last executing test programs:

1.747896036s ago: executing program 2 (id=2092):
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet6_opts(r2, 0x29, 0x48, &(0x7f0000000180)=@routing={0x1, 0x4, 0x1, 0x6, 0x0, [@private1, @remote]}, 0x28)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000080)=0x3ff, 0x4)

1.636515975s ago: executing program 2 (id=2094):
syz_emit_ethernet(0x2af, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x279, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610700477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}]}}}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRESHEX=r2, @ANYRESHEX=r0, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000000b0104000000000000fbff0000000a080003400000000108000100647272000800024000000001fc244ca355ae06a1d3d0f6a9ad65ea6e5b7ab7abf8a75596f80b43c045b57e0696d44c6406f7ced595ba998d79f6c783d6579502cfedeac182e2d0480e0fdfd6c16c2c7770e6b6058c687b2d15594e9b3e7f0f931076b9a7df2aa8ad07ccb5f5d7dd"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x22000004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014})
epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0xc9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r9, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10)
socket$inet6(0xa, 0xa, 0x1)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x6c, r12, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x40, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfff, @empty, 0x50}}}}]}]}, 0x6c}}, 0x0)
ioctl$sock_x25_SIOCADDRT(r10, 0x890b, &(0x7f0000001ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'lo\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10)
r13 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r14=>0x0})
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

735.432076ms ago: executing program 2 (id=2109):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r3}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x8b, 0x6e, &(0x7f0000000240)="83481edb834923d812172472d4efe95bd7ea742ee26ea7ec62483514a667a99c997d72e68b03b54b09d62e14d5a41a534d5004c9b36804bed8fcf772c16744f3a923d9245cc684d988bd43cc40d0eb64e9d35b79d4621cea34ab4ef09762ce8a06e86cec8cef2549698ff70cc05fcb0b5965facc0ad48e5ca57a92f4e1acbb2c9777c99ae24a3824d42440", &(0x7f0000000180)=""/110, 0x7, 0x0, 0xd5, 0xbc, &(0x7f0000000300)="022d480e280e42061ffb367c0ce761743fcc0664dd6fa51fb47aadf8ab69c3be243814d799d35fcacac04ca9b819c454dfeed636b1a526d5389d2498e8641162ab6b0f5ac8339f7587d45903129b52fbe2ebdb20ad02507294a3d4f26df2cbc9d7d2717ad8e45e6663539489473fd60afcb8736ddedbf7c9ffd31e01edc48fdb08fd20103e117fabfaaec511a31b18ffd06309027a5838df9e352f0cf8e15afd8454af9e38699a04ed432e8913d6fd22f4bdb8f3ee88ab49e67dc134ed0a20f520b8da934cea2166c56cd7a3fe79df9e930e3dd2c8", &(0x7f0000000500)="adf6423c7bb696e9d970c3a285677731ca8ea8482646ca4835d2a54bbbd5477b4073d22f5b410d1f20254b54801e6dd5609f7ea93127caa50657fe589ac19a06a06622dde8c6f3e282258c0d030a8705d5b6a8231cbad274bc8b1c232f5f678af51b5c4a85e563c7e4c83f5748b877d4037f3d346569712f12d6fa029659d1f8a2e72aef4ed0f25432fc01d599da92139cf4ffe1675d485271eccf629f83df17f41af3f07bf78db274294280a455d9aefe9cbd900eaeb2e3be998415", 0x1}, 0x50)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0x3, 0x0, 0xff, 0x2}, &(0x7f0000000400)=0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

650.977601ms ago: executing program 0 (id=2111):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1fc, r9, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, [@NL80211_ATTR_MESH_SETUP={0x1d0, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0x2e, 0x3, "62bdba085603cd12dfe41b465cd83b1d3445243f4d87a182a51bea9f5367621810040a70fa8f8dd17f04"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_IE={0xa5, 0x3, "affa062097c4bf38ffd397bd05fe9219a90e93a25af8fa6c27241dfe9b6cc94052e253903bf7b528ab2ccea6295034aef9a0e95097001c2aaa84ac9e5a5ac7b2d882bacdb4e78530ea2eab249f243e66bf91807e7ffb824e1437c23a4e63cdbc1c5206a6fde50ea427018a6a258efc96eff8c2803b7e115ae1deaa7957e6f2a9ac37a5a3a020aa0ed8da52efa925ee149c24e2908aa35ccf4411ea470b3c86f50d"}, @NL80211_MESH_SETUP_IE={0xd6, 0x3, "de14facc98726a4a0b5c33ad68a2e1d3c334410686ecd1434b7e70c8bfd8f9bb6ac74b78a7cad1781ed38d0298fb2a406ed30fa0a97e85210d2267f5b23f78f1bebe91a9585885ddd97178ed40f5ad82d2992168ab9738b77629ebcd2789ef9675110353d1a947dfa60dd512820def3b6b5897ff8e72e50430432be381b5500c69a81007370ec1eb8927fcda68136dcf40f999f0eb03b95ad5d50d5e32b5c092f72b9ba4ec9eb7df2592af2411ded727eabb2aeb297706ed4dd5d6204e43a0edd8e72a6480c2e59c9726fd77f966ad26c9aa"}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{0x36, 0x1}, {}, {0xc, 0x1}, {0x12}, {0x5, 0x1}, {0x9}, {0x30, 0x1}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xfffffffd, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async)
r10 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r10, 0x29, 0x17, 0x0, 0x1300) (async)
setsockopt$sock_attach_bpf(r10, 0x29, 0x17, 0x0, 0x1300)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x4, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

545.883506ms ago: executing program 0 (id=2113):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.controllers\x00', 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x4b8, 0xffffffff, 0x2e0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xffffff00], [0x0, 0x0, 0xffffff00], 'pimreg0\x00', 'dvmrp1\x00', {0xff}, {}, 0x67, 0x7, 0x2, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd69}}}, {{@ipv6={@remote, @mcast1, [0xffffff00, 0x0, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x1ff000100, 0xff], 'geneve1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x33, 0x8, 0x2, 0x8}, 0x0, 0x1e0, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x4, 0x4], 0x5, 0x20, 0x2, [@mcast1, @private2, @local, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1e}, @loopback, @rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x13}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2], 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x1, 0x6}, 0x2, 0xe}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [0xff, 0x0, 0xff000000, 0xffffff00], 0x4e23, 0x4e22, 0x4e22, 0x4e20, 0xaf, 0x7, 0x3, 0x93b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x8000001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r4, 0x0, 0x0)
close(r4)
connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000395ce190d79e41ded407255699b0", @ANYRES32=r8, @ANYBLOB="01980000000000001c001280080001006772650010000280040012000800040001010000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044004}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="0020000000000000200012800800010067726500140002"], 0x40}, 0x1, 0x0, 0x0, 0x404c894}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r11 = accept$alg(r10, 0x0, 0x0)
sendmmsg$alg(r11, &(0x7f0000002c00)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x4044041)
recvmmsg(r11, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/83, 0x53}], 0x1}, 0x2}], 0x1, 0x10100, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)

425.333198ms ago: executing program 2 (id=2115):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0)
close(r2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0xc)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="02000000020000", @ANYRES64=0x0], 0x10)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

424.854592ms ago: executing program 1 (id=2116):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x7, 0x101}, 0x14}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

306.985661ms ago: executing program 1 (id=2117):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200})
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0xffff, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="a83ae8e58e13145f3aa7527d6dcc999b3630adc45c6ffad7bb84ef560d3786c01f08da7d57621da8bbf161e7851f17d9f711337f2650648db319d7b7aa3d112522cd568f09ec00000000", 0x4a}], 0x1}}], 0x1, 0x990)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) (async)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0xffff, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
sendmmsg$inet6(r1, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="a83ae8e58e13145f3aa7527d6dcc999b3630adc45c6ffad7bb84ef560d3786c01f08da7d57621da8bbf161e7851f17d9f711337f2650648db319d7b7aa3d112522cd568f09ec00000000", 0x4a}], 0x1}}], 0x1, 0x990) (async)
shutdown(r1, 0x1) (async)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async)

306.09327ms ago: executing program 0 (id=2118):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000001200)={0x60000010}) (async)
r3 = epoll_create1(0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0xa000000d}) (async, rerun: 32)
close(r2) (rerun: 32)

194.098424ms ago: executing program 2 (id=2119):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32)
r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x1, 0x6, 0xa, 0x8, 0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x95, &(0x7f0000000340)=""/149, 0x41000, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xf, 0xc425, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x1, 0x5, 0xd, 0x3}, {0x0, 0x3, 0x9, 0x5}, {0x0, 0x3, 0x0, 0x3}, {0x1, 0x2, 0x5, 0xa}, {0x3, 0x1, 0xe}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_remove_blocks\x00', r2, 0x0, 0x3}, 0x18) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)

193.054906ms ago: executing program 0 (id=2120):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={<r4=>r3}, &(0x7f0000000000)=0x8)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
epoll_create1(0x3012f84903b37587)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r6, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r9, 0x3, 0x2}, 0x8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x401, 0x36}, 0x8)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)

191.012601ms ago: executing program 1 (id=2121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002100010000000000fddbdf250a0000080000000110000000140011"], 0x30}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x21, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r1, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844)

189.656479ms ago: executing program 1 (id=2122):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x53)
sendmsg$rds(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2, 0xc0fe, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0x0, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000900)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/113, 0x71}], 0x3}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x150}, 0x0)

84.369223ms ago: executing program 0 (id=2123):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002400000000214"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000040))
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz1\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x9c, r7, 0x205, 0x24000000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@device_b}, 0x0, @random=0xd6db, 0x5d7f, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0xb, 0x2e, 0x100, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x40009, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x308, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9, 0x3, "64b331bd4e"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

83.795612ms ago: executing program 1 (id=2124):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025e501002abd700000000000080021cd1e2767b575b368316ce384b76c9520a94a57b5ee1a80", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0)

82.532824ms ago: executing program 2 (id=2125):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x6b)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a69"], 0x58}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
writev(r4, &(0x7f0000000240)=[{0x0}], 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000002d000926e377a703a8bdefe7b2365934cbed0027"], 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x84)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x830)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80}}}}}}, 0x0)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)
listen(r5, 0x1ff)
sendto$inet(r5, &(0x7f00000004c0)="ab", 0x1, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @loopback=0x7f0000c0}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f000000cf00), 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

5.96124ms ago: executing program 1 (id=2126):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
recvmmsg$unix(r3, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000ff0700004100000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000400))
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x8040)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'})
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r9 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

0s ago: executing program 0 (id=2127):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) (async)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1ec, 0x13, 0x4, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x10, 0x7c, 0x2, {0x4e24, 0x4e22, [0x6, 0xabfb, 0xfffffffb, 0x2], [0xffff, 0x3ff, 0xfff, 0x9], 0x0, [0x0, 0xa01f]}, 0xfffffffc, 0x101}, [@INET_DIAG_REQ_BYTECODE={0x81, 0x1, "d3399136d82cfa079ab199943b08cb2390cacb779117a1b5a9b08fcf30745960c1dc9b0eaebf6b2ea2500222d2a1ed345e958b99eaaae89dda95ca129311f547e1206e1a3c85841d127b812ce54322a9ceab30b608c179143878a48b5763e6314a5244421c7bb546f8ed0deba347737045ac66f326abbc8f9fe4c25d23"}, @INET_DIAG_REQ_BYTECODE={0xf3, 0x1, "259ca3cea96cc2b28524fc39c9b837626002083357654a62a74d2d9d4ec76042a274c86f358ce23f9fcd7dc458470464f3ab86bec9c29b7ac2df8ca2359570f3a85bf9f1b10899bff3e6a8b1e195d71981bc87552dd164b65c03732a17c9a8d86cf45dcdef02a2213e95c74ffcf91dbf5c7931a5b74518113a227f80f5f531a0b99e640669c895f4d68340165426dffce458007d4884f11e1464afb8bf3df0bec4c18682d3d9ed3ab7ede31ad43d42ad7f23fc76a9c331b6e624005d13c1b9ef7747e4280def7da527ff9e59380817a418de438bdf6a69a11111e5150d24b39864006c4420b019d093d5f4811d741b"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "62bf7507028739fd5559bb55b3ebeaf3d6d4fce8191faac9f48c19ed6fe68bab2330f6"}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xfffffe7b}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r2}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c59976ac83fbefd0c25a22a3c6bd000000000000", 0x3c}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac14000000000d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfa1d7071b8b08a24211d2530205e1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x2400c804) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000140)=""/55, 0x1000000, 0x800, 0x5}, 0x20)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x74}}, 0x0)

kernel console output (not intermixed with test programs):

