last executing test programs:

951.83899ms ago: executing program 2 (id=1973):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x518, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x58, 0x8, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @local}, 0x20, 0x27, 0xb676, 0x5}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x4, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x29, 0x0, 0xb, 0x8d403e0b659a6e10}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}, @datasec={0x2, 0x7, 0x0, 0xf, 0x1, [{0x4, 0x7, 0x7}, {0x1, 0x3, 0x80000001}, {0x5, 0x9, 0x9}, {0x4, 0xfffffff7, 0xff66}, {0x5, 0x8, 0x7c}, {0x5, 0xf0000000, 0x7}, {0x2, 0xe, 0x4}], 'n'}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @struct={0x6, 0x5, 0x0, 0x4, 0x1, 0x8, [{0x1, 0x3, 0x4}, {0x3, 0x4, 0x8}, {0xd, 0x0, 0x101}, {0x5, 0x1, 0x1}, {0xe, 0x2, 0xdd6f}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/62, 0x108, 0x3e, 0x0, 0x9}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x10, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x7e}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x8, 0x7f, &(0x7f0000000980)=""/127, 0x41100, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0x4, 0x5, 0xc12}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a40)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a80)=[{0x4, 0x3, 0x7, 0x1}, {0x1, 0x2}, {0x1, 0x3, 0x6, 0xc}, {0x3, 0x3, 0x0, 0x6}, {0x3, 0x1, 0xe}, {0x1, 0x1, 0x1, 0x1}, {0x5, 0x3, 0x0, 0x3}, {0x2, 0x1, 0x2, 0xa}, {0x3, 0x5, 0x8, 0x3}, {0x5, 0x2, 0x6, 0x75baa569db541a11}]}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
syz_emit_ethernet(0x22, &(0x7f0000000f00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @multicast, @void, {@llc_tr={0x11, {@snap={0x2, 0xab, "0c0e", "5d9e2c", 0x8847, "01a0ea6d8fce67228844eb"}}}}}, &(0x7f0000000f40)={0x1, 0x2, [0x557, 0x1cc, 0x537, 0xe7]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r2, 0x1}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r6}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x1, r6}, 0x38)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c040)
r7 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x1003ee, 0x1, 0x4}, {0x9, 0xf0e, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0xffffffff, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4004)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x5, 0x3, 0x200, 0x6efa, 0x95280, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)

802.143781ms ago: executing program 2 (id=1980):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r1, 0x12, 0x4, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010400000000000000000a000000000000000000000008001f0034"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

724.167525ms ago: executing program 2 (id=1983):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @multicast2}, &(0x7f00000001c0)=0xc)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3a, &(0x7f0000001140)=0x1, 0xfd57)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@remote, @multicast2}, &(0x7f00000001c0)=0xc) (async)
socket(0x840000000002, 0x3, 0x100) (async)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$sock_int(r2, 0x1, 0x3a, &(0x7f0000001140)=0x1, 0xfd57) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)

641.83445ms ago: executing program 2 (id=1986):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) (async)
openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket(0x10, 0x80002, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', <r7=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)

573.000885ms ago: executing program 1 (id=1990):
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0xfffffff9, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x88)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xffffff01, 0x72, &(0x7f0000000480)=""/114, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x6, 0x5, 0x200}, 0x10, 0xb92a, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x0, 0x1, 0x3, 0x7}], 0x10, 0x7}, 0x94) (async)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x1, <r1=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r1, 0x4) (async)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040)) (async, rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000704000014000780080008400000009805001400200000000500010006000100050005000a00000005000400000000000900020071797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff1}, {0xe, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) (async)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0\x00', <r8=>0x0}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000000000000218030000170000000000000000000000000000f267", @ANYRES32=r8, @ANYBLOB="14000300766574683000000000000000000000000800080020000000"], 0x34}}, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket(0x10, 0x3, 0x0) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r12, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32)
sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004044}, 0x2004c0c1) (async, rerun: 32)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="200000003ebeef75d036ba983efcffffff017400000800"/32], 0x20}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async)
ioctl(r2, 0x8b24, &(0x7f0000000040))

524.758277ms ago: executing program 0 (id=1991):
r0 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x60001, 0x31c}, 0x8)
bind$bt_sco(r1, &(0x7f0000000400), 0x8)
listen(r1, 0x0)
close(0x4)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x244, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c8, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x13, 0x3, "13b547b36558aa77a093e924e55ae6"}, @NFTA_TARGET_INFO={0x3b, 0x3, "89a80aec6e720aa1c3b52cd6b080cd3e5b97dddd881d4c0dd465c3d9ea48f8367d709e898bd4e535e61b701a050f382caee3724fc6867e"}, @NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}]}}}, {0x60, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x80}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}]}}}, {0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x98}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x26c}}, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)

524.191075ms ago: executing program 2 (id=1992):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1a, 0x800, 0x5, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000100)={'gretap0\x00', 0x3, 0x5})
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x5, 0x4, 0x5, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)

523.481403ms ago: executing program 1 (id=1993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wg0\x00', <r4=>0x0})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r5, 0x0, 0x6, &(0x7f0000000080)=""/3, &(0x7f0000000040)=0x3)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x8}}}}]}, 0x44}}, 0x4000)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000004}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x85}, 0x4801)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000009000), 0x4)
unshare(0x62040200)
r10 = socket$inet(0x2, 0x4000000000000001, 0x1)
setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r10, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4)
setsockopt$sock_int(r10, 0x1, 0x8, 0x0, 0x0)
sendto$inet(r10, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r11, 0x0, 0x48f, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e36, 0x0, 'fo\x00', 0x38, 0x3, 0x8}, 0x2c)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800)

401.406108ms ago: executing program 2 (id=1994):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r2, 0x1ad72f7)
accept4(r2, 0x0, 0x0, 0x80000)
r4 = accept4$netrom(r2, 0x0, 0x0, 0x80000)
writev(r4, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b2017beba386312104a1458eb86de", 0x11}, {&(0x7f0000000640)="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", 0x2b4}], 0x2)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)="9b", 0x1}], 0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40800)
write$nci(r1, &(0x7f0000005c40)=ANY=[@ANYBLOB="6103057fac0603f93677ff6fcad8cf254cac"], 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000930018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xd, &(0x7f0000001e40)=""/4107}, 0x90)

334.587921ms ago: executing program 0 (id=1995):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200050016000200000006001800"], 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200050016000200000006001800"], 0x54}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)

219.897254ms ago: executing program 1 (id=1996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
r2 = socket(0x2, 0x4, 0x6)
setsockopt$packet_int(r2, 0x107, 0xb, &(0x7f00000000c0)=0x4, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x20040014)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0xd0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x25, 0x81, 0xb, 0xfffffffa, 0x7f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x67}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x370)
connect$inet(r5, 0x0, 0x0)
listen(r4, 0x8)
sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340), 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x2000c094)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@gettaction={0x0, 0x32, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x4}]}, 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f819bd7aaf9ddc1e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x20000001)

219.626373ms ago: executing program 0 (id=1997):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f0000010000000000000000000000000000000032"], 0x23c}}, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0xce)

152.041944ms ago: executing program 0 (id=1998):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x1, 0x80000, 0x1)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x1, 0xca})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5}, {0x0, 0x0, 0x4, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3ff, @mcast1}, 0x1c)

74.503641ms ago: executing program 1 (id=1999):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000180059"], 0xfe33)
socket$l2tp6(0xa, 0x2, 0x73)

73.762139ms ago: executing program 0 (id=2000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000050800000a38000000030a03000000000000000000020000050c00024000000000000009010900010073797a300000000005000300010000000000000000000a00000a"], 0x60}}, 0x0)

2.075796ms ago: executing program 0 (id=2001):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x3)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010128bd7000fbdbf9251400004008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = accept4$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800)
bind$vsock_stream(r7, &(0x7f0000000600)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)
r8 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0xc, [@union={0x8, 0x5, 0x0, 0x5, 0x1, 0x6, [{0x2, 0x3, 0x7fffffff}, {0xe, 0x4, 0xffffffff}, {0x8, 0x3, 0xfff}, {0x10, 0x3, 0xe0000000}, {0x8, 0x0, 0x2}]}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x0, [{0x10, 0x1ff, 0xa4d}, {0x10, 0x7, 0x5}, {0xf, 0x6, 0x7}]}, @struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x3, 0x4, 0xfffffffa}]}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @func={0x1, 0x0, 0x0, 0xc, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x5, [{0x7, 0x0, 0x3}, {0xd, 0x4, 0xff}, {0x10, 0x4, 0x2}, {0xb, 0x3, 0x4}, {0x3, 0x3, 0x5}, {0xe, 0x3, 0xa}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x6, [{0x4, 0x4, 0x1ff}]}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x33, 0x61, 0x0, 0x5f, 0x61, 0x0, 0x61, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000500)=""/190, 0x150, 0xbe, 0x1, 0x7ff}, 0x28)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x14}}, 0x400000c4)
accept$netrom(r6, &(0x7f0000000280)={{0x3, @default}, [@bcast, @bcast, @bcast, @bcast, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000000000)=0x48)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x10}, {}, {0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x200}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000004}, 0x400c0)

765.281µs ago: executing program 1 (id=2002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x48065}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20044010)

0s ago: executing program 1 (id=2003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7, 0x8, 0x87, 0x7f82}]}, 0xff17)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f0080047", 0x0, 0x101, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0x27, 0xa, 0x4)
getpeername$packet(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='tegra_dma_isr\x00', r6}, 0xffffffffffffffeb)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e23, 0x6, 'nq\x00', 0x1, 0x5, 0x4a}, 0x2c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0xfffffbfe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x2, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x25}}}}})

kernel console output (not intermixed with test programs):

