last executing test programs:

3.912033653s ago: executing program 2 (id=6355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
unshare(0x4000400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
recvmsg$unix(r2, 0x0, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

3.762219918s ago: executing program 2 (id=6356):
r0 = socket(0x11, 0x6, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r5)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44)
unshare(0x22020600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800003, 0x12, r2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.841922903s ago: executing program 2 (id=6360):
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})
syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x10, 0x3c, 0x0, @dev, @local, {[@fragment={0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x66}, @srh={0x3b, 0x0, 0x4, 0x0, 0x5, 0x0, 0x8001}]}}}}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x2000400c)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000200000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

902.724642ms ago: executing program 2 (id=6376):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0) (async)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
accept(r0, 0x0, 0x0) (async)
r2 = accept(r0, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251b00000010002e800c000400000000000000000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x404c080)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff382f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x6e43}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000880}, 0x10040884)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000080), &(0x7f0000000000)=@tcp=r2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f0000000080), &(0x7f0000000000)=@tcp=r2}, 0x20)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
connect$unix(r2, 0x0, 0x0)

752.891996ms ago: executing program 2 (id=6377):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
pipe(&(0x7f00000000c0))
sendmmsg$inet(r5, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x4000000)

652.678521ms ago: executing program 2 (id=6378):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100), 0x4)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
unshare(0x22020400)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r3, 0x100, 0x46, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$int_in(r5, 0x5452, &(0x7f0000000500)=0xd0)
recvmsg$can_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004)
sendmmsg$inet6(r5, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}}], 0x4000000000002ce, 0x40000)
socket$inet_udp(0x2, 0x2, 0x0)

450.908393ms ago: executing program 0 (id=6385):
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000200))
socket(0x5, 0x803, 0x0)
socket$inet6(0xa, 0x808, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952a0", 0x94}, {&(0x7f0000001040)="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", 0x2ad}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000)
listen(r0, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8)
close(r3)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0x752a}, @multicast1, @broadcast, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

450.508604ms ago: executing program 1 (id=6386):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', <r3=>0x0})
connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10)
connect$vsock_stream(r0, 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)

259.050287ms ago: executing program 1 (id=6387):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYBLOB="010028bd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008006d6163736563300000000000000000000c001000ffffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async)
listen(r0, 0x0) (async)
r5 = socket(0x28, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket(0x10, 0x803, 0x0) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='cpu.max\x00', 0x2, 0x0)
write$cgroup_int(r9, &(0x7f0000000580)=0x2, 0x12)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5f2b}}}]}]}]}}]}, 0x64}}, 0x0) (async)
r11 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r11, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) (async)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet6_tcp_int(r12, 0x6, 0x17, &(0x7f0000000040)=0x7, 0x4)

217.96255ms ago: executing program 0 (id=6388):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9", 0x94}], 0x1}, 0x8bb3a301eb085f) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}})
bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async)
listen(r0, 0x5) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000e40)={{r4}, "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"}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b113600000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

217.623527ms ago: executing program 0 (id=6389):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
r2 = socket(0x28, 0x5, 0x200000)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x5d)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={<r5=>0x0, 0x3ff}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={r5, 0x0, 0x20, 0xa4, 0xa2d}, &(0x7f00000002c0)=0x18)
ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000000))
listen(r2, 0x0)
r6 = socket(0x28, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}}, 0x0)
connect$vsock_stream(r6, &(0x7f0000000080), 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)
r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
accept(r9, 0x0, 0x0)
setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8)
close(r6)

112.804722ms ago: executing program 1 (id=6390):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6104}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x8)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xed, 0x0, 0x4})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000240)={&(0x7f0000000200)=[{&(0x7f0000000100)="43ff117124b45bc57336a99afa5f547228daa66f9523f539201da43d03e0301f5718d279a7e2c6848429ebe977bf8bf1356e47eed94255243757db5d9e573402e7255a9943ba565c8cff2255d04b9a9520ef60656ca6d77a064899fd514b602abd99845e596c128fcc4970b2ab0395ceefe20ca5a0c8ecb915f8edeb14bf2006ea285c5e06b55028e5d8d8b061196916c46d3f1256fa155acf2469c89b23009355c8128549a58d1bde9320f98adebf721a8113bf677505324c32198c5b1a3c496e816491edd5995aea25665d222657ac5e7314f50405e70395e472cc6cf2cd42c44c9132", 0xe4}], 0x1, 0x2, 0x0, 0xffffffffffffff73, 0x3, 0x6b1, 0x2, 0x5})

