last executing test programs:

1.492086433s ago: executing program 2 (id=6312):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="0a00000016000000b30000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0000000000000000000000000000000000000000000000007e02eba5e3f830a9c6a048762b904d8b5b0f06bee86a9b5f1be1785bc697008d17a50916d48df90f843eb15e0d463ba93fe367d1a7a3b1a84d62465de59cd0d72b7112ea0f13331fc5e33c0ba1a14ad8bcbd53e5cffcb89e351f8ce38475434d48e9292db3d103b975f722c80c3d82224ab09153ec"], 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="984e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500210005000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180))
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000400)={r5, r5, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'})
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
syz_emit_ethernet(0xfc6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001ffffffffffff86dd6a0000000f901100fe8000000000000000000000000000aafe8000000000000000000000000000aa0b12040902"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@none})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000fc0200000000000000000000000000004e200000004000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000001000000000000000000000000000000003c000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000008000000000000000000000000000000000000000000000000000000000500000000000000000005000000000004000000000000000000000000030000679e827d5f4982388b00000000000000000000000000020000000000000000000000050000000500000008001e0032050000000000f4000000000000000000000000000000bfa15364e5dc5ab6308767a98bc328520e25815d06f7a867e0fd"], 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x4001080)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

609.562377ms ago: executing program 2 (id=6340):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000040)={'\x00', 0x7ffffffe, 0x1, 0x57029011})

551.013564ms ago: executing program 2 (id=6344):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)

432.658336ms ago: executing program 2 (id=6347):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="120000004e0001"], 0x18}], 0x1}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10)

430.420211ms ago: executing program 2 (id=6350):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xc)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
connect(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001800ddd000000000000000000200000000000d05000000000600150005000000280016802400010003"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) (async)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

360.84036ms ago: executing program 0 (id=6351):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="110000001900010000000000fedbdf250a"], 0x30}, 0x1, 0x0, 0x0, 0x200040d1}, 0x4050)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000001000/0xf000)=nil, 0xf000, 0x2000001, 0x100010, r0, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4)

360.241479ms ago: executing program 2 (id=6353):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0xfffffffb}, 0x9)
shutdown(r0, 0x1)
unshare(0x28000600)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20)
recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/48, 0x30}], 0x3, &(0x7f0000000640)=""/85, 0x55}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000180)=""/177}, 0x20)
unshare(0x30080)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x190, 0x360, 0x450, 0x0, 0x0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 0x4000, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @empty, @remote, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0x3, 0x4, 0x0, 0xf, 0x1, 0x7, [{0x2, 0x2, 0x3}, {0xb, 0x3, 0x6}, {0x2, 0x0, 0x6}, {0x0, 0x1, 0x9}]}]}, {0x0, [0x4f, 0x0]}}, 0x0, 0x58, 0x0, 0x9}, 0x28)
epoll_create1(0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'tunl0\x00'}]}, 0x30}}, 0xc000)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706950000000000c00028008000300e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18)

312.502078ms ago: executing program 0 (id=6354):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x74200, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e21, @rand_addr=0x64010100}], 0x2c)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300)=0x2, 0x4)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@upd={0xf0, 0x12, 0x400, 0x70bd29, 0x25dfdc00, {{'drbg_nopr_sha512\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x4}, {0x8, 0x1, 0x7ff}]}, 0xf0}}, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@getqdisc={0x44, 0x26, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0x1, 0xc}, {0x9, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c880}, 0x4)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'veth0_virt_wifi\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r11, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600", 0xa}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380", 0x4e}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
write$tun(r3, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x2e)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$PTP_PIN_GETFUNC2(r0, 0x541b, &(0x7f0000000680)={'\x00', 0x9, 0x1, 0x5})

310.866888ms ago: executing program 1 (id=6356):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r1, 0x952de000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)

212.353749ms ago: executing program 1 (id=6357):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000c36c68c441827b7d55c9561c120e512f2c1abe0c68ae91137c56", @ANYRES16=r2, @ANYRES8=r3, @ANYRES32, @ANYRESOCT=r3], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, &(0x7f00000001c0)="80fa1d9fa70d647e83467ea47a", 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d)
poll(&(0x7f00000011c0)=[{r0, 0x2}, {r0, 0x3600}, {r0, 0x40}, {r0, 0x59}], 0x4, 0x3)

212.034006ms ago: executing program 1 (id=6358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0xac, 0x24, 0xd0f, 0x200011, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x7c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x7, 0x8, 0xd, 0x0, 0x4, 0x997, 0x7, 0x22, 0x3, 0x1d, 0x11, 0x10, 0x0, 0x1, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1d, 0x6, 0xca11, 0x10000}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0xc5}, 0x24008004)

160.768837ms ago: executing program 1 (id=6359):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000001ec0)=0x8001, 0x4)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) (async)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x1}, {0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00)

157.898929ms ago: executing program 1 (id=6360):
r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4cf9d5ed799a4ebfd7af51f47767c937d724008eb4e0aa0a10650ea960201e0446a6fe90d4fc7d560a8a3236f9db9c576e57138684ed1d449c8fb8b821a29e9f1b7af8caaf83eec51299df18a11409e75d945b6fffd1cb39e810b7d885a78896b1f52dac0d0c288a4d1f8a4f3eb517c8cbb2eaf8fbeee4", 0x77}, {&(0x7f0000000080)='S', 0x1}], 0x2, 0xffffffff, 0x6)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000180)={<r1=>0x0, 0x0, 0x0, [0x0, 0x3, 0x2, 0x3, 0x6], [0x4, 0x80000000, 0x4, 0x1, 0x4, 0x2, 0xcf24, 0x9, 0x0, 0x5, 0xd0b, 0x9, 0x5, 0x6, 0x800, 0x8, 0x6, 0x4, 0x100, 0x1, 0x1, 0x5, 0x0, 0x80000000, 0x7, 0x5, 0xffffffff, 0x1, 0x100000001, 0x5, 0x0, 0x8, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x7, 0xb, 0x4, 0x4, 0x8, 0x1, 0x2, 0x6, 0x7, 0x0, 0x2, 0x401, 0x8, 0x1, 0x7, 0x100, 0x8, 0x8, 0xd4, 0xf8ba, 0x1, 0x7, 0x0, 0xf16, 0x0, 0x1355a4d, 0xfffffffffffffffb, 0x3, 0xfffffffffffffff8, 0x4, 0x9, 0x6, 0x80000000, 0x8, 0x65411e50, 0x8, 0x0, 0x1, 0x43, 0x40, 0x6, 0x91, 0xa, 0x7, 0x8, 0x1ff, 0x519a, 0xd, 0x400000, 0x8f74, 0x7, 0x8000, 0xd5c, 0xe, 0x7f, 0x80000000, 0x5, 0x100, 0x10, 0x0, 0x0, 0xffffffff, 0xb, 0x4, 0x6, 0x623, 0x7fffffff, 0x62, 0xa3d, 0x8000000000000000, 0x1, 0x8, 0x10000, 0x6, 0x6, 0x861c, 0x5, 0x1000, 0x6, 0x7ff, 0xbe, 0xffffffffffffffff, 0xd, 0x8]})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={r1, "bcb05dc71016ecce3089aa2d78ff71cb"})
r2 = accept4(r0, &(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, &(0x7f0000001640)=0x80, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001680)={'vcan0\x00', <r4=>0x0})
bind$can_raw(r2, &(0x7f00000016c0)={0x1d, r4}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000001700)={<r5=>0x0, 0x1b, "922cd817635277272a33dbba2dae57cde82fd7ab5d59a19a200b06"}, &(0x7f0000001740)=0x23)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001780)={r5, 0x1}, 0x8)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000017c0), &(0x7f0000001800)=0x4)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001880), r3)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x1c8, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x77c0ae1d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ed}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x51}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r2)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r8, 0x408, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000001d00)={&(0x7f0000001c80)='TIPCv2\x00', &(0x7f0000001cc0)='syz0\x00', 0x2})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r10 = accept4(r6, 0x0, &(0x7f0000001d40), 0x800)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000001d80)={<r11=>r5, @in={{0x2, 0x4e23, @loopback}}, 0x10000, 0x8000, 0xfff, 0xfffffffc, 0x5}, &(0x7f0000001e40)=0x98)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r10, 0x84, 0x77, &(0x7f0000001e80)={<r12=>r11, 0x5, 0x6, [0x8001, 0x72e, 0x8000, 0x4, 0x9, 0x0]}, &(0x7f0000001ec0)=0x14)
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001f40), r0)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x4c, r13, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x26}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x729}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x33}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000002080), &(0x7f00000020c0)=0x4)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r9, 0xf502, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000002100)={<r14=>r12, 0x9}, &(0x7f0000002140)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000002180)={r14, 0x6}, &(0x7f00000021c0)=0x8)
close(r10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002200)={'ip6gre0\x00'})
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000002240)={0x3, 0x5}, 0x4)

111.762708ms ago: executing program 0 (id=6361):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x91, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34}, 0x94)

111.291636ms ago: executing program 1 (id=6362):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2})
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
poll(&(0x7f00000011c0)=[{r2, 0x2}, {r2, 0x3600}, {r2, 0x40}, {r2, 0x59}], 0x4, 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r5, &(0x7f00000002c0)=ANY=[], 0x33)
sendfile(r5, r4, 0x0, 0x10000)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x42, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000440)={@initdev, @loopback, <r10=>0x0}, &(0x7f0000000480)=0xc)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', <r12=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x34, 0x7ff, 0x3a8, 0x3, 0x80000001, 0x6, 0x2}}, {0x8, 0x2, [0x7, 0x6]}}, {{0x1c, 0x1, {0xff, 0x28, 0x3, 0x9, 0x1, 0x3840, 0x40, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0x8, 0x90, 0x8, 0xfffffff9, 0x2, 0x101, 0x434, 0x4}}, {0xc, 0x2, [0x8001, 0xfff, 0x1, 0xf]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfff9, 0x4, 0x1, 0x3, 0xb, 0x7}}, {0x12, 0x2, [0xc, 0x0, 0x5, 0x0, 0x8, 0x1, 0x180]}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0800030001000000080003000000000008000300010000007800018008000100a05fa640ce32480b56ac986e950c87ddfbf86d0c7bd8dbc0eadcd7a98a8ad22778761a072b2da0584574326aa869e1e9135db1a506e04ae8eed28436c792ba3cab56d0690b8a5c67b5fde9d64820b994c1ddcbd202f797742fb8b023dbf029574d7688", @ANYRES32=r9, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020067656e65766530000000000000000000080003000100000014000200766972745f7769666930000000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x238}}, 0x4000041)

110.161678ms ago: executing program 0 (id=6363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x74, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="b7eb290aca"], 0x20000600}}, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x88001, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f0000000040))
ioctl$PTP_PIN_GETFUNC2(r5, 0x43403d0e, &(0x7f0000000680)={'\x00', 0x1, 0x1, 0x805})

672.873µs ago: executing program 0 (id=6364):
r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
poll(&(0x7f00000011c0)=[{r0, 0x2}, {r0, 0x3600}, {r0, 0x40}, {r0, 0x59}], 0x4, 0x3)