[   64.676163][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.678382][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.687120][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.694313][ T5840] team0: Port device team_slave_0 added
[   64.716044][ T5832] hsr_slave_0: entered promiscuous mode
[   64.718540][ T5832] hsr_slave_1: entered promiscuous mode
[   64.721412][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.724108][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.732148][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.741465][ T5840] team0: Port device team_slave_1 added
[   64.824492][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.828036][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.838707][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.859243][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.861793][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.870067][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.878598][ T5831] hsr_slave_0: entered promiscuous mode
[   64.881118][ T5831] hsr_slave_1: entered promiscuous mode
[   64.883665][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.886938][ T5831] Cannot create hsr debugfs directory
[   64.976794][ T5840] hsr_slave_0: entered promiscuous mode
[   64.980161][ T5840] hsr_slave_1: entered promiscuous mode
[   64.983162][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.988376][ T5840] Cannot create hsr debugfs directory
[   65.209779][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.236501][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.243544][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.263394][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.309926][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.318957][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.327564][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.335773][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.407330][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.418545][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.433489][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.442560][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.551378][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.593584][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.602794][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.614275][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.617523][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.647091][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.649940][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.657868][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   65.678788][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.681836][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.706270][ T5220] Bluetooth: hci0: command tx timeout
[   65.706403][   T54] Bluetooth: hci1: command tx timeout
[   65.718123][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.731614][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.734600][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.775437][   T54] Bluetooth: hci2: command tx timeout
[   65.794240][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   65.822604][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.825549][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.845893][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.848724][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.044546][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.070800][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.118325][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.143880][ T5832] veth0_vlan: entered promiscuous mode
[   66.171195][ T5831] veth0_vlan: entered promiscuous mode
[   66.182476][ T5832] veth1_vlan: entered promiscuous mode
[   66.209699][ T5831] veth1_vlan: entered promiscuous mode
[   66.233096][ T5840] veth0_vlan: entered promiscuous mode
[   66.248372][ T5840] veth1_vlan: entered promiscuous mode
[   66.266946][ T5832] veth0_macvtap: entered promiscuous mode
[   66.280855][ T5831] veth0_macvtap: entered promiscuous mode
[   66.286992][ T5832] veth1_macvtap: entered promiscuous mode
[   66.298042][ T5831] veth1_macvtap: entered promiscuous mode
[   66.311867][ T5840] veth0_macvtap: entered promiscuous mode
[   66.334540][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.344271][ T5840] veth1_macvtap: entered promiscuous mode
[   66.358419][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.372664][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.380002][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.390417][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.393971][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.398234][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.401447][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.409058][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.411808][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.414576][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.418526][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.433393][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.451550][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.477518][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.480994][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.484467][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.490357][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.577957][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.581250][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.634283][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.639410][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.667453][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.669886][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.696254][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.701310][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.744668][  T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.750945][  T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.757912][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.776345][  T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.779560][  T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.850437][ T5900] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   66.852786][ T5900] netlink: 'syz.0.1': attribute type 8 has an invalid length.
[   66.866881][ T5900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'.
[   66.878532][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.945532][ T5903] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   66.958061][ T5906] netlink: 'syz.2.4': attribute type 4 has an invalid length.
[   66.970478][ T5906] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   66.978923][ T5906] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   67.043373][ T5910] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   67.601555][ T5936] Zero length message leads to an empty skb
[   67.773439][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.779343][   T54] Bluetooth: hci0: command tx timeout
[   67.779373][ T5220] Bluetooth: hci1: command tx timeout
[   67.803845][ T5950] xt_CONNSECMARK: invalid mode: 254
[   67.855890][ T5220] Bluetooth: hci2: command tx timeout
[   68.512789][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   68.555660][ T5979] netlink: 1088 bytes leftover after parsing attributes in process `syz.0.24'.
[   68.559589][ T5979] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   68.597074][ T5979] bond1: entered promiscuous mode
[   68.709880][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.722614][ T5991] bond0: (slave rose0): Enslaving as an active interface with an up link
[   68.840203][ T6001] netlink: 'syz.2.29': attribute type 16 has an invalid length.
[   68.843615][ T6001] netlink: 'syz.2.29': attribute type 17 has an invalid length.
[   68.878566][ T6001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   68.892205][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   68.905512][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   69.318698][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   69.661742][ T6050] netlink: 'syz.2.40': attribute type 1 has an invalid length.
[   69.801734][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'.
[   69.847746][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.44'.
[   69.855593][ T5220] Bluetooth: hci1: command tx timeout
[   69.855855][   T54] Bluetooth: hci0: command tx timeout
[   69.900902][ T6060] x_tables: duplicate underflow at hook 2
[   69.902908][ T6060] x_tables: duplicate underflow at hook 2
[   69.905026][ T6060] x_tables: duplicate underflow at hook 2
[   69.907404][ T6060] x_tables: duplicate underflow at hook 2
[   69.909486][ T6060] x_tables: duplicate underflow at hook 2
[   69.935335][   T54] Bluetooth: hci2: command tx timeout
[   69.971154][ T6066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.46'.
[   70.130745][ T6039] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[   70.234194][ T6078] xt_CT: No such helper "pptp"
[   70.294694][ T6087] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.323568][ T6086] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   71.066216][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.068260][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.241833][ T6137] netlink: 'syz.2.68': attribute type 39 has an invalid length.
[   71.283473][   T33] audit: type=1800 audit(1752662237.483:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="blkio.bfq.time_recursive" dev="tmpfs" ino=82 res=0 errno=0
[   71.391081][ T6144] x_tables: ip_tables: osf match: only valid for protocol 6
[   71.455926][ T6148] sctp: failed to load transform for md5: -4
[   71.659204][ T6174] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 1, id = 0
[   71.936907][   T54] Bluetooth: hci1: command 0x0419 tx timeout
[   71.936948][ T5220] Bluetooth: hci0: command tx timeout
[   72.016202][ T5220] Bluetooth: hci2: command tx timeout
[   73.038263][ T6235] __nla_validate_parse: 8 callbacks suppressed
[   73.038277][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.093752][ T6239] netlink: 'syz.2.98': attribute type 21 has an invalid length.
[   73.136953][ T6239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.141695][ T6235] netlink: 'syz.2.98': attribute type 13 has an invalid length.
[   73.150757][ T6235] netlink: 'syz.2.98': attribute type 17 has an invalid length.
[   73.171121][ T6237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'.
[   73.810654][ T6267] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.106'.
[   73.814519][ T6267] tipc: Enabling <ib:lo> not permitted
[   73.822037][ T6267] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   73.827544][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'.
[   74.021054][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'.
[   74.027922][ T5220] Bluetooth: hci1: command 0x0419 tx timeout
[   74.044180][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'.
[   74.324418][ T6301] block nbd2: not configured, cannot reconfigure
[   74.346783][ T6301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.113'.
[   74.350259][ T6301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.113'.
[   74.361828][ T6300] tipc: Started in network mode
[   74.365904][ T6300] tipc: Node identity e2c95dcca227, cluster identity 4711
[   74.375375][ T6300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.392064][ T6300] tipc: Resetting bearer <eth:syzkaller0>
[   74.404616][ T6299] tipc: Disabling bearer <eth:syzkaller0>
[   74.438081][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.117'.
[   74.870058][ T6352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.283234][ T6396] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   75.355353][ T6398] warning: `syz.1.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.366994][ T6402] netlink: 'syz.0.142': attribute type 7 has an invalid length.
[   76.252294][ T6436] xfrm1: entered promiscuous mode
[   76.254109][ T6436] xfrm1: entered allmulticast mode
[   76.266835][ T6436] xt_hashlimit: size too large, truncated to 1048576
[   76.365722][ T6443] bridge1: entered promiscuous mode
[   76.689272][ T6469] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   76.692265][ T6469] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   77.318246][ T6523] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   77.351305][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.379501][ T6523] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.382705][ T6523] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   77.389635][ T6523] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   77.582920][ T6549] sctp: [Deprecated]: syz.0.190 (pid 6549) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.582920][ T6549] Use struct sctp_sack_info instead
[   77.886096][ T6582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.922326][ T6582] syzkaller0: entered promiscuous mode
[   77.923334][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.924639][ T6582] syzkaller0: entered allmulticast mode
[   77.932555][ T6582] tipc: Resetting bearer <eth:syzkaller0>
[   77.942254][ T6580] tipc: Resetting bearer <eth:syzkaller0>
[   78.917210][ T5898] tipc: Node number set to 1089363404
[   78.993145][ T6580] tipc: Disabling bearer <eth:syzkaller0>
[   79.017532][ T6592] __nla_validate_parse: 19 callbacks suppressed
[   79.017550][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'.
[   79.039999][ T6592] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'.
[   79.149540][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'.
[   79.360127][ T6621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'.
[   79.737301][ T6635] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.747104][ T6635] bond_slave_0: entered promiscuous mode
[   79.749445][ T6635] bond_slave_1: entered promiscuous mode
[   79.751795][ T6635] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   79.756421][ T6635] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[   79.765809][ T6635] bridge_slave_0: left allmulticast mode
[   79.767793][ T6635] bridge_slave_0: left promiscuous mode
[   79.770400][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.777708][ T6635] bridge_slave_1: left allmulticast mode
[   79.779441][ T6635] bridge_slave_1: left promiscuous mode
[   79.781208][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.788754][ T6635] bond0: (slave bond_slave_0): Releasing backup interface
[   79.791466][ T6635] bond_slave_0: left promiscuous mode
[   79.796331][ T6635] bond0: (slave bond_slave_1): Releasing backup interface
[   79.800470][ T6635] bond_slave_1: left promiscuous mode
[   79.814299][ T6635] team0: Port device team_slave_0 removed
[   79.822143][ T6635] team0: Port device team_slave_1 removed
[   79.826833][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.829676][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.834857][ T6635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.838070][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.848340][ T6635] bond2: (slave macvlan2): Removing an active aggregator
[   79.851261][ T6635] bond2: (slave macvlan2): Releasing backup interface
[   79.941419][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'.
[   79.976717][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'.
[   80.112320][ T6653] xt_CT: No such helper "snmp"
[   80.205390][ T6662] nbd2: detected capacity change from 0 to 63
[   80.255209][   T55] block nbd2: Receive control failed (result -32)
[   80.279823][ T6675] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004
[   80.386561][ T6691] netlink: 248 bytes leftover after parsing attributes in process `syz.0.231'.
[   80.393269][ T6690] netlink: 240 bytes leftover after parsing attributes in process `syz.0.231'.
[   80.508272][ T6701] xt_hashlimit: size too large, truncated to 1048576
[   80.533278][ T6698] bridge1: entered promiscuous mode
[   80.540983][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'.
[   80.563411][ T6699] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   80.566183][ T6699] team0: Device macvtap1 is already an upper device of the team interface
[   80.604622][ T6704] xt_bpf: check failed: parse error
[   80.816151][ T6723] geneve1: entered promiscuous mode
[   80.818368][ T6723] geneve1: entered allmulticast mode
[   80.838742][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.244'.
[   81.254742][ T6749] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   81.261322][ T6751] sctp: [Deprecated]: syz.0.252 (pid 6751) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.261322][ T6751] Use struct sctp_sack_info instead
[   81.474317][   T95] cfg80211: failed to load regulatory.db
[   81.580482][ T6767] can: request_module (can-proto-3) failed.
[   81.684761][ T6779] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[   81.713206][ T6779] netlink: 'syz.1.262': attribute type 4 has an invalid length.
[   82.214170][ T6802] syz_tun: entered promiscuous mode
[   82.217714][ T6802] macsec1: entered promiscuous mode
[   82.945184][ T6865] sctp: [Deprecated]: syz.0.290 (pid 6865) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.945184][ T6865] Use struct sctp_sack_info instead
[   82.982830][ T6866] ip6gre1: entered allmulticast mode
[   83.147903][ T6889] syz.2.297 (6889) used obsolete PPPIOCDETACH ioctl
[   83.171825][ T6889] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.294575][ T6899] ip6tnl2: entered promiscuous mode
[   83.297323][ T6899] ip6tnl2: entered allmulticast mode
[   83.299804][ T6899] team0: Device ip6tnl2 is of different type
[   83.570389][ T6929] netlink: 'syz.1.302': attribute type 72 has an invalid length.
[   83.752619][ T6936] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   84.024275][ T6961] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   84.125642][ T6964] nbd0: detected capacity change from 0 to 127