bridge_slave_0) entered disabled state
[   62.802878][ T5830] bridge_slave_0: entered allmulticast mode
[   62.807785][ T5830] bridge_slave_0: entered promiscuous mode
[   62.831015][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.834068][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.837434][ T5830] bridge_slave_1: entered allmulticast mode
[   62.840233][ T5830] bridge_slave_1: entered promiscuous mode
[   62.941385][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.943750][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.947409][ T5840] bridge_slave_0: entered allmulticast mode
[   62.951672][ T5840] bridge_slave_0: entered promiscuous mode
[   62.960166][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.964079][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.967045][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.970166][ T5829] bridge_slave_0: entered allmulticast mode
[   62.974058][ T5829] bridge_slave_0: entered promiscuous mode
[   62.979248][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.982325][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.986963][ T5840] bridge_slave_1: entered allmulticast mode
[   62.991218][ T5840] bridge_slave_1: entered promiscuous mode
[   63.009853][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.013576][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.016528][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.019420][ T5829] bridge_slave_1: entered allmulticast mode
[   63.022509][ T5829] bridge_slave_1: entered promiscuous mode
[   63.096396][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.103090][ T5830] team0: Port device team_slave_0 added
[   63.109196][ T5830] team0: Port device team_slave_1 added
[   63.128055][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.134418][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.142047][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.201971][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.205080][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.216922][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.240014][ T5840] team0: Port device team_slave_0 added
[   63.243809][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.248305][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.258492][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.267003][ T5829] team0: Port device team_slave_0 added
[   63.271789][ T5840] team0: Port device team_slave_1 added
[   63.277335][ T5829] team0: Port device team_slave_1 added
[   63.367179][ T5830] hsr_slave_0: entered promiscuous mode
[   63.371081][ T5830] hsr_slave_1: entered promiscuous mode
[   63.388895][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.391751][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.402142][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.410857][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.413668][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.423974][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.431885][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.436045][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.446393][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.473009][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.475663][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.483510][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.540660][ T5829] hsr_slave_0: entered promiscuous mode
[   63.543097][ T5829] hsr_slave_1: entered promiscuous mode
[   63.545522][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.548156][ T5829] Cannot create hsr debugfs directory
[   63.605650][ T5840] hsr_slave_0: entered promiscuous mode
[   63.607990][ T5840] hsr_slave_1: entered promiscuous mode
[   63.610141][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.612457][ T5840] Cannot create hsr debugfs directory
[   63.825890][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.836148][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.843585][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.858267][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.911886][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.921115][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.937434][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.947844][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.003627][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.012645][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.020666][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.031608][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.074161][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.106939][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   64.124034][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.126456][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.141789][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.144166][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.184334][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.220849][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   64.232134][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.246415][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.248698][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.262317][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   64.268576][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.270888][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.286987][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.289285][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.293717][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.296109][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.375348][ T5219] Bluetooth: hci0: command tx timeout
[   64.375623][ T5837] Bluetooth: hci1: command tx timeout
[   64.400164][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.456006][ T5837] Bluetooth: hci2: command tx timeout
[   64.470119][ T5830] veth0_vlan: entered promiscuous mode
[   64.479348][ T5830] veth1_vlan: entered promiscuous mode
[   64.513159][ T5830] veth0_macvtap: entered promiscuous mode
[   64.524108][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.547783][ T5830] veth1_macvtap: entered promiscuous mode
[   64.585786][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.598307][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.613420][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.621014][ T5829] veth0_vlan: entered promiscuous mode
[   64.633543][ T5829] veth1_vlan: entered promiscuous mode
[   64.639144][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.642533][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.646696][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.649921][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.763488][ T5829] veth0_macvtap: entered promiscuous mode
[   64.775832][ T5829] veth1_macvtap: entered promiscuous mode
[   64.779705][ T5840] veth0_vlan: entered promiscuous mode
[   64.796853][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.799845][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.802075][ T5840] veth1_vlan: entered promiscuous mode
[   64.838431][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.856692][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.862131][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.866137][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.868596][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.871913][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.877089][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.880291][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.889787][ T5840] veth0_macvtap: entered promiscuous mode
[   64.893902][ T5840] veth1_macvtap: entered promiscuous mode
[   64.942184][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.964198][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.983682][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.991944][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.995200][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.998148][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.001083][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.035236][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.056090][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.132654][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.137923][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.177327][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.179835][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.223369][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.227448][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.463323][ T5909] syzkaller0: entered promiscuous mode
[   65.466453][ T5909] syzkaller0: entered allmulticast mode
[   65.472063][ T5915] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   66.456610][ T5837] Bluetooth: hci0: command tx timeout
[   66.467636][ T5837] Bluetooth: hci1: command tx timeout
[   66.548478][ T5837] Bluetooth: hci2: command tx timeout
[   66.696574][ T5942] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   67.597622][ T5961] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.629828][ T5961] netlink: 'syz.0.16': attribute type 12 has an invalid length.
[   67.633358][ T5961] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'.
[   67.882933][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   67.886858][ T5972] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET)
[   67.939439][ T5979] netlink: 27 bytes leftover after parsing attributes in process `syz.0.20'.
[   67.987374][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.143763][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'.
[   68.172675][ T5993] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   68.500333][ T6010] erspan1: entered promiscuous mode
[   68.502541][ T6010] erspan1: entered allmulticast mode
[   68.535282][ T5837] Bluetooth: hci1: command tx timeout
[   68.537511][ T5837] Bluetooth: hci0: command tx timeout
[   68.612334][ T6022] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.627194][ T5219] Bluetooth: hci2: command tx timeout
[   68.653303][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.666961][ T6025] xt_TCPMSS: Only works on TCP SYN packets
[   68.684464][ T6025] Zero length message leads to an empty skb
[   68.771587][ T6016] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.900763][ T6036] Illegal XDP return value 4294967294 on prog  (id 14) dev N/A, expect packet loss!
[   68.933002][ T6038] netlink: 260 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.124576][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'.
[   69.877818][ T6068] netlink: 'syz.1.47': attribute type 3 has an invalid length.
[   69.881077][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   69.889567][ T6069] netlink: 'syz.1.47': attribute type 3 has an invalid length.
[   69.892386][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'.
[   70.038275][ T6081] x_tables: duplicate underflow at hook 1
[   70.205065][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[   70.618688][ T5219] Bluetooth: hci0: command tx timeout
[   70.618813][ T5837] Bluetooth: hci1: command tx timeout
[   70.693499][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.697899][ T5837] Bluetooth: hci2: command tx timeout
[   70.795533][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   70.903401][ T6145] xt_l2tp: unknown flags: 10
[   71.011873][ T6157] batadv_slave_0: entered promiscuous mode
[   71.022735][ T6156] batadv_slave_0: left promiscuous mode
[   71.179538][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.181783][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.318914][ T6179] tipc: Started in network mode
[   71.321068][ T6179] tipc: Node identity fa28284f7ac8, cluster identity 4711
[   71.324113][ T6179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.359074][ T6179] syzkaller0: entered promiscuous mode
[   71.361327][ T6179] syzkaller0: entered allmulticast mode
[   71.392119][ T6179] tipc: Resetting bearer <eth:syzkaller0>
[   71.852341][ T6173] tipc: Resetting bearer <eth:syzkaller0>
[   71.872955][ T6173] tipc: Disabling bearer <eth:syzkaller0>
[   72.256435][ T6254] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   72.686379][ T6261] __nla_validate_parse: 7 callbacks suppressed
[   72.686396][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   72.714148][ T6261] syzkaller1: entered promiscuous mode
[   72.719107][ T6261] syzkaller1: entered allmulticast mode
[   73.026765][ T6300] netlink: 'syz.1.103': attribute type 10 has an invalid length.
[   73.033176][ T6300] team0: Cannot enslave team device to itself
[   73.091065][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.199491][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'.
[   74.481961][ T6363] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   74.486519][ T6363] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[   74.610558][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.115'.
[   74.613952][ T6365] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   75.052858][ T6412] bond0: entered promiscuous mode
[   75.055762][ T6412] bond_slave_0: entered promiscuous mode
[   75.057868][ T6412] bond_slave_1: entered promiscuous mode
[   75.062016][ T6412] batadv0: entered promiscuous mode
[   75.066735][ T6412] hsr1: entered allmulticast mode
[   75.069596][ T6412] bond0: entered allmulticast mode
[   75.071377][ T6412] bond_slave_0: entered allmulticast mode
[   75.075058][ T6412] bond_slave_1: entered allmulticast mode
[   75.077371][ T6412] batadv0: entered allmulticast mode
[   75.079758][ T6412] 8021q: adding VLAN 0 to HW filter on device hsr1
[   75.087765][ T6412] bond0: left promiscuous mode
[   75.090443][ T6412] bond_slave_0: left promiscuous mode
[   75.093007][ T6412] bond_slave_1: left promiscuous mode
[   75.097492][ T6412] batadv0: left promiscuous mode
[   75.288362][ T6427] netlink: 'syz.2.126': attribute type 11 has an invalid length.
[   75.291642][ T6427] netlink: 140 bytes leftover after parsing attributes in process `syz.2.126'.
[   75.499547][ T6440] netlink: 'syz.1.127': attribute type 2 has an invalid length.
[   75.502007][ T6440] netlink: 'syz.1.127': attribute type 8 has an invalid length.
[   75.504420][ T6440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.127'.
[   75.712751][ T6459] netlink: 'syz.1.130': attribute type 10 has an invalid length.
[   75.719543][ T6459] 8021q: adding VLAN 0 to HW filter on device team0
[   75.730383][ T6459] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.740729][ T6459] netlink: 'syz.1.130': attribute type 26 has an invalid length.
[   75.745391][ T6459] netlink: 260 bytes leftover after parsing attributes in process `syz.1.130'.
[   76.521345][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[   76.524379][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[   76.764197][ T6521] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82
[   77.013932][ T6539] tipc: Started in network mode
[   77.019880][ T6539] tipc: Node identity 0a3181c31bd, cluster identity 4711
[   77.023736][ T6539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.032932][ T6540] syzkaller0: entered promiscuous mode
[   77.037093][ T6540] syzkaller0: entered allmulticast mode
[   77.042853][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[   77.060885][ T6539] tipc: Resetting bearer <eth:syzkaller0>
[   77.067122][ T6537] tipc: Resetting bearer <eth:syzkaller0>
[   77.082606][ T6537] tipc: Disabling bearer <eth:syzkaller0>
[   77.459789][ T6562] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   77.463892][ T6562] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   77.786464][ T6598] netlink: 'syz.2.161': attribute type 7 has an invalid length.
[   77.789060][ T6598] netlink: 'syz.2.161': attribute type 8 has an invalid length.
[   77.791688][ T6598] netlink: 'syz.2.161': attribute type 4 has an invalid length.
[   77.794385][ T6598] __nla_validate_parse: 5 callbacks suppressed
[   77.794400][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.161'.
[   77.891830][ T6606] veth0: entered promiscuous mode
[   78.475704][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   78.551478][ T6655] netlink: 184 bytes leftover after parsing attributes in process `syz.1.172'.
[   78.899497][ T6671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.138448][ T6681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.182'.
[   79.487731][ T6695] trusted_key: syz.0.190 sent an empty control message without MSG_MORE.
[   79.702557][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   79.706255][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'.
[   79.708965][ T6712] netlink: 'syz.0.194': attribute type 13 has an invalid length.
[   79.711620][ T6712] netlink: 'syz.0.194': attribute type 11 has an invalid length.
[   79.801778][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'.
[   79.816544][ T6718] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   79.820300][ T6718] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   79.823191][ T6718] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   79.834899][ T6718] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   79.838775][ T6721] netlink: 'syz.0.197': attribute type 1 has an invalid length.