0s ago: executing program 0 (id=6365):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={<r1=>0x0, 0x39, "9bfb19b54b00055cc28fc60d16865b3f5cd13df7bc6f9da3fcdfff9185a0daafe6d1db84b5b653a9b4f6560e7ae1470be51a9ca4283cb345f2"}, &(0x7f0000000080)=0x41)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={<r2=>r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x2}, &(0x7f0000000180)=0x90)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f0000000200)=""/42, 0x28, 0x2a, 0x1, 0x5}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x7, 0x70, 0x9, 0x4002, 0x1, 0xfffffffc, '\x00', 0x0, r3, 0x5, 0x3, 0x3, 0x7}, 0x50)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1, 0x8}, 0x8)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e20, @multicast1}, 0x100, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)='gretap0\x00', 0x4, 0x3, 0xabc7})
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xce3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffff7f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x73ca0463}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xce}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0x20040011)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000900)={'syztnl0\x00', &(0x7f00000008c0)={'sit0\x00', <r7=>0x0, 0x20, 0x7, 0xb, 0x7, {{0x6, 0x4, 0x2, 0x32, 0x18, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000c00)={'vcan0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000c40)={'wg2\x00', <r9=>0x0})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="d783848d701f00268ba44f7eef586244da1e7a89701bf054be1e484c4f4445a6ea5f5034d71d3d7f45a5ae70e91e6c1d8a75892cddecdb09868f858633d59d4b4408ea0d24331eb1d0d5ab6d0a36f5c045f44bc5744e73395f403e04b24fdd7a2ffa306340f13edefbb71df8", 0x6c}, {&(0x7f0000000600)="71073557ab20093efb36e309e1ec555b6e94b56270cab0031957d271f9bbf344569f037431308f61bd5a", 0x2a}, {&(0x7f0000000640)="62357d7982aa7938ba17538d9acc4444e92cb03190869d5f2f134f02b317570e047696f841cf2522012ccf19f77245ba67f1b341a0a6ee83afc5976d1e424d73f1f366770b9a845aaa4269f9e21ca8360d54dba22e93ca090d", 0x59}, {&(0x7f00000006c0)="60f053776b3b3676fd0d83424403f4ed6269f9789fb343349d0c977a480a3320c0e29fc2ac9c21227633cc765163e2c0efbcf5893d69ab5f4566efe5c1e7aac5915effa5cd8499b2db3a58e3d66e4b1cb95bc13791c5f960826195c19ad41636c7b4c9ea", 0x64}, {&(0x7f0000000740)="0dde0cd5a1a8b28735424ebf45529d", 0xf}, {&(0x7f0000000780)="67f14e103a9609dd84cf60e1e77f4c51801ced78afaf8575d7fc42d9105cb113b0eb62fb3bda", 0x26}], 0x6, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x417c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x15, 0x3, 0xb, [{@multicast2, 0x8}, {@local, 0x3}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@empty, 0x30edd08e}]}, @rr={0x7, 0xb, 0x6a, [@private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0xc, 0xb8, 0x3, 0xb, [{@broadcast, 0x1}]}, @noop, @lsrr={0x83, 0x17, 0x71, [@multicast1, @empty, @local, @multicast2, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x110}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)="eba32fbade7b0086433076824f581fce67adbbe7bb13d2db83bb64409dd90182c7b9ce6ea33e70a7e7d032b96715d77548de6b937cef0fcc95385028a259645661da72e9e9901d90d0c3", 0x4a}, {&(0x7f0000000b40)="f8451c44f5fe31be79e259099c5279e314a3bc3067c7a226e0978ee8e2b9277d84d433635dd6c9c70b7fd40768354f075fbdafa07be15ede192067b2200712a04d9074d4a1f9716000165b665009f2a7353431a219cf74a2a31748c86e12cc0bd63647feabef48a87834e261", 0x6c}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010101, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8b4759a4}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)="34560bc00a9695691f8c4ce14214bd4e458982144dee7f86bfb5bdf67dc5f057abe39d4bbfe92a819fb4317e1d29b347a32aaa421619288760abdaa76e11ae917e59cb473ff8f84211cd46b48a2f9549540335621e402e8f973a713208e1de", 0x5f}, {&(0x7f0000000d80)="0fba733085b06a96cd0adceabe86d44cee606a3d6a42d445d6ac81c130be693bc638145a4d67f0fa03b42141868a89ab0f85d411194db8ed0ce5b8edc56ec5b383ec05dcc93cc931f0ad581934ebfd79559e5f6f14711d9ba3e1d10a3ae3afc0f98accb476c70e13c7e211391f689a9812b5da3ef0046c27c6eeddde170ffde7df6b7ed3cf98ddcfa39d676e8743df40072275537b48ef5f720f3a9dd8a05e", 0x9f}, {&(0x7f0000000e40)="29e2bae5f154a0f2df4d2ccb92ed998907f4c2edff6549e5e8886848e954131a5801ecf62388210bb158757c4c6463eb50c9ab052e988e8537533eada5d442219eb7d226456f41f494197b1a823c5454fe9c42e4e5408725308bb6d87acb8684bb3d0e953c53212d45dabd6261a2dfad9374b34c69380571494c91a556060556", 0x80}, {&(0x7f0000000ec0)="b22040d9539b918dc6f7b964689179b0ae4262e4ec453fd1574d0dda7c7d1a2d5e42b61eca5f9a46cf0b182c6701a899faa491d3178defa71dcdb6a1d32233a277cef4656bed51df414be40f01ea8a631742ef72a5fc32a1d189a1aab2036bb3c4a6659827eef3397e6006da87a1b30571b2ac4446407eb750b1f20c12f9ac9a7af4dfa81b876f7f3a45ca834644f9bf35672765b4ad9ad2a6a47242fe2ac511bcbce60ee83fde8bb15bc1cc4910e11dda52", 0xb2}, {&(0x7f0000000f80)="1ffd9124ae10a17cec300dc5c4b201b3f6aae415df95ca53f87db921e59d54ed464979b0708dfc5eea930662703122ca39eed9fc61fddfd3", 0x38}], 0x5}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001040)="9ff236326846feee9f96bef552019bb6239afd9435cf01491c6f9ec8125efbe847644a230c1fc301a4618abbc17c88176f1bda88265a8370f8bdaca9c598b4e927ac3e3f846e1ad29f98", 0x4a}], 0x1, &(0x7f0000001100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x50}}], 0x4, 0x40001)
connect$inet(r5, &(0x7f0000001280)={0x2, 0x4e20, @broadcast}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', 0x0, r3, 0x1, 0x3, 0x2}, 0x50)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001340)={0xf, 0x2, 0x2, 0x9c4, 0x2, 0x4, 0xb0, 0x9, <r11=>r2}, &(0x7f0000001380)=0x20)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000013c0), &(0x7f0000001400)=0x4)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0xf}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000016c0)={'erspan0\x00', &(0x7f00000015c0)={'sit0\x00', <r13=>r9, 0x8000, 0x7, 0xfffffffc, 0x2, {{0x30, 0x4, 0x3, 0x8, 0xc0, 0x64, 0x0, 0x80, 0x0, 0x0, @local, @private=0xa010101, {[@noop, @ssrr={0x89, 0xb, 0x10, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xe9, 0x1, 0x8, [{@multicast1, 0x5}, {@broadcast, 0x7}, {@local, 0x200}, {@private=0xa010100, 0xe07}, {@broadcast, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x200}]}, @cipso={0x86, 0x2a, 0x1, [{0x5, 0x5, "00f406"}, {0x2, 0xc, "f48175e940169b43914c"}, {0x5, 0xc, "063283522638eef2f4d0"}, {0x5830c48b635a7c05, 0x2}, {0x0, 0x5, "21f805"}]}, @ssrr={0x89, 0x17, 0xea, [@remote, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x8, 0xe3, 0x0, 0x7, [0x6]}, @timestamp={0x44, 0x18, 0x30, 0x0, 0x9, [0x1, 0x2, 0x10001, 0x3ff, 0x0]}]}}}}})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001800)={{r4, <r14=>0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x18, 0x1c, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@alu={0x7, 0x1, 0x0, 0x7, 0x2, 0xffffffffffffffff, 0x8}, @jmp={0x5, 0x1, 0x8, 0xf, 0x1, 0xc, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5ed1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001580)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', r13, 0x0, r3, 0x8, &(0x7f0000001700)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001740)={0x0, 0xd, 0xe, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[r4, r14, r4], 0x0, 0x10, 0x8}, 0x94)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001940)={0x6, 'syzkaller1\x00', {0x40000}, 0x4087})
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001980)=r11, 0x4)
r15 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r15, 0x84, 0x0, &(0x7f00000019c0)={r2, 0x8, 0x1ff, 0x1}, &(0x7f0000001a00)=0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a40)={'pim6reg1\x00'})
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f0000002f00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ec0)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa473}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x78cc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x1e, 0x8, "f4b8e80e75b3b3ac54e708172574bfbd363fca0f7f529afe9cc3"}]}, @NFT_MSG_NEWSETELEM={0x1194, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1164, 0x3, 0x0, 0x1, [{0x1160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1078, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "31f4b7e0e374d895b6d7e3191931c47d230ad7b8a5f0493c4f8316b2251e1b64d5d26033ce70174657fa7e9fd8b0acead2dd6ea83f7bfde66e8bb91e5636a69d8c98871de7f381ef69a9e17be6165e1fc10f5ec0d446b66b7109b89255e811258cad8ce1a36209f9be9107415df5dd435a9ce2db8a3db76968d9d9ca030f1fa03b63d9fdc7847b0071624e0379507e57e16ff0afaaf7a1615b73f91d27041f21f663929ce2a8863dcb17c8"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000000000000000}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_USERDATA={0xe4, 0xd, 0x1, 0x0, "3f3601b750ee6d29bf4032ea9439175a2ee0f7ea838e6bd3cae50a31011d3f36099f83cf5522b4711f7a0c12f4e98b63d08eff29a3f13ccf888142739d2c031ddd489cb0b9b95dce3272d6a10371de4ddc8801656d7472b55d8617170d4167d19b208b4725ae9e87d63b1def78e54b53879b5ecc13f1b8a7cf5b5d4b697dac2f7c783fadb060447b46bc08d4cd497529b7171d9b274a598822fa17e7dbb9e7db6ddb4bbf0b419bb2fe4122c8e4b0e367b595d9d99b7fd0b56a4ff9301f9137981659cd02d30d8754e254b563b5c1f5fab3f96a77e0eb6c263f47392d51d82737"}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x45}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13f0}, 0x1, 0x0, 0x0, 0x8044}, 0x8800)

kernel console output (not intermixed with test programs):