[   84.129129][ T6969] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   84.137061][   T55] block nbd0: Receive control failed (result -32)
[   84.158592][ T6974] __nla_validate_parse: 9 callbacks suppressed
[   84.158602][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.316'.
[   84.203432][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.317'.
[   84.253831][ T6980] Bluetooth: MGMT ver 1.23
[   84.316822][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   84.320301][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[   84.323829][ T6984] netlink: 'syz.1.321': attribute type 20 has an invalid length.
[   84.335684][ T6984] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.340240][ T6984] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.343793][ T6984] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.347611][ T6984] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.359118][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   84.362524][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[   84.371205][ T6984] netlink: 'syz.1.321': attribute type 20 has an invalid length.
[   84.435913][ T6992] netlink: 'syz.0.322': attribute type 3 has an invalid length.
[   84.498269][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.324'.
[   84.501925][ T6995] netlink: 43 bytes leftover after parsing attributes in process `syz.1.324'.
[   84.516929][ T6995] netlink: 43 bytes leftover after parsing attributes in process `syz.1.324'.
[   85.097188][ T7016] netlink: 104 bytes leftover after parsing attributes in process `syz.1.331'.
[   86.281063][ T7108] bridge2: entered allmulticast mode
[   86.376874][ T7112] netlink: 'syz.1.340': attribute type 7 has an invalid length.
[   86.379478][ T7112] netlink: 'syz.1.340': attribute type 8 has an invalid length.
[   86.383419][ T7112] tc_dump_action: action bad kind
[   86.929725][ T7149] xt_socket: unknown flags 0xfc
[   86.941757][ T7152] batadv_slave_1: entered promiscuous mode
[   86.957014][ T7151] batadv_slave_1: left promiscuous mode
[   87.708980][ T7223] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.719917][ T7223] veth0_to_bond: entered allmulticast mode
[   87.939355][ T7241] delete_channel: no stack
[   88.071462][ T7254] netlink: 'syz.0.387': attribute type 4 has an invalid length.
[   88.217311][ T7270] xt_hashlimit: max too large, truncated to 1048576
[   88.221504][ T7270] xt_hashlimit: overflow, rate too high: 0
[   88.323491][ T7275] netlink: 'syz.0.392': attribute type 7 has an invalid length.
[   88.326682][ T7275] netlink: 'syz.0.392': attribute type 8 has an invalid length.
[   88.875641][ T7294] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[   88.998463][ T7299] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   88.998735][ T5863] bond0: (slave bond_slave_0): interface is now down
[   89.008566][ T5863] bond0: (slave bond_slave_1): interface is now down
[   89.014621][ T5863] bond0: now running without any active interface!
[   89.392322][ T7312] __nla_validate_parse: 14 callbacks suppressed
[   89.392363][ T7312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'.
[   89.479088][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'.
[   89.497377][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'.
[   89.722946][ T7336] netlink: 5100 bytes leftover after parsing attributes in process `syz.0.410'.
[   89.727967][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[   89.826872][ T7342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.412'.
[   89.969898][ T7349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.413'.
[   89.980499][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.413'.
[   90.146385][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'.
[   90.298812][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.423'.
[   90.311366][ T7377] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   90.348797][ T5220] Bluetooth: hci2: command tx timeout
[   90.767046][ T7423] macvlan3: entered promiscuous mode
[   90.769408][ T7423] macvlan3: entered allmulticast mode
[   91.191780][ T7437] netlink: 'syz.1.443': attribute type 5 has an invalid length.
[   91.351815][ T7443] Cannot find add_set index 0 as target
[   91.433855][ T7450] netlink: 'syz.2.449': attribute type 1 has an invalid length.
[   91.543764][ T7453] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[   91.547065][ T7452] netlink: 'syz.1.450': attribute type 1 has an invalid length.
[   91.637977][ T7457] tipc: Started in network mode
[   91.639929][ T7457] tipc: Node identity ceeb0cd4f6e1, cluster identity 4711
[   91.646072][ T7457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.650402][ T7457] syzkaller0: entered promiscuous mode
[   91.652757][ T7457] syzkaller0: entered allmulticast mode
[   91.663374][ T7457] tipc: Resetting bearer <eth:syzkaller0>
[   91.670354][ T7460] netlink: 'syz.1.453': attribute type 4 has an invalid length.
[   91.673665][ T7454] tipc: Resetting bearer <eth:syzkaller0>
[   91.687175][ T7454] tipc: Disabling bearer <eth:syzkaller0>
[   91.699728][ T7460] netlink: 'syz.1.453': attribute type 4 has an invalid length.
[   91.836662][ T7460] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   92.028757][ T7485] gtp0: entered allmulticast mode
[   92.169959][ T7499] lo speed is unknown, defaulting to 1000
[   92.180737][ T7499] lo speed is unknown, defaulting to 1000
[   92.184691][ T7499] lo speed is unknown, defaulting to 1000
[   92.401165][ T7499] infiniband syz0: set active
[   92.405812][ T7499] infiniband syz0: added lo
[   92.414748][ T5298] lo speed is unknown, defaulting to 1000
[   92.436531][ T7514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.449412][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.473774][ T7499] RDS/IB: syz0: added
[   92.477210][ T7499] smc: adding ib device syz0 with port count 1
[   92.480027][ T7499] smc:    ib device syz0 port 1 has pnetid 
[   92.487114][ T7499] lo speed is unknown, defaulting to 1000
[   92.652929][   T51] lo speed is unknown, defaulting to 1000
[   92.667692][ T7499] lo speed is unknown, defaulting to 1000
[   92.865978][ T7499] lo speed is unknown, defaulting to 1000
[   93.640828][ T7567] Illegal XDP return value 4294967262 on prog  (id 197) dev N/A, expect packet loss!
[   93.748656][ T7579] validate_nla: 4 callbacks suppressed
[   93.748698][ T7579] netlink: 'syz.2.490': attribute type 9 has an invalid length.
[   93.855569][ T7589] netlink: 'syz.1.494': attribute type 58 has an invalid length.
[   93.987701][ T7591] team0 (unregistering): Port device team_slave_0 removed
[   93.996646][ T7591] team0 (unregistering): Port device team_slave_1 removed
[   94.083816][ T7599] netlink: 'syz.1.498': attribute type 21 has an invalid length.
[   94.159994][ T7602] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[   94.177552][ T7608] bond0: entered promiscuous mode
[   94.179862][ T7608] bond0: left promiscuous mode
[   94.217852][ T7602] bond3: entered promiscuous mode
[   94.219958][ T7602] bond3: entered allmulticast mode
[   94.231668][ T7612] bridge3: the hash_elasticity option has been deprecated and is always 16
[   94.231708][ T7611] netlink: 'syz.2.502': attribute type 39 has an invalid length.
[   94.248055][ T7612] bond3: (slave bridge3): making interface the new active one
[   94.251391][ T7612] bridge3: entered promiscuous mode
[   94.253648][ T7612] bridge3: entered allmulticast mode
[   94.265570][ T7612] bond3: (slave bridge3): Enslaving as an active interface with an up link
[   94.337887][ T7614] xt_CT: No such helper "snmp"
[   94.431477][ T7620] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[   94.438255][ T7616] xt_TPROXY: Can be used only with -p tcp or -p udp
[   94.551804][ T7629] __nla_validate_parse: 35 callbacks suppressed
[   94.551822][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'.
[   94.607337][ T7631] syz_tun: entered allmulticast mode
[   94.622729][ T7630] syz_tun: left allmulticast mode
[   94.677827][ T7635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'.
[   94.682323][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.511'.
[   94.860745][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.516'.
[   94.876225][ T7647] netlink: 'syz.1.516': attribute type 1 has an invalid length.
[   94.879204][ T7647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.516'.
[   94.945095][ T7649] netlink: 'syz.1.517': attribute type 1 has an invalid length.
[   94.962421][ T7649] 8021q: adding VLAN 0 to HW filter on device bond4
[   94.983088][ T7649] bond4: (slave veth3): Enslaving as an active interface with a down link
[   94.997197][ T7649] vlan2: entered allmulticast mode
[   94.998844][ T7649] bond4: entered allmulticast mode
[   95.001343][ T7649] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.224340][ T7657] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   95.289987][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[   95.472127][ T7675] syzkaller1: entered promiscuous mode
[   95.474371][ T7675] syzkaller1: entered allmulticast mode
[   95.697216][ T7688] openvswitch: netlink: IPv6 tunnel dst address is zero
[   96.147876][ T7693] netlink: 'syz.0.532': attribute type 4 has an invalid length.
[   96.151211][ T7694] netlink: 'syz.0.532': attribute type 4 has an invalid length.
[   96.377985][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'.
[   96.384031][ T7700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.535'.
[   96.424245][ T7706] netlink: 9 bytes leftover after parsing attributes in process `syz.2.536'.
[   96.428657][ T7706] 0: renamed from hsr_slave_1 (while UP)
[   96.434196][ T7706] 0: entered allmulticast mode
[   96.437309][ T7706] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[   96.486894][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.537'.
[   96.732937][ T7718] lo speed is unknown, defaulting to 1000
[   96.920143][ T7728] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   97.552718][ T7776] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   97.556415][ T7776] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   97.674043][ T7790] bridge3: entered promiscuous mode
[   97.809942][ T7801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.813252][ T7801] D: renamed from syzkaller0
[   97.823569][ T7801] tipc: Disabling bearer <eth:syzkaller0>
[   97.849948][ T7809] netlink: 'syz.2.575': attribute type 11 has an invalid length.
[   98.062556][ T7842] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   98.454013][ T7874] vxcan5: entered allmulticast mode
[   98.813817][ T7896] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.866738][ T7905] veth5: entered promiscuous mode
[   98.883854][ T7905] bond5: (slave veth5): Enslaving as an active interface with an up link
[   98.914836][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.924602][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.301202][ T7937] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   99.529539][ T7941] lo speed is unknown, defaulting to 1000
[   99.593928][ T7931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.669788][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.743005][ T7967] validate_nla: 3 callbacks suppressed
[   99.743020][ T7967] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[   99.747772][ T7967] netlink: 'syz.2.622': attribute type 1 has an invalid length.
[   99.827944][ T7969] __nla_validate_parse: 22 callbacks suppressed
[   99.827957][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'.
[   99.833028][ T7969] netlink: 'syz.2.623': attribute type 7 has an invalid length.
[   99.855519][ T7969] netlink: 'syz.2.623': attribute type 8 has an invalid length.
[   99.859703][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'.
[  100.203604][ T7979] tipc: New replicast peer: 255.255.255.255
[  100.209354][ T7979] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.223186][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'.
[  100.227523][ T7979] tipc: Disabling bearer <udp:syz2>
[  101.033292][ T7990] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  101.039592][ T7990] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  101.072593][ T7995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.631'.
[  101.116718][ T7998] IPv6: sit3: Disabled Multicast RS
[  101.121257][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'.
[  101.176132][ T7997] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.632'.
[  101.256483][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.635'.
[  101.327204][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.637'.
[  101.330328][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[  101.893884][ T8018] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  101.897982][ T8018] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  101.920137][ T8020] netlink: 'syz.1.642': attribute type 1 has an invalid length.
[  101.923314][ T8020] netlink: 'syz.1.642': attribute type 2 has an invalid length.
[  101.974406][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'.
[  102.606911][ T8052] bridge_slave_1: left allmulticast mode
[  102.610420][ T8052] bridge_slave_1: left promiscuous mode
[  102.612915][ T8052] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.620895][ T8052] bridge_slave_0: left allmulticast mode
[  102.623256][ T8052] bridge_slave_0: left promiscuous mode
[  102.626195][ T8052] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.930939][ T8068] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  103.030802][ T8078] tipc: Can't bind to reserved service type 2
[  103.103553][ T8081] ipt_REJECT: TCP_RESET invalid for non-tcp
[  103.287039][ T8100] openvswitch: netlink: Missing key (keys=40, expected=100)
[  103.309823][ T8102] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  103.392690][ T8108] sctp: [Deprecated]: syz.2.671 (pid 8108) Use of int in max_burst socket option deprecated.
[  103.392690][ T8108] Use struct sctp_assoc_value instead
[  103.713676][ T8126] x_tables: duplicate underflow at hook 1
[  104.342899][ T8178] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  104.371667][ T8180] pimreg3: entered allmulticast mode
[  104.387976][ T8183] pimreg3: left allmulticast mode
[  104.661251][ T8204] 8021q: adding VLAN 0 to HW filter on device team0
[  104.671581][ T8204] bond0: (slave team0): Enslaving as an active interface with an up link
[  104.724488][ T8205] can: request_module (can-proto-4) failed.
[  104.739861][  T972] IPVS: starting estimator thread 0...
[  104.742642][ T8200] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  104.849066][ T8211] IPVS: using max 62 ests per chain, 148800 per kthread
[  104.918066][   T33] audit: type=1800 audit(1752662271.123:3): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1337 res=0 errno=0
[  104.936543][   T33] audit: type=1800 audit(1752662271.143:4): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1337 res=0 errno=0
[  105.067981][ T8222] __nla_validate_parse: 23 callbacks suppressed
[  105.067995][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  105.371340][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.704'.
[  105.376132][ T8237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.704'.
[  105.963305][ T8243] IPv6: Can't replace route, no match found
[  106.230677][ T8256] sctp: [Deprecated]: syz.0.710 (pid 8256) Use of int in maxseg socket option.
[  106.230677][ T8256] Use struct sctp_assoc_value instead
[  106.338730][ T8262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.713'.
[  106.465616][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'.
[  106.793535][ T8273] macvlan4: entered promiscuous mode
[  106.797598][ T8273] macvlan4: entered allmulticast mode
[  106.930962][ T8283] validate_nla: 11 callbacks suppressed
[  106.930978][ T8283] netlink: 'syz.0.719': attribute type 9 has an invalid length.
[  106.939551][ T8283] netlink: 'syz.0.719': attribute type 7 has an invalid length.
[  106.942379][ T8283] netlink: 'syz.0.719': attribute type 8 has an invalid length.
[  106.945889][ T8283] netlink: 'syz.0.719': attribute type 9 has an invalid length.
[  106.948902][ T8283] netlink: 'syz.0.719': attribute type 7 has an invalid length.
[  106.952057][ T8283] netlink: 'syz.0.719': attribute type 8 has an invalid length.
[  106.959935][ T8283] netlink: 'syz.0.719': attribute type 9 has an invalid length.
[  106.962839][ T8283] netlink: 'syz.0.719': attribute type 7 has an invalid length.
[  106.965880][ T8283] netlink: 'syz.0.719': attribute type 8 has an invalid length.
[  106.969248][ T8283] netlink: 'syz.0.719': attribute type 9 has an invalid length.
[  107.099104][ T8290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.722'.
[  107.190541][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  107.255589][ T8301] raw_sendmsg: syz.1.726 forgot to set AF_INET. Fix it!
[  107.511735][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[  107.601877][ T8327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.735'.
[  107.725228][ T8334] syz.1.735: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  107.732237][ T8334] CPU: 1 UID: 0 PID: 8334 Comm: syz.1.735 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  107.732250][ T8334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.732256][ T8334] Call Trace:
[  107.732260][ T8334]  <TASK>
[  107.732264][ T8334]  dump_stack_lvl+0x189/0x250
[  107.732281][ T8334]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.732291][ T8334]  ? __pfx__printk+0x10/0x10
[  107.732303][ T8334]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.732315][ T8334]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.732326][ T8334]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  107.732337][ T8334]  warn_alloc+0x214/0x310
[  107.732353][ T8334]  ? __pfx_warn_alloc+0x10/0x10
[  107.732367][ T8334]  ? __get_vm_area_node+0x28f/0x300
[  107.732378][ T8334]  ? xskq_create+0xbf/0x170
[  107.732394][ T8334]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  107.732417][ T8334]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  107.732429][ T8334]  ? __kasan_kmalloc+0x93/0xb0
[  107.732441][ T8334]  vmalloc_user_noprof+0xad/0xf0