[   79.879845][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.102225][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.105405][ T6721] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   80.110640][ T6721] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   80.489519][ T6727] veth1: entered promiscuous mode
[   80.506938][ T6727] bond1: (slave veth1): Enslaving as an active interface with a down link
[   80.519507][ T6729] erspan0: entered allmulticast mode
[   80.560232][ T6729] bond1: (slave erspan0): making interface the new active one
[   80.585281][ T6729] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   80.722981][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'.
[   80.824900][ T6746] sctp: [Deprecated]: syz.0.205 (pid 6746) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.824900][ T6746] Use struct sctp_sack_info instead
[   81.144860][ T6774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.148092][ T6774] IPv6: NLM_F_CREATE should be set when creating new route
[   81.167358][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'.
[   81.272883][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'.
[   81.613085][ T6787] macvlan0: entered promiscuous mode
[   81.927527][ T6808] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   81.930066][ T6799] 8021q: VLANs not supported on vcan0
[   82.140624][ T6826] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   82.261888][ T6836] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   82.266688][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.270866][ T6837] netlink: 'syz.0.231': attribute type 1 has an invalid length.
[   82.272374][ T6836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.042326][ T6863] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   83.077399][ T6865] netlink: 'syz.2.240': attribute type 2 has an invalid length.
[   83.081038][ T6865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.342084][ T6885] __nla_validate_parse: 9 callbacks suppressed
[   83.342096][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.244'.
[   83.405889][ T6888] netlink: 'syz.0.245': attribute type 21 has an invalid length.
[   83.408805][ T6888] netlink: 'syz.0.245': attribute type 22 has an invalid length.
[   83.413643][ T6888] netlink: 'syz.0.245': attribute type 23 has an invalid length.
[   83.420400][ T6888] netlink: 'syz.0.245': attribute type 25 has an invalid length.
[   83.423477][ T6888] netlink: 96 bytes leftover after parsing attributes in process `syz.0.245'.
[   83.789536][ T6913] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   83.792992][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'.
[   84.050723][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   84.122207][ T6933] veth0_to_bond: entered allmulticast mode
[   84.328485][ T6946] xt_bpf: check failed: parse error
[   84.408855][ T6954] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.430497][ T6951] netlink: zone id is out of range
[   84.432358][ T6951] netlink: zone id is out of range
[   84.434109][ T6951] netlink: zone id is out of range
[   84.438553][ T6951] netlink: zone id is out of range
[   84.440194][ T6951] netlink: zone id is out of range
[   84.441857][ T6951] netlink: zone id is out of range
[   84.443652][ T6951] netlink: zone id is out of range
[   84.463654][ T6951] netlink: zone id is out of range
[   84.602549][ T6970] ip6tnl1: entered promiscuous mode
[   84.604849][ T6970] ip6tnl1: entered allmulticast mode
[   84.789901][ T6980] validate_nla: 3 callbacks suppressed
[   84.789934][ T6980] netlink: 'syz.2.271': attribute type 9 has an invalid length.
[   84.827919][ T6986] x_tables: duplicate underflow at hook 3
[   84.862493][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   84.873292][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   84.883893][ T6991] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[   84.891740][ T6991] netem: change failed
[   85.469460][ T7040] netlink: 'syz.2.287': attribute type 2 has an invalid length.
[   85.480522][ T7040] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   85.489330][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   85.494269][ T7033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'.
[   85.499505][ T7033] IPv6: NLM_F_CREATE should be specified when creating new route
[   85.502872][ T7033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.505744][ T7033] IPv6: NLM_F_CREATE should be set when creating new route
[   85.602070][ T7048] sctp: [Deprecated]: syz.2.291 (pid 7048) Use of int in maxseg socket option.
[   85.602070][ T7048] Use struct sctp_assoc_value instead
[   85.616055][ T7050] sctp: [Deprecated]: syz.2.291 (pid 7050) Use of int in maxseg socket option.
[   85.616055][ T7050] Use struct sctp_assoc_value instead
[   85.638604][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.291'.
[   85.699873][ T7053] netlink: 'syz.2.292': attribute type 10 has an invalid length.
[   85.808405][ T7059] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   85.853352][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'.
[   85.930084][ T7067] netlink: 'syz.2.299': attribute type 14 has an invalid length.
[   85.933269][ T7067] netlink: 'syz.2.299': attribute type 13 has an invalid length.
[   85.999783][ T7071] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   86.013558][ T7071] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   86.085437][ T7078] netlink: 'syz.2.303': attribute type 10 has an invalid length.
[   86.088764][ T7078] dummy0: entered promiscuous mode
[   86.091183][ T7078] dummy0: entered allmulticast mode
[   86.097052][ T7078] bridge0: port 3(dummy0) entered blocking state
[   86.100838][ T7078] bridge0: port 3(dummy0) entered disabled state
[   86.106113][ T7078] bridge0: port 3(dummy0) entered blocking state
[   86.108936][ T7078] bridge0: port 3(dummy0) entered forwarding state
[   86.538111][  T790] cfg80211: failed to load regulatory.db
[   87.786557][ T7146] netlink: 'syz.2.325': attribute type 32 has an invalid length.
[   87.789756][ T7146] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   87.978766][ T7152] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   87.990756][ T7158] bridge0: port 3(dummy0) entered disabled state
[   87.997440][ T7158] batman_adv: batadv0: Adding interface: dummy0
[   87.999994][ T7158] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.012720][ T7158] batman_adv: batadv0: Interface activated: dummy0
[   88.225833][ T7169] net_ratelimit: 257 callbacks suppressed
[   88.225874][ T7169] openvswitch: netlink: Tunnel attr 4107 out of range max 16
[   88.315859][ T7182] tipc: New replicast peer: 255.255.255.255
[   88.328799][ T7182] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.379964][ T7182] vxcan3: entered allmulticast mode
[   88.916076][ T7207] __nla_validate_parse: 17 callbacks suppressed
[   88.916098][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'.
[   88.923444][ T7207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'.
[   89.436620][ T5885] tipc: Node number set to 299991491
[   89.464527][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'.
[   89.478023][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.482443][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.583546][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[   90.588473][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.366'.
[   90.598303][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[   90.607592][ T7272] veth0_to_team: entered promiscuous mode
[   90.609910][ T7272] veth0_to_team: entered allmulticast mode
[   90.617836][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.366'.
[   91.015453][ T7297] validate_nla: 5 callbacks suppressed
[   91.015468][ T7297] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[   91.045798][ T7297] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.089445][ T7297] bond2: (slave veth3): Enslaving as an active interface with a down link
[   91.113924][ T7297] vlan2: entered allmulticast mode
[   91.118568][ T7297] bond2: entered allmulticast mode
[   91.124396][ T7297] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   91.192630][ T7306] bridge: RTM_NEWNEIGH with invalid ether address
[   91.257524][ T7312] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   91.323961][ T7316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'.
[   91.388826][ T7321] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.382'.
[   91.447244][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'.
[   91.742528][ T7346] netlink: 'syz.1.389': attribute type 1 has an invalid length.
[   91.809725][ T7352] netlink: 'syz.0.391': attribute type 23 has an invalid length.
[   91.920526][ T7358] SET target dimension over the limit!
[   92.240472][ T7379] delete_channel: no stack
[   92.328193][ T7383] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   93.499143][ T7424] netlink: 'syz.0.410': attribute type 4 has an invalid length.
[   94.153263][ T7456] __nla_validate_parse: 13 callbacks suppressed
[   94.153281][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'.
[   94.323491][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   94.348077][ T7469] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.351812][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'.
[   94.366446][ T7469] macvlan3: entered promiscuous mode
[   94.368725][ T7469] macvlan3: entered allmulticast mode
[   94.371187][ T7469] bond3: entered promiscuous mode
[   94.373203][ T7469] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   94.377104][ T7471] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   94.382213][ T7469] bond3: left promiscuous mode
[   94.578009][ T7479] netlink: 828 bytes leftover after parsing attributes in process `syz.2.432'.
[   94.587516][ T7479] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[   94.699142][ T7488] netlink: 'syz.1.435': attribute type 1 has an invalid length.
[   94.702316][ T7488] netlink: 228 bytes leftover after parsing attributes in process `syz.1.435'.
[   94.828775][ T7499] netlink: 196 bytes leftover after parsing attributes in process `syz.1.439'.
[   94.863101][ T7503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.441'.
[   94.969838][ T7505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'.
[   94.982652][ T7508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'.
[   95.096714][ T7517] netlink: 92 bytes leftover after parsing attributes in process `syz.1.443'.
[   95.112713][ T7510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.116962][ T7510] syzkaller0: entered promiscuous mode
[   95.118770][ T7510] syzkaller0: entered allmulticast mode
[   95.123688][ T7509] tipc: Resetting bearer <eth:syzkaller0>
[   95.150550][ T7509] tipc: Disabling bearer <eth:syzkaller0>
[   95.225677][ T7523] openvswitch: netlink: Key 6 has unexpected len 187 expected 2
[   95.231344][ T7521] syzkaller1: entered promiscuous mode
[   95.233703][ T7521] syzkaller1: entered allmulticast mode
[   95.344488][ T7534] sctp: [Deprecated]: syz.0.448 (pid 7534) Use of int in max_burst socket option.
[   95.344488][ T7534] Use struct sctp_assoc_value instead
[   95.681478][ T7553] netlink: 'syz.0.453': attribute type 83 has an invalid length.
[   96.274574][ T7588] bond0: Unable to set down delay as MII monitoring is disabled
[   96.533147][ T7605] syzkaller1: tun_chr_ioctl cmd 1074025677
[   96.537132][ T7605] syzkaller1: Linktype set failed because interface is up
[   96.556338][ T5882] syzkaller1: tun_net_xmit 90
[   96.556929][ T7605] 8021q: adding VLAN 0 to HW filter on device bond4
[   96.562783][ T7605] bond4: entered allmulticast mode
[   96.566617][ T7605] bond0: (slave bond4): Enslaving as an active interface with an up link
[   96.949550][ T7616] xt_time: invalid argument - start or stop time greater than 23:59:59
[   96.949808][ T7617] xt_time: invalid argument - start or stop time greater than 23:59:59
[   97.114178][ T7622] vti0: entered promiscuous mode
[   97.257074][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[   97.929092][ T7671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.161054][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   98.800404][ T7697] bridge: RTM_NEWNEIGH with invalid ether address
[   98.918544][ T7681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   99.000714][   T10] IPVS: starting estimator thread 0...
[   99.082104][ T7711] netlink: 'syz.2.503': attribute type 1 has an invalid length.
[   99.087138][ T7704] IPVS: using max 62 ests per chain, 148800 per kthread
[   99.164824][ T7717] __nla_validate_parse: 15 callbacks suppressed
[   99.164837][ T7717] netlink: 200 bytes leftover after parsing attributes in process `syz.2.506'.
[   99.166596][ T7719] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[   99.188184][ T7719] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.212393][ T7723] Unknown options in mask 700
[   99.221198][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[   99.244386][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.1.502'.
[   99.948040][ T7740] netlink: 104 bytes leftover after parsing attributes in process `syz.1.511'.
[  100.131423][ T7748] netlink: 'syz.0.514': attribute type 1 has an invalid length.
[  100.135000][ T7748] netlink: 244 bytes leftover after parsing attributes in process `syz.0.514'.
[  100.622912][ T7767] erspan0: mtu less than device minimum
[  100.689353][ T7769] netlink: 100 bytes leftover after parsing attributes in process `syz.0.522'.
[  101.058453][ T7788] netlink: 27 bytes leftover after parsing attributes in process `syz.1.528'.
[  101.066224][ T7788] netlink: zone id is out of range
[  101.069391][ T7788] netlink: zone id is out of range
[  101.071438][ T7788] netlink: zone id is out of range
[  101.073160][ T7788] netlink: zone id is out of range
[  101.078858][ T7788] netlink: zone id is out of range
[  101.081967][ T7788] netlink: zone id is out of range
[  101.083830][ T7788] netlink: zone id is out of range
[  101.086481][ T7788] netlink: zone id is out of range
[  101.088144][ T7788] netlink: zone id is out of range
[  101.828418][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'.
[  101.834680][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'.
[  101.837569][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'.
[  101.853308][ T7803] syzkaller1: entered promiscuous mode
[  101.856454][ T7803] syzkaller1: entered allmulticast mode
[  102.210772][ T7827] vlan0: entered promiscuous mode
[  103.006564][ T7883] netlink: 'syz.1.558': attribute type 4 has an invalid length.
[  103.078312][ T7894] xt_hashlimit: size too large, truncated to 1048576
[  103.090379][ T7894] syz.1.562: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.097834][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: syz.1.562 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  103.097847][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.097853][ T7894] Call Trace:
[  103.097857][ T7894]  <TASK>
[  103.097862][ T7894]  dump_stack_lvl+0x189/0x250
[  103.097878][ T7894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.097896][ T7894]  ? __pfx__printk+0x10/0x10
[  103.097907][ T7894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.097927][ T7894]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.097938][ T7894]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  103.097948][ T7894]  warn_alloc+0x214/0x310
[  103.097962][ T7894]  ? __pfx_warn_alloc+0x10/0x10
[  103.097976][ T7894]  ? __get_vm_area_node+0x28f/0x300
[  103.097987][ T7894]  ? htable_create+0xfc/0x7a0
[  103.098000][ T7894]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  103.098023][ T7894]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.098036][ T7894]  ? rcu_is_watching+0x15/0xb0
[  103.098045][ T7894]  ? htable_create+0xfc/0x7a0
[  103.098055][ T7894]  ? htable_create+0xfc/0x7a0
[  103.098064][ T7894]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  103.098104][ T7894]  ? htable_create+0xfc/0x7a0
[  103.098114][ T7894]  ? hashlimit_pernet+0x23/0x240
[  103.098127][ T7894]  htable_create+0xfc/0x7a0
[  103.098141][ T7894]  hashlimit_mt_check_common+0x719/0xa10
[  103.098156][ T7894]  xt_check_match+0x3d1/0xab0
[  103.098167][ T7894]  ? __pfx___mutex_lock+0x10/0x10
[  103.098177][ T7894]  ? __pfx_xt_check_match+0x10/0x10
[  103.098188][ T7894]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  103.098202][ T7894]  ? xt_find_match+0x1f7/0x250
[  103.098215][ T7894]  translate_table+0x1553/0x2040
[  103.098236][ T7894]  ? __pfx_translate_table+0x10/0x10
[  103.098246][ T7894]  ? __might_fault+0xb0/0x130
[  103.098264][ T7894]  ? _copy_from_user+0x94/0xb0
[  103.098276][ T7894]  do_ip6t_set_ctl+0x970/0xce0
[  103.098290][ T7894]  ? rcu_is_watching+0x15/0xb0
[  103.098298][ T7894]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  103.098317][ T7894]  ? __pfx___mutex_lock+0x10/0x10
[  103.098324][ T7894]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  103.098335][ T7894]  ? __pfx_futex_wait+0x10/0x10
[  103.098346][ T7894]  nf_setsockopt+0x26f/0x290
[  103.098359][ T7894]  rawv6_setsockopt+0x23b/0x5b0
[  103.098370][ T7894]  ? __lock_acquire+0xab9/0xd20
[  103.098379][ T7894]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  103.098390][ T7894]  ? aa_sock_opt_perm+0x74/0x110
[  103.098402][ T7894]  ? sock_common_setsockopt+0x36/0xc0
[  103.098410][ T7894]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  103.098419][ T7894]  do_sock_setsockopt+0x25a/0x3e0
