last executing test programs:

1.877041359s ago: executing program 1 (id=397):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xffffffffffffff49)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, r1}, 0x94)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
close(0x3)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78)
close(0x3)
syz_emit_ethernet(0x11a, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="53d9c200000ee43f6642531e08004100002000bd000004e000000100004e20000c90786110000000000000000000"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r10}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000100))

1.876510342s ago: executing program 1 (id=398):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x10709d27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f55, 0x403a2}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "8ff3edc87d0ba0d1b8eca0d9f8886e52f4debdc0"}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x20040040)

1.796287202s ago: executing program 1 (id=399):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x9, 0x4, 0xb, 0x97}, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000100)=0x5, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)

925.43786ms ago: executing program 1 (id=406):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x800000, 0x2, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044050)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)

615.234327ms ago: executing program 2 (id=415):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4) (async)
setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f0000000000)=0xac0f, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r5, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r8=>0x0, 0x0, 0x6, 0x6, 0xfffffec8, 0x10, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x1, 0x9, 0x2}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000180)={@rand_addr, <r9=>0x0}, &(0x7f00000001c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)=@gettaction={0x54, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x230}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)=@gettaction={0x54, 0x32, 0x200, 0x70bd25, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x230}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x20000000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r13 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r14=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="44000000100001000400"/20, @ANYRES32=r14, @ANYBLOB="00000000000000001c001a8018000a8014000700fe80000000000000000000003a000000bb080004000000c6a19ff70c2fc300"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="44000000100001000400"/20, @ANYRES32=r14, @ANYBLOB="00000000000000001c001a8018000a8014000700fe80000000000000000000003a000000bb080004000000c6a19ff70c2fc300"], 0x44}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r16=>0xffffffffffffffff})
getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r15, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r17}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000dc0)={'ip_vti0\x00', <r18=>r14, 0xf810, 0x7, 0x6, 0x8001, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x64, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0xa7, 0x3, 0x3, [{@multicast2, 0x2}]}, @end, @timestamp_addr={0x44, 0x24, 0x63, 0x1, 0xc, [{@multicast1, 0x2}, {@multicast1, 0x5}, {@remote, 0x6}, {@private=0xa010100}]}, @end, @lsrr={0x83, 0x7, 0xc2, [@multicast2]}, @cipso={0x86, 0x1d, 0x1, [{0x2, 0xc, '\x00'/10}, {0x0, 0xb, "7fce41e29e797caefd"}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x3c, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r19=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x3c, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x54, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r2, @ANYBLOB="00012dbd7000fedbdf250b000000180001801400020064766d727030000000000000000000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000300030000005000018008000300010000000800030001000000140002006c6f00000000000000000000000000000800030003000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="080003000100000008000300000000001400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="74000180140002006e69637666300000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="140002006c6f0000000000000000000000000000080003000000000014000200626f6e645f736c6176655f310000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="540001800800030001000000080003000200000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r17, @ANYBLOB="08000300010000001400020076657468305f6d616376746170000000080003000000000014000180080003000100000008000300020000006000018008000100", @ANYRES32=r18, @ANYBLOB="0800030003000200b70a000000050000300000000000000000000000000014000200626f6e64300200000000000000000000140002006970366772653000000000000000000008000100000000000000", @ANYRES32=r19, @ANYBLOB], 0x1e0}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r20 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r20, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01300000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x80)

537.11707ms ago: executing program 2 (id=417):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x318, 0x11, 0x148, 0x318, 0x0, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0xa, 0x1, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x88}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'bond0\x00', 'netdevsim0\x00', {0xff}}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x0, 0x3, [0x23, 0x1e, 0x40, 0xa, 0x2b, 0x3e, 0x2f, 0x1d, 0xf, 0x21, 0x1f, 0x28, 0x29, 0x7, 0x19, 0x9], 0x2, 0x5, 0x401}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)

472.890375ms ago: executing program 2 (id=419):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x4000800, &(0x7f0000000200)={0x11, 0x3, r1, 0x1, 0x4b}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

257.084365ms ago: executing program 0 (id=422):
r0 = socket$inet6(0xa, 0x3, 0x5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)
sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}}], 0x2, 0x0)

207.585048ms ago: executing program 0 (id=423):
r0 = socket$inet(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r1=>0x0, 0xa}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xb}, 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="20000000130a01010000000000000000020000010900016880a89d796dc7cc1b530073797acc09f78d0e78851e12c50cd07b66151260dfb08c00efd4c40c645c25e5ffc1f02d585d6b8270903cb8ffcc1755f82c5b20001139ef61de1dd3a9d548b924e967236cbe6f18b539d327db105112dccc9f07724fe4aab11446f684636b098c59cba1f523ec8f38bf6d04569b9b6f2842a862fc25fa58489d1aa70ebbd3d0bac352516ef5dae73639e5a600e30fda6aa4c90ff72bd9b72837b44d0eaa8cc14e9a5a66dc3ae2b8670868fd2540fc406bd8f7a04ed05cedd3aab0d109e23b67fa99a55b4426ba0430953cad723bb1bbd8a3f11366ef"], 0x20}}, 0x4000)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