[  107.732451][ T8334]  ? xskq_create+0xbf/0x170
[  107.732463][ T8334]  xskq_create+0xbf/0x170
[  107.732475][ T8334]  xsk_init_queue+0xb0/0x110
[  107.732487][ T8334]  xsk_setsockopt+0x4de/0x710
[  107.732499][ T8334]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.732513][ T8334]  ? aa_sock_opt_perm+0x74/0x110
[  107.732528][ T8334]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  107.732541][ T8334]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.732552][ T8334]  do_sock_setsockopt+0x25a/0x3e0
[  107.732566][ T8334]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  107.732577][ T8334]  ? __fget_files+0x2a/0x420
[  107.732593][ T8334]  __x64_sys_setsockopt+0x18b/0x220
[  107.732605][ T8334]  do_syscall_64+0xfa/0x3b0
[  107.732613][ T8334]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.732631][ T8334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.732640][ T8334]  ? exc_page_fault+0x9f/0xf0
[  107.732651][ T8334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.732659][ T8334] RIP: 0033:0x7f500018e929
[  107.732668][ T8334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.732675][ T8334] RSP: 002b:00007f4ffdfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  107.732685][ T8334] RAX: ffffffffffffffda RBX: 00007f50003b6160 RCX: 00007f500018e929
[  107.732691][ T8334] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000b
[  107.732696][ T8334] RBP: 00007f5000210b39 R08: 0000000000000004 R09: 0000000000000000
[  107.732700][ T8334] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  107.732705][ T8334] R13: 0000000000000000 R14: 00007f50003b6160 R15: 00007ffe337a83c8
[  107.732718][ T8334]  </TASK>
[  107.732721][ T8334] Mem-Info:
[  107.813571][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  107.834329][ T8334] active_anon:4637 inactive_anon:0 isolated_anon:0
[  107.834329][ T8334]  active_file:955 inactive_file:38219 isolated_file:0
[  107.834329][ T8334]  unevictable:1768 dirty:97 writeback:0
[  107.834329][ T8334]  slab_reclaimable:9500 slab_unreclaimable:69862
[  107.834329][ T8334]  mapped:17922 shmem:2576 pagetables:982
[  107.834329][ T8334]  sec_pagetables:0 bounce:0
[  107.834329][ T8334]  kernel_misc_reclaimable:0
[  107.834329][ T8334]  free:278309 free_pcp:21576 free_cma:0
[  107.871119][ T8334] Node 0 active_anon:11372kB inactive_anon:0kB active_file:2768kB inactive_file:9352kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25076kB dirty:232kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7748kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.881701][ T8334] Node 1 active_anon:7244kB inactive_anon:0kB active_file:1052kB inactive_file:143524kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46680kB dirty:156kB writeback:0kB shmem:5268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4268kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.896832][ T8334] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.900585][ T8346] macvlan1: entered promiscuous mode
[  107.912366][ T8346] ipvlan0: entered promiscuous mode
[  107.914742][ T8346] ipvlan0: left promiscuous mode
[  107.916513][ T8334] lowmem_reserve[]: 0 812 812 812 812
[  107.918248][ T8334] Node 0 DMA32 free:344036kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11372kB inactive_anon:0kB active_file:2768kB inactive_file:9352kB unevictable:3536kB writepending:232kB present:1556484kB managed:831872kB mlocked:0kB bounce:0kB free_pcp:34964kB local_pcp:16224kB free_cma:0kB
[  107.928587][ T8334] lowmem_reserve[]: 0 0 0 0 0
[  107.930614][ T8334] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.941143][ T8346] macvlan1: left promiscuous mode
[  107.944204][ T8334] lowmem_reserve[]: 0 0 854 854 854
[  107.949515][ T8334] Node 1 Normal free:295128kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7244kB inactive_anon:0kB active_file:1052kB inactive_file:143524kB unevictable:3536kB writepending:156kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:51496kB local_pcp:30972kB free_cma:0kB
[  107.959257][ T8334] lowmem_reserve[]: 0 0 0 0 0
[  107.960873][ T8334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  107.964980][ T8334] Node 0 DMA32: 1165*4kB (UME) 572*8kB (UME) 177*16kB (UME) 200*32kB (UME) 225*64kB (UM) 81*128kB (UM) 29*256kB (UME) 15*512kB (U) 13*1024kB (UM) 11*2048kB (UME) 61*4096kB (UM) = 344036kB
[  107.971270][ T8334] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  107.977310][ T8334] Node 1 Normal: 231*4kB (UE) 189*8kB (UME) 174*16kB (UME) 189*32kB (UME) 26*64kB (UM) 19*128kB (ME) 13*256kB (UM) 14*512kB (UM) 9*1024kB (UME) 3*2048kB (UME) 62*4096kB (M) = 295172kB
[  107.983127][ T8334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.986294][ T8334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.989391][ T8334] 41750 total pagecache pages
[  107.990999][ T8334] 0 pages in swap cache
[  107.992475][ T8334] Free swap  = 124996kB
[  107.993954][ T8334] Total swap = 124996kB
[  107.996868][ T8334] 786301 pages RAM
[  107.997419][ T8347] tipc: Enabling <ib:lo> not permitted
[  107.998131][ T8334] 0 pages HighMem/MovableOnly
[  107.998139][ T8334] 241085 pages reserved
[  107.998143][ T8334] 0 pages cma reserved
[  108.007129][ T8347] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  108.090215][ T8353] Cannot find del_set index 4 as target
[  108.330833][ T8370] veth0: entered promiscuous mode
[  108.448096][ T8376] dummy0: entered promiscuous mode
[  108.450513][ T8376] macvtap1: entered promiscuous mode
[  108.454253][ T8376] macvtap1: entered allmulticast mode
[  108.456217][ T8376] dummy0: entered allmulticast mode
[  108.462089][ T8376] dummy0: left allmulticast mode
[  108.464245][ T8376] dummy0: left promiscuous mode
[  108.820163][ T8384] pim6reg: entered allmulticast mode
[  109.099239][ T8365] veth0: left promiscuous mode
[  109.168953][ T8408] netem: change failed
[  109.439308][ T8427] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.477018][ T8427] bond2: (slave bridge4): making interface the new active one
[  109.480768][ T8427] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  109.492326][ T8427] gretap1: entered promiscuous mode
[  109.497744][ T8427] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  109.637521][ T8440] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  110.151449][ T8484] __nla_validate_parse: 15 callbacks suppressed
[  110.151461][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.795'.
[  110.308196][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  110.327148][ T8498] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.330745][ T8498] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.334230][ T8498] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.339642][ T8498] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.880237][ T8541] netlink: 224 bytes leftover after parsing attributes in process `syz.0.813'.
[  110.883899][ T8541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.813'.
[  111.129059][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'.
[  111.294455][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  111.387264][ T8568] bond7: (slave bridge0): making interface the new active one
[  111.390752][ T8568] bond7: (slave bridge0): Enslaving as an active interface with an up link
[  111.437433][ T8577] tipc: Started in network mode
[  111.439035][ T8577] tipc: Node identity 2, cluster identity 5
[  111.444227][ T8577] tipc: Node number set to 2
[  111.452485][ T8577] tipc: Cannot configure node identity twice
[  111.544734][ T8587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.827'.
[  111.753449][ T8601] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  111.763615][ T8601] ipt_rpfilter: unknown options
[  111.803109][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'.
[  111.810571][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'.
[  111.842598][ T8601] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20002
[  112.068030][ T8615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.790743][ T8655] validate_nla: 98 callbacks suppressed
[  112.790763][ T8655] netlink: 'syz.2.844': attribute type 1 has an invalid length.
[  112.807227][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.844'.
[  113.094820][ T8676] bond9: entered promiscuous mode
[  113.098464][ T8676] 8021q: adding VLAN 0 to HW filter on device bond9
[  113.442798][ T8708] netlink: 'syz.1.858': attribute type 13 has an invalid length.
[  113.455746][ T8708] netlink: 'syz.1.858': attribute type 17 has an invalid length.
[  113.462553][ T8708] netlink: 'syz.1.858': attribute type 27 has an invalid length.
[  113.512044][ T8708] lo speed is unknown, defaulting to 1000
[  113.526417][ T8714] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  113.591415][ T8722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.623286][ T8725] tap0: tun_chr_ioctl cmd 1074025675
[  113.625861][ T8725] tap0: persist disabled
[  113.635850][ T8725] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20003
[  113.676354][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.734524][ T8732] openvswitch: netlink: Message has 16 unknown bytes.
[  113.762817][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.772523][ T8722] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  113.838649][ T8739] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  114.023828][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.027100][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.124498][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.144006][ T8750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.170179][ T8750] 0: left allmulticast mode
[  114.239585][ T8750] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.242396][ T8750] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.246017][ T8750] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.248911][ T8750] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.292074][ T8750] bridge1: left promiscuous mode
[  114.297241][ T8750] gtp0: left allmulticast mode
[  114.304569][ T8750] bridge3: left promiscuous mode
[  114.316441][ T8750] gretap1: left promiscuous mode
[  114.320149][ T8750] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.323371][ T8750] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.326394][ T8750] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.329334][ T8750] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.695243][ T8771] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  114.700440][ T8770] dvmrp0: entered allmulticast mode
[  114.834100][ T8784] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  114.891231][ T8792] xt_NFQUEUE: number of total queues is 0
[  115.017018][   T33] audit: type=1800 audit(1752662281.223:5): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.886" name="memory.events" dev="tmpfs" ino=1569 res=0 errno=0
[  115.310844][ T8822] __nla_validate_parse: 13 callbacks suppressed
[  115.310856][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'.
[  115.455597][ T8837] netlink: 'syz.0.901': attribute type 2 has an invalid length.
[  115.458893][ T8837] netlink: 'syz.0.901': attribute type 1 has an invalid length.
[  115.466632][ T8839] netlink: 9 bytes leftover after parsing attributes in process `syz.1.902'.
[  115.466866][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  115.469593][ T8839] 0: renamed from hsr0 (while UP)
[  115.480534][ T8839] 0: entered allmulticast mode
[  115.482515][ T8839] hsr_slave_0: entered allmulticast mode
[  115.484722][ T8839] hsr_slave_1: entered allmulticast mode
[  115.490183][ T8839] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  115.517233][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'.
[  115.533500][ T8837] lo speed is unknown, defaulting to 1000
[  115.539058][ T8841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.903'.
[  115.557986][ T8841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'.
[  115.565483][ T8841] netlink: 'syz.1.903': attribute type 10 has an invalid length.
[  115.568806][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.903'.
[  115.572350][ T8841] dummy0: entered promiscuous mode
[  115.574723][ T8841] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  115.582466][ T8842] netlink: 'syz.0.901': attribute type 2 has an invalid length.
[  115.919105][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'.
[  116.001477][ T8874] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[  116.030205][ T8874] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.038402][ T8874] ipvlan2: entered allmulticast mode
[  116.040174][ T8874] bond3: entered allmulticast mode
[  116.051165][ T8874] bond3: (slave gretap2): making interface the new active one
[  116.053654][ T8874] gretap2: entered allmulticast mode
[  116.057040][ T8874] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  116.066097][ T8874] syz.2.912 (8874) used greatest stack depth: 20136 bytes left
[  116.117414][ T8880] netlink: 'syz.1.911': attribute type 3 has an invalid length.
[  116.184209][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'.
[  116.193958][ T8889] netlink: 96 bytes leftover after parsing attributes in process `syz.1.914'.
[  116.651468][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.683357][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.715109][ T8926] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  116.717335][ T8926] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  117.039235][ T8969] trusted_key: syz.2.939 sent an empty control message without MSG_MORE.
[  117.085701][ T8972] lo speed is unknown, defaulting to 1000
[  117.382238][ T8979] lo speed is unknown, defaulting to 1000
[  117.887176][ T8983] delete_channel: no stack
[  118.038878][ T9018] lo speed is unknown, defaulting to 1000
[  118.260938][ T9021] validate_nla: 7 callbacks suppressed
[  118.260954][ T9021] netlink: 'syz.0.954': attribute type 4 has an invalid length.
[  118.705840][ T9053] can: request_module (can-proto-0) failed.
[  118.921703][ T9070] macsec1: entered promiscuous mode
[  118.923860][ T9070] macsec1: entered allmulticast mode
[  119.082595][ T9073] lo speed is unknown, defaulting to 1000
[  120.330564][ T9111] __nla_validate_parse: 10 callbacks suppressed
[  120.330581][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'.
[  120.340743][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'.
[  120.345816][ T9111] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  120.348730][ T9111] netlink: 10 bytes leftover after parsing attributes in process `syz.0.983'.
[  120.375866][ T9111] nbd: socks must be embedded in a SOCK_ITEM attr
[  120.378908][ T9111] block nbd1: shutting down sockets
[  120.570647][ T5898] IPVS: starting estimator thread 0...
[  120.578617][ T9123] netlink: 'syz.0.989': attribute type 5 has an invalid length.
[  120.582992][ T9123] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.989'.
[  120.587372][ T9123] netlink: 108 bytes leftover after parsing attributes in process `syz.0.989'.
[  120.631855][ T9130] xt_socket: unknown flags 0xfc
[  120.665799][ T9124] IPVS: using max 62 ests per chain, 148800 per kthread
[  120.679486][ T9132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.993'.
[  120.766846][ T9136] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  120.817857][ T9136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.995'.
[  120.829143][ T9140] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  120.842934][ T9140] syzkaller1: entered promiscuous mode
[  120.845398][ T9140] syzkaller1: entered allmulticast mode
[  120.852043][ T9140] openvswitch: netlink: Message has 4 unknown bytes.
[  121.082678][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'.
[  121.307645][ T9164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1002'.
[  121.437605][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1003'.
[  121.558951][ T9172] sctp: [Deprecated]: syz.2.1004 (pid 9172) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.558951][ T9172] Use struct sctp_sack_info instead
[  122.057330][ T9220] sctp: [Deprecated]: syz.2.1019 (pid 9220) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.057330][ T9220] Use struct sctp_sack_info instead
[  122.131629][ T9228] batadv_slave_1: entered promiscuous mode
[  122.158913][ T9228] bridge0: port 1(ipvlan2) entered blocking state
[  122.161957][ T9228] bridge0: port 1(ipvlan2) entered disabled state
[  122.164783][ T9228] ipvlan2: entered allmulticast mode
[  122.167286][ T9228] bridge0: entered allmulticast mode
[  122.171631][ T9228] ipvlan2: left allmulticast mode
[  122.173872][ T9228] bridge0: left allmulticast mode
[  122.273957][ T9230] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  122.280554][ T9230] netlink: 'syz.0.1022': attribute type 11 has an invalid length.
[  122.773550][ T9241] netlink: 'syz.1.1026': attribute type 4 has an invalid length.
[  123.129830][ T9269] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  123.133077][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.135582][ T9263] lo speed is unknown, defaulting to 1000
[  123.436174][ T9270] lo speed is unknown, defaulting to 1000
[  124.110702][ T9331] netlink: 'syz.1.1050': attribute type 10 has an invalid length.
[  124.149586][ T9331] team0: Port device geneve0 added
[  124.227706][ T9337] IPVS: set_ctl: invalid protocol: 60 172.30.3.3:20004
[  124.284789][ T9342] netlink: 'syz.1.1054': attribute type 5 has an invalid length.
[  124.290366][ T9342] netlink: 'syz.1.1054': attribute type 6 has an invalid length.
[  124.450403][ T9366] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[  124.456287][ T9364] netlink: 'syz.1.1061': attribute type 10 has an invalid length.
[  124.487400][ T9366] 8021q: adding VLAN 0 to HW filter on device bond4
[  124.509172][ T9364] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  124.580533][ T9378] Bluetooth: MGMT ver 1.23
[  124.622151][ T9384] netlink: 'syz.1.1067': attribute type 42 has an invalid length.
[  124.627443][ T9385] netlink: 'syz.1.1067': attribute type 1 has an invalid length.
[  124.664416][ T9388] bridge0: entered promiscuous mode
[  124.666916][ T9388] vlan2: entered promiscuous mode