112.473927ms ago: executing program 0 (id=6391):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={<r3=>0x0, 0x6b, "62790adac462f52f2be124397c54d414f83c2bb8b6480c427c3333f4de26a1dd1af9d57f925d3847f33840af19fb558aed43f254b5ddb0dafdd27b330486a8d5344f443e300e4f111975d0c02994d8ab070d7c11108f4732c7677e518cb44a1c731ab579f118fa56f9a568"}, &(0x7f0000000300)=0x73)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={r3, 0x8}, 0x8)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r5, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e26, 0xfffffffe, @empty, 0xa}, 0x1c, 0x0}}], 0x1, 0x200880c0)
getsockopt$inet6_buf(r5, 0x29, 0x3d, &(0x7f00000020c0)=""/171, &(0x7f0000000000)=0xab)
r6 = socket(0x28, 0x5, 0x0)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$6lowpan_control(r7, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x19)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r9, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)

62.843896ms ago: executing program 0 (id=6392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_CLOCK(r1, 0xc048aec8, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x6, 0x2})
socket(0x28, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

62.231396ms ago: executing program 1 (id=6393):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f00000005c0)={<r6=>0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x20100, &(0x7f0000000500)={@align=0x80, {0x4, 0x81, 0xa285}}, 0x80000001, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x1f7cbe7e})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x8, <r7=>0x0}, 0x8)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0xffff, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r4, r3, r3, r4, r4, r4, r3], &(0x7f0000000800)=[{0x2, 0x1, 0xb, 0xc}, {0x0, 0x4, 0x9, 0x9}, {0x5, 0x3, 0x8, 0xc}, {0x2, 0x2, 0xb, 0x1}], 0x10, 0x68}, 0x94)
r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
shutdown(r10, 0x1)
sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xb}}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000001}, @alu={0x4, 0x1, 0x9, 0x6, 0x7, 0x30, 0x1}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0xdde, 0xce, &(0x7f00000003c0)=""/206, 0x41100, 0x78, '\x00', 0x0, @fallback=0x29, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x9, &(0x7f0000000b40)=[r3, r3, r4, r4, r4], &(0x7f0000000b80)=[{0x0, 0x1, 0x1, 0x6}, {0x4, 0x4, 0x10, 0x6}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x3, 0x5, 0x8}, {0x2, 0x9, 0xb, 0x8}, {0x1, 0x1, 0x4, 0x7}, {0x5, 0x3, 0xb, 0xf}, {0x5, 0x1, 0x7, 0x3}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xff8a}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc848}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x30004}], 0x2)

2.245047ms ago: executing program 1 (id=6394):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000001500)={0x28, 0x0, 0x2710, @host}, 0x10)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r1], 0x38}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))

130.667µs ago: executing program 1 (id=6395):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000080))
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa, 0xfffffffffffffffc, 0x0, 0x48, '\x00', 0x0, 0x38}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r1}, 0x10) (async)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r6, 0x4, r1}, 0x10)
listen(r0, 0x4) (async)
listen(r0, 0x4)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r9=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000640)={r9}, &(0x7f0000000740)=0x8) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000640)={r9}, &(0x7f0000000740)=0x8)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
recvmmsg(r7, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) (async)
recvmmsg(r7, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0)
r10 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x100000)
recvfrom$unix(r10, &(0x7f0000000240)=""/45, 0x2d, 0x0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) (async)
recvfrom$unix(r10, &(0x7f0000000240)=""/45, 0x2d, 0x0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)
close(0x3)

0s ago: executing program 0 (id=6396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, @short={0x2, 0x3}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x2080)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000150053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0)
r4 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x555555555555839, 0x0, [{0x7, 0x2, 0x0, 0x0, @sint={0x8, 0x7fffffff}}, {0xfffffffa, 0x5, 0x0, 0x0, @adapter={0x9, 0xd, 0x7fffffffffffffff, 0x0, 0xffffff00}}, {0x1, 0x3, 0x0, 0x0, @irqchip={0xa4, 0x9}}]})

kernel console output (not intermixed with test programs):