206.982721ms ago: executing program 0 (id=424):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x425, 0x800, 0x5, 0x10, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x425, 0x800, 0x5, 0x10, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000080)="ce1a9e6b93c9033472b38e146cf21f6ba86a", &(0x7f00000000c0)=""/205}, 0x20)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={<r3=>0x0, 0xde, "d2b92fa72d7a0ebbcbcf5b5dbf9b79ca4f579387fa47daff63deef56b3c1d19c97e92b82c3eb8584662ec3b4d9060635edeae9489f94d2e33de6595458ba364b5f7b4621bf3149e867d727209682281e8fb3a6c46d1471e7872d45bd23db89d032b8c65d54104c4047926ff3219f609347a3ca857298abc7a70eaf84c8d87088f5a48abde2e52193180e9584365f9829064a696f86acc11fffc64ac6f64f55fbf6eae89eaff857155a81d233847a5fdcd4e67a1921cdeedea0f86d66b9e532e29423790b6deb33ea698cee0c0baa055d9660c6d80b1209e78250f58b0f2f"}, &(0x7f0000000300)=0xe6)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x1000, 0x8002, 0x80000000, 0x9, r3}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000003c0)='cgroup.stat\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000400)={r3, 0x7, 0x3, [0x0, 0xfffc, 0x3]}, 0xe)
sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="e34f258e8d9cb85aeb2fb758cea41544e784e94c146fa8c57d4fb51a1feeae84e8bd9991aadc5ac1a7411709caf3ac02068bb836ec30f76ec72ce104d8f9637921e12d0176092eaa13e558b4a5228f8181212f077d6fb5f192ca5c34a37a6e131a280f78d1d09875e4e412aeb81806185fef557c93c03475076378e30b58e48c989b8419b63a5cd4c1e44cdd4355a9340b422dd509996b4aa283b8e94ca7bdbc070220ddb9fefd09d87ace4860ccc0e822c23d6806adeea3f88aab374d19e32e355dd645c4296ba0283340f231a4a7774892695b728418", 0xd7}], 0x1}, 0x20004000)
syz_emit_ethernet(0x315, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "de7aa3", 0x2df, 0x11, 0xff, @private2, @private1, {[@hopopts={0x29, 0x4, '\x00', [@pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x7b, 0x8001, [0x1, 0x8001]}}, @enc_lim={0x4, 0x1, 0x6e}]}, @dstopts={0x8, 0x16, '\x00', [@hao={0xc9, 0x10, @private0}, @generic={0x0, 0xa0, "18d595a8433a2a88bd4536fa360eb25da0dada6af10786b7546c6f80caae1d3014bc06a344f7a17fde3f7f86d8a5b150e71ccbd18c55f2e011d156bf60a2876c159b1f395c29849c3ba3fe63cc359de10f1527f65095134ecc6c8ccaf84d41f3a294955db46af3e5ce7da7f99c0030b3390c671158f86c18a979fb53259bbf205588c6e3384a47fe29497b17e3ba4f59fe95b0aa64f5f34f66b79b6c492c64a9"}]}, @hopopts={0x2, 0x1c, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x43}, @generic={0x7, 0x45, "12d21a0eb14a9fa10e58a697f35989e672b797ac4d5b50fa56e1f017ceb04c44c339f114ec7a3ac89d85e2764b23297271fe9f79fa4235adee87570fc2fd152077681fe143"}, @jumbo={0xc2, 0x4, 0x80000000}, @generic={0x40, 0x8b, "478dee77e84f6e6f422e830ea6b777daf090f589dfb50ba01206012aa609ded855d30f6e37a4a3866af8b573099c1f1814fdd0a986b96b01f2ff573669d1317ffaf3d3df7eb9051e5cd306e03ceb8f73da725b99ca042669f47c049cc9e5b7d886a64415cc710b44bed3238d5d34a5bb9c844b1cb0ddf9b145fd150960f794e13ad4a3268ef37c0a6b7650"}]}, @fragment={0x3b, 0x0, 0x21, 0x1, 0x0, 0x1a, 0x66}], {0x4e20, 0x4e20, 0xff, 0x0, @gue={{0x1, 0x0, 0x1, 0x5, 0x100, @void}, "560f054f3a4c811447c6d81e12156a03b095aeb386f146dfd67c6bdc1a1c2f3db705be937c97f8e167f6ac6206644c0f301de35b69a003e20035fd3e7cddad35c586aa0e30dc2104526ec1813c05d9b15ae61344887929f5ce90b3561ecf27c46527f4f62001e9b54c652989eb21663b26b082e3fbd47987ee2a4909ea0715a3370d0907774b54570a15939a8c694e44636320825893d87446b3b9fafa73de2aeb3cb64b4f4ac444abc83eae1cc1876d11a00f91eecb08045eb890cc0c2f007331cdaa2a2f2009ce4386be5e36b022799e300a5a7f1ce234d0c6673bcc0217df1cbf3e27381d43776bf03dc8da15f0db45acfa"}}}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000980)={r3, 0x3c, &(0x7f0000000940)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xfff, @remote, 0xe4}, @in={0x2, 0x4e24, @empty}]}, &(0x7f00000009c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000a00)={r3, 0x7a, "4ec329ea54b8cda98cd72da78ba776c2dce02966c88c60d66eb640a14fdfc98a8faba29c67cc2f2c516004d5b2ed7f03b91e160a2cb4850acd97c2e5f4e7e631248d627ea97ab6b7953194031a1f5d7777b979d765b1cc0b757cf943ce43182b226a99d99fedbd98d24f47ee9923e05ad1b94279b7b4645ec630"}, &(0x7f0000000ac0)=0x82)
getsockopt(r0, 0x3a, 0x6, &(0x7f0000000b00)=""/176, &(0x7f0000000bc0)=0xb0) (async)
getsockopt(r0, 0x3a, 0x6, &(0x7f0000000b00)=""/176, &(0x7f0000000bc0)=0xb0)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r5, 0x5553644a620da085) (async)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r5, 0x5553644a620da085)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r5)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800c014)
sendto$unix(r0, &(0x7f0000000d40)="37fd92507cd58a7918d2a84948809ebcda7181fb9bb2ff7e01d8178b6f19a7f302d7424fd1286f63b4a6b8329542665a89c42d8e5499becc46263208104e2e532ae287a1a54b6067695243db67f913ad158d1a015bbb6f8fdfe13d507f2d6ce608997b554f0b69b98a83d174c961a959e25cb7fdfb9de2fe24421afeb7205586e133ec8cc49be8de9b8a94a692f27e9498ac3380952f3c9c2f437741a40be3abdc078778befa624351a842f88c3e41496e997cffb7c66222327c83fcf46fca34be81be7dce8e5499277ae16a9c1b883036dfe1fc0b076353599623040276c28df8f7b3cc981cb99cfa0f8b0b10edc29e", 0xf0, 0x529d76db9ae43f0b, &(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e) (async)
sendto$unix(r0, &(0x7f0000000d40)="37fd92507cd58a7918d2a84948809ebcda7181fb9bb2ff7e01d8178b6f19a7f302d7424fd1286f63b4a6b8329542665a89c42d8e5499becc46263208104e2e532ae287a1a54b6067695243db67f913ad158d1a015bbb6f8fdfe13d507f2d6ce608997b554f0b69b98a83d174c961a959e25cb7fdfb9de2fe24421afeb7205586e133ec8cc49be8de9b8a94a692f27e9498ac3380952f3c9c2f437741a40be3abdc078778befa624351a842f88c3e41496e997cffb7c66222327c83fcf46fca34be81be7dce8e5499277ae16a9c1b883036dfe1fc0b076353599623040276c28df8f7b3cc981cb99cfa0f8b0b10edc29e", 0xf0, 0x529d76db9ae43f0b, &(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000ec0)={'syzkaller1\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff) (async)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'wpan1\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x5c, r9, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000010c0)={0x1, {{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {{0xa, 0x4e22, 0x1, @remote, 0x7fff}}}, 0x108)
clock_gettime(0x1, &(0x7f0000001200))
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001240)={r5, r5, 0x0, r5}, 0x10) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001240)={r5, r5, 0x0, r5}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x8a100, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000001280), 0x8a100, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f00000012c0))

136.588053ms ago: executing program 0 (id=425):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0xffffffffffffff64}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
bind$rose(r0, &(0x7f00000003c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bdad, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d5}, 0x4000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x31, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x84, r5, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x802}, 0xc800)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)
socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0xffffffffffffff64}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
bind$rose(r0, &(0x7f00000003c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bdad, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d5}, 0x4000) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x31, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x84, r5, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x802}, 0xc800) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) (async)

136.075858ms ago: executing program 2 (id=426):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x4}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000e00), 0x0}, 0x20) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x4011)

76.903216ms ago: executing program 0 (id=427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32, @ANYBLOB='\b'], 0x20}}, 0x0)

76.043718ms ago: executing program 2 (id=428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8600, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

75.926431ms ago: executing program 1 (id=429):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000240001800c00028005000100010000001400018008000100aceca42a5a644602570000000c001980080001000a"], 0x44}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[], 0x27c}}, 0x0)

7.164344ms ago: executing program 1 (id=430):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

6.785738ms ago: executing program 0 (id=431):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x40, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6}, {0x4, 0x1}, {0x60, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
pipe(&(0x7f00000045c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f0000000340)=[{&(0x7f00000015c0)='5', 0x1}, {&(0x7f00000000c0)="57a015", 0x3}, {&(0x7f0000000100)="02b95352f33f99fb1be648cad43e053252d963e3816af6f9ca256428ba3c09f2a498ee5220a8193b6f635264fd93c809414641369d42dfb1d216f203c929817cca884f31f971400699c45bf3addb4fd4f708e93c7cc4eab5bd1bd564b8bafcec4a320848c20f9b4039fd0b2ef7dd8eba57bbc8aa4c636b7120792c99beb6a6b375939547d7cd24b0716d7a4d6a813a848316b293616adf373871c76ad38f9a890cb637200b13af2f4d1cc2afdb4c6ffc6bc77036d682710356947b2c30b7224be5", 0xc1}, {&(0x7f0000000000)="98ce8eb452aca12717e09166c8a4cb2e8d7301407d63118c2b52e9ec1801c2bb2adf7a4b518b569e4c08ee8e0eb1b93b9ec42da767e1f96934422ff8696644fcc2216c8273a53e50", 0x48}, {&(0x7f0000000280)="678bc776ced429941f4a2d32c3aeb251e9b5992fd37b6010b9b1946ef38416ab36af28bdadbfacc16984ae2406edf9cb799ff4b33b9c2488c0f9c294c21c1015027ef95c79411cba71b09bf2b99e4f94d48325ee49f191ad7e41af3824cb8a62e65ffc1f699f3e1d6fe08ef133a06c0dfbedaef88b74e92578c231b4354ea7e22d5d8f014eeb4dbd613063508f22a569c96eacdd6b8ab661fd697dc8f67f542a8ba3a5b8", 0xa4}], 0x5, 0x7)
r11 = socket$igmp(0x2, 0x3, 0x2)
unshare(0x24020400)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x56, "a9d862d0c5fe48dbc8fc226507e2cb87a113fd589454e6219572b9d38fe72f35878b8ce1681ec2ca8bc434dd8222ee4ae5ced928fce84ea228e414c20d13682a66ab89533865d5e22ee6b7e06af1d22cfae8c08fecf0"}, &(0x7f0000000540)=0x5e)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000047c0), 0x4)
ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000300)={{0x2, 0x4e21, @multicast2}, {0x1, @remote}, 0x2, {0x2, 0x5e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 'vlan0\x00'})
splice(r9, 0x0, r8, 0x0, 0x8000, 0x9)