ribute type 1 has an invalid length.
[  145.965543][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'.
[  145.974196][ T9358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1484'.
[  145.980820][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'.
[  146.011272][ T9357] bond2: (slave gretap1): making interface the new active one
[  146.028777][ T9357] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  146.153354][ T9363] batadv_slave_0: entered promiscuous mode
[  146.156138][ T9362] batadv_slave_0: left promiscuous mode
[  146.205183][ T9366] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  146.218280][ T9366] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  146.272954][ T9366] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.307005][ T9370] bond3: (slave geneve3): making interface the new active one
[  146.317184][ T9370] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  146.338286][ T9370] syz.2.1488 (9370) used greatest stack depth: 19360 bytes left
[  146.373712][ T9373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.428576][ T9373] syzkaller0: entered promiscuous mode
[  146.437735][ T9373] syzkaller0: entered allmulticast mode
[  146.446355][ T9373] tipc: Resetting bearer <eth:syzkaller0>
[  146.484363][ T9372] tipc: Resetting bearer <eth:syzkaller0>
[  146.971113][ T9394] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1499'.
[  148.542227][ T9372] tipc: Disabling bearer <eth:syzkaller0>
[  148.942594][ T9427] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  149.044001][ T9435] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1518'.
[  149.328765][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'.
[  149.728414][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1533'.
[  150.750035][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'.
[  150.858193][ T9518] netlink: 'syz.1.1554': attribute type 3 has an invalid length.
[  150.999161][ T9523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'.
[  151.160690][ T9537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  153.065323][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1585'.
[  153.334285][ T9608] netlink: 'syz.1.1590': attribute type 163 has an invalid length.
[  153.367400][ T9610] netlink: 712 bytes leftover after parsing attributes in process `syz.1.1591'.
[  153.371028][ T9610] netlink: 5504 bytes leftover after parsing attributes in process `syz.1.1591'.
[  153.376242][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'.
[  153.431296][ T9613] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1592'.
[  153.592619][ T9622] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  153.599551][ T9622] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  153.934471][ T9641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'.
[  154.358538][ T9665] syzkaller0: entered promiscuous mode
[  154.360596][ T9665] syzkaller0: entered allmulticast mode
[  154.697299][ T9686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.099090][ T9697] batadv_slave_0: Caught tx_queue_len zero misconfig
[  155.580105][ T9711] netlink: 'syz.0.1636': attribute type 2 has an invalid length.
[  155.591937][ T9711] netlink: 'syz.0.1636': attribute type 2 has an invalid length.
[  155.617490][ T9710] macsec1: entered promiscuous mode
[  155.670284][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  155.677416][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1636'.
[  155.867704][ T9715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1639'.
[  156.571037][ T9754] netlink: 'syz.0.1658': attribute type 21 has an invalid length.
[  156.578275][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1658'.
[  156.747038][ T9769] netlink: 'syz.2.1662': attribute type 40 has an invalid length.
[  157.065654][ T9793] netlink: 'syz.2.1673': attribute type 1 has an invalid length.
[  157.082595][ T9793] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1673'.
[  157.102614][ T9793] netlink: 'syz.2.1673': attribute type 1 has an invalid length.
[  157.112362][ T9793] netlink: 634 bytes leftover after parsing attributes in process `syz.2.1673'.
[  157.304205][ T9813] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1683'.
[  157.341258][ T9811] syzkaller0: entered promiscuous mode
[  157.345216][ T9811] syzkaller0: entered allmulticast mode
[  157.387479][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'.
[  157.545135][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1688'.
[  157.555650][ T9824] netlink: 'syz.0.1688': attribute type 1 has an invalid length.
[  159.399345][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1719'.
[  160.409683][ T9967] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1748'.
[  160.497376][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'.
[  160.560741][ T9978] netlink: 'syz.1.1753': attribute type 8 has an invalid length.
[  160.799798][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'.
[  160.822424][ T9987] IPv6: NLM_F_CREATE should be specified when creating new route
[  161.262092][T10019] netlink: 'syz.1.1773': attribute type 1 has an invalid length.
[  161.438404][T10027] sctp: [Deprecated]: syz.1.1777 (pid 10027) Use of int in max_burst socket option deprecated.
[  161.438404][T10027] Use struct sctp_assoc_value instead
[  161.824364][T10055] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  162.098883][T10073] ieee802154 phy1 wpan1: encryption failed: -22
[  162.138179][T10075] netlink: 'syz.1.1801': attribute type 1 has an invalid length.
[  162.143349][T10075] __nla_validate_parse: 3 callbacks suppressed
[  162.143358][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'.
[  162.189617][T10080] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  162.291249][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'.
[  162.330073][T10089] netlink: 'syz.1.1807': attribute type 1 has an invalid length.
[  162.534438][T10100] syzkaller0: entered promiscuous mode
[  162.536498][T10100] syzkaller0: entered allmulticast mode
[  162.751225][T10114] netlink: 'syz.2.1819': attribute type 3 has an invalid length.
[  162.753860][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  162.871219][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'.
[  162.971493][   T34] audit: type=1804 audit(1778673376.542:4): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1828" name="/newroot/577/cgroup.controllers" dev="tmpfs" ino=2920 res=1 errno=0
[  162.989100][   T34] audit: type=1800 audit(1778673376.562:5): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1828" name="cgroup.controllers" dev="tmpfs" ino=2920 res=0 errno=0
[  163.220875][T10143] syzkaller0: entered promiscuous mode
[  163.225739][T10143] syzkaller0: entered allmulticast mode
[  164.087694][T10204] netlink: 'syz.0.1860': attribute type 1 has an invalid length.
[  164.099334][T10204] bond1: entered promiscuous mode
[  164.102643][T10204] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.111564][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1860'.
[  164.116289][T10204] bond1: entered allmulticast mode
[  164.128614][T10204] bond1: (slave bridge3): making interface the new active one
[  164.131040][T10204] bridge3: entered promiscuous mode
[  164.133504][T10204] bridge3: entered allmulticast mode
[  164.136518][T10204] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  164.235372][T10215] syzkaller0: entered promiscuous mode
[  164.237369][T10215] syzkaller0: entered allmulticast mode
[  164.269398][T10217] netlink: 'syz.1.1867': attribute type 3 has an invalid length.
[  164.418929][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1872'.
[  164.449986][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'.
[  164.477216][T10228] syzkaller0: entered promiscuous mode
[  164.479405][T10228] syzkaller0: entered allmulticast mode
[  164.767269][T10251] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1882'.
[  166.917803][T10296] syzkaller0: entered promiscuous mode
[  166.920190][T10296] syzkaller0: entered allmulticast mode
[  167.476815][T10239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.087270][T10334] : renamed from sit0 (while UP)
[  168.089829][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'.
[  168.099297][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'.
[  168.212740][T10342] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  168.428820][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1926'.
[  168.745548][T10380] netlink: 'syz.0.1937': attribute type 1 has an invalid length.
[  168.787809][T10380] 8021q: adding VLAN 0 to HW filter on device bond2
[  168.793088][T10380] bond2: option tlb_dynamic_lb: unable to set because the bond device is up
[  169.033646][T10399] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.139123][T10405] netlink: 'syz.2.1946': attribute type 29 has an invalid length.
[  169.148928][T10399] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.230894][T10399] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.247026][T10411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1949'.
[  169.370224][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.381140][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.390659][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.401469][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.491561][T10419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.584946][T10425] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  169.588310][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1955'.
[  170.760924][T10477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.895841][T10485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1976'.
[  171.061945][T10492] netlink: 'syz.0.1978': attribute type 33 has an invalid length.
[  171.075709][T10492] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1978'.
[  171.080814][T10492] `: renamed from team0 (while UP)
[  171.282415][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  171.482690][T10496] syz.0.1982 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  171.513466][T10496] CPU: 1 UID: 0 PID: 10496 Comm: syz.0.1982 Not tainted syzkaller #0 PREEMPT(full) 
[  171.513487][T10496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.513492][T10496] Call Trace:
[  171.513496][T10496]  <TASK>
[  171.513501][T10496]  dump_stack_lvl+0xe8/0x150
[  171.513517][T10496]  dump_header+0xd3/0x4c0
[  171.513531][T10496]  oom_kill_process+0x3ab/0x970
[  171.513545][T10496]  out_of_memory+0x106c/0x1410
[  171.513555][T10496]  ? try_charge_memcg+0xbb9/0x1570
[  171.513569][T10496]  ? __pfx___mutex_lock+0x10/0x10
[  171.513586][T10496]  ? __pfx_out_of_memory+0x10/0x10
[  171.513595][T10496]  ? do_raw_spin_unlock+0x4d/0x210
[  171.513612][T10496]  try_charge_memcg+0xc77/0x1570
[  171.513630][T10496]  ? __pfx_try_charge_memcg+0x10/0x10
[  171.513641][T10496]  ? percpu_ref_tryget+0x15/0x180
[  171.513660][T10496]  ? charge_memcg+0x23/0x2b0
[  171.513672][T10496]  charge_memcg+0x1a2/0x2b0
[  171.513684][T10496]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  171.513695][T10496]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  171.513707][T10496]  __swap_cache_prepare_and_add+0xdc/0x700
[  171.513720][T10496]  ? page_rmappable_folio+0x9a/0x170
[  171.513735][T10496]  swap_cache_alloc_folio+0xf1/0x240
[  171.513746][T10496]  swap_cluster_readahead+0x355/0x670
[  171.513758][T10496]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  171.513773][T10496]  ? get_vma_policy+0x27b/0x3c0
[  171.513785][T10496]  swapin_readahead+0x196/0xc50
[  171.513796][T10496]  ? swap_table_get+0x1e/0x260
[  171.513807][T10496]  ? __pfx_swapin_readahead+0x10/0x10
[  171.513818][T10496]  ? swap_table_get+0x1e/0x260
[  171.513826][T10496]  ? swap_table_get+0x1e/0x260
[  171.513834][T10496]  ? swap_table_get+0x1e/0x260
[  171.513845][T10496]  ? swap_table_get+0x216/0x260
[  171.513854][T10496]  ? swap_cache_get_folio+0x2e4/0x2f0
[  171.513865][T10496]  do_swap_page+0x555/0x5120
[  171.513878][T10496]  ? __pte_offset_map+0x29/0x240
[  171.513888][T10496]  ? __pte_offset_map+0x29/0x240
[  171.513901][T10496]  ? do_swap_page+0x128/0x5120
[  171.513910][T10496]  ? __pfx_do_swap_page+0x10/0x10
[  171.513918][T10496]  ? __pte_offset_map+0x1ae/0x240
[  171.513929][T10496]  ? pte_offset_map_rw_nolock+0xea/0x160
[  171.513940][T10496]  handle_mm_fault+0x12d2/0x3170
[  171.513956][T10496]  ? handle_mm_fault+0xee/0x3170
[  171.513968][T10496]  ? __pfx_handle_mm_fault+0x10/0x10
[  171.513977][T10496]  ? lock_vma_under_rcu+0x45a/0x500
[  171.513997][T10496]  do_user_addr_fault+0xa73/0x1340
[  171.514009][T10496]  ? rcu_is_watching+0x15/0xb0
[  171.514020][T10496]  ? trace_page_fault_user+0x84/0x1e0
[  171.514030][T10496]  exc_page_fault+0x6a/0xc0
[  171.514042][T10496]  asm_exc_page_fault+0x26/0x30
[  171.514050][T10496] RIP: 0033:0x7f8465254167
[  171.514060][T10496] Code: 05 66 df 3b 00 48 89 18 48 8b 05 54 df 3b 00 c7 00 00 00 01 00 5b c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 80 3d 42 3c 3c 00 00 <48> 8b 47 18 48 8b 4f 28 74 1f 48 8b 30 89 f2 83 c6 02 48 8d 04 f0
[  171.514067][T10496] RSP: 002b:00007f84661c3048 EFLAGS: 00010202
[  171.514076][T10496] RAX: 00007f8465615fa0 RBX: 00007f8465615fa0 RCX: 00007f8465615fa0
[  171.514082][T10496] RDX: 00007f84654b9b40 RSI: 0000200000000140 RDI: 00007f8465616038
[  171.514087][T10496] RBP: 00007f8465432d69 R08: 0000000000000000 R09: 0000000000000000
[  171.514092][T10496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.514097][T10496] R13: 00007f8465616038 R14: 00007f8465615fa0 R15: 00007fff2aecb348
[  171.514109][T10496]  </TASK>
[  171.514113][T10496] memory: usage 299920kB, limit 307200kB, failcnt 3281
[  171.669997][T10496] memory+swap: usage 290120kB, limit 9007199254740988kB, failcnt 0
[  171.676655][T10496] kmem: usage 288196kB, limit 9007199254740988kB, failcnt 0
[  171.680712][T10496] Memory cgroup stats for /syz0:
[  171.681207][T10496] cache 4096
[  171.687728][T10496] rss 32768
[  171.688971][T10496] rss_huge 0
[  171.692871][T10496] shmem 0
[  171.694975][T10496] mapped_file 4096
[  171.697636][T10496] dirty 0
[  171.700220][T10496] writeback 0
[  171.704603][T10496] workingset_refault_anon 29
[  171.709025][T10496] workingset_refault_file 1
[  171.712912][T10496] swap 81920
[  171.718862][T10496] swapcached 311296
[  171.733761][T10496] pgpgin 51178
[  171.735024][T10496] pgpgout 51169
[  171.751895][T10496] pgfault 116882
[  171.753213][T10496] pgmajfault 33
[  171.762504][T10496] inactive_anon 24576
[  171.765046][T10496] active_anon 4096
[  171.768841][T10496] inactive_file 0
[  171.775970][T10496] active_file 0
[  171.778069][T10496] unevictable 0
[  171.779552][T10496] hierarchical_memory_limit 314572800
[  171.781641][T10496] hierarchical_memsw_limit 9223372036854771712
[  171.786921][T10496] total_cache 4096
[  171.788801][T10496] total_rss 32768
[  171.791224][T10496] total_rss_huge 0
[  171.809705][T10496] total_shmem 0
[  171.820638][T10496] total_mapped_file 4096
[  171.824027][T10496] total_dirty 0
[  171.826124][T10496] total_writeback 0
[  171.828274][T10496] total_workingset_refault_anon 29
[  171.831687][T10496] total_workingset_refault_file 1
[  171.837454][T10496] total_swap 81920
[  171.839458][T10496] total_swapcached 311296
[  171.844036][T10496] total_pgpgin 51178
[  171.846406][T10496] total_pgpgout 51169
[  171.848721][T10496] total_pgfault 116882
[  171.850931][T10496] total_pgmajfault 33
[  171.861666][T10496] total_inactive_anon 24576
[  171.864284][T10496] total_active_anon 4096
[  171.865865][T10496] total_inactive_file 0
[  171.867767][T10496] total_active_file 0
[  171.869762][T10496] total_unevictable 0
[  171.871600][T10496] anon_cost 0
[  171.874810][T10496] file_cost 0
[  171.876571][T10496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1982,pid=10495,uid=0
[  171.885267][T10496] Memory cgroup out of memory: Killed process 10495 (syz.0.1982) total-vm:102160kB, anon-rss:1272kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000
[  174.482378][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  175.419042][T10520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.424318][T10529] netlink: 'syz.2.1994': attribute type 1 has an invalid length.
[  175.427694][T10529] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1994'.
[  175.663670][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'.
[  176.156006][T10576] netlink: 'syz.1.2015': attribute type 2 has an invalid length.
[  176.560147][T10611] virt_wifi0: entered promiscuous mode
[  176.573587][T10611] macsec2: entered promiscuous mode
[  176.776830][T10628] tc action pedit 'at' offset 6 out of bounds
[  176.836493][T10630] smc: net device wlan0 applied user defined pnetid SYZ0
[  176.914309][T10634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.936639][T10634] syzkaller0: entered promiscuous mode
[  176.938519][T10634] syzkaller0: entered allmulticast mode
[  176.940664][T10634] tipc: Resetting bearer <eth:syzkaller0>
[  176.949872][T10633] tipc: Resetting bearer <eth:syzkaller0>
[  178.357740][T10633] tipc: Disabling bearer <eth:syzkaller0>
[  178.545561][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'.
[  178.678727][T10657] netlink: 'syz.2.2046': attribute type 1 has an invalid length.
[  178.714790][T10657] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.746461][T10657] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[  178.943229][T10655] netlink: 'syz.0.2048': attribute type 1 has an invalid length.
[  178.947481][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'.
[  179.020577][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2055'.
[  179.046968][T10674] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  179.051623][T10674] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  179.058360][T10674] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  179.063894][T10675] x_tables: duplicate underflow at hook 2
[  179.067764][T10674] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  179.797420][   T34] audit: type=1800 audit(1778673393.372:6): pid=10716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2073" name="memory.events" dev="tmpfs" ino=3446 res=0 errno=0
[  180.829557][T10759] netlink: 'syz.2.2089': attribute type 1 has an invalid length.
[  181.046861][T10672] Bluetooth: hci1: command 0x0406 tx timeout
[  181.049630][T10672] Bluetooth: hci2: command 0x0405 tx timeout
[  181.103478][T10762] gretap2: entered allmulticast mode
[  181.115408][T10762] bond5: (slave gretap2): making interface the new active one
[  181.120061][T10762] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  181.303658][T10766] netlink: 'syz.2.2090': attribute type 13 has an invalid length.
[  181.306322][T10766] netlink: 'syz.2.2090': attribute type 17 has an invalid length.
[  182.246025][T10794] xt_nfacct: accounting object `syz0' does not exist
[  182.382056][T10800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'.
[  182.415345][T10766] gre0: left allmulticast mode
[  182.447266][T10766] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.451554][T10766] 0X: left allmulticast mode
[  182.454345][T10766] 8021q: adding VLAN 0 to HW filter on device 60X
[  182.507678][T10766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.512555][T10766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.529971][T10766] veth1_vlan: left promiscuous mode
[  182.534170][T10766] veth0_vlan: left promiscuous mode
[  182.537024][T10766] veth0_vlan: entered promiscuous mode
[  182.541163][T10766] veth1_vlan: entered promiscuous mode
[  182.546847][T10766] veth1_macvtap: left promiscuous mode
[  182.549668][T10766] veth0_macvtap: left promiscuous mode
[  182.552678][T10766] veth0_macvtap: entered promiscuous mode
[  182.563021][T10766] veth1_macvtap: entered promiscuous mode
[  182.623143][T10766] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.659028][T10766] 8021q: adding VLAN 0 to HW filter on device eth0
[  182.668132][T10766] 8021q: adding VLAN 0 to HW filter on device eth1
[  182.676663][T10766] 8021q: adding VLAN 0 to HW filter on device eth2
[  182.684578][T10766] 8021q: adding VLAN 0 to HW filter on device eth3
[  183.627635][T10766] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.638800][T10766] 8021q: adding VLAN 0 to HW filter on device bond3
[  183.646896][T10766] 8021q: adding VLAN 0 to HW filter on device bond4
[  183.650159][T10766] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.653431][T10766] gretap2: left allmulticast mode
[  183.732946][T10802] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  184.453070][T10850] syzkaller0: entered promiscuous mode
[  184.459206][T10850] syzkaller0: entered allmulticast mode
[  185.520055][T10867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  187.100758][T10930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.100826][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'.
[  187.115973][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2148'.
[  187.755629][T10953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2162'.
[  188.157669][T10940] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  189.398492][T10982] syzkaller0: entered promiscuous mode