[  103.098430][ T7894]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  103.098441][ T7894]  ? __fget_files+0x2a/0x420
[  103.098456][ T7894]  __x64_sys_setsockopt+0x18b/0x220
[  103.098467][ T7894]  do_syscall_64+0xfa/0x3b0
[  103.098475][ T7894]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.098486][ T7894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.098494][ T7894]  ? exc_page_fault+0x9f/0xf0
[  103.098521][ T7894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.098528][ T7894] RIP: 0033:0x7f0a5a78e929
[  103.098537][ T7894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.098544][ T7894] RSP: 002b:00007f0a585f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.098553][ T7894] RAX: ffffffffffffffda RBX: 00007f0a5a9b6160 RCX: 00007f0a5a78e929
[  103.098558][ T7894] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008
[  103.098563][ T7894] RBP: 00007f0a5a810b39 R08: 00000000000005c0 R09: 0000000000000000
[  103.098568][ T7894] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  103.098572][ T7894] R13: 0000000000000000 R14: 00007f0a5a9b6160 R15: 00007ffcb1c20d98
[  103.098584][ T7894]  </TASK>
[  103.098588][ T7894] Mem-Info:
[  103.227613][ T7894] active_anon:5663 inactive_anon:0 isolated_anon:0
[  103.227613][ T7894]  active_file:1071 inactive_file:38218 isolated_file:0
[  103.227613][ T7894]  unevictable:1768 dirty:129 writeback:0
[  103.227613][ T7894]  slab_reclaimable:9335 slab_unreclaimable:53214
[  103.227613][ T7894]  mapped:18187 shmem:2456 pagetables:980
[  103.227613][ T7894]  sec_pagetables:0 bounce:0
[  103.227613][ T7894]  kernel_misc_reclaimable:0
[  103.227613][ T7894]  free:298611 free_pcp:15856 free_cma:0
[  103.241439][ T7894] Node 0 active_anon:11204kB inactive_anon:0kB active_file:3172kB inactive_file:133204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26636kB dirty:328kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6692kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.251517][ T7894] Node 1 active_anon:11448kB inactive_anon:0kB active_file:1112kB inactive_file:19668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46112kB dirty:188kB writeback:0kB shmem:5124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5012kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.262091][ T7894] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.271096][ T7894] lowmem_reserve[]: 0 812 812 812 812
[  103.272760][ T7894] Node 0 DMA32 free:283520kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11204kB inactive_anon:0kB active_file:3172kB inactive_file:133204kB unevictable:3536kB writepending:328kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:29140kB local_pcp:17212kB free_cma:0kB
[  103.283639][ T7894] lowmem_reserve[]: 0 0 0 0 0
[  103.293950][ T7894] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  103.303905][ T7894] lowmem_reserve[]: 0 0 854 854 854
[  103.306141][ T7894] Node 1 Normal free:437072kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11516kB inactive_anon:0kB active_file:1112kB inactive_file:19668kB unevictable:3536kB writepending:188kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:37428kB local_pcp:17944kB free_cma:0kB
[  103.318179][ T7894] lowmem_reserve[]: 0 0 0 0 0
[  103.320213][ T7894] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.325816][ T7894] Node 0 DMA32: 806*4kB (UM) 455*8kB (UM) 375*16kB (UM) 236*32kB (UM) 101*64kB (UM) 29*128kB (UM) 12*256kB (UME) 2*512kB (M) 5*1024kB (UM) 5*2048kB (ME) 57*4096kB (M) = 283520kB
[  103.354715][ T7894] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  103.360987][ T7894] Node 1 Normal: 301*4kB (UME) 146*8kB (ME) 92*16kB (ME) 50*32kB (M) 117*64kB (UME) 36*128kB (UM) 22*256kB (UME) 11*512kB (UME) 7*1024kB (UME) 1*2048kB (E) 97*4096kB (M) = 435332kB
[  103.366972][ T7894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.370214][ T7894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.373223][ T7894] 41745 total pagecache pages
[  103.374906][ T7894] 0 pages in swap cache
[  103.376374][ T7894] Free swap  = 124996kB
[  103.377934][ T7894] Total swap = 124996kB
[  103.379567][ T7894] 786301 pages RAM
[  103.381022][ T7894] 0 pages HighMem/MovableOnly
[  103.382801][ T7894] 241085 pages reserved
[  103.384403][ T7894] 0 pages cma reserved
[  103.545198][ T7907] netem: change failed
[  103.639349][ T7914] x_tables: duplicate underflow at hook 1
[  103.991605][ T7937] netlink: 'syz.1.574': attribute type 2 has an invalid length.
[  104.426284][ T7972] __nla_validate_parse: 14 callbacks suppressed
[  104.426295][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'.
[  104.780749][  T790] IPVS: starting estimator thread 0...
[  104.800951][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.803887][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.822739][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.874799][ T7989] IPVS: using max 62 ests per chain, 148800 per kthread
[  105.423526][ T8016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  105.430222][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[  105.910272][ T8055] netlink: 'syz.0.610': attribute type 3 has an invalid length.
[  105.963010][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[  105.968108][ T8058] net_ratelimit: 533 callbacks suppressed
[  105.968124][ T8058] netlink: zone id is out of range
[  105.972448][ T8058] netlink: zone id is out of range
[  105.979368][ T8058] netlink: zone id is out of range
[  105.981372][ T8058] netlink: zone id is out of range
[  105.983420][ T8058] netlink: zone id is out of range
[  105.986251][ T8058] netlink: zone id is out of range
[  105.988445][ T8058] netlink: zone id is out of range
[  105.990555][ T8058] netlink: zone id is out of range
[  105.993253][ T8058] netlink: zone id is out of range
[  105.998240][ T8058] netlink: zone id is out of range
[  106.084239][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'.
[  106.192426][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[  106.293022][ T8071] netlink: 'syz.0.615': attribute type 21 has an invalid length.
[  106.489032][ T8082] netlink: 596 bytes leftover after parsing attributes in process `syz.0.617'.
[  106.570170][ T8087] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.618'.
[  106.722039][ T8095] macvlan3: entered allmulticast mode
[  106.733468][ T8095] veth1_vlan: entered allmulticast mode
[  106.742387][ T8095] team0: Port device macvlan3 added
[  106.747203][ T8093] netlink: 'syz.1.619': attribute type 5 has an invalid length.
[  106.760444][ T8093] smc: net device bond0 applied user defined pnetid SYZ2
[  106.762919][ T8093] netlink: 14 bytes leftover after parsing attributes in process `syz.1.619'.
[  106.819142][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[  106.821885][ T8099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.622'.
[  106.884360][ T8093] smc: removing net device bond0 with user defined pnetid SYZ2
[  106.889031][ T8093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.898396][ T8093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.902858][ T8093] bond0 (unregistering): (slave team0): Releasing backup interface
[  106.908770][ T8093] bond0 (unregistering): Released all slaves
[  107.045135][ T8107] netlink: 'syz.2.625': attribute type 15 has an invalid length.
[  107.194055][ T8111] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  108.523050][  T790] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 0/3
[  108.528804][  T790] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[  108.644426][ T8180] 8021q: adding VLAN 0 to HW filter on device bond5
[  108.688224][ T8188] netlink: 'syz.1.650': attribute type 142 has an invalid length.
[  108.739939][ T8195] IPv6: NLM_F_REPLACE set, but no existing node found!
[  108.783649][ T8199] xt_limit: Overflow, try lower: 0/0
[  108.994296][ T8209] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  109.026623][ T8211] netlink: 'syz.2.658': attribute type 1 has an invalid length.
[  109.308331][ T8222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.312926][ T8222] syzkaller0: entered promiscuous mode
[  109.315558][ T8222] syzkaller0: entered allmulticast mode
[  109.335681][ T8222] tipc: Resetting bearer <eth:syzkaller0>
[  109.342284][ T8221] tipc: Resetting bearer <eth:syzkaller0>
[  109.358487][ T8221] tipc: Disabling bearer <eth:syzkaller0>
[  109.608317][ T8233] xt_CONNSECMARK: invalid mode: 254
[  110.179058][ T8269] __nla_validate_parse: 10 callbacks suppressed
[  110.179078][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[  110.206227][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.217760][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.232280][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.561457][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'.
[  110.702694][ T8303] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[  110.718755][ T8303] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[  110.760110][ T8308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.691'.
[  111.153631][ T8323] netlink: 'syz.2.698': attribute type 83 has an invalid length.
[  111.250266][ T8327] netlink: 'syz.0.700': attribute type 2 has an invalid length.
[  111.326584][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'.
[  111.350601][ T8335] ip6t_srh: unknown srh match flags  5294
[  111.392174][ T8337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.703'.
[  111.511290][ T8355] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[  111.555372][ T8355] bond6 (unregistering): Released all slaves
[  111.624573][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'.
[  111.638928][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[  111.642699][ T8373] netlink: 'syz.2.715': attribute type 1 has an invalid length.
[  111.717671][ T8377] sctp: [Deprecated]: syz.2.715 (pid 8377) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.717671][ T8377] Use struct sctp_sack_info instead
[  111.718682][ T8375] tipc: Started in network mode
[  111.725978][ T8375] tipc: Node identity da5136b426c9, cluster identity 4711
[  111.731093][ T8375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.738959][ T8376] syzkaller0: entered promiscuous mode
[  111.745299][ T8376] syzkaller0: entered allmulticast mode
[  111.793393][ T8375] tipc: Resetting bearer <eth:syzkaller0>
[  111.806869][ T8374] tipc: Resetting bearer <eth:syzkaller0>
[  111.829009][ T8374] tipc: Disabling bearer <eth:syzkaller0>
[  111.854240][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  111.908815][ T8393] netlink: 220 bytes leftover after parsing attributes in process `syz.1.720'.
[  111.917442][ T8396] nbd: must specify an index to disconnect
[  111.972528][ T8400] netlink: 56 bytes leftover after parsing attributes in process `syz.0.723'.
[  112.916406][ T8420] net_ratelimit: 445 callbacks suppressed
[  112.916425][ T8420] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  113.030927][ T8434] syz.2.733 uses old SIOCAX25GETINFO
[  113.039449][ T8431] netlink: 'syz.1.734': attribute type 5 has an invalid length.
[  113.101990][ T8440] netlink: zone id is out of range
[  113.104280][ T8440] netlink: zone id is out of range
[  113.114932][ T8440] netlink: zone id is out of range
[  113.118993][ T8440] netlink: zone id is out of range
[  113.122104][ T8440] netlink: zone id is out of range
[  113.124164][ T8440] netlink: zone id is out of range
[  113.131913][ T8440] netlink: zone id is out of range
[  113.134041][ T8440] netlink: zone id is out of range
[  113.142144][ T8440] netlink: zone id is out of range
[  113.284363][ T8451] veth1_macvtap: left promiscuous mode
[  113.291690][ T8451] macsec0: entered promiscuous mode
[  113.303084][ T8453] C: renamed from team_slave_0 (while UP)
[  113.308830][ T8453] netlink: 'syz.0.740': attribute type 3 has an invalid length.
[  113.311559][ T8451] veth1_macvtap: entered promiscuous mode
[  113.314485][ T8451] macsec0: left promiscuous mode
[  114.477010][ T8502] netlink: 'syz.2.754': attribute type 3 has an invalid length.
[  114.480193][ T8502] netlink: 'syz.2.754': attribute type 1 has an invalid length.
[  114.740137][ T8516] : entered promiscuous mode
[  114.841499][ T8524] SET target dimension over the limit!
[  115.582165][ T8579] __nla_validate_parse: 16 callbacks suppressed
[  115.582187][ T8579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'.
[  115.590062][ T8578] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[  115.614568][ T8578] netlink: 224 bytes leftover after parsing attributes in process `syz.0.776'.
[  115.670150][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  115.758540][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'.
[  116.043258][ T8595] netlink: 48 bytes leftover after parsing attributes in process `syz.2.783'.
[  116.272592][ T8600] ipvlan2: entered promiscuous mode
[  116.490794][ T8610] xt_CT: No such helper "syz0"
[  116.631251][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.788'.
[  116.634968][    C0] vcan0: j1939_session_tx_dat: 0xffff88801c322c00: queue data error: -100
[  116.638658][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  116.642230][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  116.645451][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.648357][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.651300][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.654374][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.657805][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.660979][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.664189][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.667539][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.670553][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.673394][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.676761][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.679562][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.682352][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.685453][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.688614][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.691615][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.694838][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.697826][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.701048][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.703949][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.707157][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.710212][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.713331][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.716456][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.719713][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.722834][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.725993][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.729157][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.732329][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.735498][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.738756][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.741841][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.745203][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.748338][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.751597][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.754900][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.758208][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.761430][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.764573][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.767808][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.770650][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.773778][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.777132][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.780298][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.783558][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.786764][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.789911][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.792942][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.796945][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.800064][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.803238][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.806399][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.809529][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.812493][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.815450][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.818147][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.820771][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.823138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.826703][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.829842][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.833496][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.837487][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.840652][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.843742][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.847530][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.850684][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.853914][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.857202][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.860616][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.864075][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.867210][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.870168][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.873357][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.876440][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.879622][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.882744][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.885940][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.888941][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.891983][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.895037][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.898091][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.901067][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.904147][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.907185][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.910233][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.913186][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.916362][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.919273][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.922339][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.925441][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.928462][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.931412][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.934508][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.937633][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.940679][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.943555][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.946766][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.949722][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.952779][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.955800][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.958899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.961927][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.965193][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.968104][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.971298][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.974239][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.977494][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.980470][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.983640][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.986714][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.989755][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.992715][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  