0s ago: executing program 2 (id=432):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3f00020008"], 0xe)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051319dc9", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:16561' (ED25519) to the list of known hosts.
syzkaller login: [   56.366301][ T5817] cgroup: Unknown subsys name 'net'
[   56.472105][ T5817] cgroup: Unknown subsys name 'cpuset'
[   56.487593][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.082662][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.351074][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.355469][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.359627][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.363519][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.367558][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.372727][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.378787][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.383783][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.388699][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.397312][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.407349][ T5221] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.417583][ T5221] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.428195][ T5221] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.432339][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.439660][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.748782][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   62.789034][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   62.804499][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   62.860280][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.862956][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.865701][ T5835] bridge_slave_0: entered allmulticast mode
[   62.870219][ T5835] bridge_slave_0: entered promiscuous mode
[   62.889502][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.891895][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.894870][ T5835] bridge_slave_1: entered allmulticast mode
[   62.899118][ T5835] bridge_slave_1: entered promiscuous mode
[   62.944791][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.948098][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.951242][ T5839] bridge_slave_0: entered allmulticast mode
[   62.955380][ T5839] bridge_slave_0: entered promiscuous mode
[   62.975992][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.979380][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.982650][ T5831] bridge_slave_0: entered allmulticast mode
[   62.986805][ T5831] bridge_slave_0: entered promiscuous mode
[   62.994252][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.998412][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.001456][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.004580][ T5831] bridge_slave_1: entered allmulticast mode
[   63.011035][ T5831] bridge_slave_1: entered promiscuous mode
[   63.015255][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.018897][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.021348][ T5839] bridge_slave_1: entered allmulticast mode
[   63.024805][ T5839] bridge_slave_1: entered promiscuous mode
[   63.031902][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.109714][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.116453][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.136876][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.143699][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.166583][ T5835] team0: Port device team_slave_0 added
[   63.202534][ T5831] team0: Port device team_slave_0 added
[   63.208828][ T5835] team0: Port device team_slave_1 added
[   63.229099][ T5839] team0: Port device team_slave_0 added
[   63.233765][ T5831] team0: Port device team_slave_1 added
[   63.239654][ T5839] team0: Port device team_slave_1 added
[   63.327059][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.330592][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.341086][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.345884][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.349965][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.359113][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.363618][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.366622][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.378240][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.383622][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.386684][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.397859][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.403536][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.406516][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.417309][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.421773][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.423937][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.432563][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.485896][ T5831] hsr_slave_0: entered promiscuous mode
[   63.489972][ T5831] hsr_slave_1: entered promiscuous mode
[   63.556452][ T5835] hsr_slave_0: entered promiscuous mode
[   63.561232][ T5835] hsr_slave_1: entered promiscuous mode
[   63.564365][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.569188][ T5835] Cannot create hsr debugfs directory
[   63.579660][ T5839] hsr_slave_0: entered promiscuous mode
[   63.582957][ T5839] hsr_slave_1: entered promiscuous mode
[   63.585988][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.589478][ T5839] Cannot create hsr debugfs directory
[   63.980279][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.994056][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.001985][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.018399][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.079097][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.092495][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.114512][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.132365][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.177057][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.184109][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.192472][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.211355][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.322339][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.372703][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.393791][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.397016][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.420117][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.423519][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.434113][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.445721][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.449989][ T5837] Bluetooth: hci1: command tx timeout
[   64.451259][ T5842] Bluetooth: hci0: command tx timeout
[   64.485820][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   64.500430][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   64.513468][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.516565][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.537995][ T5842] Bluetooth: hci2: command tx timeout
[   64.543408][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.546580][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.553792][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.557049][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.579766][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.582677][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.791572][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.828384][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.834351][ T5839] veth0_vlan: entered promiscuous mode
[   64.856441][ T5839] veth1_vlan: entered promiscuous mode
[   64.892363][ T5831] veth0_vlan: entered promiscuous mode
[   64.900075][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.914359][ T5831] veth1_vlan: entered promiscuous mode
[   64.946882][ T5839] veth0_macvtap: entered promiscuous mode
[   64.961107][ T5839] veth1_macvtap: entered promiscuous mode
[   64.970359][ T5831] veth0_macvtap: entered promiscuous mode
[   64.976949][ T5831] veth1_macvtap: entered promiscuous mode
[   65.001228][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.006678][ T5835] veth0_vlan: entered promiscuous mode
[   65.012729][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.021762][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.029255][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.042893][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.046662][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.051457][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.055309][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.064773][ T5835] veth1_vlan: entered promiscuous mode
[   65.070495][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.073799][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.077056][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.082609][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.134887][ T5835] veth0_macvtap: entered promiscuous mode
[   65.154359][ T5835] veth1_macvtap: entered promiscuous mode