[  189.401033][T10982] syzkaller0: entered allmulticast mode
[  189.406593][T10985] netlink: 'syz.0.2173': attribute type 3 has an invalid length.
[  189.933975][T11019] bond3: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  189.938442][T11019] bond3: entered promiscuous mode
[  189.940889][T11019] 8021q: adding VLAN 0 to HW filter on device bond3
[  189.988150][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'.
[  190.203445][T11033] Cannot find add_set index 0 as target
[  190.645930][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'.
[  190.986538][T11073] netlink: 'syz.2.2214': attribute type 10 has an invalid length.
[  190.989772][T11073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2214'.
[  191.312523][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2220'.
[  193.337047][T11147] vxcan3: entered promiscuous mode
[  193.945245][T11167] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  194.087617][T11180] netlink: 'syz.1.2255': attribute type 18 has an invalid length.
[  194.090244][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'.
[  194.106446][T11180] netlink: 'syz.1.2255': attribute type 18 has an invalid length.
[  194.112209][ T5663] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.123799][ T5663] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.126672][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'.
[  194.130209][ T5663] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.139459][ T5663] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.255201][T11195] syzkaller0: entered promiscuous mode
[  194.257097][T11195] syzkaller0: entered allmulticast mode
[  194.515378][T11209] netlink: 'syz.1.2272': attribute type 1 has an invalid length.
[  194.559259][T11209] 8021q: adding VLAN 0 to HW filter on device bond5
[  194.573140][T11209] macvlan3: entered promiscuous mode
[  194.575016][T11209] macvlan3: entered allmulticast mode
[  194.577467][T11209] bond5: entered allmulticast mode
[  194.579687][T11209] bond5: entered promiscuous mode
[  194.582915][T11209] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  194.590509][T11209] team0: Port device macvlan3 added
[  194.626272][T11209] bond5: (slave ip6gretap1): making interface the new active one
[  194.633001][T11209] ip6gretap1: entered promiscuous mode
[  194.641287][T11209] ip6gretap1: entered allmulticast mode
[  194.661025][T11209] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  194.724513][T11218] bond6: entered promiscuous mode
[  194.728661][T11218] 8021q: adding VLAN 0 to HW filter on device bond6
[  194.748268][T11209] sctp: [Deprecated]: syz.1.2272 (pid 11209) Use of int in maxseg socket option.
[  194.748268][T11209] Use struct sctp_assoc_value instead
[  195.466467][T11271] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2296'.
[  195.606182][T11279] "syz.1.2300" (11279) uses obsolete ecb(arc4) skcipher
[  196.019284][T11310] netlink: 'syz.1.2313': attribute type 10 has an invalid length.
[  196.027866][T11310] ipvlan0: entered allmulticast mode
[  196.031214][T11310] veth0_vlan: entered allmulticast mode
[  196.040128][T11310] team0: Device ipvlan0 failed to register rx_handler
[  196.370633][T11327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.379930][T11327] syzkaller0: entered promiscuous mode
[  196.385603][T11327] syzkaller0: entered allmulticast mode
[  196.410721][T11327] tipc: Resetting bearer <eth:syzkaller0>
[  196.417488][T11326] tipc: Resetting bearer <eth:syzkaller0>
[  196.433300][T11326] tipc: Disabling bearer <eth:syzkaller0>
[  196.611595][T11346] netlink: 'syz.2.2332': attribute type 12 has an invalid length.
[  197.015839][T11384] netlink: 'syz.0.2346': attribute type 1 has an invalid length.
[  197.150015][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2347'.
[  197.205448][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'.
[  197.256525][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'.
[  197.802663][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2364'.
[  198.071199][T11460] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2378'.
[  198.281327][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'.
[  198.553661][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2393'.
[  198.741231][T11498] syzkaller0: entered promiscuous mode
[  198.743673][T11498] syzkaller0: entered allmulticast mode
[  199.179583][T11524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2408'.
[  199.188616][   T34] audit: type=1804 audit(1778673412.762:7): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2408" name="/newroot/768/cgroup.controllers" dev="tmpfs" ino=3897 res=1 errno=0
[  199.214687][   T34] audit: type=1800 audit(1778673412.762:8): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2408" name="cgroup.controllers" dev="tmpfs" ino=3897 res=0 errno=0
[  199.239179][   T34] audit: type=1804 audit(1778673412.782:9): pid=11524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2408" name="/newroot/768/cgroup.controllers" dev="tmpfs" ino=3897 res=1 errno=0
[  199.449529][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  200.480172][T11574] netlink: 'syz.1.2425': attribute type 13 has an invalid length.
[  200.494930][T11574] netlink: 'syz.1.2425': attribute type 17 has an invalid length.
[  200.536518][T11571] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.539961][T11571] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.589379][T11578] sctp: [Deprecated]: syz.2.2427 (pid 11578) Use of int in max_burst socket option deprecated.
[  200.589379][T11578] Use struct sctp_assoc_value instead
[  200.747044][T11571] gretap0: left allmulticast mode
[  200.760620][T11571] bond5: left allmulticast mode
[  200.762933][T11571] ip6gretap1: left allmulticast mode
[  200.764700][T11571] bond5: left promiscuous mode
[  200.766331][T11571] ip6gretap1: left promiscuous mode
[  200.783754][T11574] gretap0: left promiscuous mode
[  200.841487][T11574] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.848748][T11574] 8021q: adding VLAN 0 to HW filter on device team0
[  200.884594][T11574] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.887663][T11574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.895182][T11574] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.898163][T11574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.946876][T11574] veth1_vlan: left promiscuous mode
[  200.950302][T11574] veth0_vlan: left promiscuous mode
[  200.954240][T11574] veth0_vlan: entered promiscuous mode
[  200.960889][T11574] veth1_vlan: entered promiscuous mode
[  200.965894][T11574] ipvlan0: left allmulticast mode
[  200.968110][T11574] veth0_vlan: left allmulticast mode
[  200.973701][T11574] veth1_macvtap: left promiscuous mode
[  200.977307][T11574] veth0_macvtap: left promiscuous mode
[  200.981335][T11574] veth0_macvtap: entered promiscuous mode
[  200.993875][T11574] veth1_macvtap: entered promiscuous mode
[  201.005415][T11574] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  201.013954][T11574] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  201.021774][T11574] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  201.030051][T11574] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  201.037941][T11574] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  201.040788][T11574] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  201.054615][T11574] gretap0: entered promiscuous mode
[  201.056802][T11574] gretap0: entered allmulticast mode
[  201.059044][T11574] macvlan2: left allmulticast mode
[  201.061121][T11574] gretap0: left allmulticast mode
[  201.065659][T11574] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.069139][T11574] gretap1: left allmulticast mode
[  201.078328][T11574] 8021q: adding VLAN 0 to HW filter on device bond2
[  201.089165][T11574] 8021q: adding VLAN 0 to HW filter on device bond3
[  201.096950][T11574] 8021q: adding VLAN 0 to HW filter on device bond4
[  203.080130][T11574] rose0: refused to change device tx_queue_len
[  203.087574][T11574] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check.
[  203.135986][T11574] syz.1.2425 (11574) used greatest stack depth: 17016 bytes left
[  203.173694][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.183156][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.206227][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.223007][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  203.347601][T11596] xt_hashlimit: max too large, truncated to 1048576
[  203.481620][T11606] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2438'.
[  203.492576][T11606] netlink: 'syz.2.2438': attribute type 2 has an invalid length.
[  204.444590][T11651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.956657][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'.
[  205.026194][T11678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2471'.
[  205.470378][T11718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2489'.
[  205.688163][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'.
[  205.713828][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'.
[  205.951232][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'.
[  205.955273][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'.
[  205.958195][T11756] netlink: 'syz.1.2504': attribute type 20 has an invalid length.
[  206.200656][T11704] Bluetooth: hci0: Opcode 0x080f failed: -4
[  206.926695][T11780] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  206.929505][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.970861][T11784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2512'.
[  206.984386][T11788] veth0: entered promiscuous mode
[  206.986229][T11787] veth0: left promiscuous mode
[  207.315609][T11818] syzkaller0: entered promiscuous mode
[  207.317525][T11818] syzkaller0: entered allmulticast mode
[  207.320678][T11818] 0: reclassify loop, rule prio 0, protocol 800
[  207.587596][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'.
[  207.591483][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'.
[  208.916389][T11884] syzkaller1: entered promiscuous mode
[  208.921415][T11884] syzkaller1: entered allmulticast mode
[  209.381651][T11918] bridge5: the hash_elasticity option has been deprecated and is always 16
[  210.380179][T11961] __nla_validate_parse: 1 callbacks suppressed
[  210.380195][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2586'.
[  212.463764][T11928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  212.680566][T11975] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2591'.
[  212.770885][T11979] bond6: entered promiscuous mode
[  213.101747][T12006] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.173011][T12011] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  213.199929][T12013] ip6tnl0: Caught tx_queue_len zero misconfig
[  213.202404][T12013] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2608'.
[  213.469709][T12031] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2617'.
[  213.841605][T12049] netlink: 'syz.0.2625': attribute type 10 has an invalid length.
[  213.845388][T12049] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2625'.
[  214.337414][T12045] bond6: left promiscuous mode
[  214.411448][T12049] smc: removing net device wlan0 with user defined pnetid SYZ0
[  214.454017][ T5719] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.462089][ T5719] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.473437][ T5719] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.482022][ T5719] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.704685][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  214.816483][T12100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2642'.
[  214.874523][T12109] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  214.938236][T12115] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  215.141050][T12140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'.
[  215.423195][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'.
[  215.519280][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'.
[  215.736921][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'.
[  217.109488][T12239] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.118688][T12239] syzkaller0: entered promiscuous mode
[  217.121084][T12239] syzkaller0: entered allmulticast mode
[  217.140125][T12239] tipc: Resetting bearer <eth:syzkaller0>
[  217.144029][T12237] tipc: Resetting bearer <eth:syzkaller0>
[  217.154517][T12237] tipc: Disabling bearer <eth:syzkaller0>
[  217.390852][T12255] IPVS: rr: FWM 3 0x00000003 - no destination available
[  217.873297][T12299] syzkaller0: entered promiscuous mode
[  217.875338][T12299] syzkaller0: entered allmulticast mode
[  218.240252][   T34] audit: type=1804 audit(1778673431.812:10): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2726" name="/newroot/945/cgroup.controllers" dev="tmpfs" ino=4779 res=1 errno=0
[  218.259955][   T34] audit: type=1800 audit(1778673431.822:11): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2726" name="cgroup.controllers" dev="tmpfs" ino=4779 res=0 errno=0
[  218.311803][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'.
[  218.323084][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'.
[  218.368519][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'.
[  218.376240][ T5719] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.379618][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2731'.
[  218.382912][ T5719] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.388080][ T5719] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.394733][ T5719] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.865947][T12378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2748'.
[  219.526432][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2772'.
[  220.023468][T12477] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  221.511543][T12554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2820'.
[  221.694493][T12570] bond7: (slave bond_slave_1): Device is not bonding slave
[  221.697508][T12570] bond7: option active_slave: invalid value (bond_slave_1)
[  221.704769][T12570] bond7 (unregistering): Released all slaves
[  221.793919][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2834'.
[  221.951056][T12598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.963507][T12598] syzkaller0: entered promiscuous mode
[  221.967667][T12598] syzkaller0: entered allmulticast mode
[  222.005031][T12598] tipc: Resetting bearer <eth:syzkaller0>
[  222.026592][T12596] tipc: Resetting bearer <eth:syzkaller0>
[  222.893015][T12596] tipc: Disabling bearer <eth:syzkaller0>
[  223.196670][T12642] bond4: (slave syz_tun): Removing an active aggregator
[  223.210381][T12642] bond4: (slave syz_tun): Releasing backup interface
[  223.217924][T12642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  223.554512][T12690] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  223.812544][T12700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2886'.
[  223.866832][T12700] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2886'.
[  224.256170][T12728] netlink: 'syz.0.2897': attribute type 1 has an invalid length.
[  225.440188][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'.
[  227.647143][T12817] netlink: 'syz.2.2937': attribute type 3 has an invalid length.
[  228.646557][T12903] team_slave_1: Caught tx_queue_len zero misconfig
[  229.407284][T12945] veth0_macvtap: entered allmulticast mode
[  229.409947][T12945] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  229.502423][T12955] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2996'.
[  229.506179][T12955] .70X: renamed from veth1_virt_wifi (while UP)
[  230.300978][T12955] .70X: entered allmulticast mode
[  230.304679][T12955] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  230.450978][T12978] netlink: 'syz.1.3007': attribute type 13 has an invalid length.
[  230.510023][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'.
[  230.550863][T12979] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.588109][T12985] syz_tun (unregistering): left allmulticast mode
[  231.962851][T13035] netlink: 'syz.2.3030': attribute type 16 has an invalid length.
[  232.050924][T13043] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.054109][T13043] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.177667][ T5719] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.182509][ T5719] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.193187][ T5719] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.196935][ T5719] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.325576][T13058] syzkaller1: entered promiscuous mode
[  232.327939][T13058] syzkaller1: entered allmulticast mode
[  232.538273][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  232.545340][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  232.551199][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  232.556466][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  232.768737][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'.
[  233.626985][T13169] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3089'.
[  234.382876][T13185] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3098'.
[  234.389427][T13185] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  235.282963][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  235.574663][T13252] nbd: must specify a size in bytes for the device
[  236.481497][T13277] lo: Caught tx_queue_len zero misconfig
[  236.484441][T13277] netlink: 'syz.1.3138': attribute type 15 has an invalid length.
[  236.745313][T13292] netlink: 840 bytes leftover after parsing attributes in process `syz.0.3145'.
[  237.056632][T13323] syzkaller1: entered promiscuous mode
[  237.058984][T13323] syzkaller1: entered allmulticast mode
[  237.766850][T13360] netlink: 'syz.0.3176': attribute type 1 has an invalid length.
[  237.783534][T13360] bond5: entered promiscuous mode
[  237.785404][T13360] 8021q: adding VLAN 0 to HW filter on device bond5
[  237.794129][T13360] ipvlan2: entered allmulticast mode
[  237.796274][T13360] bond5: entered allmulticast mode
[  237.805211][T13360] bond5: (slave bridge5): making interface the new active one
[  237.808220][T13360] bridge5: entered promiscuous mode
[  237.810432][T13360] bridge5: entered allmulticast mode
[  237.813452][T13360] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  237.838023][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'.
[  237.887938][T13375] geneve6: entered promiscuous mode
[  238.080957][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'.
[  238.785474][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3196'.
[  238.788479][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3196'.
[  238.817673][T13405] xt_CT: You must specify a L4 protocol and not use inversions on it
[  239.000782][T13409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3199'.
[  239.052618][T13417] netlink: 'syz.0.3203': attribute type 21 has an invalid length.
[  239.055440][T13417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3203'.
[  239.261724][T13445] netlink: 'syz.0.3210': attribute type 1 has an invalid length.
[  239.643720][T13495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.773781][T13514] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3232'.
[  239.802535][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'.
[  240.010817][T13544] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3244'.
[  240.042340][T13548] netlink: 'syz.0.3246': attribute type 7 has an invalid length.
[  240.158505][T13562] syzkaller0: entered promiscuous mode
[  240.161209][T13562] syzkaller0: entered allmulticast mode
[  240.405695][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  241.864419][T13649] __nla_validate_parse: 2 callbacks suppressed
[  241.864875][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'.
[  242.319769][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3300'.
[  242.766325][T13672] nbd0: detected capacity change from 0 to 127
[  242.773129][   T55] block nbd0: Receive control failed (result -32)
[  242.774824][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  242.782771][T13197] block nbd0: Dead connection, failed to find a fallback
[  242.788440][T13197] block nbd0: shutting down sockets
[  242.790893][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'.
[  242.798152][T13197] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.814202][T13197] Buffer I/O error on dev nbd0, logical block 0, async page read
[  242.825287][T13197] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.832959][T13197] Buffer I/O error on dev nbd0, logical block 1, async page read
[  242.837726][T13197] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.847676][T13197] Buffer I/O error on dev nbd0, logical block 2, async page read
[  242.857389][T13197] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.865037][T13197] Buffer I/O error on dev nbd0, logical block 3, async page read
[  242.870380][T13197] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.877887][T13197] Buffer I/O error on dev nbd0, logical block 0, async page read