.921768][T17895] syzkaller1: entered allmulticast mode
[  360.148485][T17909] netlink: 'syz.2.3442': attribute type 21 has an invalid length.
[  361.354553][T17999] __nla_validate_parse: 12 callbacks suppressed
[  361.354568][T17999] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3466'.
[  361.497047][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3472'.
[  361.512545][T18017] team0: mtu less than device minimum
[  361.556578][T18026] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  361.768711][T18041] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  362.059379][T18058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3482'.
[  362.128561][T18060] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3482'.
[  362.132600][T18060] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3482'.
[  362.137939][T18060] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3482'.
[  362.427146][T18062] netlink: 'syz.2.3483': attribute type 1 has an invalid length.
[  362.429954][T18062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.697010][T18067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3485'.
[  362.701857][T18067] batadv_slave_1: entered promiscuous mode
[  362.780528][T18066] batadv_slave_1: left promiscuous mode
[  362.835704][T18074] nft_compat: unsupported protocol 0
[  362.858860][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3488'.
[  362.939083][T18085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3492'.
[  362.966410][T18083] syzkaller0: entered promiscuous mode
[  362.969602][T18083] syzkaller0: entered allmulticast mode
[  363.092633][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'.
[  363.131683][T18114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.141398][T18114] netlink: 'syz.1.3499': attribute type 8 has an invalid length.
[  363.272775][T18128] bond0: option downdelay: invalid value (18446744073709547521)
[  363.275691][T18128] bond0: option downdelay: allowed values 0 - 2147483647
[  363.279430][T18128] bond0 (unregistering): Released all slaves
[  363.334780][T18128] openvswitch: netlink: Message has 12 unknown bytes.
[  363.337515][T18128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.602650][T18143] lo speed is unknown, defaulting to 1000
[  364.999424][T18195] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  366.118713][T18250] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001
[  366.260119][T18257] ip6gre0: entered allmulticast mode
[  366.920758][T18280] syzkaller1: entered promiscuous mode
[  366.922817][T18280] syzkaller1: entered allmulticast mode
[  367.976681][T18309] __nla_validate_parse: 4 callbacks suppressed
[  367.976699][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  368.544500][T18345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.847345][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.851134][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.854452][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.857686][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.860616][T18365] netlink: 58 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.863929][T18369] netlink: 58 bytes leftover after parsing attributes in process `syz.1.3569'.
[  368.907281][T18374] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  369.031988][T18379] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3574'.
[  369.048751][T18378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'.
[  369.620922][T18449] xt_TPROXY: Can be used only with -p tcp or -p udp
[  370.075029][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3597'.
[  370.602415][T18475] netlink: Conntrack attr has 3 unknown bytes
[  370.604631][T18476] netlink: Conntrack attr has 3 unknown bytes
[  370.952407][T18501] gretap0: entered promiscuous mode
[  370.957304][T18501] gretap0: left promiscuous mode
[  371.748392][T18534] sock: sock_set_timeout: `syz.2.3620' (pid 18534) tries to set negative timeout
[  372.020538][T18554] ip6gre2: entered promiscuous mode
[  372.022431][T18554] ip6gre2: entered allmulticast mode
[  372.075712][T18557] netlink: 'syz.0.3629': attribute type 16 has an invalid length.
[  372.481571][T18583] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.537028][T18583] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.684564][T18589] ip6gretap0: entered promiscuous mode
[  372.693919][ T5476] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.701280][ T5476] netdevsim netdevsim0 eth0: unset [0, 1] type 1 family 0 port 2816 - 0
[  372.711881][ T5476] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.721542][ T5476] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.729581][ T5476] netdevsim netdevsim0 eth1: unset [0, 1] type 1 family 0 port 2816 - 0
[  372.737521][ T5476] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.754978][ T5476] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.763849][ T5476] netdevsim netdevsim0 eth2: unset [0, 1] type 1 family 0 port 2816 - 0
[  372.771005][ T5476] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.778708][ T5476] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.784710][ T5476] netdevsim netdevsim0 eth3: unset [0, 1] type 1 family 0 port 2816 - 0
[  372.793341][ T5476] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.845349][T18596] syzkaller0: entered promiscuous mode
[  372.847282][T18596] syzkaller0: entered allmulticast mode
[  375.968645][T18654] syzkaller0: entered promiscuous mode
[  375.976916][T18654] syzkaller0: entered allmulticast mode