[  125.562446][ T9428] __nla_validate_parse: 16 callbacks suppressed
[  125.562461][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'.
[  125.838354][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'.
[  125.841251][ T9448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1085'.
[  125.848878][ T9448] gretap2: entered promiscuous mode
[  125.911422][ T9450] lo speed is unknown, defaulting to 1000
[  125.914576][ T9452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1087'.
[  125.917936][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1087'.
[  125.958706][ T9453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1086'.
[  126.049605][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'.
[  126.060846][ T9455] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1088'.
[  126.218412][ T9463] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1090'.
[  126.222023][ T9463] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1090'.
[  126.233312][ T9463] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  126.449220][ T9476] : entered promiscuous mode
[  126.608463][ T9493] geneve2: entered promiscuous mode
[  126.704381][ T9506] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  126.727715][ T9506] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.742375][ T9506] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.744798][ T9506] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  126.750731][ T9506] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  127.484594][ T9531] xfrm2: entered promiscuous mode
[  127.487082][ T9531] xfrm2: entered allmulticast mode
[  128.192598][ T9566] netlink: 'syz.0.1121': attribute type 12 has an invalid length.
[  129.263468][ T9587] netlink: 'syz.2.1127': attribute type 13 has an invalid length.
[  129.277888][ T9587] netlink: 'syz.2.1127': attribute type 17 has an invalid length.
[  129.319728][ T9587] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.324805][ T9587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  129.360805][ T9588] lo speed is unknown, defaulting to 1000
[  129.939329][ T9615] netlink: 'syz.1.1135': attribute type 30 has an invalid length.
[  129.967114][ T9601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.971668][ T9601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.977566][ T9601] bond0 (unregistering): Released all slaves
[  130.211863][ T9630] netlink: 'syz.2.1139': attribute type 2 has an invalid length.
[  130.337448][ T9634] SET target dimension over the limit!
[  130.654327][ T9660] __nla_validate_parse: 12 callbacks suppressed
[  130.654344][ T9660] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1146'.
[  130.751522][ T9668] netlink: 'syz.1.1150': attribute type 4 has an invalid length.
[  130.754306][ T9669] netlink: 'syz.1.1150': attribute type 4 has an invalid length.
[  131.397333][ T9672] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1151'.
[  131.423298][ T9672] netlink: 212332 bytes leftover after parsing attributes in process `syz.2.1151'.
[  131.474326][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  131.793293][ T9696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1158'.
[  131.877990][ T9703] netlink: 'syz.1.1161': attribute type 32 has an invalid length.
[  131.880502][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1161'.
[  132.032227][ T9712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'.
[  132.160154][ T9722] x_tables: duplicate underflow at hook 2
[  132.277608][ T9725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1165'.
[  132.296832][ T9727] netlink: 'syz.2.1166': attribute type 267 has an invalid length.
[  132.552896][ T9756] netlink: 'syz.1.1176': attribute type 21 has an invalid length.
[  132.557526][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1176'.
[  132.608545][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'.
[  132.749928][ T9778] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  132.753810][ T9781] mac80211_hwsim hwsim3 ": renamed from wlan0 (while UP)
[  133.216267][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.606468][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.614026][ T9811] bridge_slave_0: left allmulticast mode
[  133.617298][ T9811] bridge_slave_0: left promiscuous mode
[  133.619194][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.630246][ T9811] bridge_slave_1: left allmulticast mode
[  133.634698][ T9811] bridge_slave_1: left promiscuous mode
[  133.636969][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.642518][ T9811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.645590][ T9811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.648678][ T9811] bond2: (slave bridge4): Releasing active interface
[  133.650749][ T9811] bond2: (slave bridge4): the permanent HWaddr of slave - f6:0c:84:1f:f1:0d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  133.656664][ T9811] bond2: (slave gretap1): making interface the new active one
[  133.660402][ T9811] bond2: (slave gretap1): Releasing active interface
[  133.666272][ T9811] bond3: (slave gretap2): Releasing active interface
[  133.669202][ T9811] gretap2: left allmulticast mode
[  133.742047][ T9825] netlink: 'syz.1.1193': attribute type 7 has an invalid length.
[  133.828598][ T9827] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  133.847508][ T9827] : left promiscuous mode
[  134.060873][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.255405][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.355471][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  134.617807][ T9858] bridge0: Device is already in use.
[  134.898665][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.053789][ T9869] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  135.118315][ T9871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.122097][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.129442][ T9871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.133432][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.143583][ T9874] validate_nla: 1 callbacks suppressed
[  135.143592][ T9874] netlink: 'syz.2.1209': attribute type 6 has an invalid length.
[  135.145130][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.152048][ T9870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.155538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.295941][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.401481][ T9889] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  135.751080][ T9908] __nla_validate_parse: 7 callbacks suppressed
[  135.751094][ T9908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1217'.
[  135.815217][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'.
[  135.898251][ T9924] syzkaller1: entered promiscuous mode
[  135.899991][ T9924] syzkaller1: entered allmulticast mode
[  135.938522][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1225'.
[  135.958629][ T9928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1225'.
[  136.064725][ T9940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1230'.
[  136.096054][ T9938] syzkaller0: entered promiscuous mode
[  136.098222][ T9938] syzkaller0: entered allmulticast mode
[  136.210669][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1231'.
[  137.393461][ T9940] lo speed is unknown, defaulting to 1000
[  137.474653][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'.
[  137.486884][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'.
[  137.506285][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1234'.
[  137.511727][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'.
[  137.634884][ T9966] netlink: 'syz.0.1237': attribute type 2 has an invalid length.
[  137.797811][ T9977] sctp: [Deprecated]: syz.2.1240 (pid 9977) Use of int in maxseg socket option.
[  137.797811][ T9977] Use struct sctp_assoc_value instead
[  138.119909][T10008] netlink: 'syz.2.1247': attribute type 10 has an invalid length.
[  138.370784][T10012] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  139.123393][T10041] set match dimension is over the limit!
[  139.172263][T10043] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  139.175165][T10043] netlink: 'syz.0.1256': attribute type 10 has an invalid length.
[  139.178225][T10043] netlink: 'syz.0.1256': attribute type 4 has an invalid length.
[  139.252878][T10047] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  139.264527][T10047] netlink: 'syz.0.1258': attribute type 4 has an invalid length.
[  139.455350][  T972] net_ratelimit: 13 callbacks suppressed
[  139.455387][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.238053][T10070] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  140.503035][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.878829][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.882706][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.888158][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.891597][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.894885][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.899368][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.901961][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  140.906347][T10102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.191059][T10108] __nla_validate_parse: 11 callbacks suppressed
[  141.191076][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'.
[  141.697953][T10147] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1283'.
[  141.750314][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[  141.754249][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'.
[  141.761222][T10151] Cannot find add_set index 3 as target
[  141.797645][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  141.837679][T10158] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  141.842221][T10158] erspan0: entered allmulticast mode
[  141.918989][T10164] netlink: 'syz.2.1291': attribute type 1 has an invalid length.
[  141.943056][T10164] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.947163][T10169] netlink: 'syz.1.1292': attribute type 4 has an invalid length.
[  141.964150][T10164] 8021q: adding VLAN 0 to HW filter on device bond5
[  141.967299][T10164] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  141.973817][T10164] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  142.000042][ T5898] lo speed is unknown, defaulting to 1000
[  142.003665][ T5898] syz0: Port: 1 Link DOWN
[  142.023578][T10171] bond5: (slave bridge5): Enslaving as an active interface with a down link
[  142.028705][ T5898] lo speed is unknown, defaulting to 1000
[  142.134642][T10177] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1295'.
[  142.306447][T10193] nbd: must specify at least one socket
[  142.469267][T10204] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1302'.
[  142.517858][T10210] netlink: 720 bytes leftover after parsing attributes in process `syz.1.1304'.
[  142.522491][T10210] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  142.527337][T10210] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  142.552062][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'.
[  142.654147][T10215] vlan0: entered promiscuous mode
[  142.656468][T10215] bridge0: entered promiscuous mode
[  142.682895][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1307'.
[  142.717791][T10222] nbd: nbd0 already in use
[  143.101087][T10256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.467664][T10283] netlink: 'syz.0.1326': attribute type 21 has an invalid length.
[  143.807848][T10318] : entered promiscuous mode
[  143.921687][T10324] syzkaller0: entered promiscuous mode
[  143.924002][T10324] syzkaller0: entered allmulticast mode
[  144.660440][    C1] net_ratelimit: 747 callbacks suppressed
[  144.660458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.667222][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.669303][T10363] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  145.691009][T10368] netlink: 'syz.0.1350': attribute type 9 has an invalid length.
[  145.696511][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.741246][T10378] netlink: 'syz.0.1351': attribute type 3 has an invalid length.
[  145.743606][T10378] netlink: 'syz.0.1351': attribute type 1 has an invalid length.
[  145.749844][T10379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.813339][T10387] SET target dimension over the limit!
[  145.889422][T10394] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  145.897088][T10394] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  145.903385][T10394] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  146.737184][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.788314][T10434] sock: sock_timestamping_bind_phc: sock not bind to device
[  146.844120][T10437] ip6tnl2: entered promiscuous mode
[  146.848494][T10437] ip6tnl2: entered allmulticast mode
[  146.968089][T10446] __nla_validate_parse: 13 callbacks suppressed
[  146.968107][T10446] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1369'.
[  147.076660][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.158836][T10454] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1373'.
[  147.217838][   T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.223691][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.232172][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.292681][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1377'.
[  147.386203][T10472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1379'.
[  147.650876][T10493] netlink: 'syz.1.1387': attribute type 6 has an invalid length.
[  147.653739][T10493] netlink: 'syz.1.1387': attribute type 7 has an invalid length.
[  147.657005][T10493] netlink: 'syz.1.1387': attribute type 8 has an invalid length.
[  147.740412][T10500] unsupported nla_type 52263
[  147.784006][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.807761][T10512] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1392'.
[  148.068923][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1396'.
[  148.072460][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1396'.
[  148.098389][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'.
[  148.299281][T10550] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  148.314389][T10550] ipvlan2: left allmulticast mode
[  148.319121][T10550] bond3: left allmulticast mode
[  148.322551][T10550] macsec1: left promiscuous mode
[  148.324870][T10550] macsec1: left allmulticast mode
[  148.423016][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'.
[  148.570401][T10569] netlink: 'syz.1.1408': attribute type 21 has an invalid length.
[  148.660025][T10575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1410'.
[  148.790882][T10584] macvlan1: entered promiscuous mode
[  148.796858][T10584] ipvlan0: entered promiscuous mode
[  148.801635][T10584] ipvlan0: left promiscuous mode
[  148.803968][T10584] macvlan1: left promiscuous mode
[  148.992795][T10599] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  149.342935][T10615] netlink: 'syz.1.1425': attribute type 11 has an invalid length.
[  149.432689][T10622] x_tables: duplicate underflow at hook 1
[  149.502375][T10627] netlink: 'syz.1.1429': attribute type 1 has an invalid length.
[  149.522082][T10629] xt_l2tp: missing protocol rule (udp|l2tpip)
[  149.598172][T10634] netlink: 'syz.0.1432': attribute type 7 has an invalid length.
[  149.704259][T10645] net_ratelimit: 10 callbacks suppressed
[  149.704269][T10645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.709678][T10639] xt_CT: No such helper "pptp"
[  149.846083][T10657] netlink: 'syz.2.1439': attribute type 1 has an invalid length.
[  149.849141][T10657] netlink: 'syz.2.1439': attribute type 10 has an invalid length.
[  149.851546][T10657] netlink: 'syz.2.1439': attribute type 4 has an invalid length.
[  149.859891][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.070840][T10675] v: renamed from ip6_vti0 (while UP)
[  150.093080][T10680] xt_CT: No such helper "snmp"
[  150.178083][T10686] syzkaller0: entered allmulticast mode
[  150.268656][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.905360][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.030538][T10702] sctp: [Deprecated]: syz.2.1451 (pid 10702) Use of struct sctp_assoc_value in delayed_ack socket option.
[  151.030538][T10702] Use struct sctp_sack_info instead
[  151.445236][T10717] tun0: tun_chr_ioctl cmd 1074025677
[  151.451208][T10717] tun0: linktype set to 768
[  151.594855][T10727] bpq0: entered promiscuous mode
[  151.604493][T10727] bpq0: entered allmulticast mode
[  151.615210][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.644310][T10727] bond11: entered promiscuous mode
[  151.651344][T10727] 8021q: adding VLAN 0 to HW filter on device bond11
[  151.668813][T10721] bond11: (slave bridge4): making interface the new active one
[  151.672073][T10721] bridge4: entered promiscuous mode
[  151.677102][T10721] bond11: (slave bridge4): Enslaving as an active interface with an up link
[  151.936034][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.252143][T10795] __nla_validate_parse: 78 callbacks suppressed
[  152.252158][T10795] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1477'.
[  152.259862][ T3576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.264316][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.268476][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.271915][T10795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'.
[  152.328883][T10799] lo speed is unknown, defaulting to 1000
[  152.495458][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.846716][T10825] lo speed is unknown, defaulting to 1000
[  153.038426][T10832] lo speed is unknown, defaulting to 1000
[  153.106977][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'.
[  153.110032][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  153.227530][T10845] bond0: (slave team0): Releasing backup interface
[  153.263256][T10848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'.
[  153.277458][T10845] bond0: (slave bond_slave_0): Releasing backup interface
