.546953][T10243] tipc: Disabling bearer <eth:syzkaller0>
[  112.617131][T10251] batadv_slave_0: entered promiscuous mode
[  112.652768][T10255] syz_tun: entered allmulticast mode
[  112.688340][T10254] syz_tun: left allmulticast mode
[  112.762680][T10265] openvswitch: netlink: Flow key attr not present in new flow.
[  112.946163][T10281] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  112.948633][T10281] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  112.951063][T10281] tipc: Resetting bearer <eth:syzkaller0>
[  112.955739][T10281] netlink: 'syz.2.1221': attribute type 11 has an invalid length.
[  113.052990][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  113.452653][ T1093] tipc: Resetting bearer <eth:syzkaller0>
[  113.634971][T10320] netlink: 'syz.1.1234': attribute type 3 has an invalid length.
[  113.710040][T10327] gtp0: entered promiscuous mode
[  113.720673][T10327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.724062][T10327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.726949][T10327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.730127][T10327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.878239][T10341] lo speed is unknown, defaulting to 1000
[  113.954112][T10348] openvswitch: netlink: Flow key attr not present in new flow.
[  113.997275][T10341] lo speed is unknown, defaulting to 1000
[  113.997390][T10336] lo speed is unknown, defaulting to 1000
[  114.137358][T10336] lo speed is unknown, defaulting to 1000
[  114.448817][T10365] netlink: 'syz.2.1245': attribute type 4 has an invalid length.
[  114.590554][T10382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.171790][T10437] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  115.178663][T10437] tipc: Resetting bearer <eth:syzkaller0>
[  115.271607][T10441] __nla_validate_parse: 20 callbacks suppressed
[  115.271617][T10441] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1268'.
[  115.437849][T10454] netlink: 'syz.2.1273': attribute type 1 has an invalid length.
[  115.440402][T10454] netlink: 'syz.2.1273': attribute type 2 has an invalid length.
[  115.562178][T10462] netlink: 'syz.2.1274': attribute type 4 has an invalid length.
[  115.572979][T10462] netlink: 'syz.2.1274': attribute type 4 has an invalid length.
[  115.582732][ T5872] lo speed is unknown, defaulting to 1000
[  115.584707][ T5872] syz0: Port: 1 Link ACTIVE
[  115.586234][ T5872] lo speed is unknown, defaulting to 1000
[  115.767837][T10464] sit0: entered promiscuous mode
[  115.770262][T10464] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1275'.
[  115.804567][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'.
[  115.807368][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'.
[  115.840533][T10468] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  115.844901][T10468] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  115.847718][T10468] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  115.850581][T10468] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  115.854751][T10468] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.863248][T10468] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.866106][T10468] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.869221][T10468] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  115.872619][T10468] geneve3: entered promiscuous mode
[  115.875822][T10468] geneve3: entered allmulticast mode
[  116.161741][T10494] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.164925][T10494] syzkaller0: entered promiscuous mode
[  116.166837][T10494] syzkaller0: entered allmulticast mode
[  116.182314][T10494] tipc: Resetting bearer <eth:syzkaller0>
[  116.186758][T10493] tipc: Resetting bearer <eth:syzkaller0>
[  116.196152][T10493] tipc: Disabling bearer <eth:syzkaller0>
[  116.268792][T10505] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  116.275265][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'.
[  116.278604][T10507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1286'.
[  116.362438][T10514] bond0: option lp_interval: invalid value (18446744073709551604)
[  116.365823][T10514] bond0: option lp_interval: allowed values 1 - 2147483647
[  116.369221][T10514] netlink: 'syz.1.1289': attribute type 21 has an invalid length.
[  116.372749][T10514] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1289'.
[  116.381580][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'.
[  116.398242][T10518] siw: device registration error -23
[  116.481497][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1291'.
[  116.485134][T10527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1291'.
[  116.517187][T10521] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  116.644045][T10537] IPVS: Error joining to the multicast group
[  116.698025][T10541] ieee802154 phy0 wpan0: encryption failed: -22
[  116.701344][T10541] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  116.746351][T10543] netlink: 'syz.1.1302': attribute type 10 has an invalid length.