[  242.890894][T13197] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.899353][T13197] Buffer I/O error on dev nbd0, logical block 1, async page read
[  242.906346][T13197] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.922038][T13197] Buffer I/O error on dev nbd0, logical block 2, async page read
[  242.925633][T13197] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.930894][T13197] Buffer I/O error on dev nbd0, logical block 3, async page read
[  242.935731][T13197] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.944164][T13197] Buffer I/O error on dev nbd0, logical block 0, async page read
[  242.947212][T13197] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.950332][T13197] Buffer I/O error on dev nbd0, logical block 1, async page read
[  242.958218][T13197] ldm_validate_partition_table(): Disk read failed.
[  242.963522][T13197] Dev nbd0: unable to read RDB block 0
[  242.970336][T13197]  nbd0: unable to read partition table
[  243.009052][T13197] ldm_validate_partition_table(): Disk read failed.
[  243.012851][T13197] Dev nbd0: unable to read RDB block 0
[  243.016135][T13197]  nbd0: unable to read partition table
[  243.194339][T13721] IPVS: nq: FWM 3 0x00000003 - no destination available
[  245.872082][T13689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  246.085611][T13738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3327'.
[  246.143248][T13746] syzkaller0: entered promiscuous mode
[  246.145122][T13746] syzkaller0: entered allmulticast mode
[  246.253719][T13758] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[  246.386736][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'.
[  246.627882][T13809] syzkaller1: entered allmulticast mode
[  246.802510][T13824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3366'.
[  246.805345][T13824] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  246.866903][T13835] netlink: 'syz.0.3371': attribute type 1 has an invalid length.
[  246.979518][   T34] audit: type=1804 audit(1778673460.552:12): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3381" name="/newroot/1073/memory.events" dev="tmpfs" ino=5432 res=1 errno=0
[  246.988566][   T34] audit: type=1800 audit(1778673460.562:13): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3381" name="memory.events" dev="tmpfs" ino=5432 res=0 errno=0
[  247.006737][T13854] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  247.010456][T13854] bond8 (unregistering): Released all slaves
[  247.076162][T13857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.150323][ T7090] syz0: Port: 1 Link DOWN
[  247.152796][ T5719] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.156858][ T5719] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.159486][ T5719] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.162700][ T5719] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.165585][ T5719] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.169274][ T5719] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.174415][ T5719] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.181938][ T5719] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.297043][T13875] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3389'.
[  247.640239][T13908] xfrm0: entered allmulticast mode
[  248.703529][T13982] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  248.724606][T13982] bond7 (unregistering): Released all slaves
[  248.813428][T13991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3443'.
[  248.816472][T13991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3443'.
[  248.819488][T13991] netlink: 'syz.0.3443': attribute type 1 has an invalid length.
[  248.976976][T14012] ieee802154 phy1 wpan1: encryption failed: -22
[  249.099748][T14026] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3460'.
[  249.438921][T14055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'.
[  249.526807][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3476'.
[  249.639594][T14071] netlink: 'syz.1.3480': attribute type 1 has an invalid length.
[  249.657624][T14071] 8021q: adding VLAN 0 to HW filter on device bond7
[  249.674793][T14071] bond7: (slave veth3): Enslaving as an active interface with a down link
[  249.678908][T14071] netlink: 'syz.1.3480': attribute type 10 has an invalid length.
[  249.681427][T14071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3480'.
[  249.997755][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3497'.
[  250.000713][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'.
[  250.006644][T14107] netlink: 'syz.1.3497': attribute type 18 has an invalid length.
[  250.790754][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'.
[  251.107467][T14215] netlink: 'syz.1.3547': attribute type 16 has an invalid length.
[  251.110730][T14215] netlink: 'syz.1.3547': attribute type 3 has an invalid length.
[  251.381705][T14250] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  252.243697][T14335] netlink: 'syz.0.3599': attribute type 7 has an invalid length.
[  252.253353][T14335] netlink: 'syz.0.3599': attribute type 7 has an invalid length.
[  252.421565][T14359] __nla_validate_parse: 8 callbacks suppressed
[  252.421579][T14359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3610'.
[  253.475934][T14412] ip6gretap2: entered promiscuous mode
[  253.601749][T14422] syzkaller0: entered promiscuous mode
[  253.607664][T14422] syzkaller0: entered allmulticast mode
[  254.314506][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'.
[  254.318810][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'.
[  254.643103][T14484] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3664'.
[  254.733936][T14492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3668'.
[  254.897809][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3673'.
[  254.935600][T14504] syzkaller0: entered promiscuous mode
[  254.937767][T14504] syzkaller0: entered allmulticast mode
[  255.446187][T14566] IPVS: Error connecting to the multicast addr
[  255.490400][T14571] xt_hashlimit: max too large, truncated to 1048576
[  255.499690][T14571] xt_hashlimit: overflow, try lower: 2/0
[  255.599942][T14581] vxcan2: entered allmulticast mode
[  255.678928][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3712'.
[  255.682590][T14590] IPVS: Unknown mcast interface: vcan0
[  257.438767][T14656] syzkaller1: tun_chr_ioctl cmd 2147767520
[  257.597823][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'.
[  258.775388][T14724] tipc: Enabled bearer <ib:ip6gre0>, priority 8
[  259.278645][T14746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.283921][T14746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.377044][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'.
[  259.379811][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'.
[  259.462622][T14770] netlink: 'syz.0.3794': attribute type 1 has an invalid length.
[  259.465330][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3794'.
[  259.487300][T14772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.498658][T14772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.682785][T14786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3801'.
[  259.686462][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3801'.
[  259.750907][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'.
[  259.886321][T14800] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.3807'.
[  260.145892][T14825] xt_hashlimit: size too large, truncated to 1048576
[  260.799106][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3835'.
[  260.846452][T14867] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3837'.
[  260.849904][T14867] netlink: 'syz.2.3837': attribute type 9 has an invalid length.
[  260.888924][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  260.906863][T14864] lo: Caught tx_queue_len zero misconfig
[  260.971742][T14878] syzkaller0: entered promiscuous mode
[  260.973893][T14878] syzkaller0: entered allmulticast mode
[  261.799971][T14948] tipc: Resetting bearer <ib:ip6gre0>
[  261.878011][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.884905][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.889855][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  261.892672][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.013906][T14959] netlink: 'syz.1.3875': attribute type 10 has an invalid length.
[  262.016935][T14959] veth0_vlan: left promiscuous mode
[  262.020052][T14959] veth0_vlan: entered promiscuous mode
[  262.031516][T14959] team0: Device veth0_vlan failed to register rx_handler
[  262.115132][T14967] netlink: 'syz.0.3880': attribute type 12 has an invalid length.
[  262.635560][T15024] __nla_validate_parse: 9 callbacks suppressed
[  262.635576][T15024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3904'.
[  262.694643][T15034] xt_CONNSECMARK: invalid mode: 0
[  263.534775][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3932'.
[  263.721423][T15106] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3940'.
[  263.815760][T15114] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3944'.
[  264.022615][T15132] netlink: 'syz.1.3953': attribute type 1 has an invalid length.
[  264.058070][T15132] bond8: (slave bridge5): making interface the new active one
[  264.061999][T15132] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  264.070049][T15132] SET target dimension over the limit!
[  264.084206][T15132] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  264.370440][T15164] netlink: zone id is out of range
[  264.378858][T15164] netlink: get zone limit has 4 unknown bytes
[  264.687248][T15195] netlink: 'syz.1.3981': attribute type 3 has an invalid length.
[  264.838674][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'.
[  264.844725][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'.
[  264.966045][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'.
[  264.969256][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3994'.
[  264.972175][T15223] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  265.000721][T15226] netlink: 'syz.2.3996': attribute type 11 has an invalid length.
[  265.076844][T15237] netlink: 'syz.2.4001': attribute type 1 has an invalid length.
[  265.079501][T15237] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4001'.
[  265.083264][T15237] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4001'.
[  265.101545][T15239] ieee802154 phy1 wpan1: encryption failed: -22
[  265.449279][T15268] netlink: 'syz.1.4011': attribute type 29 has an invalid length.
[  266.206112][T15318] netlink: 'syz.1.4032': attribute type 1 has an invalid length.
[  266.252287][T15318] 8021q: adding VLAN 0 to HW filter on device bond9
[  266.257986][T15318] netlink: 'syz.1.4032': attribute type 10 has an invalid length.
[  266.575978][T15340] netlink: 'syz.1.4041': attribute type 1 has an invalid length.
[  266.678216][T15346] netlink: 'syz.0.4043': attribute type 1 has an invalid length.
[  266.801788][T15361] netlink: 'syz.0.4051': attribute type 62 has an invalid length.
[  266.912859][T15378] netlink: 'syz.0.4057': attribute type 15 has an invalid length.
[  267.181002][T15396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.206432][T15396] syzkaller0: entered promiscuous mode
[  267.208337][T15396] syzkaller0: entered allmulticast mode
[  267.210759][T15396] tipc: Resetting bearer <eth:syzkaller0>
[  267.227699][T15396] veth13: entered promiscuous mode
[  267.254033][T15395] tipc: Resetting bearer <eth:syzkaller0>
[  268.469230][T15395] tipc: Disabling bearer <eth:syzkaller0>
[  268.485131][T15414] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  268.750513][T15444] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  268.781249][T15444] __nla_validate_parse: 12 callbacks suppressed
[  268.781270][T15444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4079'.
[  268.803484][T15444] vlan3: entered allmulticast mode
[  268.805668][T15444] macvtap0: entered allmulticast mode
[  269.129099][T15456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4084'.
[  269.673052][T15497] netlink: 'syz.0.4101': attribute type 10 has an invalid length.
[  269.675978][T15497] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4101'.
[  269.716245][T15501] xt_hashlimit: size too large, truncated to 1048576
[  269.773915][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.779711][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.786295][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.790284][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.816093][T15509] netlink: 'syz.0.4106': attribute type 1 has an invalid length.
[  269.845963][T15509] 8021q: adding VLAN 0 to HW filter on device bond6
[  269.874822][T15509] bond6: (slave gretap1): making interface the new active one
[  269.881610][T15509] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  269.973025][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4113'.
[  269.995772][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'.
[  269.999544][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'.
[  270.127106][T15537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.171395][T15537] syzkaller0: entered promiscuous mode
[  270.173995][T15537] syzkaller0: entered allmulticast mode
[  270.176363][T15537] tipc: Resetting bearer <eth:syzkaller0>
[  270.188907][T15535] tipc: Resetting bearer <eth:syzkaller0>
[  270.878550][T15548] netlink: 'syz.2.4124': attribute type 3 has an invalid length.
[  271.529443][T15535] tipc: Disabling bearer <eth:syzkaller0>
[  271.536561][T15546] xfrm0: Caught tx_queue_len zero misconfig
[  271.768494][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4137'.
[  274.718706][T15586] veth5: entered allmulticast mode
[  274.724043][T15586] bond7: (slave veth5): Enslaving as an active interface with an up link
[  274.805976][T15589] bond7 (unregistering): (slave veth5): Releasing backup interface
[  274.814660][T15589] bond7 (unregistering): Released all slaves
[  275.039782][T15621] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  275.049070][T15621] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  275.057265][T15621] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  275.066534][T15621] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  275.315636][T15645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4155'.
[  275.318559][T15645] netlink: 'syz.1.4155': attribute type 1 has an invalid length.
[  276.091260][T15670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4166'.
[  276.433777][T15683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'.
[  276.439186][T15683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4170'.
[  278.232231][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4202'.
[  278.241266][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4203'.
[  278.245813][T15760] nbd: couldn't find a device at index 65546
[  278.298234][T15766] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4205'.
[  278.953572][T15807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.994876][T15809] netlink: 'syz.2.4222': attribute type 8 has an invalid length.
[  279.321025][T15825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4230'.
[  279.735346][T15859] : entered promiscuous mode
[  279.804308][T15865] netlink: 'syz.2.4248': attribute type 21 has an invalid length.
[  279.807006][T15865] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4248'.
[  279.817847][T15865] netlink: 'syz.2.4248': attribute type 4 has an invalid length.
[  279.821129][T15865] netlink: 'syz.2.4248': attribute type 3 has an invalid length.
[  279.824475][T15865] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4248'.
[  280.423360][T15936] bridge0: port 3(erspan0) entered blocking state
[  280.426197][T15936] bridge0: port 3(erspan0) entered disabled state
[  280.431479][T15936] erspan0: entered allmulticast mode
[  280.438010][T15936] erspan0: left allmulticast mode
[  280.542439][T15946] netlink: 'syz.2.4284': attribute type 3 has an invalid length.
[  280.616826][T15956] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  280.666850][T15962] __nla_validate_parse: 4 callbacks suppressed
[  280.666862][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4292'.
[  281.030802][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4309'.
[  281.074724][T16002] syzkaller0: entered promiscuous mode
[  281.080736][T16002] syzkaller0: entered allmulticast mode
[  281.358867][T16026] netlink: set zone limit has 8 unknown bytes
[  281.406264][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4324'.
[  281.464832][T16038] netlink: 'syz.2.4329': attribute type 10 has an invalid length.
[  281.852352][T16088] bond0: Caught tx_queue_len zero misconfig
[  282.453642][T16116] netlink: 'syz.1.4360': attribute type 10 has an invalid length.
[  282.462859][T16116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4360'.
[  282.472505][T16116] team0: Port device geneve1 added
[  282.474450][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.479184][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.486980][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.492389][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.211661][T16166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4381'.
[  283.488718][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4388'.
[  283.492741][T16183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4388'.
[  283.538237][T16186] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4390'.
[  283.619609][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4392'.
[  283.910723][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4401'.
[  284.018217][T16218] syzkaller0: entered promiscuous mode
[  284.020069][T16218] syzkaller0: entered allmulticast mode
[  284.347898][T16248] : option downdelay: invalid value (18446744073709547007)
[  284.351941][T16248] : option downdelay: allowed values 0 - 2147483647
[  284.358779][T16248]  (unregistering): Released all slaves
[  284.585813][T16285] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  284.655749][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.658904][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.661456][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.664287][T16293] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  284.668783][T16293] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  284.674965][T16293] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  284.694523][T16293] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  284.720068][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.728633][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.736277][T16293] hsr0 speed is unknown, defaulting to 1000
[  284.932218][T16318] netlink: 'syz.0.4451': attribute type 1 has an invalid length.
[  285.145170][T16339] netlink: 'syz.1.4461': attribute type 10 has an invalid length.
[  285.148132][T16339] netlink: 'syz.1.4461': attribute type 10 has an invalid length.
[  285.407305][T16373] netlink: 'syz.0.4477': attribute type 1 has an invalid length.
[  286.469575][T16459] __nla_validate_parse: 4 callbacks suppressed
[  286.469593][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4515'.
[  286.767887][T16473] syzkaller0: entered promiscuous mode
[  286.770318][T16473] syzkaller0: entered allmulticast mode
[  286.877554][T16480] xt_hashlimit: size too large, truncated to 1048576
[  286.880842][T16480] xt_hashlimit: max too large, truncated to 1048576
[  287.138402][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4533'.
[  287.295764][T16514] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4539'.
[  287.298928][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4540'.
[  287.308838][T16514] 0: renamed from hsr0
[  287.322102][T16514] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.326221][T16514] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.333620][T16514] 0: entered allmulticast mode
[  287.335776][T16514] hsr_slave_0: entered allmulticast mode
[  287.338202][T16514] hsr_slave_1: entered allmulticast mode
[  287.341216][T16514] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  287.349206][ T5085] 0 speed is unknown, defaulting to 1000
[  287.405913][T16530] xt_TPROXY: Can be used only with -p tcp or -p udp
[  287.499135][T16543] netlink: 'syz.0.4552': attribute type 14 has an invalid length.
[  287.502128][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4552'.
[  287.505316][T16543] bond0: option xmit_hash_policy: invalid value (191)
[  287.587644][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'.
[  287.696303][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4559'.
[  287.699468][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4559'.
[  287.704929][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4559'.
[  287.707905][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4559'.
[  288.118574][T16609] netlink: 'syz.1.4581': attribute type 2 has an invalid length.