[  153.284726][T10845] bond0: (slave bond_slave_1): Releasing backup interface
[  153.322792][T10845] team0: Port device team_slave_0 removed
[  153.341903][T10845] team0: Port device team_slave_1 removed
[  153.344892][T10845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.351311][T10845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.361854][T10845] team0: Port device geneve0 removed
[  153.364612][T10845] bond0: (slave netdevsim0): Releasing backup interface
[  153.377180][T10845] bond3: (slave bridge3): Releasing active interface
[  153.380259][T10845] bridge3: left promiscuous mode
[  153.382507][T10845] bridge3: left allmulticast mode
[  153.392527][T10845] bond4: (slave veth3): Releasing active interface
[  153.402545][T10845] bond5: (slave veth5): Releasing backup interface
[  153.409698][T10845] bond7: (slave bridge0): Releasing active interface
[  153.418287][T10845] bond11: (slave bridge4): Releasing backup interface
[  153.420673][T10845] bridge4: left promiscuous mode
[  153.540694][T10856] validate_nla: 5 callbacks suppressed
[  153.540704][T10856] netlink: 'syz.0.1496': attribute type 62 has an invalid length.
[  153.947277][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1506'.
[  154.141085][T10896] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1509'.
[  154.144658][T10896] tc_dump_action: action bad kind
[  154.148254][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1509'.
[  154.203771][T10901] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[  154.271225][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'.
[  154.318558][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1513'.
[  154.373105][T10911] netlink: 'syz.0.1514': attribute type 2 has an invalid length.
[  154.377862][T10911] netlink: 'syz.0.1514': attribute type 1 has an invalid length.
[  154.393201][T10913] netlink: 'syz.2.1515': attribute type 9 has an invalid length.
[  154.695275][T10936] netlink: 'syz.1.1523': attribute type 2 has an invalid length.
[  154.814819][T10942] nbd: illegal input index -381222912
[  154.840860][T10952] netlink: 'syz.0.1529': attribute type 1 has an invalid length.
[  154.843860][T10952] NCSI netlink: No device for ifindex 813332851
[  154.876806][T10956] net_ratelimit: 69 callbacks suppressed
[  154.876816][T10956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.881694][T10954] netlink: 'syz.1.1528': attribute type 5 has an invalid length.
[  154.882247][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.978261][T10960] netlink: 'syz.1.1532': attribute type 2 has an invalid length.
[  155.062647][T10956] IPVS: set_ctl: invalid protocol: 58 172.20.20.62:65534
[  155.138586][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.154252][T10970] netlink: 'syz.1.1535': attribute type 1 has an invalid length.
[  155.241227][T10983] x_tables: duplicate underflow at hook 1
[  155.296240][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.386669][T10988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.557815][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  156.177644][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.451845][T11023] lo speed is unknown, defaulting to 1000
[  156.948276][T11064] ip6tnl2: entered promiscuous mode
[  156.949941][T11064] ip6tnl2: entered allmulticast mode
[  157.006334][T11068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  157.081733][T11077] bridge: RTM_NEWNEIGH with invalid ether address
[  157.215161][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.072090][T11111] IPv6: NLM_F_CREATE should be specified when creating new route
[  158.096713][ T7090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.100909][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.104876][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.229488][T11128] __nla_validate_parse: 11 callbacks suppressed
[  158.229504][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  158.237187][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  158.302032][T11144] IPVS: stopping master sync thread 5910 ...
[  158.396474][T11152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1581'.
[  158.964063][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  158.968036][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'.
[  159.436979][T11197] lo speed is unknown, defaulting to 1000
[  159.870685][T11202] lo speed is unknown, defaulting to 1000
[  159.976786][T11207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1599'.
[  160.028584][ T7090] net_ratelimit: 66 callbacks suppressed
[  160.028601][ T7090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.129625][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'.
[  160.133272][T11210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1600'.
[  160.175144][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.323113][T11219] validate_nla: 5 callbacks suppressed
[  160.323175][T11219] netlink: 'syz.0.1602': attribute type 2 has an invalid length.
[  160.332550][T11219] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1602'.
[  160.336617][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.418280][T11221] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  160.487878][T11226] netlink: 'syz.0.1604': attribute type 2 has an invalid length.
[  160.563660][T11236] openvswitch: netlink: Multiple metadata blocks provided
[  160.581023][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1609'.
[  160.584590][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.588588][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.592535][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.597523][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.601129][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.605656][T11238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.681166][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.943578][T11265] netlink: 'syz.2.1616': attribute type 17 has an invalid length.
[  161.193468][T11278] IPv6: sit5: Disabled Multicast RS
[  161.256727][T11280] netlink: 'syz.2.1621': attribute type 7 has an invalid length.
[  162.778215][T11310] tipc: Invalid UDP bearer configuration
[  162.778291][T11310] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  162.802596][T11314] ip6gretap0: entered promiscuous mode
[  162.806511][T11314] syz_tun: entered promiscuous mode
[  163.071809][   T95] IPVS: starting estimator thread 0...
[  163.078076][T11329] pim6reg1: entered allmulticast mode
[  163.156000][T11331] IPVS: using max 62 ests per chain, 148800 per kthread
[  163.227556][T11338] delete_channel: no stack
[  163.291956][T11344] netlink: 'syz.1.1641': attribute type 9 has an invalid length.
[  163.372390][T11348] macsec0: entered allmulticast mode
[  163.384142][T11348] veth1_macvtap: entered allmulticast mode
[  163.388987][T11348] macsec0: left allmulticast mode
[  163.391414][T11348] veth1_macvtap: left allmulticast mode
[  163.440829][T11356] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20004
[  163.598573][T11364] __nla_validate_parse: 14 callbacks suppressed
[  163.598589][T11364] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1650'.
[  163.656487][T11370] netlink: 'syz.1.1651': attribute type 21 has an invalid length.
[  163.968846][T11389] netlink: 'syz.1.1655': attribute type 24 has an invalid length.
[  164.020512][T11398] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  164.020767][T11399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1658'.
[  164.070094][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  164.090380][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'.
[  164.096324][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  164.104370][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'.
[  164.151686][T11408] netlink: 'syz.0.1661': attribute type 1 has an invalid length.
[  164.178698][T11408] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.190873][T11408] vlan2: entered allmulticast mode
[  164.192881][T11408] bond6: entered allmulticast mode
[  164.242027][T11415] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  164.387487][T11423] bpq0: left promiscuous mode
[  164.388992][T11423] bpq0: left allmulticast mode
[  164.602200][T11443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.605919][T11443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1672'.
[  164.759796][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'.
[  164.920929][T11475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1679'.
[  165.055214][    C1] net_ratelimit: 34 callbacks suppressed
[  165.055224][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.182759][T11489] x_tables: duplicate underflow at hook 1
[  165.286495][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.290095][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.293672][T11496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.302730][T11495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.307414][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.311858][T11495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.502432][T11504] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  165.505067][T11504] netlink: 'syz.0.1689': attribute type 1 has an invalid length.
[  165.537049][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.548978][T11506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.736357][T11521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.739560][T11521] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  165.740220][T11522] netlink: 'syz.2.1694': attribute type 1 has an invalid length.
[  165.741876][T11521] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  165.768535][T11522] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.776139][ T3576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.792166][T11522] vlan3: entered allmulticast mode
[  165.794285][T11522] bond6: entered allmulticast mode
[  165.840373][T11527] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  165.989950][T11533] delete_channel: no stack
[  167.535267][T10129] wlan0: Trigger new scan to find an IBSS to join
[  167.748576][T11550] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  167.779341][T11550] 8021q: adding VLAN 0 to HW filter on device bond12
[  167.812361][T11556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.831921][T11550] vlan1: entered allmulticast mode
[  167.835547][T11550] bond12: entered allmulticast mode
[  167.838733][T11560] SET target dimension over the limit!
[  167.841897][T11560] x_tables: duplicate underflow at hook 3
[  167.867782][T11564] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.893316][T11556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.966453][T11556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.039358][T11556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.141725][T11556] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.158939][T11556] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.169925][T11556] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.194288][T11556] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.268560][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  168.361618][T11586] netlink: 'syz.1.1712': attribute type 5 has an invalid length.
[  168.371584][T11586] ip6erspan0: entered promiscuous mode
[  170.265879][ T1090] net_ratelimit: 6 callbacks suppressed
[  170.265896][ T1090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.575417][ T3576] wlan0: Trigger new scan to find an IBSS to join
[  170.745182][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.815608][ T1134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.008612][T11572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  171.022031][T11584] netlink: 'syz.0.1713': attribute type 12 has an invalid length.
[  171.088940][T11596] veth0: entered promiscuous mode
[  171.098213][T11600] netlink: 'syz.2.1716': attribute type 1 has an invalid length.
[  171.123365][T11600] 8021q: adding VLAN 0 to HW filter on device bond7
[  171.125926][T11594] __nla_validate_parse: 9 callbacks suppressed
[  171.125933][T11594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'.
[  171.137033][T11596] veth0: left promiscuous mode
[  171.149281][T11600] vlan3: entered allmulticast mode
[  171.150950][T11600] bond7: entered allmulticast mode
[  171.188601][T11605] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.211304][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  171.270249][T11614] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1722'.
[  171.273221][T11614] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1722'.
[  171.278598][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1722'.
[  171.413002][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'.
[  171.492931][T11640] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.1729'.
[  171.733226][T11656] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1735'.
[  171.737114][T11656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'.
[  171.740695][T11656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1735'.
[  171.775280][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.336247][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.465772][T11700] netlink: 'syz.2.1752': attribute type 1 has an invalid length.
[  172.485971][T11700] 8021q: adding VLAN 0 to HW filter on device bond8
[  172.809586][T11731] netlink: 'syz.1.1758': attribute type 1 has an invalid length.
[  172.817626][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.999582][T11752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.002661][T11752] syzkaller0: entered promiscuous mode
[  173.004785][T11752] syzkaller0: entered allmulticast mode
[  173.016043][T11752] tipc: Resetting bearer <eth:syzkaller0>
[  173.041001][T11755] tipc: Resetting bearer <eth:syzkaller0>
[  173.055536][T11755] tipc: Disabling bearer <eth:syzkaller0>
[  173.152493][T11764] pim6reg1: entered promiscuous mode
[  173.154670][T11764] pim6reg1: entered allmulticast mode
[  173.260157][T11773] syz_tun: entered allmulticast mode
[  173.266206][T11771] syz_tun: left allmulticast mode
[  173.363225][T11784] netlink: 'syz.0.1772': attribute type 1 has an invalid length.
[  173.407648][T11779] lo speed is unknown, defaulting to 1000
[  173.437329][T11786] netlink: 'syz.2.1770': attribute type 21 has an invalid length.
[  173.440355][T11786] netlink: 'syz.2.1770': attribute type 6 has an invalid length.
[  173.501542][T11795] syz_tun: entered promiscuous mode
[  173.503216][T11795] syz_tun: entered allmulticast mode
[  173.545986][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.855447][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.273360][T11862] bridge0: port 1(macsec0) entered blocking state
[  174.298057][T11862] bridge0: port 1(macsec0) entered disabled state
[  174.308860][T11862] macsec0: entered allmulticast mode
[  174.310997][T11862] veth1_macvtap: entered allmulticast mode
[  174.315613][T11862] macsec0: entered promiscuous mode
[  174.589081][T11876] lo speed is unknown, defaulting to 1000
[  174.905988][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.089406][T11895] lo speed is unknown, defaulting to 1000
[  175.361019][T11900] bond0: Device is already in use.
[  175.363021][T11900] bond0: Device is already in use.
[  175.364877][T11900] bond0: Device is already in use.
[  175.376718][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.378019][T11900] bond0: Device is already in use.
[  175.390361][T11900] bond0: Device is already in use.
[  175.392246][T11900] bond0: Device is already in use.
[  175.394075][T11900] bond0: Device is already in use.
[  175.411891][T11900] bond0: Device is already in use.
[  175.414340][T11900] bond0: Device is already in use.
[  175.417647][T11900] bond0: Device is already in use.
[  175.419496][T11900] bond0: Device is already in use.
[  175.421329][T11900] bond0: Device is already in use.
[  175.423815][T11900] bond0: Device is already in use.
[  175.427061][T11903] netlink: 'syz.2.1793': attribute type 1 has an invalid length.
[  175.427790][T11900] bond0: Device is already in use.
[  175.431706][T11903] netlink: 'syz.2.1793': attribute type 11 has an invalid length.
[  175.431847][T11900] bond0: Device is already in use.
[  175.437662][T11900] bond0: Device is already in use.
[  175.440172][T11900] bond0: Device is already in use.
[  175.443212][T11900] bond0: Device is already in use.
[  175.446299][T11900] bond0: Device is already in use.
[  175.448841][T11900] bond0: Device is already in use.
[  175.451215][T11900] bond0: Device is already in use.
[  175.453697][T11900] bond0: Device is already in use.
[  175.456335][T11900] bond0: Device is already in use.
[  175.459009][T11900] bond0: Device is already in use.
[  175.461492][T11900] bond0: Device is already in use.
[  175.463945][T11900] bond0: Device is already in use.
[  175.466537][T11900] bond0: Device is already in use.
[  175.468993][T11900] bond0: Device is already in use.
[  175.471352][T11900] bond0: Device is already in use.
[  175.473699][T11900] bond0: Device is already in use.
[  175.476232][T11900] bond0: Device is already in use.
[  175.478688][T11900] bond0: Device is already in use.
[  175.481218][T11900] bond0: Device is already in use.
[  175.935313][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.016127][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.026882][ T7092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.083670][   T33] audit: type=1800 audit(1752662342.283:6): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1797" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2997 res=0 errno=0
[  176.160691][T11918] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  176.213541][T11918] netlink: 'syz.0.1798': attribute type 10 has an invalid length.
[  176.217909][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.221188][T11918] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  176.227839][T11918] bond0: (slave wlan1): refused to change device type
[  176.243248][T11918] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  176.247234][T11918] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  176.285668][T11919] netlink: 'syz.0.1798': attribute type 11 has an invalid length.