[   65.223118][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.245486][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.260028][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.262006][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.266230][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.268568][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.272372][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.275286][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.296742][ T3040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.304470][ T3040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.366165][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.377295][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.393866][ T3040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.405840][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.408839][ T3040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.420639][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.450046][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.453271][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.470206][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.593531][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   65.603192][ T5903] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.686673][ T5907] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   65.722570][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   65.835398][ T5911] atomic_op ffff888038def998 conn xmit_atomic 0000000000000000
[   66.280781][   T33] audit: type=1804 audit(1752782153.725:2): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=39 res=1 errno=0
[   66.300657][   T33] audit: type=1800 audit(1752782153.725:3): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="cgroup.controllers" dev="tmpfs" ino=39 res=0 errno=0
[   66.313910][ T5942] netlink: 'syz.1.18': attribute type 23 has an invalid length.
[   66.487803][ T5958] tipc: Started in network mode
[   66.489593][ T5958] tipc: Node identity 5ac41b5405db, cluster identity 4711
[   66.492167][ T5958] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.518343][ T5954] syzkaller0: entered promiscuous mode
[   66.520343][ T5954] syzkaller0: entered allmulticast mode
[   66.527872][ T5842] Bluetooth: hci1: command tx timeout
[   66.575383][ T5961] tipc: Resetting bearer <eth:syzkaller0>
[   66.589395][ T5961] tipc: Disabling bearer <eth:syzkaller0>
[   66.607696][ T5842] Bluetooth: hci2: command tx timeout
[   66.938426][ T5968] bridge0: entered promiscuous mode
[   66.940527][ T5968] macsec1: entered promiscuous mode
[   66.944576][ T5968] bridge0: port 3(macsec1) entered blocking state
[   66.948376][ T5968] bridge0: port 3(macsec1) entered disabled state
[   66.951637][ T5968] macsec1: entered allmulticast mode
[   66.954282][ T5968] bridge0: entered allmulticast mode
[   66.960668][ T5968] macsec1: left allmulticast mode
[   66.963145][ T5968] bridge0: left allmulticast mode
[   66.966865][ T5968] bridge0: left promiscuous mode
[   66.986641][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.24'.
[   67.111505][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   67.118541][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'.
[   67.214774][ T5977] netlink: 'syz.0.28': attribute type 10 has an invalid length.
[   67.217434][ T5978] netlink: 'syz.0.28': attribute type 10 has an invalid length.
[   67.226519][ T5977] 8021q: adding VLAN 0 to HW filter on device team0
[   67.235261][ T5977] bond0: (slave team0): Enslaving as an active interface with an up link
[   67.263881][ T5977] Zero length message leads to an empty skb
[   67.312674][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'.
[   67.316523][ T5981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.29'.
[   67.341756][ T5984] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET)
[   67.461363][ T5990] netlink: 'syz.1.32': attribute type 7 has an invalid length.
[   67.466202][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   67.593833][ T5999] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.36'.
[   67.987065][ T6019] x_tables: duplicate underflow at hook 1
[   68.070278][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   68.168020][ T6032] lo speed is unknown, defaulting to 1000
[   68.173424][ T6032] lo speed is unknown, defaulting to 1000
[   68.176842][ T6032] lo speed is unknown, defaulting to 1000
[   68.239602][ T6036] 8021q: adding VLAN 0 to HW filter on device team0
[   68.248205][ T6036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.441010][ T6046] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   68.446871][ T6032] infiniband syz0: set active
[   68.450586][  T790] lo speed is unknown, defaulting to 1000
[   68.455620][ T6032] infiniband syz0: added lo
[   68.498632][ T6032] RDS/IB: syz0: added
[   68.507487][ T6032] smc: adding ib device syz0 with port count 1
[   68.509909][ T6032] smc:    ib device syz0 port 1 has pnetid 
[   68.540587][  T791] lo speed is unknown, defaulting to 1000
[   68.547993][ T6032] lo speed is unknown, defaulting to 1000
[   68.607561][ T5842] Bluetooth: hci1: command tx timeout
[   68.687954][ T5842] Bluetooth: hci2: command tx timeout
[   68.843003][ T6050] syzkaller0: entered allmulticast mode
[   68.899567][ T6050] syzkaller0 (unregistering): left allmulticast mode
[   68.932052][ T6062] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:19999
[   68.941049][ T6062] Cannot find add_set index 3 as target
[   68.969069][ T3038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.973449][ T3038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.976626][ T6032] lo speed is unknown, defaulting to 1000
[   68.992202][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.218342][ T6032] lo speed is unknown, defaulting to 1000
[   69.360309][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.364151][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.443601][ T6083] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.452222][ T6083] x_tables: duplicate underflow at hook 3
[   69.498972][ T6088] netlink: 'syz.0.61': attribute type 10 has an invalid length.
[   69.520369][ T6088] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   69.615153][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.618690][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.775694][ T6102] tipc: Started in network mode
[   69.778225][ T6102] tipc: Node identity 1aa774a662b, cluster identity 4711
[   69.781578][ T6102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.791680][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[   69.814591][ T6101] tipc: Disabling bearer <eth:syzkaller0>
[   69.908732][ T6109] netlink: 'syz.2.69': attribute type 8 has an invalid length.
[   70.201332][ T6123] netlink: 'syz.0.75': attribute type 11 has an invalid length.
[   70.473955][ T6138] syzkaller1: entered promiscuous mode
[   70.481294][ T6138] syzkaller1: entered allmulticast mode
[   70.503603][ T6142] pim6reg: entered allmulticast mode
[   70.538943][ T6142] netlink: 'syz.2.82': attribute type 16 has an invalid length.
[   70.549726][ T6140] pim6reg: left allmulticast mode
[   70.625727][ T6149] ipvlan2: entered promiscuous mode
[   70.687840][ T5842] Bluetooth: hci1: command tx timeout
[   70.712252][ T6153] __nla_validate_parse: 12 callbacks suppressed
[   70.712268][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[   70.721568][ T6153] netlink: 'syz.0.87': attribute type 38 has an invalid length.
[   70.768168][ T5842] Bluetooth: hci2: command tx timeout
[   70.772621][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.787467][ T6159] netlink: 156 bytes leftover after parsing attributes in process `syz.2.89'.
[   70.908744][ T6167] netlink: 'syz.1.92': attribute type 1 has an invalid length.
[   70.912182][ T6167] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.92'.
[   70.921152][ T6162] netlink: 100 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.932228][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.936586][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.982448][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.93'.
[   71.032571][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'.
[   71.214750][ T6182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.227623][ T6182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.98'.
[   71.300844][  T790] IPVS: starting estimator thread 0...
[   71.387507][ T6189] IPVS: using max 56 ests per chain, 134400 per kthread
[   71.756619][ T6203] warning: `syz.1.105' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.776815][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'.
[   71.804639][ T6199] syzkaller1: entered allmulticast mode
[   71.825258][ T6199] xt_CT: No such helper "syz0"
[   71.892200][ T6214] validate_nla: 1 callbacks suppressed
[   71.892217][ T6214] netlink: 'syz.1.109': attribute type 6 has an invalid length.
[   71.896271][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'.
[   71.905335][ T6214] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   72.000823][ T6226] netlink: 'syz.2.113': attribute type 4 has an invalid length.