[  288.536031][T16532] syz.2.4547 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  288.546234][T16532] CPU: 1 UID: 0 PID: 16532 Comm: syz.2.4547 Not tainted syzkaller #0 PREEMPT(full) 
[  288.546255][T16532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.546264][T16532] Call Trace:
[  288.546271][T16532]  <TASK>
[  288.546278][T16532]  dump_stack_lvl+0xe8/0x150
[  288.546299][T16532]  dump_header+0xd3/0x4c0
[  288.546323][T16532]  oom_kill_process+0x3ab/0x970
[  288.546345][T16532]  out_of_memory+0x106c/0x1410
[  288.546361][T16532]  ? try_charge_memcg+0xbb9/0x1570
[  288.546383][T16532]  ? __pfx___mutex_lock+0x10/0x10
[  288.546406][T16532]  ? __pfx_out_of_memory+0x10/0x10
[  288.546422][T16532]  ? do_raw_spin_unlock+0x4d/0x210
[  288.546446][T16532]  try_charge_memcg+0xc77/0x1570
[  288.546476][T16532]  ? __pfx_try_charge_memcg+0x10/0x10
[  288.546494][T16532]  ? percpu_ref_tryget+0x15/0x180
[  288.546548][T16532]  ? charge_memcg+0x23/0x2b0
[  288.546576][T16532]  charge_memcg+0x1a2/0x2b0
[  288.546596][T16532]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  288.546614][T16532]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  288.546636][T16532]  __swap_cache_prepare_and_add+0xdc/0x700
[  288.546657][T16532]  ? page_rmappable_folio+0x9a/0x170
[  288.546684][T16532]  swap_cache_alloc_folio+0xf1/0x240
[  288.546702][T16532]  swap_cluster_readahead+0x523/0x670
[  288.546723][T16532]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  288.546749][T16532]  ? get_vma_policy+0x27b/0x3c0
[  288.546771][T16532]  swapin_readahead+0x196/0xc50
[  288.546789][T16532]  ? swap_table_get+0x1e/0x260
[  288.546808][T16532]  ? __pfx_swapin_readahead+0x10/0x10
[  288.546825][T16532]  ? swap_table_get+0x1e/0x260
[  288.546840][T16532]  ? swap_table_get+0x1e/0x260
[  288.546852][T16532]  ? swap_table_get+0x1e/0x260
[  288.546868][T16532]  ? swap_table_get+0x216/0x260
[  288.546883][T16532]  ? swap_cache_get_folio+0x2e4/0x2f0
[  288.546904][T16532]  do_swap_page+0x555/0x5120
[  288.546949][T16532]  ? __pte_offset_map+0x29/0x240
[  288.546969][T16532]  ? __pte_offset_map+0x29/0x240
[  288.546991][T16532]  ? do_swap_page+0x128/0x5120
[  288.547005][T16532]  ? __pfx_do_swap_page+0x10/0x10
[  288.547019][T16532]  ? __pte_offset_map+0x1ae/0x240
[  288.547038][T16532]  ? pte_offset_map_rw_nolock+0xea/0x160
[  288.547055][T16532]  handle_mm_fault+0x12d2/0x3170
[  288.547082][T16532]  ? handle_mm_fault+0xee/0x3170
[  288.547103][T16532]  ? __pfx_handle_mm_fault+0x10/0x10
[  288.547118][T16532]  ? lock_vma_under_rcu+0x45a/0x500
[  288.547155][T16532]  do_user_addr_fault+0xa73/0x1340
[  288.547176][T16532]  ? rcu_is_watching+0x15/0xb0
[  288.547193][T16532]  ? trace_page_fault_user+0x84/0x1e0
[  288.547210][T16532]  exc_page_fault+0x6a/0xc0
[  288.547230][T16532]  asm_exc_page_fault+0x26/0x30
[  288.547243][T16532] RIP: 0033:0x7f328359cdeb
[  288.547257][T16532] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[  288.547269][T16532] RSP: 002b:00007f3284424028 EFLAGS: 00010217
[  288.547282][T16532] RAX: 000000000000000c RBX: 00007f3283815fa0 RCX: ffffffffffffffe8
[  288.547292][T16532] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000
[  288.547302][T16532] RBP: 00007f3283632d69 R08: 0000000000000000 R09: 0000000000000000
[  288.547310][T16532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.547318][T16532] R13: 00007f3283816038 R14: 00007f3283815fa0 R15: 00007fffa5247b28
[  288.547340][T16532]  </TASK>
[  288.548601][T16532] memory: usage 307200kB, limit 307200kB, failcnt 2554
[  288.711967][T16532] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0
[  288.721967][T16532] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0
[  288.734182][T16532] Memory cgroup stats for /syz2:
[  288.734252][T16532] cache 8192
[  288.738430][T16532] rss 0
[  288.741899][T16532] rss_huge 0
[  288.742900][T16532] shmem 0
[  288.752041][T16532] mapped_file 0
[  288.755169][T16532] dirty 0
[  288.756422][T16532] writeback 0
[  288.771939][T16532] workingset_refault_anon 29
[  288.773525][T16532] workingset_refault_file 67
[  288.775038][T16532] swap 192512
[  288.776094][T16532] swapcached 425984
[  288.777285][T16532] pgpgin 165344
[  288.778384][T16532] pgpgout 165339
[  288.779527][T16532] pgfault 299935
[  288.780686][T16532] pgmajfault 154
[  288.801312][T16532] inactive_anon 12288
[  288.810180][T16532] active_anon 0
[  288.817135][T16532] inactive_file 8192
[  288.818426][T16532] active_file 0
[  288.831980][T16532] unevictable 0
[  288.833160][T16532] hierarchical_memory_limit 314572800
[  288.835010][T16532] hierarchical_memsw_limit 9223372036854771712
[  288.837334][T16532] total_cache 8192
[  288.838727][T16532] total_rss 0
[  288.839970][T16532] total_rss_huge 0
[  288.841206][T16532] total_shmem 0
[  288.842719][T16532] total_mapped_file 0
[  288.871420][T16532] total_dirty 0
[  288.876222][T16532] total_writeback 0
[  288.880905][T16532] total_workingset_refault_anon 29
[  288.891964][T16532] total_workingset_refault_file 67
[  288.896579][T16532] total_swap 192512
[  288.902032][T16532] total_swapcached 425984
[  288.908159][T16532] total_pgpgin 165344
[  288.914327][T16532] total_pgpgout 165339
[  288.922007][T16532] total_pgfault 299936
[  288.923361][T16532] total_pgmajfault 154
[  288.931381][T16532] total_inactive_anon 12288
[  288.934692][T16532] total_active_anon 0
[  288.935987][T16532] total_inactive_file 8192
[  288.939997][T16532] total_active_file 0
[  288.943491][T16532] total_unevictable 0
[  288.944746][T16532] anon_cost 0
[  288.948879][T16532] file_cost 0
[  288.950170][T16532] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4547,pid=16531,uid=0
[  288.965353][T16532] Memory cgroup out of memory: Killed process 16532 (syz.2.4547) total-vm:102160kB, anon-rss:64kB, file-rss:22612kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  289.285416][T16668] lo: entered allmulticast mode
[  289.289412][T16667] lo: left allmulticast mode
[  289.810237][T16683] netlink: 'syz.1.4615': attribute type 30 has an invalid length.
[  290.223950][T16688] netlink: 'syz.1.4618': attribute type 1 has an invalid length.
[  290.243323][T16688] 8021q: adding VLAN 0 to HW filter on device bond10
[  290.249474][T16688] bond10: option tlb_dynamic_lb: unable to set because the bond device is up
[  290.371713][T16700] 0 speed is unknown, defaulting to 1000
[  290.537397][T16726] bond7: option lp_interval: invalid value (0)
[  290.539606][T16726] bond7: option lp_interval: allowed values 1 - 2147483647
[  290.548601][T16726] bond7 (unregistering): Released all slaves
[  290.703750][T16737] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  290.858491][T16752] netlink: 'syz.2.4646': attribute type 29 has an invalid length.
[  290.861386][T16752] netlink: 'syz.2.4646': attribute type 29 has an invalid length.
[  290.866197][T16752] netlink: 'syz.2.4646': attribute type 32 has an invalid length.
[  291.241385][T16781] netlink: 'syz.1.4656': attribute type 11 has an invalid length.
[  291.734047][T16816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  292.007845][T16838] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  292.282039][   T12] tipc: Subscription rejected, illegal request
[  292.416157][T16885] __nla_validate_parse: 8 callbacks suppressed
[  292.416168][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4702'.
[  292.421688][T16885] netem: incorrect ge model size
[  292.424915][T16885] netem: change failed
[  292.580515][T16900] netem: incorrect gi model size
[  292.584790][T16900] netem: change failed
[  292.730937][T16912] syzkaller0: entered promiscuous mode
[  292.733574][T16912] syzkaller0: entered allmulticast mode
[  292.737356][T16914] netlink: 'syz.1.4714': attribute type 33 has an invalid length.
[  292.740957][T16914] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4714'.
[  292.744831][T16914] `: renamed from team0
[  293.657692][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4732'.
[  294.124033][T17001] wg2: Caught tx_queue_len zero misconfig
[  294.239705][T17007] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  294.246262][T17007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.424690][T17018] syzkaller0: entered promiscuous mode
[  294.427831][T17018] syzkaller0: entered allmulticast mode
[  294.435829][T17018] 0: reclassify loop, rule prio 0, protocol 800
[  294.545069][T17027] netlink: 'syz.0.4756': attribute type 1 has an invalid length.
[  294.561096][T17027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.864161][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'.
[  294.915422][T17057] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4770'.
[  294.918728][T17057] openvswitch: netlink: Key type 769 is out of range max 32
[  295.272083][T17079] syzkaller0: entered promiscuous mode
[  295.273903][T17079] syzkaller0: entered allmulticast mode
[  295.932055][T17121] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  295.976064][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'.
[  296.119336][T17137] netlink: 'syz.2.4799': attribute type 3 has an invalid length.
[  296.968332][T17202] netlink: 292 bytes leftover after parsing attributes in process `syz.1.4825'.
[  297.299493][T17234] IPVS: Unknown mcast interface: vcan0
[  297.479130][T17236] netlink: 'syz.1.4840': attribute type 1 has an invalid length.
[  297.976938][T17279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  298.094009][T17288] syzkaller0: create flow: hash 1292294137 index 2
[  298.112604][T10791] syzkaller0: tun_net_xmit 76
[  298.130316][T17292] netlink: 'syz.1.4864': attribute type 1 has an invalid length.
[  298.133228][T17292] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4864'.
[  298.512059][T10791] syzkaller0: tun_net_xmit 76
[  298.725788][T17317] IPVS: Scheduler module ip_vs_sip not found
[  298.873984][T17280] syzkaller0: delete flow: hash 1292294137 index 2
[  298.931173][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4880'.
[  300.062533][T17326] vlan4: entered promiscuous mode
[  300.064855][T17326] geneve1: entered promiscuous mode
[  300.067171][T17326] vlan4: entered allmulticast mode
[  300.069424][T17326] geneve1: entered allmulticast mode
[  300.151358][T17339] netlink: 'syz.0.4886': attribute type 2 has an invalid length.
[  300.857529][T17393] netlink: 'syz.0.4909': attribute type 5 has an invalid length.
[  300.906565][T17397] xfrm0: entered allmulticast mode
[  300.909151][T17397] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  301.517551][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4927'.
[  301.527598][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4927'.
[  301.545192][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4927'.
[  301.561995][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4927'.
[  301.593735][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4928'.
[  302.131683][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4943'.
[  302.138692][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4943'.
[  302.143605][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4943'.
[  303.060102][T17511] x_tables: duplicate underflow at hook 2
[  303.248476][T17524] netlink: 'syz.1.4966': attribute type 1 has an invalid length.
[  303.264985][T17524] bond11: entered promiscuous mode
[  303.267019][T17522] bond11: left promiscuous mode
[  303.468667][T17545] __nla_validate_parse: 1 callbacks suppressed
[  303.468686][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4973'.
[  303.486885][T17545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4973'.
[  303.490504][T17545] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4973'.
[  303.600343][T17558] sock: sock_set_timeout: `syz.0.4979' (pid 17558) tries to set negative timeout
[  304.988653][T17615] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5004'.
[  305.110456][T17626] netlink: 'syz.0.5010': attribute type 1 has an invalid length.
[  305.409039][T17661] syzkaller0: entered promiscuous mode
[  305.413398][T17661] syzkaller0: entered allmulticast mode
[  305.447319][T17661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.453890][T17661] tipc: Resetting bearer <eth:syzkaller0>
[  305.456997][T17661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.460163][T17661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.464277][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5027'.
[  305.470850][T17658] tipc: Resetting bearer <eth:syzkaller0>
[  305.489711][T17658] tipc: Disabling bearer <eth:syzkaller0>
[  305.579739][T17676] 0 speed is unknown, defaulting to 1000
[  305.587393][T17684] netlink: 'syz.1.5035': attribute type 2 has an invalid length.
[  305.590218][T17684] netlink: 'syz.1.5035': attribute type 1 has an invalid length.
[  305.596129][T17684] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5035'.
[  307.037497][T17733] bond7: option tlb_dynamic_lb: invalid value (5)
[  307.041757][T17733] bond7 (unregistering): Released all slaves
[  307.153932][T17742] xt_nfacct: accounting object `syz0' does not exist
[  307.438013][T17768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5070'.
[  307.454200][T17768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5070'.
[  307.459230][T17769] erspan0: left promiscuous mode
[  307.487010][T17769] 8021q: adding VLAN 0 to HW filter on device bond0
[  307.496915][T17771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5071'.
[  307.499348][T17769] 8021q: adding VLAN 0 to HW filter on device `
[  307.515748][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.576437][T17769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.583858][T17769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  307.587607][T17769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  307.597820][T17769] virt_wifi0: left promiscuous mode
[  307.613411][T17769] veth1_macvtap: left promiscuous mode
[  307.616635][T17769] veth0_macvtap: left promiscuous mode
[  307.620388][T17769] veth0_macvtap: entered promiscuous mode
[  307.626882][T17769] veth1_macvtap: entered promiscuous mode
[  307.637405][T17769] erspan0: entered promiscuous mode
[  307.645827][T17769] bond1: left promiscuous mode
[  307.647850][T17769] bridge3: left promiscuous mode
[  307.650831][T17769] 8021q: adding VLAN 0 to HW filter on device bond1
[  307.654736][T17769] 8021q: adding VLAN 0 to HW filter on device bond2
[  307.657638][T17769] virt_wifi0: entered promiscuous mode
[  307.659993][T17769] macsec2: left promiscuous mode
[  307.663957][T17769] bond3: left promiscuous mode
[  307.666106][T17769] 8021q: adding VLAN 0 to HW filter on device bond3
[  307.670391][T17769] 8021q: adding VLAN 0 to HW filter on device bond4
[  307.678394][T17769] bond5: left promiscuous mode
[  307.680028][T17769] bridge5: left promiscuous mode
[  307.682329][T17769] 8021q: adding VLAN 0 to HW filter on device bond5
[  307.685392][T17769] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  307.688874][T17769] geneve6: left promiscuous mode
[  307.697666][T17769] 8021q: adding VLAN 0 to HW filter on device eth0
[  307.704633][T17769] 8021q: adding VLAN 0 to HW filter on device eth1
[  307.708438][T17769] 8021q: adding VLAN 0 to HW filter on device eth2
[  307.712407][T17769] 8021q: adding VLAN 0 to HW filter on device eth3
[  307.720469][T17769] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  307.743760][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.746281][ T6324] bridge0: port 1(bridge_slave_0) entered listening state
[  307.754604][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.757136][ T6324] bridge0: port 2(bridge_slave_1) entered listening state
[  307.789641][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  307.804846][   T31] syz0: Port: 1 Link ACTIVE
[  307.808119][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  307.818916][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  307.824951][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  307.829894][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.834987][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  307.841626][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  307.845062][T10795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  307.850107][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.853965][T10791] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  307.857077][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5077'.
[  307.863470][T10791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  307.892934][   T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  307.942040][T10795] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.002028][T10795] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  308.279467][T17825] netlink: 'syz.0.5095': attribute type 13 has an invalid length.
[  308.283576][T17825] netlink: 'syz.0.5095': attribute type 17 has an invalid length.
[  308.321012][T17823] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.323386][T17823] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.352052][T10791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.571752][T17823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.107447][T17825] erspan0: left promiscuous mode
[  309.120392][T17825] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.125812][T17825] 8021q: adding VLAN 0 to HW filter on device `
[  309.130733][T17825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  309.146769][T17825] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.149897][T17825] bridge0: port 1(bridge_slave_0) entered listening state
[  309.156031][T17825] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.159061][T17825] bridge0: port 2(bridge_slave_1) entered listening state
[  309.174921][T17825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.178487][T17825] xfrm0: left allmulticast mode
[  309.198110][T17825] virt_wifi0: left promiscuous mode
[  309.201418][T17825] veth1_macvtap: left promiscuous mode
[  309.209273][T17825] veth0_macvtap: left promiscuous mode
[  309.213718][T17825] veth0_macvtap: entered promiscuous mode
[  309.224504][T17825] veth1_macvtap: entered promiscuous mode
[  309.233050][T17825] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  309.243671][T17825] erspan0: entered promiscuous mode
[  309.260191][T17825] bond1: left allmulticast mode
[  309.262897][T17825] bridge3: left allmulticast mode
[  309.265731][T17825] 8021q: adding VLAN 0 to HW filter on device bond1
[  309.271029][T17825] 8021q: adding VLAN 0 to HW filter on device bond2
[  309.275591][T17825] virt_wifi0: entered promiscuous mode
[  309.282367][T17825] 8021q: adding VLAN 0 to HW filter on device bond3
[  309.288327][T17825] 8021q: adding VLAN 0 to HW filter on device bond4
[  309.302997][T17825] 8021q: adding VLAN 0 to HW filter on device bond5
[  309.306561][T17825] ipvlan2: left allmulticast mode
[  309.308665][T17825] bond5: left allmulticast mode
[  309.310708][T17825] bridge5: left allmulticast mode
[  309.313973][T17825] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  309.325298][T17825] 8021q: adding VLAN 0 to HW filter on device eth0
[  309.332717][T17825] 8021q: adding VLAN 0 to HW filter on device eth1
[  309.339847][T17825] 8021q: adding VLAN 0 to HW filter on device eth2
[  309.348255][T17825] 8021q: adding VLAN 0 to HW filter on device eth3
[  309.357916][T17825] 8021q: adding VLAN 0 to HW filter on device bond6
[  309.367845][T17825] veth5: left allmulticast mode
[  309.373586][T17825] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  309.527206][T17842] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  309.654901][T17851] syzkaller0: entered promiscuous mode
[  309.656820][T17851] syzkaller0: entered allmulticast mode
[  309.790205][T17865] __nla_validate_parse: 2 callbacks suppressed
[  309.790224][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5111'.
[  310.146776][T17895] tap0: tun_chr_ioctl cmd 1074025692
[  310.751509][T17961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.788439][T17965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5157'.
[  310.813247][T17965] 8021q: adding VLAN 0 to HW filter on device bond12
[  310.854968][T17965] 8021q: adding VLAN 0 to HW filter on device bond13
[  310.865629][T17965] bond12: (slave bond13): Enslaving as an active interface with an up link
[  310.870367][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5157'.
[  310.924750][T17970] bond12 (unregistering): (slave bond13): Releasing backup interface
[  310.930992][T17970] bond12 (unregistering): Released all slaves
[  311.389564][T17997] 0 speed is unknown, defaulting to 1000
[  312.660308][T18033] syzkaller0: entered promiscuous mode
[  312.663378][T18033] syzkaller0: entered allmulticast mode
[  312.917606][T18047] netlink: 'syz.0.5190': attribute type 10 has an invalid length.
[  313.146597][T18064] netlink: 'syz.0.5195': attribute type 1 has an invalid length.
[  313.419567][T18091] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.5208'.
[  313.427749][T18091] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  313.474700][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5210'.
[  313.727023][T18134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5228'.