[  116.772278][T10545] netlink: 'syz.0.1301': attribute type 10 has an invalid length.
[  116.776287][T10545] bond0: (slave wlan1): refused to change device type
[  116.781405][T10545] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  116.788781][T10545] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  116.829067][T10547] lo speed is unknown, defaulting to 1000
[  116.956780][T10547] lo speed is unknown, defaulting to 1000
[  117.061355][T10553] netlink: 'syz.1.1304': attribute type 1 has an invalid length.
[  117.078025][T10553] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.090058][T10553] bond4: (slave bridge6): making interface the new active one
[  117.103695][T10553] bond4: (slave bridge6): Enslaving as an active interface with an up link
[  117.115836][T10553] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  117.331818][T10561] erspan0: left allmulticast mode
[  117.336016][T10561] wg2: left promiscuous mode
[  117.338286][T10561] wg2: left allmulticast mode
[  117.340257][T10561] veth0_to_bond: left allmulticast mode
[  117.342682][T10561] batadv_slave_0: left promiscuous mode
[  117.346673][T10561] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  117.349311][T10561] veth3: left promiscuous mode
[  117.351177][T10561] ip6gretap2: left promiscuous mode
[  117.353615][T10561] macvtap1: left allmulticast mode
[  117.355594][T10561] tipc: Resetting bearer <eth:syzkaller0>
[  117.361414][T10561] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  117.366077][T10561] gretap2: left promiscuous mode
[  117.367918][T10561] gtp1: left promiscuous mode
[  117.369393][T10561] gtp1: left allmulticast mode
[  117.371644][T10561] veth0_macvtap: left allmulticast mode
[  117.373877][T10561] macvtap2: left allmulticast mode
[  117.376434][T10561] bridge5: left allmulticast mode
[  117.378545][T10561] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.381299][T10561] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.384554][T10561] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.387316][T10561] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.390739][T10561] vxlan0: left promiscuous mode
[  117.392342][T10561] vxlan0: left allmulticast mode
[  117.396095][T10561] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.398830][T10561] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.401746][T10561] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.405316][T10561] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.408190][T10561] geneve3: left promiscuous mode
[  117.414096][ T5891] lo speed is unknown, defaulting to 1000
[  117.416761][ T5891] syz0: Port: 1 Link DOWN
[  117.422331][ T5891] lo speed is unknown, defaulting to 1000
[  117.683696][T10591] pim6reg: entered allmulticast mode
[  117.687256][T10591] pim6reg: left allmulticast mode
[  117.804583][T10601] nbd0: detected capacity change from 0 to 127
[  117.809990][   T56] block nbd0: Receive control failed (result -32)
[  117.901711][T10614] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  117.905925][T10614] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  117.909862][T10614] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  118.061273][T10645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.394831][T10685] lo speed is unknown, defaulting to 1000
[  118.473527][T10685] lo speed is unknown, defaulting to 1000
[  118.706730][T10690] lo speed is unknown, defaulting to 1000
[  118.733244][ T5830] Bluetooth: hci0: command tx timeout
[  118.797389][T10690] lo speed is unknown, defaulting to 1000
[  118.847667][T10690] smc: removing ib device syz0
[  118.929909][T10695] validate_nla: 2 callbacks suppressed
[  118.929919][T10695] netlink: 'syz.1.1348': attribute type 29 has an invalid length.
[  118.935862][T10691] lo speed is unknown, defaulting to 1000
[  118.954920][T10693] netlink: 'syz.0.1347': attribute type 12 has an invalid length.
[  119.212854][T10707] xt_CT: No such helper "snmp"
[  119.270800][T10707] bond9: entered promiscuous mode
[  119.272617][T10707] bond9: entered allmulticast mode
[  119.275199][T10707] 8021q: adding VLAN 0 to HW filter on device bond9
[  119.403015][T10714] block nbd1: server does not support multiple connections per device.