[   72.254536][ T6249] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   72.474835][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.478126][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.590744][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.599638][ T6251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.657035][ T6251] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.664607][ T6251] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.669124][ T6251] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.672486][ T6251] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.809872][ T6261] bridge0: entered allmulticast mode
[   72.820533][ T6261] bridge_slave_1: left allmulticast mode
[   72.823140][ T6261] bridge_slave_1: left promiscuous mode
[   72.825515][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.840786][ T6261] bridge_slave_0: left allmulticast mode
[   72.843159][ T6261] bridge_slave_0: left promiscuous mode
[   72.846028][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.888471][ T6261] bridge0 (unregistering): left allmulticast mode
[   72.925843][ T6266] netlink: 'syz.1.126': attribute type 13 has an invalid length.
[   72.930994][ T6266] netlink: 'syz.1.126': attribute type 17 has an invalid length.
[   72.935675][ T6266] gretap0: refused to change device tx_queue_len
[   72.940408][ T6266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   72.948062][ T6265] ieee802154 phy0 wpan0: encryption failed: -22
[   72.951748][ T6265] ieee802154 phy0 wpan0: encryption failed: -22
[   72.991021][ T6263] lo speed is unknown, defaulting to 1000
[   73.739843][ T6294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.742834][ T6294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.745810][ T6294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.750462][ T6294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.810458][ T6296] syz_tun: entered allmulticast mode
[   73.816967][ T6298] netlink: 'syz.1.136': attribute type 7 has an invalid length.
[   73.843683][ T6295] syz_tun: left allmulticast mode
[   74.133896][  T790] IPVS: starting estimator thread 0...
[   74.248471][ T6326] IPVS: using max 79 ests per chain, 189600 per kthread
[   74.593240][ T6365] sctp: [Deprecated]: syz.2.156 (pid 6365) Use of int in maxseg socket option.
[   74.593240][ T6365] Use struct sctp_assoc_value instead
[   74.663627][ T6372] bond0: (slave bond_slave_0): Releasing backup interface
[   74.674901][ T6372] bond0: (slave bond_slave_1): Releasing backup interface
[   74.690914][ T6372] team0: Port device team_slave_0 removed
[   74.696601][ T6372] team0: Port device team_slave_1 removed
[   74.702558][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.705358][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.709372][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.712142][ T6372] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.901425][ T6387] netlink: 'syz.0.162': attribute type 5 has an invalid length.
[   75.066800][ T6406] netlink: 'syz.0.165': attribute type 1 has an invalid length.
[   75.070273][ T6395] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   75.072766][ T6395] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   75.650485][ T6462] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   75.759194][ T6477] sch_tbf: peakrate 32768 is lower than or equals to rate 8905245116682964095 !
[   75.789335][ T6477] netlink: 'syz.0.190': attribute type 5 has an invalid length.
[   76.024545][ T6507] x_tables: duplicate underflow at hook 1
[   76.044968][ T6502] __nla_validate_parse: 21 callbacks suppressed
[   76.044979][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.194'.
[   76.143003][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'.
[   76.189810][ T6517] netlink: 'syz.0.199': attribute type 15 has an invalid length.
[   76.373365][ T6535] x_tables: duplicate underflow at hook 3
[   76.490618][ T6543] nbd: must specify at least one socket
[   76.895891][ T6608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.960633][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'.
[   77.186230][ T6631] netlink: 'syz.1.218': attribute type 25 has an invalid length.
[   77.196027][ T6631] netlink: 88 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.214864][ T6633] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   77.321702][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'.
[   77.330086][ T6641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   77.603907][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[   77.655770][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[   77.886134][ T6667] IPVS: persistence engine module ip_vs_pe_ not found
[   78.415995][ T6704] xt_CT: No such helper "snmp"
[   78.628487][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   78.678178][ T6722] block nbd0: shutting down sockets
[   78.778340][ T6731] netlink: 'syz.1.244': attribute type 10 has an invalid length.
[   78.783594][ T6731] 8021q: adding VLAN 0 to HW filter on device team0
[   78.789307][ T6731] bond0: (slave team0): Enslaving as an active interface with an up link
[   78.944742][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.246'.
[   78.980891][ T6744] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.036237][ T6746] bond0: (slave team0): Releasing backup interface
[   79.039971][ T6746] bridge_slave_0: left allmulticast mode
[   79.042088][ T6746] bridge_slave_0: left promiscuous mode
[   79.044594][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.054599][ T6746] bridge_slave_1: left allmulticast mode
[   79.056539][ T6746] bridge_slave_1: left promiscuous mode
[   79.059115][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.064744][ T6746] bond0: (slave bond_slave_0): Releasing backup interface
[   79.071931][ T6746] bond0: (slave bond_slave_1): Releasing backup interface
[   79.078493][ T6746] team0: Port device team_slave_0 removed
[   79.083269][ T6746] team0: Port device team_slave_1 removed
[   79.089610][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.093346][ T6746] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.441186][ T6771] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[   79.649249][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'.
[   79.899235][ T6804] netlink: 'syz.1.270': attribute type 303 has an invalid length.
[   79.904896][ T6804] ieee802154 phy0 wpan0: encryption failed: -22
[   79.910786][ T6804] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   80.054375][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.087839][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.100520][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.104400][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.112908][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.116669][ T6821] netlink: 'syz.0.276': attribute type 33 has an invalid length.
[   80.664394][ T6863] Cannot find set identified by id 0 to match
[   80.664652][ T6859] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.950650][ T6888] syzkaller1: entered promiscuous mode
[   80.952882][ T6888] syzkaller1: entered allmulticast mode
[   81.008328][ T6891] veth0: entered promiscuous mode
[   81.030073][ T6893] Bluetooth: MGMT ver 1.23
[   81.060170][ T6887] veth0: left promiscuous mode
[   81.074818][ T6895] __nla_validate_parse: 42 callbacks suppressed
[   81.074831][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'.
[   81.113892][ T6897] netlink: 248 bytes leftover after parsing attributes in process `syz.1.305'.
[   81.169110][ T1909] cfg80211: failed to load regulatory.db
[   81.845015][ T6953] xt_hashlimit: size too large, truncated to 1048576
[   81.849529][ T6953] xt_hashlimit: max too large, truncated to 1048576
[   81.859384][ T6953] syz.1.319: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.866154][ T6953] CPU: 0 UID: 0 PID: 6953 Comm: syz.1.319 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   81.866168][ T6953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.866173][ T6953] Call Trace:
[   81.866177][ T6953]  <TASK>
[   81.866181][ T6953]  dump_stack_lvl+0x189/0x250
[   81.866198][ T6953]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.866208][ T6953]  ? __pfx__printk+0x10/0x10
[   81.866219][ T6953]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.866230][ T6953]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.866240][ T6953]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   81.866251][ T6953]  warn_alloc+0x214/0x310
[   81.866262][ T6953]  ? __pfx_warn_alloc+0x10/0x10
[   81.866272][ T6953]  ? __get_vm_area_node+0x28f/0x300
[   81.866284][ T6953]  ? htable_create+0xfc/0x7a0
[   81.866294][ T6953]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   81.866318][ T6953]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.866332][ T6953]  ? rcu_is_watching+0x15/0xb0
[   81.866342][ T6953]  ? htable_create+0xfc/0x7a0
[   81.866348][ T6953]  ? htable_create+0xfc/0x7a0
[   81.866354][ T6953]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   81.866366][ T6953]  ? htable_create+0xfc/0x7a0
[   81.866371][ T6953]  ? hashlimit_pernet+0x23/0x240
[   81.866383][ T6953]  htable_create+0xfc/0x7a0
[   81.866394][ T6953]  hashlimit_mt_check_common+0x719/0xa10
[   81.866405][ T6953]  hashlimit_mt_check_v1+0x221/0x360
[   81.866413][ T6953]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[   81.866423][ T6953]  ? xt_find_match+0x1f7/0x250
[   81.866437][ T6953]  xt_check_match+0x3d1/0xab0
[   81.866466][ T6953]  ? __pfx___mutex_lock+0x10/0x10
[   81.866478][ T6953]  ? __pfx_xt_check_match+0x10/0x10