116.995911][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  116.998882][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.001888][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.004979][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.008079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.011041][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.014144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.017189][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.020174][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.023014][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.026125][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.029076][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.032162][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.035461][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.039302][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.042247][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.045280][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.048111][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.051088][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.053948][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.057182][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.060018][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.062966][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.066125][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.069227][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.072168][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.075327][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.078328][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.081419][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.084463][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.087657][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.090691][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.093908][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.097081][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.100198][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.103222][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.106535][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.109581][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.112578][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.115043][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.118092][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.121113][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.124191][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.127335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.130314][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.133307][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.136567][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.139646][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.142767][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.145910][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.149020][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.151968][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.155204][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.158305][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.161477][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.164559][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.167763][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.170798][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.173993][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.177176][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.180277][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.183336][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.758136][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  117.761590][ T8652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  117.773045][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  117.777715][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'.
[  117.804178][ T8651] team0 (unregistering): Port device team_slave_0 removed
[  117.814466][ T8651] team0 (unregistering): Port device team_slave_1 removed
[  119.013498][ T8708] net_ratelimit: 61 callbacks suppressed
[  119.013517][ T8708] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  119.020839][ T8708] netlink: zone id is out of range
[  119.053408][ T8708] netlink: zone id is out of range
[  119.056015][ T8708] netlink: zone id is out of range
[  119.057691][ T8708] netlink: zone id is out of range
[  119.059244][ T8708] netlink: zone id is out of range
[  119.060849][ T8708] netlink: zone id is out of range
[  119.062427][ T8708] netlink: zone id is out of range
[  119.064012][ T8708] netlink: zone id is out of range
[  119.067226][ T8708] netlink: zone id is out of range
[  119.266768][ T8724] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  119.347235][ T8735] syzkaller1: entered allmulticast mode
[  119.511565][ T8754] pim6reg1: entered promiscuous mode
[  119.513340][ T8754] pim6reg1: entered allmulticast mode
[  119.669590][ T8763] x_tables: duplicate underflow at hook 1
[  120.067144][ T8802] IPv6: sit1: Disabled Multicast RS
[  120.069601][ T8802] sit1: entered allmulticast mode
[  120.608767][ T8834] __nla_validate_parse: 8 callbacks suppressed
[  120.608788][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  120.622519][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'.
[  120.627679][ T8832] netlink: 'syz.1.850': attribute type 3 has an invalid length.
[  120.873656][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  120.875709][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  120.941697][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'.
[  121.002902][ T8876] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.861'.
[  121.036621][ T8878] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.046799][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.863'.
[  121.050003][ T8881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.863'.
[  121.079143][ T8883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.864'.
[  121.079685][ T8884] netlink: 48 bytes leftover after parsing attributes in process `syz.2.864'.
[  121.549200][ T8922] netlink: 'syz.2.877': attribute type 7 has an invalid length.
[  121.862624][ T8947] bridge_slave_0: left allmulticast mode
[  121.864505][ T8947] bridge_slave_0: left promiscuous mode
[  121.868210][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.876643][ T8947] bridge_slave_1: left allmulticast mode
[  121.878673][ T8947] bridge_slave_1: left promiscuous mode
[  121.880641][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.891956][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.894366][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.899391][ T8947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.901753][ T8947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.943312][ T8942] netlink: 'syz.1.882': attribute type 10 has an invalid length.
[  122.059167][   T24] tipc: Node number set to 2162174031
[  122.220091][ T8966] syzkaller1: entered promiscuous mode
[  122.222608][ T8966] syzkaller1: entered allmulticast mode
[  122.357923][ T8975] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  122.662879][ T8995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.669608][ T8995] syzkaller0: entered promiscuous mode
[  122.671921][ T8995] syzkaller0: entered allmulticast mode
[  122.682639][ T8995] tipc: Resetting bearer <eth:syzkaller0>
[  122.694076][ T8994] tipc: Resetting bearer <eth:syzkaller0>
[  122.719530][ T8994] tipc: Disabling bearer <eth:syzkaller0>
[  122.727214][ T8997] bridge: RTM_NEWNEIGH with invalid state 0x1
[  122.803942][ T9004] Bluetooth: MGMT ver 1.23
[  123.053244][ T9021] bridge3: entered promiscuous mode
[  123.064779][ T9021] bridge3: entered allmulticast mode
[  124.082291][ T9085] pim6reg: entered allmulticast mode
[  124.100130][ T9084] pim6reg: left allmulticast mode
[  124.302120][ T9090] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  124.304472][ T9090] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  124.332324][ T9098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.335260][ T9098] IPv6: NLM_F_CREATE should be set when creating new route
[  124.338097][ T9098] IPv6: NLM_F_CREATE should be set when creating new route
[  124.340956][ T9098] IPv6: NLM_F_CREATE should be set when creating new route
[  124.364172][ T9098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.718522][ T9127] netlink: 'syz.0.934': attribute type 1 has an invalid length.
[  124.766229][ T9132] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  125.386591][ T9189] netlink: 'syz.0.948': attribute type 10 has an invalid length.
[  125.411728][ T9189] 8021q: adding VLAN 0 to HW filter on device team0
[  125.417035][ T9189] bond0: (slave team0): Enslaving as an active interface with an up link
[  125.530645][ T9199] nbd: must specify at least one socket
[  125.672761][ T9205] GUP no longer grows the stack in syz.0.952 (9205): 200000006000-20000000a000 (200000005000)
[  125.680537][ T9205] CPU: 1 UID: 0 PID: 9205 Comm: syz.0.952 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  125.680554][ T9205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.680561][ T9205] Call Trace:
[  125.680565][ T9205]  <TASK>
[  125.680571][ T9205]  dump_stack_lvl+0x189/0x250
[  125.680594][ T9205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.680604][ T9205]  ? __pfx__printk+0x10/0x10
[  125.680616][ T9205]  ? find_vma+0xe7/0x160
[  125.680633][ T9205]  __get_user_pages+0x2a60/0x30b0
[  125.680659][ T9205]  ? __pfx___get_user_pages+0x10/0x10
[  125.680667][ T9205]  ? __gup_longterm_locked+0xbf7/0x15b0
[  125.680675][ T9205]  ? down_read_killable+0x1d1/0x350
[  125.680684][ T9205]  ? try_get_folio+0x633/0x660
[  125.680695][ T9205]  __gup_longterm_locked+0xd66/0x15b0
[  125.680706][ T9205]  ? try_grab_folio_fast+0x1be/0x4f0
[  125.680719][ T9205]  ? gup_fast_fallback+0x1afc/0x2260
[  125.680730][ T9205]  gup_fast_fallback+0x1cd4/0x2260
[  125.680758][ T9205]  ? __pfx_gup_fast_fallback+0x10/0x10
[  125.680766][ T9205]  ? trace_contention_end+0x39/0x120
[  125.680779][ T9205]  ? __mutex_lock+0x330/0xe80
[  125.680790][ T9205]  ? is_valid_gup_args+0x11f/0x200
[  125.680799][ T9205]  ? get_user_pages_fast+0x4d/0xb0
[  125.680808][ T9205]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  125.680822][ T9205]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  125.680844][ T9205]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.680854][ T9205]  ? wait_for_space+0x24d/0x2d0
[  125.680866][ T9205]  iov_iter_get_pages2+0x5e/0xa0
[  125.680877][ T9205]  __se_sys_vmsplice+0x548/0x10d0
[  125.680895][ T9205]  ? wake_up_q+0xca/0x110
[  125.680908][ T9205]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  125.680919][ T9205]  ? __pfx_futex_wake+0x10/0x10
[  125.680932][ T9205]  ? __lock_acquire+0xab9/0xd20
[  125.680956][ T9205]  ? do_pipe2+0xf7/0x170
[  125.680968][ T9205]  ? rcu_is_watching+0x15/0xb0
[  125.680980][ T9205]  ? do_syscall_64+0xbe/0x3b0
[  125.680991][ T9205]  do_syscall_64+0xfa/0x3b0
[  125.680998][ T9205]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.681009][ T9205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.681017][ T9205]  ? exc_page_fault+0x9f/0xf0
[  125.681029][ T9205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.681037][ T9205] RIP: 0033:0x7f428518e929
[  125.681046][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.681054][ T9205] RSP: 002b:00007f428603f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  125.681063][ T9205] RAX: ffffffffffffffda RBX: 00007f42853b5fa0 RCX: 00007f428518e929
[  125.681069][ T9205] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[  125.681074][ T9205] RBP: 00007f4285210b39 R08: 0000000000000000 R09: 0000000000000000
[  125.681107][ T9205] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  125.681112][ T9205] R13: 0000000000000000 R14: 00007f42853b5fa0 R15: 00007ffdfa4e1698
[  125.681127][ T9205]  </TASK>
[  125.870227][ T9213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.873266][ T9213] syzkaller0: entered promiscuous mode
[  125.883336][ T9213] syzkaller0: entered allmulticast mode
[  125.912209][ T9213] tipc: Resetting bearer <eth:syzkaller0>
[  125.916753][ T9213] __nla_validate_parse: 20 callbacks suppressed
[  125.916764][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'.
[  125.927529][ T9212] tipc: Resetting bearer <eth:syzkaller0>
[  125.952940][ T9212] tipc: Disabling bearer <eth:syzkaller0>
[  126.618116][ T3576] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  126.649928][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.798777][ T9270] netlink: 'syz.0.972': attribute type 12 has an invalid length.
[  126.889632][ T9274] batadv_slave_1: entered promiscuous mode
[  126.893891][ T9273] batadv_slave_1: left promiscuous mode
[  127.010631][ T9279] netlink: 248 bytes leftover after parsing attributes in process `syz.1.975'.
[  127.125821][ T9282] syzkaller0: entered promiscuous mode
[  127.127607][ T9282] syzkaller0: entered allmulticast mode
[  127.292173][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'.
[  128.543045][ T9295] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  128.547449][ T9292] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  128.568530][ T9297] macvlan4: entered promiscuous mode
[  128.574198][ T9297] macvlan4: entered allmulticast mode
[  128.723445][ T9314] C: renamed from team_slave_0 (while UP)
[  128.747523][ T9314] netlink: 'syz.2.982': attribute type 3 has an invalid length.
[  128.750545][ T9314] netlink: 152 bytes leftover after parsing attributes in process `syz.2.982'.
[  128.765369][ T9314] net_ratelimit: 466 callbacks suppressed
[  128.765384][ T9314] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  128.927262][ T9328] netlink: 11 bytes leftover after parsing attributes in process `syz.0.983'.
[  129.891233][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.991'.
[  129.906919][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.991'.
[  129.959817][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'.
[  130.121062][ T9407] x_tables: duplicate underflow at hook 3
[  130.676919][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1009'.
[  130.710114][ T9444] nbd: must specify a device to reconfigure
[  130.822678][ T9460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1013'.
[  130.826996][ T9460] tipc: Invalid UDP bearer configuration
[  130.827043][ T9460] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  131.051045][ T9489] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1019'.
[  131.064378][ T9489] netlink: 6012 bytes leftover after parsing attributes in process `syz.0.1019'.