[  119.414188][T10714] block nbd1: shutting down sockets
[  119.458266][ T1093] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  119.519709][T10729] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.525041][T10729] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  119.527527][T10729] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  119.530157][T10729] tipc: Resetting bearer <eth:syzkaller0>
[  120.031333][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.036142][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.041543][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.045487][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.053735][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.135761][T10766] lo speed is unknown, defaulting to 1000
[  120.247174][T10776] netlink: 'syz.1.1373': attribute type 1 has an invalid length.
[  120.354545][T10785] netlink: 'syz.1.1376': attribute type 7 has an invalid length.
[  120.360393][T10785] __nla_validate_parse: 28 callbacks suppressed
[  120.360403][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'.
[  120.666879][ T5839] bond0 (unregistering): Released all slaves
[  120.673920][ T5839] bond1 (unregistering): Released all slaves
[  120.680395][ T5839] bond2 (unregistering): Released all slaves
[  120.746704][ T5839] bond3 (unregistering): Released all slaves
[  120.816532][ T5839] bond4 (unregistering): Released all slaves
[  120.897199][ T5839] bond5 (unregistering): Released all slaves
[  120.908218][ T5839] bond6 (unregistering): Released all slaves
[  120.965253][T10793] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1380'.
[  120.968334][T10795] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1380'.
[  120.983235][ T5839] bond7 (unregistering): Released all slaves
[  120.991534][ T5839] bond8 (unregistering): Released all slaves
[  122.093093][ T5830] Bluetooth: hci2: command tx timeout
[  124.173050][ T5830] Bluetooth: hci2: command tx timeout
[  126.253048][ T5830] Bluetooth: hci2: command tx timeout
[  128.333106][ T5830] Bluetooth: hci2: command tx timeout
[  136.334998][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  136.338269][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  136.340814][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  136.344011][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  136.346408][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.367871][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.370968][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.373673][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.376441][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.378902][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  138.413932][ T5836] Bluetooth: hci4: command tx timeout
[  138.416218][ T5836] Bluetooth: hci3: command tx timeout
[  140.493003][ T5830] Bluetooth: hci3: command tx timeout
[  140.495002][ T5830] Bluetooth: hci4: command tx timeout
[  142.572993][ T5836] Bluetooth: hci4: command tx timeout
[  142.574856][ T5836] Bluetooth: hci3: command tx timeout
[  144.653001][ T5830] Bluetooth: hci3: command tx timeout
[  144.655023][ T5830] Bluetooth: hci4: command tx timeout
[  150.813019][ T1088] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  170.172965][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  180.398634][ T5220] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  180.401945][ T5220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  180.404752][ T5220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  180.407434][ T5220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  180.409926][ T5220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  196.597748][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  196.600920][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  196.603696][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  196.606495][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  196.609065][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  196.657504][T10815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  196.660956][T10815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  196.663867][T10815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  196.666671][T10815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  196.669544][T10815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  226.072881][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  226.075006][    C1] rcu: 	1-....: (1 GPs behind) idle=4434/1/0x4000000000000000 softirq=44187/44199 fqs=5224
[  226.079484][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  226.081540][    C1] rcu: 	 number:     5296          0            0
[  226.083601][    C1] rcu: 	cputime:      212          0        52277   ==> 52490(ms)
[  226.086079][    C1] rcu: 	(t=10500 jiffies g=23157 q=806 ncpus=2)
[  226.088126][    C1] CPU: 1 UID: 0 PID: 10798 Comm: syz.2.1381 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  226.088136][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.088141][    C1] RIP: 0010:lock_is_held_type+0x137/0x190