[   81.866490][ T6953]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[   81.866506][ T6953]  ? xt_find_match+0x1f7/0x250
[   81.866520][ T6953]  translate_table+0x1553/0x2040
[   81.866541][ T6953]  ? __pfx_translate_table+0x10/0x10
[   81.866556][ T6953]  ? __might_fault+0xb0/0x130
[   81.866584][ T6953]  ? _copy_from_user+0x94/0xb0
[   81.866604][ T6953]  do_ip6t_set_ctl+0x970/0xce0
[   81.866626][ T6953]  ? rcu_is_watching+0x15/0xb0
[   81.866639][ T6953]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[   81.866668][ T6953]  ? __pfx___mutex_lock+0x10/0x10
[   81.866683][ T6953]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   81.866699][ T6953]  ? __lock_acquire+0xab9/0xd20
[   81.866711][ T6953]  nf_setsockopt+0x26f/0x290
[   81.866726][ T6953]  rawv6_setsockopt+0x23b/0x5b0
[   81.866735][ T6953]  ? __pfx_rawv6_setsockopt+0x10/0x10
[   81.866742][ T6953]  ? aa_sock_opt_perm+0x74/0x110
[   81.866751][ T6953]  ? sock_common_setsockopt+0x36/0xc0
[   81.866761][ T6953]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   81.866771][ T6953]  do_sock_setsockopt+0x17c/0x1b0
[   81.866784][ T6953]  __x64_sys_setsockopt+0x13f/0x1b0
[   81.866798][ T6953]  do_syscall_64+0xfa/0x3b0
[   81.866806][ T6953]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.866813][ T6953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.866821][ T6953]  ? exc_page_fault+0x9f/0xf0
[   81.866829][ T6953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.866836][ T6953] RIP: 0033:0x7fa60d78e929
[   81.866844][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.866851][ T6953] RSP: 002b:00007fa60e53d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   81.866860][ T6953] RAX: ffffffffffffffda RBX: 00007fa60d9b5fa0 RCX: 00007fa60d78e929
[   81.866865][ T6953] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[   81.866870][ T6953] RBP: 00007fa60d810ca1 R08: 0000000000000358 R09: 0000000000000000
[   81.866874][ T6953] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000000000000000
[   81.866878][ T6953] R13: 0000000000000000 R14: 00007fa60d9b5fa0 R15: 00007fff3e044be8
[   81.866890][ T6953]  </TASK>
[   81.866939][ T6953] Mem-Info:
[   82.021255][ T6953] active_anon:5709 inactive_anon:0 isolated_anon:0
[   82.021255][ T6953]  active_file:1015 inactive_file:38211 isolated_file:0
[   82.021255][ T6953]  unevictable:1768 dirty:1518 writeback:0
[   82.021255][ T6953]  slab_reclaimable:9252 slab_unreclaimable:55521
[   82.021255][ T6953]  mapped:18301 shmem:2445 pagetables:1119
[   82.021255][ T6953]  sec_pagetables:0 bounce:0
[   82.021255][ T6953]  kernel_misc_reclaimable:0
[   82.021255][ T6953]  free:290588 free_pcp:23623 free_cma:0
[   82.040957][ T6953] Node 0 active_anon:11776kB inactive_anon:0kB active_file:2900kB inactive_file:130804kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22704kB dirty:5832kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6156kB pagetables:1672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.055693][ T6953] Node 1 active_anon:11128kB inactive_anon:0kB active_file:1160kB inactive_file:22040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50500kB dirty:240kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5608kB pagetables:2668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.071242][ T6953] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.085014][ T6953] lowmem_reserve[]: 0 812 812 812 812
[   82.087680][ T6953] Node 0 DMA32 free:325120kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11776kB inactive_anon:0kB active_file:2900kB inactive_file:130804kB unevictable:3536kB writepending:5832kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:30256kB local_pcp:16964kB free_cma:0kB
[   82.113493][ T6953] lowmem_reserve[]: 0 0 0 0 0
[   82.115581][ T6953] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.126442][ T6953] lowmem_reserve[]: 0 0 854 854 854
[   82.129470][ T6953] Node 1 Normal free:363112kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11060kB inactive_anon:0kB active_file:1160kB inactive_file:22040kB unevictable:3536kB writepending:240kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:66452kB local_pcp:22556kB free_cma:0kB
[   82.143804][ T6953] lowmem_reserve[]: 0 0 0 0 0
[   82.146001][ T6953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.151796][ T6953] Node 0 DMA32: 307*4kB (M) 538*8kB (UME) 209*16kB (UME) 224*32kB (UME) 53*64kB (UME) 34*128kB (UME) 20*256kB (UME) 10*512kB (UME) 8*1024kB (UM) 6*2048kB (UME) 66*4096kB (UM) = 324844kB
[   82.160299][ T6953] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   82.168436][ T6953] Node 1 Normal: 874*4kB (UME) 947*8kB (UME) 352*16kB (UME) 211*32kB (UME) 45*64kB (UME) 9*128kB (UM) 11*256kB (UME) 50*512kB (UM) 46*1024kB (UME) 9*2048kB (UME) 59*4096kB (UM) = 363104kB
[   82.177467][ T6953] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.181825][ T6953] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.186012][ T6953] 41671 total pagecache pages
[   82.188790][ T6953] 0 pages in swap cache
[   82.190638][ T6953] Free swap  = 124996kB
[   82.192515][ T6953] Total swap = 124996kB
[   82.207656][ T6953] 786301 pages RAM
[   82.209952][ T6953] 0 pages HighMem/MovableOnly
[   82.212012][ T6953] 241056 pages reserved
[   82.213783][ T6953] 0 pages cma reserved
[   82.274558][ T6971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.372655][ T6971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.453886][ T6971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.553866][ T6971] bond0: (slave netdevsim0): Releasing backup interface
[   82.571390][ T6971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.595106][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'.
[   82.599147][ T6994] netlink: 84 bytes leftover after parsing attributes in process `syz.2.327'.
[   82.659177][ T6971] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.685360][ T6971] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.689165][ T6998] syzkaller1: entered promiscuous mode
[   82.691626][ T6998] syzkaller1: entered allmulticast mode
[   82.699813][ T6971] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.722433][ T6971] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.842184][ T7005] validate_nla: 31 callbacks suppressed
[   82.842203][ T7005] netlink: 'syz.0.332': attribute type 10 has an invalid length.
[   82.862079][ T7005] team0: Port device dummy0 added
[   83.098570][ T7022] netlink: 'syz.0.338': attribute type 15 has an invalid length.
[   83.281580][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'.
[   83.329276][ T7030] x_tables: duplicate underflow at hook 1
[   83.515094][ T7040] bond0: entered promiscuous mode
[   83.520996][ T7040] bond0: left promiscuous mode
[   83.580715][ T7040] bond0: entered promiscuous mode
[   83.586362][ T7040] bond0: left promiscuous mode
[   83.637803][ T7040] bond0: entered promiscuous mode
[   83.642412][ T7040] bond0: left promiscuous mode
[   83.696079][ T7040] bond0: entered promiscuous mode
[   83.703269][ T7040] bond0: left promiscuous mode
[   83.753795][ T7040] bond0: entered promiscuous mode
[   83.760049][ T7040] bond0: left promiscuous mode
[   83.812499][ T7050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.821873][ T7050] batadv_slave_0: entered promiscuous mode
[   83.852220][ T7040] bond0: entered promiscuous mode
[   83.862221][ T7040] bond0: left promiscuous mode
[   83.904916][ T7040] bond0: entered promiscuous mode
[   83.917532][ T7040] bond0: left promiscuous mode
[   83.955386][ T7040] bond0: entered promiscuous mode
[   83.969453][ T7040] bond0: left promiscuous mode
[   84.004869][ T7061] netlink: 'syz.0.353': attribute type 21 has an invalid length.
[   84.007944][ T7061] IPv6: NLM_F_CREATE should be specified when creating new route
[   84.008579][ T7040] bond0: entered promiscuous mode
[   84.028959][ T7040] bond0: left promiscuous mode
[   84.044369][ T7063] --map-set only usable from mangle table
[   84.051951][ T7063] --map-set only usable from mangle table
[   84.084652][ T7040] bond0: entered promiscuous mode
[   84.105062][ T7040] bond0: left promiscuous mode
[   84.166644][ T7040] bond0: entered promiscuous mode
[   84.174577][ T7040] bond0: left promiscuous mode
[   84.230928][ T7040] bond0: entered promiscuous mode
[   84.236438][ T7040] bond0: left promiscuous mode
[   84.302412][ T7040] bond0: entered promiscuous mode
[   84.306060][ T7040] bond0: left promiscuous mode
[   84.365265][ T7086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.366771][ T7079] lo speed is unknown, defaulting to 1000
[   84.392221][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'.
[   84.395604][ T7088] netlink: 'syz.0.362': attribute type 5 has an invalid length.
[   84.421017][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.482353][ T7073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.545649][ T7101] netlink: 112 bytes leftover after parsing attributes in process `syz.1.366'.
[   84.600917][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'.
[   84.616772][ T7103] netlink: 'syz.0.367': attribute type 21 has an invalid length.
[   84.624702][ T7103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.367'.
[   84.638831][ T7103] netlink: 'syz.0.367': attribute type 10 has an invalid length.
[   84.660781][ T7109] netlink: 'syz.1.369': attribute type 2 has an invalid length.
[   84.661690][ T7103] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.722083][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'.