[  176.289936][T11919] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  176.501631][T11921] netlink: 'syz.2.1799': attribute type 1 has an invalid length.
[  176.520483][T11921] bond9: entered promiscuous mode
[  176.522954][T11921] 8021q: adding VLAN 0 to HW filter on device bond9
[  176.540328][T11921] 8021q: adding VLAN 0 to HW filter on device bond9
[  176.543691][T11921] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[  176.548459][T11921] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  176.558088][T11921] bond9: (slave vcan0): making interface the new active one
[  176.561149][T11921] vcan0: entered promiscuous mode
[  176.564414][T11921] bond9: (slave vcan0): Enslaving as an active interface with an up link
[  176.745403][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  176.975464][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  177.161913][T11940] __nla_validate_parse: 52 callbacks suppressed
[  177.161931][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1806'.
[  177.185596][T11939] block nbd1: server does not support multiple connections per device.
[  177.188387][T11939] block nbd1: shutting down sockets
[  177.648331][T11970] geneve5: entered promiscuous mode
[  177.751878][T11973] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  177.812208][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1818'.
[  177.823109][T11978] openvswitch: netlink: Flow key attr not present in new flow.
[  177.854873][T11980] tipc: Enabled bearer <udp:syz2>, priority 10
[  177.969959][T11989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1823'.
[  178.018411][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.122681][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1828'.
[  178.471535][T12023] netlink: 'syz.0.1833': attribute type 5 has an invalid length.
[  178.906684][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  178.965524][ T5298] tipc: Node number set to 940182740
[  178.994274][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  178.998039][T12036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  179.097574][   T13] tipc: Subscription rejected, illegal request
[  179.109941][T12050] nbd: must specify a size in bytes for the device
[  179.139277][T12052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'.
[  179.190479][T12054] Bluetooth: MGMT ver 1.23
[  179.194884][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1842'.
[  179.207784][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1842'.
[  180.415307][    C0] net_ratelimit: 3 callbacks suppressed
[  180.415324][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  180.422660][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.065926][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.136963][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.139567][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.457481][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.615231][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.617934][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.621253][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.175643][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  182.493030][T12056] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  182.496760][T12064] netlink: 'syz.2.1844': attribute type 4 has an invalid length.
[  182.869833][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1850'.
[  183.596607][T12093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1854'.
[  183.710119][T12111] sctp: [Deprecated]: syz.1.1859 (pid 12111) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.710119][T12111] Use struct sctp_sack_info instead
[  183.724838][T12117] netlink: 'syz.2.1860': attribute type 83 has an invalid length.
[  184.058291][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1865'.
[  184.219099][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1869'.
[  184.516465][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1873'.
[  184.547226][T12180] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1875'.
[  184.552661][T12180] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1875'.
[  184.669056][T12186] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.673804][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'.
[  184.768254][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1879'.
[  184.783622][T12200] sctp: [Deprecated]: syz.2.1880 (pid 12200) Use of int in max_burst socket option.
[  184.783622][T12200] Use struct sctp_assoc_value instead
[  185.073430][T12223] netlink: 'syz.2.1885': attribute type 1 has an invalid length.
[  185.080085][T12223] netlink: 'syz.2.1885': attribute type 2 has an invalid length.
[  185.085419][T12223] netlink: 'syz.2.1885': attribute type 1 has an invalid length.
[  185.087883][T12223] netlink: 'syz.2.1885': attribute type 2 has an invalid length.
[  185.151253][T12230] SET target dimension over the limit!
[  185.527084][  T972] net_ratelimit: 7 callbacks suppressed
[  185.527095][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.602676][T12250] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20001
[  185.686609][T12258] netlink: 720 bytes leftover after parsing attributes in process `syz.0.1894'.
[  185.691252][T12258] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  185.694560][T12258] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  185.703829][T12258] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  185.707917][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.0.1894 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  185.707931][T12258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.707938][T12258] Call Trace:
[  185.707942][T12258]  <TASK>
[  185.707946][T12258]  dump_stack_lvl+0x189/0x250
[  185.707965][T12258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.707977][T12258]  ? __pfx__printk+0x10/0x10
[  185.707989][T12258]  ? kernfs_path_from_node+0x2c/0x260
[  185.708004][T12258]  ? kernfs_path_from_node+0x2c/0x260
[  185.708016][T12258]  ? kernfs_path_from_node+0x2c/0x260
[  185.708028][T12258]  ? kernfs_path_from_node+0x22c/0x260
[  185.708039][T12258]  ? kernfs_path_from_node+0x2c/0x260
[  185.708051][T12258]  sysfs_warn_dup+0x8e/0xa0
[  185.708062][T12258]  sysfs_do_create_link_sd+0xc0/0x110
[  185.708074][T12258]  device_add_class_symlinks+0x1cf/0x240
[  185.708087][T12258]  device_add+0x475/0xb50
[  185.708099][T12258]  wiphy_register+0x199a/0x26b0
[  185.708118][T12258]  ? __pfx_wiphy_register+0x10/0x10
[  185.708127][T12258]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  185.708143][T12258]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  185.708159][T12258]  ieee80211_register_hw+0x33e1/0x4120
[  185.708181][T12258]  ? ieee80211_register_hw+0x1471/0x4120
[  185.708195][T12258]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  185.708208][T12258]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.708255][T12258]  ? __hrtimer_setup+0x187/0x210
[  185.708267][T12258]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  185.708283][T12258]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  185.708308][T12258]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  185.708319][T12258]  ? trace_kmalloc+0x1f/0xd0
[  185.708330][T12258]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  185.708341][T12258]  ? kstrndup+0xbf/0x160
[  185.708357][T12258]  hwsim_new_radio_nl+0xea4/0x1b10
[  185.708368][T12258]  ? __pfx___nla_validate_parse+0x10/0x10
[  185.708384][T12258]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  185.708400][T12258]  ? __nla_parse+0x40/0x60
[  185.708409][T12258]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  185.708426][T12258]  genl_family_rcv_msg_doit+0x215/0x300
[  185.708441][T12258]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  185.708459][T12258]  ? bpf_lsm_capable+0x9/0x20
[  185.708468][T12258]  ? security_capable+0x7e/0x2e0
[  185.708484][T12258]  genl_rcv_msg+0x60e/0x790
[  185.708498][T12258]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.708509][T12258]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  185.708525][T12258]  netlink_rcv_skb+0x208/0x470
[  185.708535][T12258]  ? __pfx_genl_rcv_msg+0x10/0x10
[  185.708547][T12258]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  185.708565][T12258]  ? down_read+0x1ad/0x2e0
[  185.708575][T12258]  genl_rcv+0x28/0x40
[  185.708585][T12258]  netlink_unicast+0x75c/0x8e0
[  185.708599][T12258]  netlink_sendmsg+0x805/0xb30
[  185.708613][T12258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.708625][T12258]  ? aa_sock_msg_perm+0x94/0x160
[  185.708637][T12258]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  185.708649][T12258]  ? __pfx_netlink_sendmsg+0x10/0x10
[  185.708658][T12258]  __sock_sendmsg+0x21c/0x270
[  185.708668][T12258]  ____sys_sendmsg+0x505/0x830
[  185.708682][T12258]  ? __pfx_____sys_sendmsg+0x10/0x10
[  185.708702][T12258]  ? import_iovec+0x74/0xa0
[  185.708716][T12258]  ___sys_sendmsg+0x21f/0x2a0
[  185.708728][T12258]  ? __pfx____sys_sendmsg+0x10/0x10
[  185.708757][T12258]  ? __fget_files+0x2a/0x420
[  185.708770][T12258]  ? __fget_files+0x3a0/0x420
[  185.708786][T12258]  __x64_sys_sendmsg+0x19b/0x260
[  185.708798][T12258]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  185.708813][T12258]  ? rcu_is_watching+0x15/0xb0
[  185.708826][T12258]  ? do_syscall_64+0xbe/0x3b0
[  185.708836][T12258]  do_syscall_64+0xfa/0x3b0
[  185.708843][T12258]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.708855][T12258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.708863][T12258]  ? exc_page_fault+0x9f/0xf0
[  185.708875][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.708883][T12258] RIP: 0033:0x7f09e038e929
[  185.708893][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.708901][T12258] RSP: 002b:00007f09de1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.708910][T12258] RAX: ffffffffffffffda RBX: 00007f09e05b5fa0 RCX: 00007f09e038e929
[  185.708916][T12258] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000006
[  185.708924][T12258] RBP: 00007f09e0410b39 R08: 0000000000000000 R09: 0000000000000000
[  185.708930][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.708935][T12258] R13: 0000000000000000 R14: 00007f09e05b5fa0 R15: 00007ffc75344db8
[  185.708949][T12258]  </TASK>
[  185.775077][   T54] Bluetooth: hci1: command 0x0419 tx timeout
[  186.100793][T12272] netlink: 'syz.1.1899': attribute type 15 has an invalid length.
[  186.137863][T12276] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  186.178062][T12279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.389769][T12301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.424256][T12304] tipc: Disabling bearer <eth:syzkaller0>
[  186.585237][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.898502][ T7085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.901148][T10129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.455523][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.535584][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.618464][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.934479][T12369] netlink: 'syz.0.1927': attribute type 21 has an invalid length.
[  187.946757][T12369] IPv6: NLM_F_CREATE should be specified when creating new route
[  187.950057][T12369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.952899][T12369] IPv6: NLM_F_CREATE should be set when creating new route
[  187.955830][T12369] IPv6: NLM_F_CREATE should be set when creating new route
[  187.958568][T12369] IPv6: NLM_F_CREATE should be set when creating new route
[  188.082102][T12371] __nla_validate_parse: 8 callbacks suppressed
[  188.082117][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'.
[  188.190672][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1928'.
[  188.202254][T12381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'.
[  188.230857][T12381] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1931'.
[  188.284596][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'.
[  188.480196][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  188.539081][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.608560][T12413] netlink: 'syz.1.1940': attribute type 4 has an invalid length.
[  188.655315][  T972] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.693138][T12422] lo speed is unknown, defaulting to 1000
[  188.764782][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'.
[  188.830407][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1945'.
[  189.973555][T12469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'.
[  189.986613][T12469] netlink: 'syz.0.1954': attribute type 1 has an invalid length.
[  189.989012][T12469] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1954'.
[  190.173556][T12490] netlink: 'syz.1.1961': attribute type 11 has an invalid length.
[  190.575438][   T95] net_ratelimit: 2 callbacks suppressed
[  190.575448][   T95] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.579923][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.610653][T12529] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[  190.735285][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.762767][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.792572][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.865659][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.882466][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.892191][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.899301][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.907314][T12535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.258320][T12574] sctp: [Deprecated]: syz.0.1988 (pid 12574) Use of int in maxseg socket option.
[  191.258320][T12574] Use struct sctp_assoc_value instead
[  191.264027][T12573] sctp: [Deprecated]: syz.0.1988 (pid 12573) Use of int in maxseg socket option.
[  191.264027][T12573] Use struct sctp_assoc_value instead
[  191.410149][T12579] bridge6: port 1(veth13) entered blocking state
[  191.410632][T12584] netlink: 'syz.0.1992': attribute type 7 has an invalid length.
[  191.412925][T12579] bridge6: port 1(veth13) entered disabled state
[  191.416234][T12584] netlink: 'syz.0.1992': attribute type 8 has an invalid length.
[  191.419008][T12579] veth13: entered allmulticast mode
[  191.425709][T12579] veth13: entered promiscuous mode
[  191.477877][T12579] bridge6: port 2(veth0_to_bond) entered blocking state
[  191.484755][T12579] bridge6: port 2(veth0_to_bond) entered disabled state
[  191.493767][T12579] veth0_to_bond: entered allmulticast mode
[  191.499036][T12579] veth0_to_bond: entered promiscuous mode
[  191.519222][T12579] vlan1: entered allmulticast mode
[  191.521384][T12579] veth1: entered allmulticast mode
[  191.524602][T12579] bridge6: port 3(vlan1) entered blocking state
[  191.529511][T12579] bridge6: port 3(vlan1) entered disabled state
[  191.533862][T12579] vlan1: entered promiscuous mode
[  191.536840][T12579] veth1: entered promiscuous mode
[  191.776158][T12606] veth0_to_bridge: entered promiscuous mode
[  191.783991][T12605] veth0_to_bridge: left promiscuous mode
[  191.790090][T12611] xt_socket: unknown flags 0x8
[  192.001879][T12630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.010925][T12630] syzkaller0: entered promiscuous mode
[  192.013076][T12630] syzkaller0: entered allmulticast mode
[  192.024247][T12630] tipc: Resetting bearer <eth:syzkaller0>
[  192.028620][T12629] tipc: Resetting bearer <eth:syzkaller0>
[  192.040248][T12629] tipc: Disabling bearer <eth:syzkaller0>
[  192.049308][T12638] veth14: entered allmulticast mode
[  192.059235][T12638] veth15: entered promiscuous mode
[  192.065530][T12639] veth16: entered allmulticast mode
[  192.071774][T12639] veth17: entered promiscuous mode
[  192.148595][T12644] x_tables: duplicate underflow at hook 2
[  192.277791][T12659] ipt_REJECT: TCP_RESET invalid for non-tcp
[  192.530226][T12676] macsec0: left allmulticast mode
[  192.531792][T12676] veth1_macvtap: left allmulticast mode
[  192.533442][T12676] macsec0: left promiscuous mode
[  192.535662][T12676] bridge0: port 1(macsec0) entered disabled state
[  192.592984][T12680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.596944][T12680] syzkaller0: entered promiscuous mode
[  192.599281][T12680] syzkaller0: entered allmulticast mode
[  192.618211][T12679] tipc: Resetting bearer <eth:syzkaller0>
[  192.630499][T12679] tipc: Disabling bearer <eth:syzkaller0>
[  192.679872][T12684] netlink: 'syz.1.2022': attribute type 1 has an invalid length.
[  192.829216][T12634] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  192.973611][T12705] lo speed is unknown, defaulting to 1000
[  193.384222][T12730] __nla_validate_parse: 24 callbacks suppressed
[  193.384238][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2035'.
[  193.656704][T12736] sctp: [Deprecated]: syz.1.2037 (pid 12736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.656704][T12736] Use struct sctp_sack_info instead
[  193.764094][T12742] bridge10: entered allmulticast mode
[  193.831308][T12744] netlink: 'syz.0.2039': attribute type 1 has an invalid length.
[  193.836574][T12744] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2039'.
[  193.839575][T12743] netlink: 'syz.0.2039': attribute type 1 has an invalid length.
[  193.843619][T12743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2039'.
[  193.912035][T12749] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2041'.
[  193.973463][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2044'.
[  193.977397][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'.
[  193.980246][T12755] netlink: 'syz.1.2044': attribute type 18 has an invalid length.
[  193.980252][T12756] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  194.109467][T12760] x_tables: duplicate underflow at hook 3
[  194.387326][T12790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2061'.
[  194.397429][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2061'.
[  194.421318][T12793] x_tables: duplicate underflow at hook 3