[  313.762259][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  313.762278][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.917747][T18149] netlink: 'syz.2.5234': attribute type 16 has an invalid length.
[  313.922469][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  314.087816][T18169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.150505][T18175] netlink: 'syz.2.5248': attribute type 21 has an invalid length.
[  314.264948][T18188] netlink: 'syz.2.5254': attribute type 3 has an invalid length.
[  314.505447][T18216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5267'.
[  314.508634][T18216] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5267'.
[  314.538389][T18219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5266'.
[  314.614094][T18226] xt_hashlimit: size too large, truncated to 1048576
[  314.667635][T18232] bridge_slave_0 (unregistering): left allmulticast mode
[  314.685073][T18232] bridge_slave_0 (unregistering): left promiscuous mode
[  314.693182][T18232] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.912474][T18251] netlink: 'syz.1.5279': attribute type 1 has an invalid length.
[  314.954954][T18251] bond12: entered promiscuous mode
[  314.959088][T18251] 8021q: adding VLAN 0 to HW filter on device bond12
[  314.968441][T18251] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5279'.
[  314.972789][T18251] bond12: left promiscuous mode
[  314.974827][T18251] bond12: entered allmulticast mode
[  314.991163][T18251] bond12: (slave bridge8): making interface the new active one
[  314.995480][T18251] bridge8: entered allmulticast mode
[  315.001463][T18251] bond12: (slave bridge8): Enslaving as an active interface with an up link
[  315.044477][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5286'.
[  315.087599][T18267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.584383][T18307] dummy0: mtu less than device minimum
[  315.633921][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5306'.
[  315.638541][T18311] sctp: [Deprecated]: syz.1.5307 (pid 18311) Use of int in maxseg socket option.
[  315.638541][T18311] Use struct sctp_assoc_value instead
[  315.811167][T18326] 0 speed is unknown, defaulting to 1000
[  315.984418][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5314'.
[  316.214882][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5322'.
[  316.278130][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5322'.
[  316.284653][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5322'.
[  316.372491][T18355] tap0: tun_chr_ioctl cmd 1074025677
[  316.374415][T18355] tap0: linktype set to 778
[  316.958394][T18374] netlink: 'syz.1.5333': attribute type 14 has an invalid length.
[  317.702009][T18431] netlink: 'syz.1.5356': attribute type 10 has an invalid length.
[  317.707662][T18431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5356'.
[  318.285838][T18489] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5383'.
[  318.300223][T18489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5383'.
[  318.309827][T18489] tc_dump_action: action bad kind
[  318.750556][T18546] syzkaller0: entered promiscuous mode
[  318.753072][T18546] syzkaller0: entered allmulticast mode
[  318.755650][T18548] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  318.816174][T18553] netlink: 'syz.1.5407': attribute type 10 has an invalid length.
[  319.056170][T18558] xt_hashlimit: size too large, truncated to 1048576
[  320.521427][T18614] __nla_validate_parse: 3 callbacks suppressed
[  320.521439][T18614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5434'.
[  320.838654][T18640] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5446'.
[  320.841625][T18640] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5446'.
[  320.984463][T18651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5451'.
[  321.044236][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  321.249710][T18663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.253995][T18663] IPv6: NLM_F_CREATE should be set when creating new route
[  321.256323][T18663] IPv6: NLM_F_CREATE should be set when creating new route
[  321.567937][T18683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5465'.
[  321.581314][T18683] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  321.585669][T18683] bond8 (unregistering): Released all slaves
[  321.682740][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.024868][T18716] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002
[  322.327214][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  322.747137][T18746] 5n: entered promiscuous mode
[  322.820629][T18750] netlink: 'syz.0.5494': attribute type 1 has an invalid length.
[  322.847107][T18750] 8021q: adding VLAN 0 to HW filter on device bond7
[  322.855476][T18750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5494'.
[  322.859416][T18750] bond7: entered promiscuous mode
[  322.861437][T18750] bond7: entered allmulticast mode
[  322.884670][T18750] bond7: (slave dummy0): making interface the new active one
[  322.887825][T18750] dummy0: entered promiscuous mode
[  322.889758][T18750] dummy0: entered allmulticast mode
[  322.892966][T18750] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  322.962051][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  323.588784][T18797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5514'.
[  323.699739][T18805] netlink: 'syz.2.5519': attribute type 1 has an invalid length.
[  323.707008][T18805] netlink: 'syz.2.5519': attribute type 2 has an invalid length.
[  323.711540][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5519'.
[  323.901992][T18822] netlink: 'syz.1.5528': attribute type 10 has an invalid length.
[  324.046980][T18841] syzkaller0: entered promiscuous mode
[  324.052356][T18841] syzkaller0: entered allmulticast mode
[  324.144045][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'.
[  324.168290][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5544'.
[  324.221478][T18862] syzkaller0: entered promiscuous mode
[  324.226577][T18862] syzkaller0: entered allmulticast mode
[  324.927912][T18909] netlink: 'syz.2.5565': attribute type 30 has an invalid length.
[  325.046394][T18913] bond0: option miimon: invalid value (18446744073709551615)
[  325.057800][T18913] bond0: option miimon: allowed values 0 - 2147483647
[  325.147227][T18918] bridge11: entered promiscuous mode
[  325.149651][T18918] bridge11: entered allmulticast mode
[  325.657988][T18961] __nla_validate_parse: 3 callbacks suppressed
[  325.658009][T18961] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5587'.
[  325.754527][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5591'.
[  326.010238][T18993] "syz.0.5603" (18993) uses obsolete ecb(arc4) skcipher
[  326.920441][T19006] syzkaller0: entered allmulticast mode
[  326.924705][T19006] syzkaller0: entered promiscuous mode
[  326.940766][T19006] syzkaller0 (unregistering): left promiscuous mode
[  326.943516][T19006] syzkaller0 (unregistering): left allmulticast mode
[  327.015837][T19022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5615'.
[  327.106372][T19031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5619'.
[  327.188653][T19039] 0 speed is unknown, defaulting to 1000
[  327.808607][T19103] 0 speed is unknown, defaulting to 1000
[  327.841309][T19107] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5652'.
[  327.882599][T19112] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  328.068241][T19127] bridge8: entered promiscuous mode
[  328.071431][T19127] bridge8: entered allmulticast mode
[  328.153143][T19140] syzkaller0: entered promiscuous mode
[  328.158196][T19140] syzkaller0: entered allmulticast mode
[  328.289619][T19118] bridge8: entered promiscuous mode
[  328.291749][T19118] bridge8: entered allmulticast mode
[  328.511371][T19169] syzkaller0: entered promiscuous mode
[  328.516831][T19169] syzkaller0: entered allmulticast mode
[  328.593061][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  328.705230][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'.
[  329.070226][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5696'.
[  329.447005][T19251] xt_hashlimit: size too large, truncated to 1048576
[  329.449985][T19251] xt_hashlimit: max too large, truncated to 1048576
[  329.486029][T19251] ipt_REJECT: TCP_RESET invalid for non-tcp
[  329.574620][T19256] syzkaller0: entered promiscuous mode
[  329.577584][T19256] syzkaller0: entered allmulticast mode
[  329.621577][T19258] bond14: option updelay: invalid value (18446744073709518847)
[  329.624956][T19258] bond14: option updelay: allowed values 0 - 2147483647
[  329.629062][T19258] bond14 (unregistering): Released all slaves
[  330.036109][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5731'.
[  330.343320][T19304] netlink: 'syz.0.5740': attribute type 1 has an invalid length.
[  330.367812][T19304] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  330.371677][T19304] bond8: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  330.379668][T19304] bond8: (slave vxcan1): making interface the new active one
[  330.383527][T19304] bond8: (slave vxcan1): Enslaving as an active interface with an up link
[  330.389589][T19304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5740'.
[  330.395821][T19304] bond8 (unregistering): (slave vxcan1): Releasing backup interface
[  330.400744][T19304] bond8 (unregistering): Released all slaves
[  331.505713][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5762'.
[  331.586945][T19360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5766'.
[  331.706060][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'.
[  331.725363][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'.
[  331.729138][T19370] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  331.849029][T19387] xt_bpf: check failed: parse error
[  332.140861][T19418] sctp: [Deprecated]: syz.0.5792 (pid 19418) Use of int in maxseg socket option.
[  332.140861][T19418] Use struct sctp_assoc_value instead
[  332.199274][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5797'.
[  332.215742][T19428] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  332.221107][T19428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5797'.
[  332.513520][T19452] netlink: 13 bytes leftover after parsing attributes in process `syz.0.5807'.
[  332.561042][T19454] syzkaller1: tun_chr_ioctl cmd 1074025677
[  332.568531][T19454] syzkaller1: linktype set to 260
[  333.905065][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5831'.
[  334.019935][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5838'.
[  334.022921][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5838'.
[  334.991091][T19615] netlink: 'syz.2.5878': attribute type 1 has an invalid length.
[  335.019273][T19615] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.039627][T19615] veth15: entered allmulticast mode
[  335.055907][T19615] bond8: (slave veth15): Enslaving as an active interface with an up link
[  335.102655][T19615] bond8 (unregistering): (slave veth15): Releasing backup interface
[  335.121640][T19615] bond8 (unregistering): Released all slaves
[  335.625798][T19660] syzkaller1: entered promiscuous mode
[  335.627976][T19660] syzkaller1: entered allmulticast mode
[  335.747998][T19669] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  336.736958][T19685] netlink: 'syz.2.5907': attribute type 1 has an invalid length.
[  336.740314][T19685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.684014][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  338.771568][T19733] __nla_validate_parse: 4 callbacks suppressed
[  338.771584][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5927'.
[  338.845388][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5931'.
[  338.849062][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5931'.
[  338.967696][T19755] vlan5: entered promiscuous mode
[  338.971551][T19755] bridge0: entered promiscuous mode
[  338.984254][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'.
[  339.024874][T19759] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  339.052391][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5937'.
[  339.345390][T19778] netlink: 'syz.0.5947': attribute type 1 has an invalid length.
[  339.606163][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  339.610092][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  340.882487][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.099275][T19829] tipc: Invalid UDP bearer configuration
[  341.099353][T19829] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  341.512635][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.516998][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.523511][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.527672][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.530235][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.533553][ T1116] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.537732][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.541738][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.544560][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.646853][T19842] tipc: Invalid UDP bearer configuration
[  341.646954][T19842] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  341.660831][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5968'.
[  341.667756][T19842] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.145314][T19868] net_ratelimit: 3 callbacks suppressed
[  342.145331][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.155302][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.163574][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.167110][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.170591][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.174606][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.178440][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.181775][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.186088][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.189050][T19868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.303034][T19868] 0 speed is unknown, defaulting to 1000
[  344.983015][T19869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.181280][T19899] 0 speed is unknown, defaulting to 1000
[  345.250034][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5980'.
[  345.742583][T19943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5993'.
[  345.850571][T19945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'.
[  345.853222][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5994'.
[  346.012651][T19962] netlink: 'syz.2.5997': attribute type 1 has an invalid length.
[  346.024863][T19962] bond8: entered promiscuous mode
[  346.026730][T19962] 8021q: adding VLAN 0 to HW filter on device bond8
[  346.194514][T19951] nbd1: detected capacity change from 0 to 63
[  346.217245][   T55] block nbd1: Receive control failed (result -104)
[  346.220839][T13677] block nbd1: Receive control failed (result -32)
[  346.294660][T19998] 0 speed is unknown, defaulting to 1000
[  346.363428][T20007] netlink: 'syz.0.6007': attribute type 39 has an invalid length.
[  346.489001][T19995] 0 speed is unknown, defaulting to 1000
[  346.602395][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.607479][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.610551][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.614723][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.617464][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.620078][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6012'.
[  346.717174][T20045] xt_ecn: cannot match TCP bits for non-tcp packets
[  346.739979][T20042] 0 speed is unknown, defaulting to 1000
[  346.774001][T20049] netlink: 'syz.0.6019': attribute type 1 has an invalid length.
[  346.835019][T20049] ip6t_srh: unknown srh match flags  4000
[  347.660397][T20081] 0 speed is unknown, defaulting to 1000
[  348.165704][ T5663] net_ratelimit: 203 callbacks suppressed
[  348.165725][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.171328][ T5663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.260171][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.266047][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  348.269771][T20101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.195242][T20153] netlink: 'syz.0.6049': attribute type 7 has an invalid length.
[  349.197929][T20153] netlink: 'syz.0.6049': attribute type 8 has an invalid length.
[  349.282581][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.285134][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.369822][T20161] netlink: 'syz.0.6053': attribute type 8 has an invalid length.
[  349.379895][T20161] bond0: entered promiscuous mode
[  349.381744][T20161] bond_slave_0: entered promiscuous mode
[  349.384496][T20161] bond_slave_1: entered promiscuous mode
[  349.389761][T20161] gretap0: entered promiscuous mode
[  349.392685][T20161] `: entered promiscuous mode
[  349.394381][T20161] team_slave_0: entered promiscuous mode
[  349.396305][T20161] team_slave_1: entered promiscuous mode
[  349.399665][T20161] hsr1: Interlink (`) is not up; please bring it up to get a fully working HSR network
[  349.403968][T20161] hsr1: entered promiscuous mode
[  349.669668][T20173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.674918][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.690392][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.728317][T20177] syzkaller0: entered promiscuous mode
[  349.730234][T20177] syzkaller0: entered allmulticast mode
[  349.897368][T20173] x9: renamed from bridge_slave_0 (while UP)
[  350.047955][T20183] 0 speed is unknown, defaulting to 1000
[  350.377554][T20203] 0 speed is unknown, defaulting to 1000
[  350.479475][T20208] __nla_validate_parse: 43 callbacks suppressed
[  350.479489][T20208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6066'.
[  350.512662][   T34] audit: type=1804 audit(1778673564.092:14): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6066" name="/newroot/1974/cgroup.controllers" dev="tmpfs" ino=9957 res=1 errno=0
[  350.531514][   T34] audit: type=1800 audit(1778673564.092:15): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6066" name="cgroup.controllers" dev="tmpfs" ino=9957 res=0 errno=0
[  350.826951][T20226] bridge8: entered promiscuous mode
[  350.833971][T20226] bridge8: entered allmulticast mode
[  350.845731][T20232] netlink: 'syz.2.6075': attribute type 2 has an invalid length.
[  350.882974][T20237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6077'.
[  350.895798][T20237] bond0: entered promiscuous mode
[  350.898436][T20237] gretap0: entered promiscuous mode
[  350.900569][T20237] debugfs: 'hsr0' already exists in 'hsr'
[  350.903731][T20237] Cannot create hsr debugfs directory
[  350.905679][T20237] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  350.908926][T20237] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  350.914065][T20237] hsr0: entered promiscuous mode
[  350.938373][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6080'.
[  351.050319][   T56] block nbd2: Receive control failed (result -32)
[  351.082850][T20256] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6085'.
[  351.088150][T20256] xt_hashlimit: invalid rate
[  351.127583][T20259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6086'.
[  351.307916][T20269] netlink: 'syz.0.6089': attribute type 1 has an invalid length.
[  351.311083][T20269] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6089'.
[  351.316997][T20269] netlink: 658 bytes leftover after parsing attributes in process `syz.0.6089'.
[  351.326687][T20269] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6089'.
[  351.369107][T20273] netlink: 'syz.0.6091': attribute type 1 has an invalid length.
[  351.382256][T20273] bond9: entered promiscuous mode
[  351.384204][T20273] 8021q: adding VLAN 0 to HW filter on device bond9
[  351.389823][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6091'.
[  352.445481][T20296] 0 speed is unknown, defaulting to 1000
[  352.481028][T20303] veth1: Caught tx_queue_len zero misconfig
[  352.490404][T20303] x_tables: duplicate underflow at hook 4
[  352.591263][T20301] 0 speed is unknown, defaulting to 1000
[  352.845286][T20325] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  353.336437][T20346] block nbd0: NBD_DISCONNECT
[  353.338561][T20346] block nbd0: Send disconnect failed -32
[  353.412521][T20353] net_ratelimit: 315 callbacks suppressed
[  353.412536][T20353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.417687][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.608310][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.611031][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.614409][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.620488][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.623318][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.628551][T20359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.634012][T20358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.637514][T20358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.913580][T20375] 0 speed is unknown, defaulting to 1000