[   84.843339][ T7125] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   84.845863][ T7125] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[   84.848925][ T7125] netlink: 'syz.1.375': attribute type 2 has an invalid length.
[   84.853371][ T7125] tipc: Invalid UDP bearer configuration
[   84.853412][ T7125] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   84.977404][ T7134] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   84.984658][ T7134] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.148041][ T7143] macvlan2: entered promiscuous mode
[   85.149952][ T7143] hsr0: entered promiscuous mode
[   85.151746][ T7143] macvlan2: entered allmulticast mode
[   85.153573][ T7143] hsr0: entered allmulticast mode
[   85.155364][ T7143] hsr_slave_0: entered allmulticast mode
[   85.162664][ T7143] hsr_slave_1: entered allmulticast mode
[   85.908107][ T7180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.912840][ T7180] syzkaller0: entered promiscuous mode
[   85.915241][ T7180] syzkaller0: entered allmulticast mode
[   85.922821][ T7179] tipc: Resetting bearer <eth:syzkaller0>
[   85.936440][ T7179] tipc: Disabling bearer <eth:syzkaller0>
[   87.292854][ T7194] vlan0: entered promiscuous mode
[   87.345493][ T7200] __nla_validate_parse: 9 callbacks suppressed
[   87.345510][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'.
[   87.356469][ T7200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.402'.
[   87.411897][ T7202] xt_hashlimit: size too large, truncated to 1048576
[   87.798254][ T7225] ieee802154 phy0 wpan0: encryption failed: -90
[   87.859675][ T7229] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   87.959257][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[   87.962469][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'.
[   87.986903][ T7237] tipc: New replicast peer: 0.0.0.0
[   87.994578][ T7237] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.998479][ T7238] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   88.046599][ T7244] validate_nla: 8 callbacks suppressed
[   88.046614][ T7244] netlink: 'syz.0.418': attribute type 10 has an invalid length.
[   88.070197][ T7244] veth0_vlan: left promiscuous mode
[   88.074539][ T7244] veth0_vlan: entered promiscuous mode
[   88.083396][ T7244] team0: Device veth0_vlan failed to register rx_handler
[   88.183184][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[   88.193564][ T7250] netlink: 'syz.0.421': attribute type 10 has an invalid length.
[   88.384388][ T7262] netlink: 'syz.2.426': attribute type 1 has an invalid length.
[   88.470103][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[   88.474326][ T7272] tap0: tun_chr_ioctl cmd 1074025675
[   88.476438][ T7272] tap0: persist disabled
[   88.599350][    C1] ------------[ cut here ]------------
[   88.601556][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[   88.605762][    C1] WARNING: CPU: 1 PID: 7278 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[   88.609500][    C1] Modules linked in:
[   88.611330][    C1] CPU: 1 UID: 0 PID: 7278 Comm: syz.0.431 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   88.615507][ T7283] xt_NFQUEUE: number of total queues is 0
[   88.616526][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.622480][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[   88.624589][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 52 a2 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[   88.631879][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[   88.634493][    C1] RAX: 8a4b266f7159ef00 RBX: 000000000000000c RCX: ffff888108009cc0
[   88.637564][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[   88.640473][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[   88.643655][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff888113348928
[   88.646906][    C1] R13: 0000000000000000 R14: ffff88811dd78e40 R15: ffff88811dd7b0d8
[   88.650284][    C1] FS:  00007f2556a976c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[   88.653517][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   88.655945][    C1] CR2: 00002000000045c0 CR3: 00000000396be000 CR4: 00000000000006f0
[   88.658744][    C1] Call Trace:
[   88.659933][    C1]  <IRQ>
[   88.660933][    C1]  rate_control_send_low+0x194/0x7a0
[   88.662801][    C1]  rate_control_get_rate+0x20b/0x5d0
[   88.664627][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[   88.666817][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[   88.669050][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[   88.670834][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   88.672725][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[   88.674680][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[   88.676620][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.678547][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.680351][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[   88.682192][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.684098][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[   88.685887][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[   88.688164][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[   88.690169][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   88.692879][    C1]  __iterate_interfaces+0x2ab/0x590
[   88.695067][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   88.697245][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   88.699670][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   88.701761][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[   88.704064][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[   88.705903][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   88.708142][    C1]  __hrtimer_run_queues+0x52c/0xc60
[   88.709965][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   88.711853][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   88.713850][    C1]  hrtimer_run_softirq+0x187/0x2b0
[   88.715727][    C1]  handle_softirqs+0x286/0x870
[   88.717608][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[   88.719245][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   88.721029][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[   88.722812][    C1]  __irq_exit_rcu+0xca/0x1f0
[   88.724442][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[   88.726205][    C1]  irq_exit_rcu+0x9/0x30
[   88.727759][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   88.729679][    C1]  </IRQ>
[   88.730683][    C1]  <TASK>
[   88.731713][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   88.733771][    C1] RIP: 0010:___slab_alloc+0x4ab/0x1480
[   88.735655][    C1] Code: 04 24 00 02 00 00 0f 84 bb fb ff ff fb 89 dd e9 b3 fb ff ff e8 76 90 55 09 f7 c3 00 02 00 00 0f 84 98 fe ff ff fb 8b 6c 24 08 <eb> 1a 48 8b 74 24 08 48 c7 46 10 00 00 00 00 4c 8b 6c 24 10 4c 89
[   88.742145][    C1] RSP: 0018:ffffc9000477f548 EFLAGS: 00000206
[   88.744239][    C1] RAX: 8a4b266f7159ef00 RBX: 0000000000000246 RCX: 8a4b266f7159ef00
[   88.747406][    C1] RDX: 0000000000000006 RSI: ffffffff8d995f8c RDI: ffffffff8be28c40
[   88.750397][    C1] RBP: 00000000ffffffff R08: ffffffff8fa1d5f7 R09: 1ffffffff1f43abe
[   88.753185][    C1] R10: dffffc0000000000 R11: fffffbfff1f43abf R12: 0000000000000001
[   88.755828][    C1] R13: ffff88801a4418c0 R14: ffff88813663e500 R15: ffff88813663e520
[   88.758625][    C1]  ? sock_kmalloc+0xd6/0x160
[   88.760480][    C1]  __kmalloc_noprof+0x305/0x4f0
[   88.762259][    C1]  ? sock_kmalloc+0xd6/0x160
[   88.763910][    C1]  sock_kmalloc+0xd6/0x160
[   88.765538][    C1]  hash_sendmsg+0x666/0x11d0
[   88.767528][    C1]  ? __pfx_hash_sendmsg+0x10/0x10
[   88.769673][    C1]  __sock_sendmsg+0x21c/0x270
[   88.771640][    C1]  sock_sendmsg+0x158/0x230
[   88.773202][    C1]  ? __pfx_sock_sendmsg+0x10/0x10
[   88.775081][    C1]  ? __asan_memset+0x22/0x50
[   88.777070][    C1]  ? iov_iter_bvec+0xb8/0x180
[   88.778750][    C1]  splice_to_socket+0x8ff/0xf10
[   88.780434][    C1]  ? __pfx_splice_to_socket+0x10/0x10
[   88.782224][    C1]  ? aa_file_perm+0x3e7/0xed0
[   88.783843][    C1]  ? __pfx_get_futex_key+0x10/0x10
[   88.785608][    C1]  ? __pfx_inet_ioctl+0x10/0x10
[   88.787342][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[   88.789116][    C1]  ? security_file_permission+0x75/0x290
[   88.790901][    C1]  ? rw_verify_area+0x258/0x650
[   88.792688][    C1]  ? __pfx_splice_to_socket+0x10/0x10
[   88.794490][    C1]  do_splice+0xc79/0x1660
[   88.795969][    C1]  ? sock_do_ioctl+0x1aa/0x300
[   88.797823][    C1]  ? do_futex+0x333/0x420
[   88.799789][    C1]  ? __pfx_do_splice+0x10/0x10
[   88.801497][    C1]  __se_sys_splice+0x2e1/0x460
[   88.803107][    C1]  ? __pfx___se_sys_splice+0x10/0x10
[   88.804914][    C1]  ? rcu_is_watching+0x15/0xb0
[   88.806512][    C1]  ? __x64_sys_splice+0x21/0xf0
[   88.808195][    C1]  do_syscall_64+0xfa/0x3b0
[   88.809746][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   88.811564][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.813840][    C1]  ? exc_page_fault+0x9f/0xf0
[   88.815477][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.817615][    C1] RIP: 0033:0x7f2555b8e929
[   88.819139][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   88.825705][    C1] RSP: 002b:00007f2556a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[   88.828636][    C1] RAX: ffffffffffffffda RBX: 00007f2555db5fa0 RCX: 00007f2555b8e929