[  194.590341][T12811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2059'.
[  194.816399][T12820] x_tables: duplicate underflow at hook 3
[  194.877650][T12826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2067'.
[  195.120116][T12848] batman_adv: batadv0: Adding interface: macvlan2
[  195.123568][T12848] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem.
[  195.140465][T12848] batman_adv: batadv0: Interface activated: macvlan2
[  195.799998][T12899] net_ratelimit: 72 callbacks suppressed
[  195.800010][T12899] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.456839][T12913] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  196.464821][T12915] nft_compat: unsupported protocol 0
[  196.631345][T12922] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  196.642568][T12922] vlan3: entered allmulticast mode
[  196.644601][T12922] bridge_slave_0: entered allmulticast mode
[  196.714818][T12932] xt_hashlimit: size too large, truncated to 1048576
[  196.775532][T12930] : renamed from bridge_slave_0 (while UP)
[  196.869926][T12938] xt_hashlimit: max too large, truncated to 1048576
[  197.050894][T12954] netlink: 'syz.0.2101': attribute type 3 has an invalid length.
[  197.110127][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.118900][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.125535][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.129699][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.133666][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.142309][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.149916][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.156255][T12965] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  197.419230][T12990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  197.534478][T12993] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  197.639667][T12999] x_tables: duplicate underflow at hook 2
[  197.671556][T13001] tipc: Failed to remove unknown binding: 66,1,1/1089363404:1053204002/1053204004
[  197.732543][T13005] netlink: 'syz.1.2116': attribute type 4 has an invalid length.
[  197.760272][T13005] : renamed from bond0 (while UP)
[  198.064551][ T5298] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1
[  198.071453][ T5298] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22
[  198.098989][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  198.147589][    C0] ------------[ cut here ]------------
[  198.150089][    C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  198.154700][    C0] WARNING: CPU: 0 PID: 5814 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  198.158945][    C0] Modules linked in:
[  198.160831][    C0] CPU: 0 UID: 0 PID: 5814 Comm: sshd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  198.166240][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.170078][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  198.172617][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  198.180211][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  198.182626][    C0] RAX: 5e01874585f82900 RBX: 000000000000000c RCX: ffff888023099cc0
[  198.185938][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  198.189155][    C0] RBP: dffffc0000000000 R08: ffff88804b024293 R09: 1ffff11009604852
[  198.192342][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffff8880461ea7a8
[  198.195692][    C0] R13: 0000000000000000 R14: ffff888032a90e40 R15: ffff888032a930d8
[  198.198838][    C0] FS:  00007fe7902fd800(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  198.202355][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.205092][    C0] CR2: 00007f09e10e56c0 CR3: 000000001fcfc000 CR4: 00000000000006f0
[  198.208285][    C0] Call Trace:
[  198.209693][    C0]  <IRQ>
[  198.210896][    C0]  rate_control_send_low+0x194/0x7a0
[  198.213011][    C0]  rate_control_get_rate+0x20b/0x5d0
[  198.215253][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  198.217615][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  198.220094][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  198.222242][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  198.224491][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  198.226883][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  198.229309][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.231542][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.233802][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  198.236205][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.238423][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  198.240565][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  198.243068][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  198.245379][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  198.248276][    C0]  __iterate_interfaces+0x2ab/0x590
[  198.250363][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  198.252798][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  198.255787][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  198.258275][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  198.261079][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  198.263240][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  198.265672][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  198.267795][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  198.270054][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  198.272390][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  198.274473][    C0]  handle_softirqs+0x286/0x870
[  198.276449][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  198.278281][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  198.280353][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  198.282412][    C0]  __irq_exit_rcu+0xca/0x1f0
[  198.284196][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  198.286303][    C0]  irq_exit_rcu+0x9/0x30
[  198.287930][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  198.290071][    C0]  </IRQ>
[  198.291249][    C0]  <TASK>
[  198.292434][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  198.294825][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  198.297456][    C0] Code: 74 05 e8 3b fd 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 03 1e 1f f6 65 8b 05 ac 8a 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  198.305025][    C0] RSP: 0018:ffffc9000336f640 EFLAGS: 00000206
[  198.307420][    C0] RAX: 5e01874585f82900 RBX: 0000000000000a02 RCX: 5e01874585f82900
[  198.310580][    C0] RDX: 0000000000000000 RSI: ffffffff8d998b14 RDI: 0000000000000001
[  198.313786][    C0] RBP: ffffc9000336f6d0 R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  198.316889][    C0] R10: dffffc0000000000 R11: fffffbfff1f43e7f R12: dffffc0000000000
[  198.320014][    C0] R13: 1ffff9200066dee0 R14: ffff88804b027ac0 R15: 1ffff9200066dec8
[  198.323148][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.325796][    C0]  schedule_hrtimeout_range_clock+0x123/0x2f0
[  198.328273][    C0]  ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10
[  198.330921][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  198.333070][    C0]  ? tcp_poll+0x8d6/0xe00
[  198.334768][    C0]  ? poll_schedule_timeout+0x30/0x1b0
[  198.336520][    C0]  poll_schedule_timeout+0xd1/0x1b0
[  198.338288][    C0]  do_sys_poll+0x73b/0x1070
[  198.340070][    C0]  ? __pfx_do_sys_poll+0x10/0x10
[  198.342144][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.344052][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.346031][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.347920][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.349805][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.351726][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.353286][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.354737][    C0]  ? cgroup_freezing+0x20/0x360
[  198.356619][    C0]  ? cgroup_freezing+0x20/0x360
[  198.358572][    C0]  ? cgroup_freezing+0x20/0x360
[  198.360572][    C0]  ? set_user_sigmask+0x15b/0x1b0
[  198.362654][    C0]  ? __pfx_set_user_sigmask+0x10/0x10
[  198.364815][    C0]  __se_sys_ppoll+0x1ff/0x260
[  198.366830][    C0]  ? __pfx___se_sys_ppoll+0x10/0x10
[  198.368938][    C0]  ? __pfx_ksys_write+0x10/0x10
[  198.370914][    C0]  ? __task_pid_nr_ns+0x28/0x470
[  198.372779][T13039] lo speed is unknown, defaulting to 1000
[  198.372953][    C0]  ? do_syscall_64+0xbe/0x3b0
[  198.377269][    C0]  ? __x64_sys_ppoll+0x20/0xc0
[  198.379218][    C0]  do_syscall_64+0xfa/0x3b0
[  198.381066][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.383501][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  198.386058][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.388372][    C0] RIP: 0033:0x7fe78ff19ad5
[  198.390188][    C0] Code: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83
[  198.397803][    C0] RSP: 002b:00007ffe653885d0 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  198.400867][    C0] RAX: ffffffffffffffda RBX: 00000000000668a0 RCX: 00007fe78ff19ad5
[  198.403828][    C0] RDX: 00007ffe653885f0 RSI: 0000000000000007 RDI: 0000557728c55970
[  198.407016][    C0] RBP: 0000557728c56130 R08: 0000000000000008 R09: 0000000000000000
[  198.410145][    C0] R10: 00007ffe653886d8 R11: 0000000000000246 R12: 0000557728635aa4
[  198.413219][    C0] R13: 0000000000000001 R14: 00005577286363e8 R15: 00007ffe65388658
[  198.416390][    C0]  </TASK>
[  198.417612][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  198.420454][    C0] CPU: 0 UID: 0 PID: 5814 Comm: sshd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  198.425047][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.428902][    C0] Call Trace:
[  198.430210][    C0]  <IRQ>
[  198.431492][    C0]  dump_stack_lvl+0x99/0x250
[  198.433387][    C0]  ? __asan_memcpy+0x40/0x70
[  198.435246][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  198.437325][    C0]  ? __pfx__printk+0x10/0x10
[  198.439177][    C0]  panic+0x2db/0x790
[  198.440707][    C0]  ? __pfx_panic+0x10/0x10
[  198.442519][    C0]  __warn+0x31b/0x4b0
[  198.444154][    C0]  ? __rate_control_send_low+0x5df/0x820
[  198.446314][    C0]  ? __rate_control_send_low+0x5df/0x820
[  198.448468][    C0]  report_bug+0x2be/0x4f0
[  198.450205][    C0]  ? __rate_control_send_low+0x5df/0x820
[  198.452385][    C0]  ? __rate_control_send_low+0x5df/0x820
[  198.454663][    C0]  ? __rate_control_send_low+0x5e1/0x820
[  198.456939][    C0]  handle_bug+0x84/0x160
[  198.458610][    C0]  exc_invalid_op+0x1a/0x50
[  198.460421][    C0]  asm_exc_invalid_op+0x1a/0x20
[  198.462306][    C0] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  198.464769][    C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 3c af 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 c5 9d f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  198.472173][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246
[  198.474626][    C0] RAX: 5e01874585f82900 RBX: 000000000000000c RCX: ffff888023099cc0
[  198.477621][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  198.480532][    C0] RBP: dffffc0000000000 R08: ffff88804b024293 R09: 1ffff11009604852
[  198.483632][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: ffff8880461ea7a8
[  198.486772][    C0] R13: 0000000000000000 R14: ffff888032a90e40 R15: ffff888032a930d8
[  198.489900][    C0]  ? __rate_control_send_low+0x5de/0x820
[  198.491697][    C0]  rate_control_send_low+0x194/0x7a0
[  198.493615][    C0]  rate_control_get_rate+0x20b/0x5d0
[  198.495630][    C0]  ieee80211_beacon_get_finish+0x38c/0x6b0
[  198.497767][    C0]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  198.500237][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  198.502388][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  198.504671][    C0]  ieee80211_beacon_get_ap+0x1478/0x19e0
[  198.506942][    C0]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  198.509322][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.511486][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.513426][    C0]  __ieee80211_beacon_get+0x1179/0x17b0
[  198.515545][    C0]  ? __ieee80211_beacon_get+0x36/0x17b0
[  198.517661][    C0]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  198.519743][    C0]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  198.522151][    C0]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  198.524390][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  198.527254][    C0]  __iterate_interfaces+0x2ab/0x590
[  198.529366][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  198.531789][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  198.534676][    C0]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  198.537316][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  198.539942][    C0]  mac80211_hwsim_beacon+0xbb/0x1c0
[  198.541936][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  198.544151][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  198.546213][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  198.548459][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  198.550764][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  198.552855][    C0]  handle_softirqs+0x286/0x870
[  198.554807][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  198.556742][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  198.558765][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  198.560873][    C0]  __irq_exit_rcu+0xca/0x1f0
[  198.562717][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  198.564791][    C0]  irq_exit_rcu+0x9/0x30
[  198.566482][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  198.568707][    C0]  </IRQ>
[  198.569863][    C0]  <TASK>
[  198.571023][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  198.573466][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  198.576106][    C0] Code: 74 05 e8 3b fd 55 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 03 1e 1f f6 65 8b 05 ac 8a 2e 07 85 c0 74 40 48 c7 04 24 0e 36
[  198.583261][    C0] RSP: 0018:ffffc9000336f640 EFLAGS: 00000206
[  198.585588][    C0] RAX: 5e01874585f82900 RBX: 0000000000000a02 RCX: 5e01874585f82900
[  198.588562][    C0] RDX: 0000000000000000 RSI: ffffffff8d998b14 RDI: 0000000000000001
[  198.591588][    C0] RBP: ffffc9000336f6d0 R08: ffffffff8fa1f3f7 R09: 1ffffffff1f43e7e
[  198.593976][    C0] R10: dffffc0000000000 R11: fffffbfff1f43e7f R12: dffffc0000000000
[  198.596988][    C0] R13: 1ffff9200066dee0 R14: ffff88804b027ac0 R15: 1ffff9200066dec8
[  198.600262][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  198.602806][    C0]  schedule_hrtimeout_range_clock+0x123/0x2f0
[  198.605179][    C0]  ? __pfx_schedule_hrtimeout_range_clock+0x10/0x10
[  198.607694][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  198.609665][    C0]  ? tcp_poll+0x8d6/0xe00
[  198.611340][    C0]  ? poll_schedule_timeout+0x30/0x1b0
[  198.613409][    C0]  poll_schedule_timeout+0xd1/0x1b0
[  198.615460][    C0]  do_sys_poll+0x73b/0x1070
[  198.617283][    C0]  ? __pfx_do_sys_poll+0x10/0x10
[  198.619241][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.621047][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.622995][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.624810][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.626684][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.628512][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.630371][    C0]  ? __pfx_pollwake+0x10/0x10
[  198.632274][    C0]  ? cgroup_freezing+0x20/0x360
[  198.634206][    C0]  ? cgroup_freezing+0x20/0x360
[  198.636122][    C0]  ? cgroup_freezing+0x20/0x360
[  198.638157][    C0]  ? set_user_sigmask+0x15b/0x1b0
[  198.640125][    C0]  ? __pfx_set_user_sigmask+0x10/0x10
[  198.642267][    C0]  __se_sys_ppoll+0x1ff/0x260
[  198.644167][    C0]  ? __pfx___se_sys_ppoll+0x10/0x10
[  198.646193][    C0]  ? __pfx_ksys_write+0x10/0x10
[  198.648038][    C0]  ? __task_pid_nr_ns+0x28/0x470
[  198.649931][    C0]  ? do_syscall_64+0xbe/0x3b0
[  198.651809][    C0]  ? __x64_sys_ppoll+0x20/0xc0
[  198.653669][    C0]  do_syscall_64+0xfa/0x3b0
[  198.655399][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.657715][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  198.660133][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.662327][    C0] RIP: 0033:0x7fe78ff19ad5
[  198.664022][    C0] Code: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83
[  198.671296][    C0] RSP: 002b:00007ffe653885d0 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  198.674646][    C0] RAX: ffffffffffffffda RBX: 00000000000668a0 RCX: 00007fe78ff19ad5
[  198.677677][    C0] RDX: 00007ffe653885f0 RSI: 0000000000000007 RDI: 0000557728c55970
[  198.680693][    C0] RBP: 0000557728c56130 R08: 0000000000000008 R09: 0000000000000000
[  198.683730][    C0] R10: 00007ffe653886d8 R11: 0000000000000246 R12: 0000557728635aa4
[  198.686865][    C0] R13: 0000000000000001 R14: 00005577286363e8 R15: 00007ffe65388658
[  198.689986][    C0]  </TASK>
[  198.691913][    C0] Kernel Offset: disabled
[  198.693657][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:39:24  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006cd0
R8 =ffff888021130237 R9 =1ffff11004226046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af989d R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe7902fd800 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f09e10e56c0 CR3=000000001fcfc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89dd3b67 RBX=ffff888110d7f5a0 RCX=0000000000000002 RDX=ffff888122b38000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc900061d7500
R8 =0000000000000000 R9 =ffffffff89dd3b33 R10=dffffc0000000000 R11=fffffbfff1f43e7f
R12=ffff888104e8df00 R13=ffff888110d7f000 R14=ffff888104e8df00 R15=ffffc900061d76e0
RIP=ffffffff81a72fb6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5b8e0266c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010038 CR3=00000001256fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5b8d211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