[  131.073876][ T9489] netlink: 'syz.0.1019': attribute type 14 has an invalid length.
[  131.170065][ T9496] can: request_module (can-proto-0) failed.
[  132.374326][ T9536] veth9: entered promiscuous mode
[  132.388465][ T9534] IPv4: Oversized IP packet from 127.202.26.0
[  132.395190][ T9537] veth11: entered promiscuous mode
[  132.440106][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'.
[  132.506215][ T9541] xt_hashlimit: max too large, truncated to 1048576
[  132.508611][ T9541] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  132.605894][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  132.605894][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1038'.
[  132.633270][ T9552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  132.762068][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'.
[  132.779427][ T9556] netlink: 'syz.2.1041': attribute type 1 has an invalid length.
[  132.783881][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'.
[  132.992785][ T9570] netlink: 'syz.1.1046': attribute type 4 has an invalid length.
[  133.117351][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1047'.
[  133.346774][ T9577] netlink: 'syz.0.1048': attribute type 4 has an invalid length.
[  133.355679][ T9577] netlink: 'syz.0.1048': attribute type 4 has an invalid length.
[  133.389104][ T9580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1050'.
[  133.393086][ T9580] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1050'.
[  133.437305][ T9588] netlink: zone id is out of range
[  133.439456][ T9588] netlink: zone id is out of range
[  133.441386][ T9588] netlink: zone id is out of range
[  133.468870][ T9588] netlink: zone id is out of range
[  133.470927][ T9588] netlink: zone id is out of range
[  133.473912][ T9588] netlink: zone id is out of range
[  133.480276][ T9588] netlink: zone id is out of range
[  133.482371][ T9588] netlink: zone id is out of range
[  133.903212][ T9604] smc: adding net device bond0 with user defined pnetid SYZ2
[  133.915569][ T9604] smc: removing net device bond0 with user defined pnetid SYZ2
[  133.920930][ T9604] bond0 (unregistering): Released all slaves
[  134.793711][ T9675] xt_TCPMSS: Only works on TCP SYN packets
[  135.004156][ T9687] sctp: [Deprecated]: syz.0.1079 (pid 9687) Use of int in maxseg socket option.
[  135.004156][ T9687] Use struct sctp_assoc_value instead
[  135.150294][ T9689] block nbd0: server does not support multiple connections per device.
[  135.161271][ T9689] block nbd0: shutting down sockets
[  135.273953][ T9709] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  135.279576][ T9709] tipc: Enabled bearer <udp:syz1>, priority 10
[  135.442815][ T9726] netlink: 'syz.1.1089': attribute type 21 has an invalid length.
[  135.933227][ T9765] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  136.181879][ T9774] __nla_validate_parse: 14 callbacks suppressed
[  136.181889][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1101'.
[  136.270448][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'.
[  136.490684][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'.
[  136.560709][ T9796] dummy0: entered promiscuous mode
[  136.563360][ T9796] macsec1: entered promiscuous mode
[  136.565992][ T9796] macsec1: entered allmulticast mode
[  136.568319][ T9796] dummy0: entered allmulticast mode
[  136.575490][ T9796] dummy0: left allmulticast mode
[  136.578292][ T9796] dummy0: left promiscuous mode
[  136.808193][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'.
[  136.845315][ T9806] netlink: 'syz.1.1110': attribute type 16 has an invalid length.
[  136.848411][ T9806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'.
[  137.078327][ T9815] x_tables: duplicate underflow at hook 4
[  137.122270][ T9821] netlink: 'syz.1.1115': attribute type 1 has an invalid length.
[  137.141114][ T9821] smc: adding net device bond0 with user defined pnetid SYZ2
[  137.149157][ T9821] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.160412][ T9821] bond0: (slave gretap2): making interface the new active one
[  137.163669][ T9821] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  137.446260][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  137.506281][ T9856] netlink: 'syz.2.1129': attribute type 10 has an invalid length.
[  137.516650][ T9856] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.520123][ T9856] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  137.609868][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'.
[  137.996590][ T9885] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1139'.
[  138.003297][ T9885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1139'.
[  138.158974][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1140'.
[  138.252453][ T9892] lo: entered promiscuous mode
[  138.254097][ T9892] lo: entered allmulticast mode
[  138.336158][ T9895] xfrm1: entered promiscuous mode
[  138.338562][ T9895] xfrm1: entered allmulticast mode
[  138.435951][ T9896] xt_CT: You must specify a L4 protocol and not use inversions on it
[  138.605521][ T9910] net_ratelimit: 26 callbacks suppressed
[  138.605532][ T9910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.617484][ T9912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.222097][ T9971] block nbd2: not configured, cannot reconfigure
[  139.258439][ T9973] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  139.287213][ T9977] netlink: 'syz.2.1166': attribute type 3 has an invalid length.
[  139.291053][ T9977] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.047907][T10011] netlink: 'syz.1.1180': attribute type 4 has an invalid length.
[  140.317970][T10019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.321703][T10019] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.326873][T10019] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.330188][T10019] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.733541][T10061] netlink: 'syz.2.1193': attribute type 18 has an invalid length.
[  140.918004][T10070] tap0: tun_chr_ioctl cmd 1074025676
[  140.920165][T10070] tap0: owner set to 0
[  141.011847][T10078] batadv_slave_1: entered promiscuous mode
[  141.046280][T10078] batadv_slave_1: left promiscuous mode
[  141.119145][T10087] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.123412][T10087] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.133382][T10087] batman_adv: batadv0: Interface deactivated: dummy0
[  141.136697][T10087] dummy0: left promiscuous mode
[  141.138645][T10087] dummy0: left allmulticast mode
[  141.179235][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.185433][T10087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.218981][T10087] vlan0: left promiscuous mode
[  141.269355][T10087] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  141.278125][T10087] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.281590][T10087] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.288354][T10087] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.291863][T10087] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  141.307778][T10087] veth1_vlan: left allmulticast mode
[  141.310155][T10087] macvlan3: left allmulticast mode
[  141.315618][T10087] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.319060][T10087] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.322578][T10087] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.327856][T10087] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.342762][T10093] __nla_validate_parse: 22 callbacks suppressed
[  141.342774][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'.
[  141.418754][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'.
[  141.545762][T10115] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  141.552411][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  141.556799][T10115] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  141.649514][T10129] netlink: 'syz.2.1214': attribute type 1 has an invalid length.
[  141.651953][T10129] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  141.658827][T10129] netlink: 'syz.2.1214': attribute type 1 has an invalid length.
[  141.661227][T10129] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  141.833855][T10146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  141.983797][T10153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.988200][T10152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.001553][T10151] tipc: Disabling bearer <eth:syzkaller0>
[  142.010931][T10160] netlink: 'syz.0.1223': attribute type 29 has an invalid length.
[  142.017039][T10160] netlink: 'syz.0.1223': attribute type 29 has an invalid length.
[  142.020676][T10160] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1223'.
[  142.038002][T10160] netlink: 488 bytes leftover after parsing attributes in process `syz.0.1223'.
[  142.156740][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'.
[  142.159974][T10170] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  142.162533][T10170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.427210][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'.
[  143.292209][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1242'.
[  143.363666][T10223] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  143.428722][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'.
[  143.511309][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'.
[  144.293725][T10281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.297889][T10281] syzkaller0: entered promiscuous mode
[  144.300161][T10281] syzkaller0: entered allmulticast mode
[  144.323797][T10281] tipc: Resetting bearer <eth:syzkaller0>
[  144.343682][T10280] tipc: Resetting bearer <eth:syzkaller0>
[  144.356915][T10280] tipc: Disabling bearer <eth:syzkaller0>
[  144.541680][T10283] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.574337][T10283] bond0: (slave rose0): Enslaving as an active interface with an up link
[  144.813427][T10300] batman_adv: batadv0: Removing interface: dummy0
[  144.820778][T10300] bond0: (slave batadv0): Releasing backup interface
[  144.823652][T10302] validate_nla: 5 callbacks suppressed
[  144.823661][T10302] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  144.824734][T10300] bridge_slave_0: left allmulticast mode
[  144.827893][T10303] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  144.828425][T10300] bridge_slave_0: left promiscuous mode
[  144.828622][T10300] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.830565][T10303] netlink: 'syz.0.1267': attribute type 4 has an invalid length.
[  144.834037][T10302] netlink: 'syz.0.1267': attribute type 4 has an invalid length.
[  144.839028][T10303] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  144.848478][T10303] netlink: 'syz.0.1267': attribute type 4 has an invalid length.
[  144.858417][T10300] bridge_slave_1: left allmulticast mode
[  144.860611][T10300] bridge_slave_1: left promiscuous mode
[  144.864940][T10300] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.880456][T10300] bond0: (slave bond_slave_0): Releasing backup interface
[  144.886577][T10300] bond_slave_0: left allmulticast mode
[  144.901800][T10300] bond0: (slave bond_slave_1): Releasing backup interface
[  144.907505][T10300] bond_slave_1: left allmulticast mode
[  144.915179][T10300] team0: Port device C removed
[  144.922728][T10300] team0: Port device team_slave_1 removed
[  144.926265][T10300] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.935611][T10300] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.940069][T10300] bond0: (slave bond4): Releasing backup interface
[  144.943727][T10300] bond4: left allmulticast mode
[  144.950477][T10300] team0: Port device macvlan3 removed
[  145.285928][T10335] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  145.385597][T10348] netlink: 'syz.2.1278': attribute type 39 has an invalid length.
[  145.401865][T10337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.688390][T10372] netlink: 'syz.2.1284': attribute type 25 has an invalid length.
[  145.692582][T10372] netlink: 'syz.2.1284': attribute type 11 has an invalid length.
[  146.005368][T10380] nbd0: detected capacity change from 0 to 127
[  146.014096][   T56] block nbd0: Receive control failed (result -104)
[  146.046945][T10384] netlink: 'syz.2.1288': attribute type 1 has an invalid length.
[  147.620435][T10426] __nla_validate_parse: 14 callbacks suppressed
[  147.620445][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'.
[  147.743927][T10430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.777940][T10438] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  147.890033][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'.
[  147.981245][T10459] xt_hashlimit: size too large, truncated to 1048576
[  148.103987][T10459] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1310'.
[  148.507904][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'.
[  148.694405][T10499] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1323'.
[  148.791120][T10509] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1325'.
[  148.853627][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'.
[  148.994067][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'.
[  148.998057][T10524] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1331'.
[  149.074777][T10520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'.
[  149.111212][T10520] bond6: entered promiscuous mode
[  149.113415][T10520] bond6: entered allmulticast mode
[  149.116345][T10520] 8021q: adding VLAN 0 to HW filter on device bond6
[  149.219808][T10540] : renamed from batadv_slave_1
[  150.028817][T10556] validate_nla: 6 callbacks suppressed
[  150.028829][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.033839][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.044127][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.048509][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.051245][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.057014][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.059576][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.062120][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.081367][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.083924][T10556] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  150.123382][   T33] audit: type=1804 audit(1752673009.133:2): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1344" name="/newroot/454/memory.events" dev="tmpfs" ino=2334 res=1 errno=0
[  150.132975][   T33] audit: type=1800 audit(1752673009.133:3): pid=10563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1344" name="memory.events" dev="tmpfs" ino=2334 res=0 errno=0
[  150.235683][T10572] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  150.566622][T10601] pim6reg: entered allmulticast mode
[  150.626233][T10611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.643412][T10609] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.648513][T10611] syzkaller0: entered promiscuous mode
[  150.650252][T10611] syzkaller0: entered allmulticast mode
[  150.666332][T10609] bond5: (slave bridge4): making interface the new active one
[  150.670629][T10609] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  150.678573][T10611] tipc: Resetting bearer <eth:syzkaller0>
[  150.692732][T10609] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  150.735102][T10610] tipc: Resetting bearer <eth:syzkaller0>
[  150.744024][T10610] tipc: Disabling bearer <eth:syzkaller0>
[  150.821522][T10621] bond1: (slave erspan0): Releasing active interface
[  150.832115][T10621] bond0: (slave team0): Releasing backup interface
[  150.838392][T10621] bridge_slave_0: left allmulticast mode
[  150.840372][T10621] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.847404][T10621] bridge_slave_1: left allmulticast mode
[  150.849306][T10621] bridge_slave_1: left promiscuous mode
[  150.851157][T10621] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.862411][T10621] bond0: (slave bond_slave_0): Releasing backup interface
[  150.869047][T10621] bond0: (slave bond_slave_1): Releasing backup interface
[  150.883736][T10621] team0: Port device C removed
[  150.890760][T10621] team0: Port device team_slave_1 removed
[  150.893163][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.896380][T10621] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.900232][T10621] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.902610][T10621] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.912340][T10621] bond1: (slave veth1): Releasing active interface
[  150.918107][T10621] bond2: (slave veth3): Releasing active interface
[  150.931263][T10624] tipc: Enabled bearer <eth:vlan0>, priority 18
[  151.098112][T10633] tun0: tun_chr_ioctl cmd 2147767507
[  152.578540][T10661] pimreg: entered allmulticast mode
[  152.677624][T10665] can: request_module (can-proto-3) failed.
[  152.749972][T10673] __nla_validate_parse: 12 callbacks suppressed
[  152.749990][T10673] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.1377'.
[  152.861198][T10679] tap0: tun_chr_ioctl cmd 1074025680
[  153.250820][T10695] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1386'.
[  153.579953][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'.
[  153.785016][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1388'.
[  154.290775][   T33] audit: type=1800 audit(1752673013.303:4): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1391" name="memory.events" dev="tmpfs" ino=2425 res=0 errno=0