[  354.420849][T20390] netlink: 'syz.2.6126': attribute type 61 has an invalid length.
[  354.796335][T20399] 0 speed is unknown, defaulting to 1000
[  354.888291][T20416] netlink: 'syz.0.6135': attribute type 3 has an invalid length.
[  354.893250][T20416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6135'.
[  354.945073][T20420] netlink: 'syz.0.6136': attribute type 2 has an invalid length.
[  355.120399][T20424] ipvlan1: entered promiscuous mode
[  355.168139][T20427] netlink: 'syz.0.6139': attribute type 1 has an invalid length.
[  355.170759][T20427] netlink: 'syz.0.6139': attribute type 1 has an invalid length.
[  355.411213][T20440] 0 speed is unknown, defaulting to 1000
[  356.353440][T20504] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  356.356479][T20504] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  356.404612][T20505] __nla_validate_parse: 2 callbacks suppressed
[  356.404626][T20505] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6156'.
[  356.414503][   T34] audit: type=1804 audit(1778673569.992:16): pid=20505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6156" name="/newroot/2067/cgroup.controllers" dev="tmpfs" ino=10444 res=1 errno=0
[  356.422127][   T34] audit: type=1800 audit(1778673569.992:17): pid=20505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6156" name="cgroup.controllers" dev="tmpfs" ino=10444 res=0 errno=0
[  357.210143][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6157'.
[  357.438002][T20524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6163'.
[  359.118529][T20546] netlink: 'syz.0.6170': attribute type 8 has an invalid length.
[  359.126194][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6170'.
[  359.230638][T20556] syzkaller0: entered promiscuous mode
[  359.233482][T20556] syzkaller0: entered allmulticast mode
[  359.335526][T20561] net_ratelimit: 307 callbacks suppressed
[  359.335539][T20561] openvswitch: netlink: Multiple metadata blocks provided
[  359.448715][T20573] netlink: 'syz.2.6180': attribute type 8 has an invalid length.
[  359.451200][T20573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6180'.
[  359.471483][T20571] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6179'.
[  359.561656][T20576] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  359.649392][T20585] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6184'.
[  359.726031][T20582] 0 speed is unknown, defaulting to 1000
[  359.750892][T20589] IPVS: nq: FWM 3 0x00000003 - no destination available
[  360.190645][T20603] 0 speed is unknown, defaulting to 1000
[  360.451421][T20615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.671513][T20624] netlink: 'syz.2.6196': attribute type 8 has an invalid length.
[  360.678806][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6196'.
[  360.885780][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6200'.
[  360.910031][T20631] ieee802154 phy1 wpan1: encryption failed: -22
[  361.110883][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6209'.
[  361.414292][T20685] __nla_validate_parse: 2 callbacks suppressed
[  361.414306][T20685] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.6220'.
[  361.426696][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.444036][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.454589][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.458291][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.461510][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.465076][T20686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.597416][T20686] 0 speed is unknown, defaulting to 1000
[  361.629769][T20690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6221'.
[  361.638064][T20690] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  362.124810][T20710] netlink: 'syz.0.6228': attribute type 8 has an invalid length.
[  362.128139][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6228'.
[  362.528163][T20734] Cannot find del_set index 3 as target
[  362.766879][T20750] 0 speed is unknown, defaulting to 1000
[  363.064013][T20777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6252'.
[  363.067237][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6252'.
[  363.255736][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6260'.
[  363.259981][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'.
[  363.463249][T20803] 0 speed is unknown, defaulting to 1000
[  363.539432][T20814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6265'.
[  363.718436][T20830] netlink: 'syz.0.6270': attribute type 8 has an invalid length.
[  363.720942][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'.
[  364.481694][T20855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6277'.
[  364.485818][T20855] netlink: 'syz.2.6277': attribute type 2 has an invalid length.
[  364.488890][T20855] netlink: 'syz.2.6277': attribute type 2 has an invalid length.
[  364.495547][T20855] netlink: 'syz.2.6277': attribute type 2 has an invalid length.
[  364.537418][T20858] ip6t_srh: unknown srh match flags  4000
[  364.914023][   T13] net_ratelimit: 298 callbacks suppressed
[  364.914039][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.919855][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.146896][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.150447][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.155124][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.159631][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.163524][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.167055][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.170532][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.174233][T20907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.325088][T20907] 0 speed is unknown, defaulting to 1000
[  366.115668][T20970] netlink: 'syz.0.6316': attribute type 3 has an invalid length.
[  366.523191][T21001] netlink: 'syz.0.6328': attribute type 14 has an invalid length.
[  366.788789][T21032] 0 speed is unknown, defaulting to 1000
[  366.935267][T21051] ip6tnl2: entered allmulticast mode
[  366.940440][T21051] netlink: 'syz.1.6348': attribute type 2 has an invalid length.
[  366.943160][T21051] netlink: 'syz.1.6348': attribute type 1 has an invalid length.
[  366.952574][T21051] __nla_validate_parse: 5 callbacks suppressed
[  366.952582][T21051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6348'.
[  367.024786][T21065] veth0_virt_wifi: entered promiscuous mode
[  367.027095][T21065] veth0_virt_wifi: entered allmulticast mode
[  367.029613][T21065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6354'.
[  367.053139][   T34] audit: type=1804 audit(1778673580.632:18): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6356" name="/newroot/2114/memory.events" dev="tmpfs" ino=10657 res=1 errno=0
[  367.060321][   T34] audit: type=1800 audit(1778673580.632:19): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6356" name="memory.events" dev="tmpfs" ino=10657 res=0 errno=0
[  367.067320][   T34] audit: type=1804 audit(1778673580.632:20): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6356" name="/newroot/2114/memory.events" dev="tmpfs" ino=10657 res=1 errno=0
[  367.079704][T21071] ip6t_srh: unknown srh match flags  4000
[  367.226193][T21084] pim6reg0: tun_chr_ioctl cmd 1074812118
[  367.369871][    C1] ------------[ cut here ]------------
[  367.373450][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  367.376832][    C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: modprobe/21096
[  367.380273][    C1] Modules linked in:
[  367.381773][    C1] CPU: 1 UID: 0 PID: 21096 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  367.385128][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.388331][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  367.390419][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  367.396501][    C1] RSP: 0018:ffffc90000a086b8 EFLAGS: 00010246
[  367.398404][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  367.400808][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90423250
[  367.403268][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  367.406031][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8881736ed6a8
[  367.408889][    C1] R13: 0000000000000000 R14: ffffffff90423250 R15: ffff888115e831f8
[  367.411626][    C1] FS:  00007f9ff0b38380(0000) GS:ffff8882a928d000(0000) knlGS:0000000000000000
[  367.414704][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  367.416709][    C1] CR2: 00007f9ff0d2c8e5 CR3: 00000001b6cee000 CR4: 00000000000006f0
[  367.419138][    C1] Call Trace:
[  367.420238][    C1]  <IRQ>
[  367.421460][    C1]  rate_control_send_low+0x1a7/0x7b0
[  367.423187][    C1]  rate_control_get_rate+0x20b/0x5d0
[  367.424815][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  367.426731][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  367.428735][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  367.430624][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  367.432443][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  367.434572][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  367.436460][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.438258][    C1]  ? lock_acquire+0x106/0x350
[  367.440053][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.441709][    C1]  ? cpu_startup_entry+0x43/0x60
[  367.443310][    C1]  ? common_startup_64+0x13e/0x147
[  367.444927][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.446621][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  367.448469][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.450196][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  367.451904][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  367.453855][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  367.455501][    C1]  __iterate_interfaces+0x2ab/0x590
[  367.457073][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  367.458859][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  367.461254][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  367.463662][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  367.465768][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  367.467351][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  367.469134][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[  367.470683][    C1]  hrtimer_run_softirq+0x17a/0x240
[  367.472329][    C1]  handle_softirqs+0x22a/0x840
[  367.473897][    C1]  ? __irq_exit_rcu+0xca/0x220
[  367.475399][    C1]  __irq_exit_rcu+0xca/0x220
[  367.476805][    C1]  irq_exit_rcu+0x9/0x30
[  367.478173][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.480182][    C1]  </IRQ>
[  367.481156][    C1]  <TASK>
[  367.482129][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.484152][    C1] RIP: 0010:vma_adjust_trans_huge+0xb5/0x390
[  367.485988][    C1] Code: ff 4d 8b 37 49 8d 5f 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 2e cf fb ff 48 8b 1b <4c> 89 f7 48 89 ee e8 10 96 90 ff 49 39 ee 40 0f 96 c5 4c 89 ef 48
[  367.492324][    C1] RSP: 0018:ffffc900048876d8 EFLAGS: 00000246
[  367.494589][    C1] RAX: 1ffff1102e4381e1 RBX: 00007f9ff0e74000 RCX: dffffc0000000000
[  367.497345][    C1] RDX: 0000000000000000 RSI: 0000000000070000 RDI: 0000000000000000
[  367.500268][    C1] RBP: 00007f9ff0e00000 R08: ffff888166f6f53f R09: 1ffff1102cdedea7
[  367.503102][    C1] R10: dffffc0000000000 R11: ffffed102cdedea8 R12: 00007f9ff0e70000
[  367.505874][    C1] R13: 00007f9ff1000000 R14: 00007f9ff0e70000 R15: ffff8881721c0f00
[  367.508558][    C1]  ? vma_adjust_trans_huge+0x41/0x390
[  367.510260][    C1]  __split_vma+0x7ce/0xa40
[  367.511711][    C1]  ? __pfx___split_vma+0x10/0x10
[  367.513317][    C1]  ? change_protection+0x4a7f/0x4c70
[  367.515307][    C1]  ? can_vma_merge_left+0x11a/0x3e0
[  367.516943][    C1]  vma_modify+0x97e/0x1e10
[  367.518382][    C1]  vma_modify_flags+0x24b/0x330
[  367.519889][    C1]  ? __pfx_vma_modify_flags+0x10/0x10
[  367.521526][    C1]  ? __pfx_native_flush_tlb_one_user+0x10/0x10
[  367.523482][    C1]  ? aa_file_perm+0x192/0x15e0
[  367.524951][    C1]  ? mprotect_fixup+0xfb/0xb60
[  367.526439][    C1]  mprotect_fixup+0x62a/0xb60
[  367.528079][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  367.529670][    C1]  ? apparmor_file_mprotect+0x2f7/0x400
[  367.531334][    C1]  do_mprotect_pkey+0x8d5/0xd20
[  367.532906][    C1]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  367.534554][    C1]  ? exc_page_fault+0x6a/0xc0
[  367.536029][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.537920][    C1]  __x64_sys_mprotect+0x80/0x90
[  367.539445][    C1]  do_syscall_64+0x15f/0xf80
[  367.541122][    C1]  ? trace_irq_disable+0x3b/0x140
[  367.543189][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.545011][    C1] RIP: 0033:0x7f9ff0e5ebb7
[  367.546373][    C1] Code: 00 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d b9 46 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 99 46 01 00 f7 d8 89 01 48 83
[  367.552444][    C1] RSP: 002b:00007ffd71e06998 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  367.555401][    C1] RAX: ffffffffffffffda RBX: 00007f9ff0e72ab0 RCX: 00007f9ff0e5ebb7
[  367.557857][    C1] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f9ff0e70000
[  367.560305][    C1] RBP: 00007ffd71e06ab0 R08: 00007ffd71e00000 R09: 00007f9ff0e39500
[  367.562799][    C1] R10: 00007f9ff0e43858 R11: 0000000000000206 R12: 00007f9ff0e72ab0
[  367.565217][    C1] R13: 00007f9ff0e66eda R14: 00007f9ff0e719f0 R15: 00007f9ff0e71f40
[  367.567795][    C1]  </TASK>
[  367.568852][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  367.571074][    C1] CPU: 1 UID: 0 PID: 21096 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  367.573856][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.576909][    C1] Call Trace:
[  367.577944][    C1]  <IRQ>
[  367.578847][    C1]  vpanic+0x56c/0xa60
[  367.580095][    C1]  ? __pfx__printk+0x10/0x10
[  367.581991][    C1]  ? __pfx_vpanic+0x10/0x10
[  367.583761][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  367.585507][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  367.587125][    C1]  panic+0xc5/0xd0
[  367.588306][    C1]  ? __pfx_panic+0x10/0x10
[  367.589691][    C1]  __warn+0x315/0x4c0
[  367.590934][    C1]  ? __rate_control_send_low+0x524/0x800
[  367.592645][    C1]  ? __rate_control_send_low+0x524/0x800
[  367.594709][    C1]  __report_bug+0x29a/0x540
[  367.596229][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  367.597818][    C1]  ? rcu_is_watching+0x15/0xb0
[  367.599407][    C1]  ? __kasan_check_byte+0x12/0x40
[  367.600937][    C1]  ? __rate_control_send_low+0x524/0x800
[  367.602621][    C1]  ? __pfx___report_bug+0x10/0x10
[  367.604150][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  367.605770][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  367.607360][    C1]  ? kernel_text_address+0xa5/0xe0
[  367.608982][    C1]  report_bug_entry+0x19a/0x290
[  367.610484][    C1]  ? __rate_control_send_low+0x5bb/0x800
[  367.612243][    C1]  ? __rate_control_send_low+0x5c0/0x800
[  367.614068][    C1]  handle_bug+0xce/0x200
[  367.615319][    C1]  exc_invalid_op+0x1a/0x50
[  367.616721][    C1]  asm_exc_invalid_op+0x1a/0x20
[  367.618204][    C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[  367.620096][    C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[  367.625984][    C1] RSP: 0018:ffffc90000a086b8 EFLAGS: 00010246
[  367.627886][    C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[  367.630308][    C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90423250
[  367.632670][    C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  367.635389][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff8881736ed6a8
[  367.637829][    C1] R13: 0000000000000000 R14: ffffffff90423250 R15: ffff888115e831f8
[  367.640538][    C1]  ? __rate_control_send_low+0x58d/0x800
[  367.642257][    C1]  rate_control_send_low+0x1a7/0x7b0
[  367.643865][    C1]  rate_control_get_rate+0x20b/0x5d0
[  367.645641][    C1]  ieee80211_beacon_get_finish+0x3af/0x6f0
[  367.647696][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  367.649883][    C1]  ? __ieee80211_beacon_add_tim+0x1180/0x15a0
[  367.651768][    C1]  ? ieee80211_beacon_get_ap+0x8cb/0x2040
[  367.653646][    C1]  ieee80211_beacon_get_ap+0x196a/0x2040
[  367.655398][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  367.657287][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.659311][    C1]  ? lock_acquire+0x106/0x350
[  367.661105][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.662806][    C1]  ? cpu_startup_entry+0x43/0x60
[  367.664330][    C1]  ? common_startup_64+0x13e/0x147
[  367.666001][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.667728][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  367.669412][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  367.671069][    C1]  ieee80211_beacon_get_tim+0xbd/0x2c0
[  367.672665][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  367.674892][    C1]  mac80211_hwsim_beacon_tx+0x3c5/0x870
[  367.676603][    C1]  __iterate_interfaces+0x2ab/0x590
[  367.678238][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  367.680094][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  367.682261][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  367.684084][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  367.686190][    C1]  mac80211_hwsim_beacon+0xbb/0x180
[  367.688234][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  367.690135][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[  367.691751][    C1]  hrtimer_run_softirq+0x17a/0x240
[  367.693319][    C1]  handle_softirqs+0x22a/0x840
[  367.694781][    C1]  ? __irq_exit_rcu+0xca/0x220
[  367.696224][    C1]  __irq_exit_rcu+0xca/0x220
[  367.697660][    C1]  irq_exit_rcu+0x9/0x30
[  367.698942][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.700690][    C1]  </IRQ>
[  367.701544][    C1]  <TASK>
[  367.702410][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.704158][    C1] RIP: 0010:vma_adjust_trans_huge+0xb5/0x390
[  367.705929][    C1] Code: ff 4d 8b 37 49 8d 5f 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 2e cf fb ff 48 8b 1b <4c> 89 f7 48 89 ee e8 10 96 90 ff 49 39 ee 40 0f 96 c5 4c 89 ef 48
[  367.711929][    C1] RSP: 0018:ffffc900048876d8 EFLAGS: 00000246
[  367.713892][    C1] RAX: 1ffff1102e4381e1 RBX: 00007f9ff0e74000 RCX: dffffc0000000000
[  367.716877][    C1] RDX: 0000000000000000 RSI: 0000000000070000 RDI: 0000000000000000
[  367.719291][    C1] RBP: 00007f9ff0e00000 R08: ffff888166f6f53f R09: 1ffff1102cdedea7
[  367.721778][    C1] R10: dffffc0000000000 R11: ffffed102cdedea8 R12: 00007f9ff0e70000
[  367.724211][    C1] R13: 00007f9ff1000000 R14: 00007f9ff0e70000 R15: ffff8881721c0f00
[  367.726616][    C1]  ? vma_adjust_trans_huge+0x41/0x390
[  367.728660][    C1]  __split_vma+0x7ce/0xa40
[  367.730170][    C1]  ? __pfx___split_vma+0x10/0x10
[  367.731691][    C1]  ? change_protection+0x4a7f/0x4c70
[  367.733433][    C1]  ? can_vma_merge_left+0x11a/0x3e0
[  367.735059][    C1]  vma_modify+0x97e/0x1e10
[  367.736528][    C1]  vma_modify_flags+0x24b/0x330
[  367.738119][    C1]  ? __pfx_vma_modify_flags+0x10/0x10
[  367.739750][    C1]  ? __pfx_native_flush_tlb_one_user+0x10/0x10
[  367.742137][    C1]  ? aa_file_perm+0x192/0x15e0
[  367.743837][    C1]  ? mprotect_fixup+0xfb/0xb60
[  367.745386][    C1]  mprotect_fixup+0x62a/0xb60
[  367.746955][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  367.748570][    C1]  ? apparmor_file_mprotect+0x2f7/0x400
[  367.750330][    C1]  do_mprotect_pkey+0x8d5/0xd20
[  367.752037][    C1]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  367.754115][    C1]  ? exc_page_fault+0x6a/0xc0
[  367.755711][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.757636][    C1]  __x64_sys_mprotect+0x80/0x90
[  367.759456][    C1]  do_syscall_64+0x15f/0xf80
[  367.761359][    C1]  ? trace_irq_disable+0x3b/0x140
[  367.763379][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.765749][    C1] RIP: 0033:0x7f9ff0e5ebb7
[  367.767568][    C1] Code: 00 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 8d 0d b9 46 01 00 f7 d8 89 01 48 83 c8 ff c3 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8d 0d 99 46 01 00 f7 d8 89 01 48 83
[  367.775180][    C1] RSP: 002b:00007ffd71e06998 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  367.778270][    C1] RAX: ffffffffffffffda RBX: 00007f9ff0e72ab0 RCX: 00007f9ff0e5ebb7
[  367.781302][    C1] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f9ff0e70000
[  367.784352][    C1] RBP: 00007ffd71e06ab0 R08: 00007ffd71e00000 R09: 00007f9ff0e39500
[  367.787417][    C1] R10: 00007f9ff0e43858 R11: 0000000000000206 R12: 00007f9ff0e72ab0
[  367.790663][    C1] R13: 00007f9ff0e66eda R14: 00007f9ff0e719f0 R15: 00007f9ff0e71f40
[  367.793823][    C1]  </TASK>
[  367.795826][    C1] Kernel Offset: disabled
[  367.797565][    C1] Rebooting in 86400 seconds..