[   88.831310][    C1] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009
[   88.833938][    C1] RBP: 00007f2555c10ca1 R08: 0000000000008000 R09: 0000000000000009
[   88.836542][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.839300][    C1] R13: 0000000000000000 R14: 00007f2555db5fa0 R15: 00007fffacd7e2b8
[   88.842051][    C1]  </TASK>
[   88.843123][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   88.845608][    C1] CPU: 1 UID: 0 PID: 7278 Comm: syz.0.431 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   88.849781][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.853234][    C1] Call Trace:
[   88.854427][    C1]  <IRQ>
[   88.855429][    C1]  dump_stack_lvl+0x99/0x250
[   88.857056][    C1]  ? __asan_memcpy+0x40/0x70
[   88.858720][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[   88.860595][    C1]  ? __pfx__printk+0x10/0x10
[   88.862284][    C1]  panic+0x2db/0x790
[   88.863666][    C1]  ? __pfx_panic+0x10/0x10
[   88.865138][    C1]  __warn+0x31b/0x4b0
[   88.866467][    C1]  ? __rate_control_send_low+0x5df/0x820
[   88.868381][    C1]  ? __rate_control_send_low+0x5df/0x820
[   88.870438][    C1]  report_bug+0x2be/0x4f0
[   88.871935][    C1]  ? __rate_control_send_low+0x5df/0x820
[   88.873866][    C1]  ? __rate_control_send_low+0x5df/0x820
[   88.875796][    C1]  ? __rate_control_send_low+0x5e1/0x820
[   88.877726][    C1]  handle_bug+0x84/0x160
[   88.879279][    C1]  exc_invalid_op+0x1a/0x50
[   88.880793][    C1]  asm_exc_invalid_op+0x1a/0x20
[   88.882697][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[   88.884924][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 00 2c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 52 a2 9f f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[   88.891935][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[   88.893924][    C1] RAX: 8a4b266f7159ef00 RBX: 000000000000000c RCX: ffff888108009cc0
[   88.896527][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[   88.899191][    C1] RBP: dffffc0000000000 R08: ffff888136624293 R09: 1ffff11026cc4852
[   88.901841][    C1] R10: dffffc0000000000 R11: ffffed1026cc4853 R12: ffff888113348928
[   88.904486][    C1] R13: 0000000000000000 R14: ffff88811dd78e40 R15: ffff88811dd7b0d8
[   88.907153][    C1]  ? __rate_control_send_low+0x5de/0x820
[   88.909180][    C1]  rate_control_send_low+0x194/0x7a0
[   88.910969][    C1]  rate_control_get_rate+0x20b/0x5d0
[   88.912821][    C1]  ieee80211_beacon_get_finish+0x38c/0x6b0
[   88.914838][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[   88.916924][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[   88.918765][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   88.920718][    C1]  ieee80211_beacon_get_ap+0x1478/0x19e0
[   88.922682][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[   88.924696][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.926642][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.928580][    C1]  __ieee80211_beacon_get+0x1179/0x17b0
[   88.930457][    C1]  ? __ieee80211_beacon_get+0x36/0x17b0
[   88.932243][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[   88.934085][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[   88.936123][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[   88.937935][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   88.940268][    C1]  __iterate_interfaces+0x2ab/0x590
[   88.942120][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   88.944054][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[   88.946449][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[   88.948415][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[   88.950614][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[   88.952359][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   88.954371][    C1]  __hrtimer_run_queues+0x52c/0xc60
[   88.956160][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[   88.958127][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[   88.960130][    C1]  hrtimer_run_softirq+0x187/0x2b0
[   88.961804][    C1]  handle_softirqs+0x286/0x870
[   88.963433][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[   88.965065][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[   88.966788][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[   88.968509][    C1]  __irq_exit_rcu+0xca/0x1f0
[   88.970093][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[   88.971842][    C1]  irq_exit_rcu+0x9/0x30
[   88.973308][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[   88.975232][    C1]  </IRQ>
[   88.976235][    C1]  <TASK>
[   88.977222][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[   88.979207][    C1] RIP: 0010:___slab_alloc+0x4ab/0x1480
[   88.980966][    C1] Code: 04 24 00 02 00 00 0f 84 bb fb ff ff fb 89 dd e9 b3 fb ff ff e8 76 90 55 09 f7 c3 00 02 00 00 0f 84 98 fe ff ff fb 8b 6c 24 08 <eb> 1a 48 8b 74 24 08 48 c7 46 10 00 00 00 00 4c 8b 6c 24 10 4c 89
[   88.987273][    C1] RSP: 0018:ffffc9000477f548 EFLAGS: 00000206
[   88.989305][    C1] RAX: 8a4b266f7159ef00 RBX: 0000000000000246 RCX: 8a4b266f7159ef00
[   88.991958][    C1] RDX: 0000000000000006 RSI: ffffffff8d995f8c RDI: ffffffff8be28c40
[   88.994646][    C1] RBP: 00000000ffffffff R08: ffffffff8fa1d5f7 R09: 1ffffffff1f43abe
[   88.997198][    C1] R10: dffffc0000000000 R11: fffffbfff1f43abf R12: 0000000000000001
[   88.999801][    C1] R13: ffff88801a4418c0 R14: ffff88813663e500 R15: ffff88813663e520
[   89.002506][    C1]  ? sock_kmalloc+0xd6/0x160
[   89.004118][    C1]  __kmalloc_noprof+0x305/0x4f0
[   89.005774][    C1]  ? sock_kmalloc+0xd6/0x160
[   89.007378][    C1]  sock_kmalloc+0xd6/0x160
[   89.008884][    C1]  hash_sendmsg+0x666/0x11d0
[   89.010473][    C1]  ? __pfx_hash_sendmsg+0x10/0x10
[   89.012217][    C1]  __sock_sendmsg+0x21c/0x270
[   89.013787][    C1]  sock_sendmsg+0x158/0x230
[   89.015355][    C1]  ? __pfx_sock_sendmsg+0x10/0x10
[   89.017070][    C1]  ? __asan_memset+0x22/0x50
[   89.018581][    C1]  ? iov_iter_bvec+0xb8/0x180
[   89.020147][    C1]  splice_to_socket+0x8ff/0xf10
[   89.021875][    C1]  ? __pfx_splice_to_socket+0x10/0x10
[   89.023686][    C1]  ? aa_file_perm+0x3e7/0xed0
[   89.025285][    C1]  ? __pfx_get_futex_key+0x10/0x10
[   89.027016][    C1]  ? __pfx_inet_ioctl+0x10/0x10
[   89.028688][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[   89.030538][    C1]  ? security_file_permission+0x75/0x290
[   89.032443][    C1]  ? rw_verify_area+0x258/0x650
[   89.034120][    C1]  ? __pfx_splice_to_socket+0x10/0x10
[   89.035941][    C1]  do_splice+0xc79/0x1660
[   89.037449][    C1]  ? sock_do_ioctl+0x1aa/0x300
[   89.039031][    C1]  ? do_futex+0x333/0x420
[   89.040513][    C1]  ? __pfx_do_splice+0x10/0x10
[   89.042178][    C1]  __se_sys_splice+0x2e1/0x460
[   89.043821][    C1]  ? __pfx___se_sys_splice+0x10/0x10
[   89.045621][    C1]  ? rcu_is_watching+0x15/0xb0
[   89.047240][    C1]  ? __x64_sys_splice+0x21/0xf0
[   89.048834][    C1]  do_syscall_64+0xfa/0x3b0
[   89.050311][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.052036][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.053985][    C1]  ? exc_page_fault+0x9f/0xf0
[   89.055679][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.057849][    C1] RIP: 0033:0x7f2555b8e929
[   89.059316][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.065685][    C1] RSP: 002b:00007f2556a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[   89.068420][    C1] RAX: ffffffffffffffda RBX: 00007f2555db5fa0 RCX: 00007f2555b8e929
[   89.071142][    C1] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009
[   89.073787][    C1] RBP: 00007f2555c10ca1 R08: 0000000000008000 R09: 0000000000000009
[   89.076380][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   89.079033][    C1] R13: 0000000000000000 R14: 00007f2555db5fa0 R15: 00007fffacd7e2b8
[   89.081712][    C1]  </TASK>
[   89.083555][    C1] Kernel Offset: disabled
[   89.085056][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:56:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000003 RBX=ffffc900035bfd90 RCX=1ffff920006b7fb5 RDX=ffffc900035bfda0
RSI=ffffffff8f889510 RDI=0000000000000000 RBP=ffffc900035bfdc8 RSP=ffffc900035bfcd8
R8 =ffff88801ebd1cc0 R9 =0000000000000004 R10=0000000000000003 R11=0000000000000000
R12=0000000000000000 R13=dffffc0000000000 R14=1ffff920006b7fb9 R15=ffff88810a36a480
RIP=ffffffff81c031c7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555573a64500 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0d9c2e8704 CR3=000000011010e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f0d9b611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000043 RBX=0000000000000043 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff888020e30237 R9 =1ffff110041c6046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee894 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2556a976c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000045c0 CR3=00000000396be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f25568ed100 00007f2555d86440 XMM05=00007f2555d86458 00007f2555d864a0
XMM06=00007f2555d86498 00007f2555d86490 XMM07=00007f2555d86488 00007f2555d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2555c11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