[  154.435131][T10726] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  154.438705][T10726] syzkaller0: entered promiscuous mode
[  154.440418][T10726] syzkaller0: entered allmulticast mode
[  154.517323][T10733] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1394'.
[  154.696773][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'.
[  154.760384][T10746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'.
[  154.760866][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1399'.
[  154.763966][T10746] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1399'.
[  154.772486][T10747] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1399'.
[  154.994794][T10758] xt_TCPMSS: Only works on TCP SYN packets
[  156.456540][T10787] validate_nla: 62 callbacks suppressed
[  156.456562][T10787] netlink: 'syz.1.1410': attribute type 4 has an invalid length.
[  156.466357][T10787] netlink: 'syz.1.1410': attribute type 4 has an invalid length.
[  157.253709][T10830] netlink: 'syz.1.1425': attribute type 1 has an invalid length.
[  157.258257][T10830] netlink: 'syz.1.1425': attribute type 4 has an invalid length.
[  157.466976][T10841] netlink: 'syz.1.1430': attribute type 1 has an invalid length.
[  157.546368][T10841] bond2: (slave gretap3): making interface the new active one
[  157.549675][T10841] bond2: (slave gretap3): Enslaving as an active interface with an up link
[  157.558160][T10841] netlink: 'syz.1.1430': attribute type 3 has an invalid length.
[  157.789855][T10860] __nla_validate_parse: 7 callbacks suppressed
[  157.789873][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'.
[  157.997336][T10870] netlink: zone id is out of range
[  158.001487][T10870] netlink: zone id is out of range
[  158.011318][T10870] netlink: zone id is out of range
[  158.017569][T10870] netlink: zone id is out of range
[  158.021970][T10870] netlink: zone id is out of range
[  158.027638][T10870] netlink: zone id is out of range
[  158.032183][T10870] netlink: zone id is out of range
[  158.037750][T10870] netlink: zone id is out of range
[  158.042037][T10870] netlink: zone id is out of range
[  158.044325][T10870] netlink: zone id is out of range
[  158.252947][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'.
[  158.357465][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1443'.
[  158.360838][T10880] netlink: 'syz.1.1443': attribute type 5 has an invalid length.
[  158.363795][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'.
[  158.372602][T10880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  158.375695][T10880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  158.379072][T10880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  158.381734][T10880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  158.385436][T10880] geneve2: entered promiscuous mode
[  158.387513][T10880] geneve2: entered allmulticast mode
[  158.434128][T10880] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1443'.
[  158.465894][T10887] veth0_to_team: left promiscuous mode
[  158.468076][T10887] veth0_to_team: left allmulticast mode
[  158.471920][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'.
[  158.586964][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1446'.
[  158.590422][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1446'.
[  158.606898][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'.
[  158.931735][T10918] macsec1: entered allmulticast mode
[  158.934033][T10918] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  158.941203][T10918] batman_adv: batadv0: Adding interface: macsec1
[  158.943811][T10918] batman_adv: batadv0: The MTU of interface macsec1 is too small (1006) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.955490][T10918] batman_adv: batadv0: Interface activated: macsec1
[  159.225616][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1457'.
[  159.271209][   T51] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  159.364811][T10936] netlink: 'syz.0.1459': attribute type 3 has an invalid length.
[  159.756180][T10961] veth1_macvtap: left promiscuous mode
[  159.758768][T10961] macsec0: entered promiscuous mode
[  159.767816][T10963] veth1_macvtap: entered promiscuous mode
[  159.770369][T10963] macsec0: left promiscuous mode
[  160.030828][T10975] syzkaller1: entered promiscuous mode
[  160.032570][T10975] syzkaller1: entered allmulticast mode
[  160.039312][T10975] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  160.130093][T10979] syzkaller0: entered promiscuous mode
[  160.132253][T10979] syzkaller0: entered allmulticast mode
[  160.287108][T10988] xt_HMARK: proto mask must be zero with L3 mode
[  160.858034][T11029] netlink: 'syz.2.1490': attribute type 83 has an invalid length.
[  160.979408][T11046] netlink: 'syz.1.1496': attribute type 1 has an invalid length.
[  161.516349][T11073] validate_nla: 1 callbacks suppressed
[  161.516368][T11073] netlink: 'syz.0.1506': attribute type 58 has an invalid length.
[  161.758569][T11106] tipc: New replicast peer: 255.255.255.255
[  161.760961][T11106] tipc: Enabled bearer <udp:syz2>, priority 10
[  162.007224][T11126] netlink: 'syz.1.1524': attribute type 7 has an invalid length.
[  162.126630][T11138] bridge0: port 1(veth0_to_bridge) entered blocking state
[  162.129162][T11138] bridge0: port 1(veth0_to_bridge) entered disabled state
[  162.131948][T11138] veth0_to_bridge: entered allmulticast mode
[  162.139226][T11138] veth0_to_bridge: entered promiscuous mode
[  162.299109][T11151] netlink: 'syz.2.1534': attribute type 4 has an invalid length.
[  162.309262][T11151] netlink: 'syz.2.1534': attribute type 8 has an invalid length.
[  162.531440][T11171] xt_nat: multiple ranges no longer supported
[  162.709877][T11185] veth0_to_team: entered promiscuous mode
[  162.711713][T11185] veth0_to_team: entered allmulticast mode
[  162.874839][   T10] tipc: Node number set to 4237833908
[  163.098818][T11215] SET target dimension over the limit!
[  163.144581][T11217] netem: incorrect gi model size
[  163.150528][T11217] netem: change failed
[  163.158055][T11217] __nla_validate_parse: 31 callbacks suppressed
[  163.158075][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  163.167769][T11217] veth0_to_bridge: left allmulticast mode
[  163.170972][T11217] veth0_to_bridge: left promiscuous mode
[  163.175238][T11217] bridge0: port 1(veth0_to_bridge) entered disabled state
[  163.505693][T11239] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1561'.
[  163.553589][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'.
[  163.592928][T11246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1566'.
[  163.780318][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'.
[  163.783794][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1571'.
[  164.151905][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1580'.
[  164.165793][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1580'.
[  164.181159][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1580'.
[  164.250407][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'.
[  164.352537][T11289] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.358049][T11289] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.361707][T11289] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.365451][T11289] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.709373][T11337] netlink: 'syz.2.1591': attribute type 2 has an invalid length.
[  164.753620][T11341] netlink: 'syz.1.1592': attribute type 1 has an invalid length.
[  164.783287][T11341] 8021q: adding VLAN 0 to HW filter on device bond4
[  164.801032][T11341] bond4: (slave bridge0): making interface the new active one
[  164.805974][T11341] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  164.903038][T11355] netlink: 'syz.1.1596': attribute type 1 has an invalid length.
[  165.866111][ T5219] Bluetooth: hci2: link tx timeout
[  165.868458][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.878596][ T5219] Bluetooth: hci2: link tx timeout
[  165.880695][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.884029][ T5219] Bluetooth: hci2: link tx timeout
[  165.890398][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  166.252878][T11434] Bluetooth: MGMT ver 1.23
[  166.304177][T11443] netlink: 'syz.2.1625': attribute type 5 has an invalid length.
[  166.306997][T11442] batadv_slave_1: entered promiscuous mode
[  166.590834][T11472] net_ratelimit: 353 callbacks suppressed
[  166.590856][T11472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.619536][T11475] syz_tun: entered allmulticast mode
[  166.740700][T11489] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  166.870563][T11496] netlink: 'syz.2.1643': attribute type 1 has an invalid length.
[  166.930860][T11498] gretap3: entered promiscuous mode
[  167.158920][T11522] Unknown options in mask 700
[  167.338822][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  167.585899][T11554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.628499][T11558] IPVS: length: 163 != 8
[  167.736761][T11574] netlink: 'syz.1.1665': attribute type 2 has an invalid length.
[  167.896058][ T5219] Bluetooth: hci2: command 0x0405 tx timeout
[  168.178856][T11605] netlink: 'syz.1.1675': attribute type 10 has an invalid length.
[  168.182785][T11605] __nla_validate_parse: 62 callbacks suppressed
[  168.182800][T11605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1675'.
[  168.190119][T11605] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  168.198960][T11605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1675'.
[  168.206791][T11607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  168.815602][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  168.876383][T11651] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  168.880156][T11651] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1689'.
[  168.883730][T11651] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  168.890696][T11651] netlink: 'syz.0.1689': attribute type 2 has an invalid length.
[  168.944228][T11655] x_tables: unsorted underflow at hook 4
[  169.372214][T11697] netlink: 'syz.2.1703': attribute type 1 has an invalid length.
[  169.405414][T11697] 8021q: adding VLAN 0 to HW filter on device bond6
[  169.409076][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1703'.
[  169.422073][T11703] syzkaller1: entered promiscuous mode
[  169.424486][T11703] syzkaller1: entered allmulticast mode
[  169.430994][T11697] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  169.434376][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.440527][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.505014][T11705] pim6reg1: entered promiscuous mode
[  169.506745][T11705] pim6reg1: entered allmulticast mode
[  169.581878][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'.
[  169.640176][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1708'.
[  169.729603][T11722] IPVS: length: 42 != 8
[  169.886037][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'.
[  169.960010][T11745] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.120012][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'.
[  170.206705][T11770] sch_fq: defrate 0 ignored.
[  170.293578][T11776] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  170.297680][T11776] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  170.300628][T11776] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  170.303777][T11776] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  170.306951][T11776] geneve1: entered promiscuous mode
[  170.308834][T11776] geneve1: entered allmulticast mode
[  170.345519][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.685311][T11797] 8021q: adding VLAN 0 to HW filter on device bond6
[  170.688824][T11797] bond0: (slave bond6): Enslaving as an active interface with a down link
[  170.704872][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.792830][T11801] netlink: 'syz.1.1735': attribute type 27 has an invalid length.
[  170.915126][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.099170][T11810] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  171.763334][T11822] netlink: 'syz.0.1741': attribute type 1 has an invalid length.
[  171.796718][T11822] 8021q: adding VLAN 0 to HW filter on device bond8
[  171.813107][T11822] bond8: (slave gretap1): making interface the new active one
[  171.816927][T11822] bond8: (slave gretap1): Enslaving as an active interface with an up link
[  171.821643][T11832] netlink: 'syz.0.1741': attribute type 1 has an invalid length.
[  171.859560][T11835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.976848][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.981072][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.790172][T11875] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.859301][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.934896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.965604][T11889] can: request_module (can-proto-0) failed.
[  173.006321][T11880] tipc: Disabling bearer <eth:vlan0>
[  173.136888][T11895] syzkaller1: left promiscuous mode
[  173.138672][T11895] syzkaller1: left allmulticast mode
[  173.214181][T11908] __nla_validate_parse: 14 callbacks suppressed
[  173.214201][T11908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1762'.
[  173.233375][T11910] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  173.420159][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1769'.
[  173.563137][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1774'.
[  173.566368][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1774'.
[  173.586103][T11943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.759940][T11962] : renamed from batadv_slave_1
[  173.975873][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.558291][T12022] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1796'.
[  174.566744][T12027] sock: sock_timestamping_bind_phc: sock not bind to device
[  174.569536][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'.
[  174.575310][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'.
[  174.662532][T12041] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1802'.
[  174.931413][T12065] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  174.999624][T12065] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1807'.
[  175.197032][T12093] IPVS: length: 134 != 24
[  175.238698][T12096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.242587][T12096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.246411][T12096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.249643][T12096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.465295][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'.
[  175.946335][T12158] nftables ruleset with unbound chain
[  175.950565][T12156] netlink: 'syz.0.1822': attribute type 39 has an invalid length.
[  176.143494][  T128] block nbd0: Possible stuck request ffff888021070000: control (read@0,1024B). Runtime 30 seconds
[  176.149767][  T128] block nbd0: Possible stuck request ffff888021070200: control (read@1024,1024B). Runtime 30 seconds
[  176.157254][  T128] block nbd0: Possible stuck request ffff888021070400: control (read@2048,1024B). Runtime 30 seconds
[  176.161532][  T128] block nbd0: Possible stuck request ffff888021070600: control (read@3072,1024B). Runtime 30 seconds
[  176.341241][T12183] pim6reg1: entered promiscuous mode
[  176.343371][T12183] pim6reg1: entered allmulticast mode
[  176.378415][T12188] netlink: 'syz.0.1835': attribute type 29 has an invalid length.
[  176.381426][T12188] netlink: 'syz.0.1835': attribute type 29 has an invalid length.
[  176.435953][T12190] x_tables: duplicate underflow at hook 1
[  176.454197][T12192] netlink: 'syz.1.1837': attribute type 11 has an invalid length.
[  176.454410][T12193] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  176.467559][T12193] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  176.481819][T12195] netlink: 'syz.0.1838': attribute type 7 has an invalid length.
[  176.494783][T12195] netlink: 'syz.0.1838': attribute type 8 has an invalid length.
[  176.501506][T12195] gretap0: entered promiscuous mode
[  176.504318][T12195] erspan0: entered promiscuous mode
[  176.515472][T12195] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  176.518528][T12195] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.521999][T12195] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  177.069360][T12229] x_tables: duplicate underflow at hook 4
[  177.206372][T12234] tipc: Can't bind to reserved service type 2
[  177.220977][T12234] netlink: 'syz.2.1850': attribute type 10 has an invalid length.
[  177.226216][T12234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.230679][T12234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.234184][T12234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.238136][T12234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.248375][T12234] team0: Port device geneve0 added
[  177.319370][T12236] sctp: [Deprecated]: syz.2.1851 (pid 12236) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.319370][T12236] Use struct sctp_sack_info instead
[  177.597629][T12256] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  177.638727][T12253] xt_hashlimit: size too large, truncated to 1048576
[  177.776686][T12265] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20004
[  178.296178][  T791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.297734][T12318] netlink: 'syz.2.1876': attribute type 10 has an invalid length.