[  226.088174][    C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 19 13 31 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  226.088181][    C1] RSP: 0018:ffffc90006d06f48 EFLAGS: 00000206
[  226.088187][    C1] RAX: 838ec6ff6a82ee00 RBX: 0000000000000001 RCX: 838ec6ff6a82ee00
[  226.088192][    C1] RDX: ffff888032428000 RSI: ffffffff8db865a0 RDI: ffffffff8be29dc0
[  226.088197][    C1] RBP: 00000000ffffffff R08: ffff888032428000 R09: 0000000000000002
[  226.088201][    C1] R10: 00000000ffffffff R11: 0000000000000002 R12: 0000000000000246
[  226.088205][    C1] R13: ffff888032428000 R14: ffffffff8e13f160 R15: 0000000000000002
[  226.088210][    C1] FS:  00007f7315eaf6c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  226.088215][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.088219][    C1] CR2: 000000110c2fa26a CR3: 0000000120d4e000 CR4: 00000000000006f0
[  226.088244][    C1] Call Trace:
[  226.088250][    C1]  <TASK>
[  226.088255][    C1]  qdisc_lookup_rcu+0x32b/0x6d0
[  226.088269][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  226.088279][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  226.088290][    C1]  fq_change+0x1519/0x1f50
[  226.088304][    C1]  ? __pfx_fq_change+0x10/0x10
[  226.088321][    C1]  ? __hrtimer_setup+0x187/0x210
[  226.088332][    C1]  fq_init+0x699/0x960
[  226.088342][    C1]  ? __pfx_fq_init+0x10/0x10
[  226.088352][    C1]  ? lockdep_rtnl_is_held+0x26/0x40
[  226.088361][    C1]  ? qdisc_lookup+0x590/0x6d0
[  226.088370][    C1]  ? __pfx_fq_init+0x10/0x10
[  226.088378][    C1]  qdisc_create+0x7ac/0xea0
[  226.088388][    C1]  tc_modify_qdisc+0x1538/0x20e0
[  226.088394][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  226.088408][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  226.088423][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  226.088429][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  226.088438][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  226.088445][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.088457][    C1]  netlink_rcv_skb+0x208/0x470
[  226.088465][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  226.088473][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  226.088485][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.088492][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  226.088501][    C1]  netlink_unicast+0x75c/0x8e0
[  226.088512][    C1]  netlink_sendmsg+0x805/0xb30
[  226.088523][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.088532][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  226.088542][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  226.088552][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  226.088560][    C1]  __sock_sendmsg+0x21c/0x270
[  226.088568][    C1]  ____sys_sendmsg+0x505/0x830
[  226.088578][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  226.088589][    C1]  ? import_iovec+0x74/0xa0
[  226.088598][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  226.088607][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.088627][    C1]  ? __fget_files+0x2a/0x420
[  226.088636][    C1]  ? __fget_files+0x3a0/0x420
[  226.088648][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  226.088657][    C1]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  226.088669][    C1]  ? rcu_is_watching+0x15/0xb0
[  226.088678][    C1]  ? do_syscall_64+0xbe/0x3b0
[  226.088687][    C1]  do_syscall_64+0xfa/0x3b0
[  226.088692][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.088702][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.088708][    C1]  ? exc_page_fault+0x9f/0xf0
[  226.088718][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.088724][    C1] RIP: 0033:0x7f7314f8e929
[  226.088731][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.088737][    C1] RSP: 002b:00007f7315eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  226.088744][    C1] RAX: ffffffffffffffda RBX: 00007f73151b5fa0 RCX: 00007f7314f8e929
[  226.088749][    C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  226.088753][    C1] RBP: 00007f7315010b39 R08: 0000000000000000 R09: 0000000000000000
[  226.088756][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.088760][    C1] R13: 0000000000000000 R14: 00007f73151b5fa0 R15: 00007ffd0edd8be8
[  226.088770][    C1]  </TASK>

VM DIAGNOSIS:
22:09:42  Registers:
info registers vcpu 0

CPU#0
RAX=f12d4e9bcac6b000 RBX=ffffffff81976c78 RCX=f12d4e9bcac6b000 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0394fd76c0 CR3=0000000110492000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f929b785d00
XMM02=0000000000000015 0000000000000000 XMM03=c001800200070010 000d800401000014
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=8002000700707070 2f76656400000017 XMM07=ffffffff00000000 0003200800061000
XMM08=201000061870ca01 8002000700000016 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03f0
R8 =ffff888108cc0237 R9 =1ffff11021198046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ca R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7315eaf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2fa26a CR3=0000000120d4e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