[  178.302854][T12318] 8021q: adding VLAN 0 to HW filter on device team0
[  178.306893][T12318] team0: entered allmulticast mode
[  178.308650][T12318] geneve0: entered allmulticast mode
[  178.310762][T12318] bond0: (slave team0): Enslaving as an active interface with an up link
[  178.370812][T12322] __nla_validate_parse: 85 callbacks suppressed
[  178.370826][T12322] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1878'.
[  178.383339][T12322] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1878'.
[  178.448665][T12326] bridge_slave_1: entered allmulticast mode
[  178.502957][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  178.544822][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.591615][T12336] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  178.813665][T12358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.872876][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1890'.
[  178.910598][T12362] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  178.978011][T12368] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1894'.
[  179.047496][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'.
[  179.050258][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'.
[  179.195184][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'.
[  179.408846][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'.
[  179.417840][T12415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'.
[  179.480002][T12420] pimreg: left allmulticast mode
[  179.537844][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  179.550183][T12425] netlink: 'syz.1.1912': attribute type 1 has an invalid length.
[  179.815457][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.957719][T12457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.361109][T12472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.780653][T12455] tipc: Resetting bearer <eth:syzkaller0>
[  180.831554][T12455] tipc: Disabling bearer <eth:syzkaller0>
[  180.855266][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.917973][T12494] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.139785][T12530] netlink: 'syz.1.1940': attribute type 1 has an invalid length.
[  181.196629][T12537] netlink: 'syz.0.1939': attribute type 12 has an invalid length.
[  181.731731][T12592] openvswitch: netlink: Missing key (keys=40, expected=100)
[  181.834369][T12599] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  182.531451][T12603] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001
[  182.591297][T12610] bond0: (slave team0): Releasing backup interface
[  182.594095][T12610] team0 (unregistering): left allmulticast mode
[  182.596547][T12610] geneve0: left allmulticast mode
[  182.600389][T12610] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.603090][T12610] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.606158][T12610] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.609103][T12610] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.626199][T12610] team0 (unregistering): Port device geneve0 removed
[  182.833984][T12640] netlink: 'syz.2.1970': attribute type 11 has an invalid length.
[  183.006885][T12658] delete_channel: no stack
[  183.097812][T12668] netlink: 'syz.0.1979': attribute type 1 has an invalid length.
[  183.137723][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.210555][T12683] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  183.539739][T12718] __nla_validate_parse: 23 callbacks suppressed
[  183.539750][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'.
[  183.663938][T12734] netlink: 'syz.0.1997': attribute type 2 has an invalid length.
[  183.799147][ T5844] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  183.813201][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'.
[  184.214964][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.385329][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.388243][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.427013][  T790] ------------[ cut here ]------------
[  184.429042][  T790] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  184.432536][  T790] WARNING: CPU: 0 PID: 790 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  184.435755][  T790] Modules linked in:
[  184.437478][  T790] CPU: 0 UID: 0 PID: 790 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  184.442426][  T790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.445841][  T790] Workqueue: mld mld_ifc_work
[  184.447384][  T790] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  184.449344][  T790] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  184.455425][  T790] RSP: 0018:ffffc900049ee498 EFLAGS: 00010246
[  184.457331][  T790] RAX: 6907d166a7fc7000 RBX: 000000000000000c RCX: ffff8880201f8000
[  184.459770][  T790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  184.462457][  T790] RBP: dffffc0000000000 R08: ffff88804b024293 R09: 1ffff11009604852
[  184.465071][  T790] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffff888011696c28
[  184.467433][  T790] R13: 0000000000000000 R14: ffff88810f260e40 R15: ffff88810f2630d8
[  184.469846][  T790] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  184.472616][  T790] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  184.474752][  T790] CR2: 00005555585cb808 CR3: 00000001115f6000 CR4: 00000000000006f0
[  184.477233][  T790] Call Trace:
[  184.478346][  T790]  <TASK>
[  184.479282][  T790]  rate_control_send_low+0x194/0x7a0
[  184.480931][  T790]  rate_control_get_rate+0x20b/0x5d0
[  184.482560][  T790]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  184.484331][  T790]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  184.486318][  T790]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  184.488270][  T790]  invoke_tx_handlers_late+0xb6/0x1820
[  184.489982][  T790]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  184.491838][  T790]  ieee80211_tx_dequeue+0x3068/0x4340
[  184.493547][  T790]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  184.495330][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.496975][  T790]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  184.498789][  T790]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  184.500879][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.502570][  T790]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  184.504399][  T790]  ? do_raw_spin_unlock+0x4d/0x240
[  184.506102][  T790]  ieee80211_queue_skb+0x19e8/0x2180
[  184.507748][  T790]  ieee80211_tx+0x297/0x420
[  184.509151][  T790]  ? __pfx_ieee80211_tx+0x10/0x10
[  184.510679][  T790]  ? ieee80211_xmit+0x315/0x400
[  184.512236][  T790]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  184.514119][  T790]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  184.516117][  T790]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  184.518087][  T790]  ? skb_network_protocol+0x508/0x760
[  184.519698][  T790]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  184.521608][  T790]  ieee80211_subif_start_xmit+0xe0/0x510
[  184.523314][  T790]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  184.525328][  T790]  ? __lock_acquire+0xab9/0xd20
[  184.526862][  T790]  dev_hard_start_xmit+0x2d7/0x830
[  184.528463][  T790]  __dev_queue_xmit+0x1adf/0x3a70
[  184.530044][  T790]  ? register_lock_class+0x51/0x320
[  184.531642][  T790]  ? __dev_queue_xmit+0x27e/0x3a70
[  184.533236][  T790]  ? __pfx___dev_queue_xmit+0x10/0x10
[  184.534995][  T790]  ? read_seqbegin+0x122/0x250
[  184.536509][  T790]  ? neigh_resolve_output+0x438/0x750
[  184.538155][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.539738][  T790]  ? read_seqbegin+0x1ac/0x250
[  184.541199][  T790]  ? __pfx_read_seqbegin+0x10/0x10
[  184.542732][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.544359][  T790]  ? eth_header+0x11b/0x200
[  184.545867][  T790]  ? __asan_memcpy+0x40/0x70
[  184.547322][  T790]  ip6_finish_output2+0x11fe/0x16a0
[  184.548975][  T790]  ? ip6_finish_output2+0x701/0x16a0
[  184.550611][  T790]  ? __pfx_ip6_finish_output2+0x10/0x10
[  184.551240][T12761] lo: entered promiscuous mode
[  184.552369][  T790]  ? ip6_mtu+0x7d/0x3f0
[  184.555520][  T790]  ? ip6_mtu+0x7d/0x3f0
[  184.556833][  T790]  ip6_finish_output+0x234/0x7d0
[  184.558422][  T790]  NF_HOOK+0x9e/0x380
[  184.559710][  T790]  ? NF_HOOK+0x101/0x380
[  184.561067][  T790]  ? __pfx_NF_HOOK+0x10/0x10
[  184.562496][  T790]  ? __pfx_dst_output+0x10/0x10
[  184.564042][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[  184.565703][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[  184.567263][  T790]  mld_sendpack+0x800/0xd80
[  184.568701][  T790]  ? mld_sendpack+0x1de/0xd80
[  184.570207][  T790]  ? __pfx_mld_sendpack+0x10/0x10
[  184.571789][  T790]  mld_ifc_work+0x835/0xde0
[  184.573218][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.574860][  T790]  ? process_scheduled_works+0x9ef/0x17b0
[  184.576620][  T790]  process_scheduled_works+0xae1/0x17b0
[  184.578354][  T790]  ? __pfx_process_scheduled_works+0x10/0x10
[  184.580246][  T790]  worker_thread+0x8a0/0xda0
[  184.581681][  T790]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.583650][  T790]  ? __kthread_parkme+0x7b/0x200
[  184.585344][  T790]  kthread+0x711/0x8a0
[  184.586629][  T790]  ? __pfx_worker_thread+0x10/0x10
[  184.588240][  T790]  ? __pfx_kthread+0x10/0x10
[  184.589712][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.591380][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.593023][  T790]  ? __pfx_kthread+0x10/0x10
[  184.594486][  T790]  ret_from_fork+0x3fc/0x770
[  184.596020][  T790]  ? __pfx_ret_from_fork+0x10/0x10
[  184.597599][  T790]  ? __switch_to_asm+0x39/0x70
[  184.599063][  T790]  ? __switch_to_asm+0x33/0x70
[  184.600586][  T790]  ? __pfx_kthread+0x10/0x10
[  184.602167][  T790]  ret_from_fork_asm+0x1a/0x30
[  184.603665][  T790]  </TASK>
[  184.604726][  T790] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  184.606985][  T790] CPU: 0 UID: 0 PID: 790 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  184.610847][  T790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.614081][  T790] Workqueue: mld mld_ifc_work
[  184.615563][  T790] Call Trace:
[  184.616608][  T790]  <TASK>
[  184.617532][  T790]  dump_stack_lvl+0x99/0x250
[  184.618966][  T790]  ? __asan_memcpy+0x40/0x70
[  184.620400][  T790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.622289][  T790]  ? __pfx__printk+0x10/0x10
[  184.623712][  T790]  panic+0x2db/0x790
[  184.624967][  T790]  ? __pfx_panic+0x10/0x10
[  184.626377][  T790]  ? ret_from_fork_asm+0x1a/0x30
[  184.627958][  T790]  __warn+0x31b/0x4b0
[  184.629222][  T790]  ? __rate_control_send_low+0x5df/0x820
[  184.631022][  T790]  ? __rate_control_send_low+0x5df/0x820
[  184.632759][  T790]  report_bug+0x2be/0x4f0
[  184.634157][  T790]  ? __rate_control_send_low+0x5df/0x820
[  184.635927][  T790]  ? __rate_control_send_low+0x5df/0x820
[  184.637684][  T790]  ? __rate_control_send_low+0x5e1/0x820
[  184.639418][  T790]  handle_bug+0x84/0x160
[  184.640746][  T790]  exc_invalid_op+0x1a/0x50
[  184.642253][  T790]  asm_exc_invalid_op+0x1a/0x20
[  184.643730][  T790] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  184.645627][  T790] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  184.651563][  T790] RSP: 0018:ffffc900049ee498 EFLAGS: 00010246
[  184.653391][  T790] RAX: 6907d166a7fc7000 RBX: 000000000000000c RCX: ffff8880201f8000
[  184.655804][  T790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  184.658211][  T790] RBP: dffffc0000000000 R08: ffff88804b024293 R09: 1ffff11009604852
[  184.660578][  T790] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffff888011696c28
[  184.663166][  T790] R13: 0000000000000000 R14: ffff88810f260e40 R15: ffff88810f2630d8
[  184.665609][  T790]  ? __rate_control_send_low+0x5de/0x820
[  184.667304][  T790]  rate_control_send_low+0x194/0x7a0
[  184.668924][  T790]  rate_control_get_rate+0x20b/0x5d0
[  184.670501][  T790]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  184.672223][  T790]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  184.674085][  T790]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  184.676217][  T790]  invoke_tx_handlers_late+0xb6/0x1820
[  184.677911][  T790]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  184.679729][  T790]  ieee80211_tx_dequeue+0x3068/0x4340
[  184.681405][  T790]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  184.683129][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.684754][  T790]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  184.686594][  T790]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  184.688615][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.690248][  T790]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  184.692432][  T790]  ? do_raw_spin_unlock+0x4d/0x240
[  184.694049][  T790]  ieee80211_queue_skb+0x19e8/0x2180
[  184.695691][  T790]  ieee80211_tx+0x297/0x420
[  184.697094][  T790]  ? __pfx_ieee80211_tx+0x10/0x10
[  184.698647][  T790]  ? ieee80211_xmit+0x315/0x400
[  184.700171][  T790]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  184.702002][  T790]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  184.703889][  T790]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  184.705838][  T790]  ? skb_network_protocol+0x508/0x760
[  184.707466][  T790]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  184.709385][  T790]  ieee80211_subif_start_xmit+0xe0/0x510
[  184.711135][  T790]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  184.713127][  T790]  ? __lock_acquire+0xab9/0xd20
[  184.714641][  T790]  dev_hard_start_xmit+0x2d7/0x830
[  184.716277][  T790]  __dev_queue_xmit+0x1adf/0x3a70
[  184.717816][  T790]  ? register_lock_class+0x51/0x320
[  184.719626][  T790]  ? __dev_queue_xmit+0x27e/0x3a70
[  184.721254][  T790]  ? __pfx___dev_queue_xmit+0x10/0x10
[  184.722899][  T790]  ? read_seqbegin+0x122/0x250
[  184.724377][  T790]  ? neigh_resolve_output+0x438/0x750
[  184.726084][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.727720][  T790]  ? read_seqbegin+0x1ac/0x250
[  184.729208][  T790]  ? __pfx_read_seqbegin+0x10/0x10
[  184.730743][  T790]  ? __local_bh_enable_ip+0x12d/0x1c0
[  184.732430][  T790]  ? eth_header+0x11b/0x200
[  184.733896][  T790]  ? __asan_memcpy+0x40/0x70
[  184.735405][  T790]  ip6_finish_output2+0x11fe/0x16a0
[  184.737037][  T790]  ? ip6_finish_output2+0x701/0x16a0
[  184.738647][  T790]  ? __pfx_ip6_finish_output2+0x10/0x10
[  184.740362][  T790]  ? ip6_mtu+0x7d/0x3f0
[  184.741611][  T790]  ? ip6_mtu+0x7d/0x3f0
[  184.742897][  T790]  ip6_finish_output+0x234/0x7d0
[  184.744411][  T790]  NF_HOOK+0x9e/0x380
[  184.745659][  T790]  ? NF_HOOK+0x101/0x380
[  184.746947][  T790]  ? __pfx_NF_HOOK+0x10/0x10
[  184.748372][  T790]  ? __pfx_dst_output+0x10/0x10
[  184.749857][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[  184.751380][  T790]  ? icmp6_dst_alloc+0x3a5/0x420
[  184.752924][  T790]  mld_sendpack+0x800/0xd80
[  184.754331][  T790]  ? mld_sendpack+0x1de/0xd80
[  184.755769][  T790]  ? __pfx_mld_sendpack+0x10/0x10
[  184.757364][  T790]  mld_ifc_work+0x835/0xde0
[  184.758791][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.760433][  T790]  ? process_scheduled_works+0x9ef/0x17b0
[  184.762189][  T790]  process_scheduled_works+0xae1/0x17b0
[  184.763900][  T790]  ? __pfx_process_scheduled_works+0x10/0x10
[  184.765766][  T790]  worker_thread+0x8a0/0xda0
[  184.767201][  T790]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.769109][  T790]  ? __kthread_parkme+0x7b/0x200
[  184.770617][  T790]  kthread+0x711/0x8a0
[  184.771926][  T790]  ? __pfx_worker_thread+0x10/0x10
[  184.773570][  T790]  ? __pfx_kthread+0x10/0x10
[  184.775044][  T790]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.776688][  T790]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.778295][  T790]  ? __pfx_kthread+0x10/0x10
[  184.779756][  T790]  ret_from_fork+0x3fc/0x770
[  184.781197][  T790]  ? __pfx_ret_from_fork+0x10/0x10
[  184.782828][  T790]  ? __switch_to_asm+0x39/0x70
[  184.784361][  T790]  ? __switch_to_asm+0x33/0x70
[  184.785955][  T790]  ? __pfx_kthread+0x10/0x10
[  184.787427][  T790]  ret_from_fork_asm+0x1a/0x30
[  184.788955][  T790]  </TASK>
[  184.790637][  T790] Kernel Offset: disabled
[  184.792053][  T790] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:37:23  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900049edc30
R8 =ffff888108438237 R9 =1ffff11021087046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b3 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555585cb808 CR3=00000001115f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f814d011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88813663b1c0 RCX=ffff888109805640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007347800 RSP=ffffc900073476a0
R8 =ffffffff8fa1f3f7 R9 =1ffffffff1f43e7e R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4c1fe RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f814de06fc8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f814d185478 00007f814d185450 XMM03=00007f814d185488 00007f814d185480
XMM04=00007f814dced100 00007f814d185440 XMM05=00007f814d185458 00007f814d1854a0
XMM06=00007f814d185498 00007f814d185490 XMM07=00007f814d185488 00007f814d185480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f814d011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