[  375.988607][T18654] syzkaller0: tun_net_xmit 14
[  376.590653][T18685] __nla_validate_parse: 7 callbacks suppressed
[  376.590674][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  376.797237][T18689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3659'.
[  376.842269][T18698] syzkaller1: entered promiscuous mode
[  376.846549][T18698] syzkaller1: entered allmulticast mode
[  377.460668][T18712] netlink: 'syz.1.3664': attribute type 1 has an invalid length.
[  377.465603][T18712] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3664'.
[  377.470330][T18712] netlink: 'syz.1.3664': attribute type 1 has an invalid length.
[  377.473673][T18712] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3664'.
[  377.477154][T18712] netlink: 'syz.1.3664': attribute type 1 has an invalid length.
[  377.480525][T18712] netlink: 'syz.1.3664': attribute type 8 has an invalid length.
[  377.483231][T18712] netlink: 606 bytes leftover after parsing attributes in process `syz.1.3664'.
[  377.655759][T18722] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3666'.
[  377.743785][T18727] xt_connbytes: Forcing CT accounting to be enabled
[  394.250687][T18777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3683'.
[  394.276790][T18777] syzkaller0: entered promiscuous mode
[  394.278817][T18777] syzkaller0: entered allmulticast mode
[  394.475906][T18781] netlink: 'syz.0.3685': attribute type 13 has an invalid length.
[  394.479028][T18781] netlink: 'syz.0.3685': attribute type 13 has an invalid length.
[  395.071989][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3689'.
[  395.523084][T18825] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001
[  395.569877][T18827] nbd: must specify at least one socket
[  395.619902][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'.
[  395.640314][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3703'.
[  395.762089][T18845] syzkaller0: entered promiscuous mode
[  395.764866][T18845] syzkaller0: entered allmulticast mode
[  395.829627][T18847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  396.542979][T18892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3721'.
[  396.674522][T18899] netlink: 'syz.2.3723': attribute type 12 has an invalid length.
[  396.946625][T18933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3730'.
[  397.020199][T18937] syzkaller1: entered promiscuous mode
[  397.022199][T18937] syzkaller1: entered allmulticast mode
[  397.032154][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3732'.
[  397.367230][T18961] netem: change failed
[  398.112712][T19014] netlink: 'syz.1.3754': attribute type 1 has an invalid length.
[  398.136476][T19014] bond0: entered promiscuous mode
[  398.138795][T19014] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.264915][T19029] netlink: 'syz.1.3757': attribute type 4 has an invalid length.
[  398.276511][T19029] netlink: 'syz.1.3757': attribute type 4 has an invalid length.
[  398.280763][T19031] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  398.312891][T19033] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20001
[  398.547538][T19066] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  398.663307][T19077] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3769'.
[  398.689368][T19081] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3770'.
[  398.961058][T19096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3773'.
[  399.499194][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3777'.
[  399.929414][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3783'.
[  400.049681][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'.
[  400.560785][T19185] syzkaller1: entered promiscuous mode
[  400.563001][T19185] syzkaller1: entered allmulticast mode
[  400.602526][T19189] netlink: 'syz.1.3798': attribute type 4 has an invalid length.
[  400.605811][T19189] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3798'.
[  400.681312][T19193] netlink: 'syz.1.3800': attribute type 29 has an invalid length.
[  400.681729][T19195] netlink: 604 bytes leftover after parsing attributes in process `syz.1.3800'.
[  400.684819][T19194] netlink: 'syz.1.3800': attribute type 29 has an invalid length.
[  400.796285][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'.
[  401.058899][T19212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3807'.
[  401.273845][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3814'.
[  401.436874][T19244] SET target dimension over the limit!
[  402.105241][T19280] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3827'.
[  402.422518][T19298] tipc: Failed to remove unknown binding: 66,1,1/2534763411:162805422/162805424
[  402.429174][T19298] tipc: Failed to remove unknown binding: 66,1,1/2534763411:162805422/162805424
[  402.444208][T19293] netlink: 'syz.2.3831': attribute type 32 has an invalid length.
[  402.447804][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3831'.
[  402.633059][T19314] netlink: 'syz.1.3837': attribute type 62 has an invalid length.
[  402.799074][T19326] netlink: 'syz.0.3841': attribute type 4 has an invalid length.
[  402.805776][T19326] netlink: 'syz.0.3841': attribute type 4 has an invalid length.
[  403.318687][T19388] sctp: [Deprecated]: syz.2.3859 (pid 19388) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.318687][T19388] Use struct sctp_sack_info instead
[  404.580794][T19456] netlink: 'syz.2.3880': attribute type 11 has an invalid length.
[  404.582409][T19454] pimreg9: entered allmulticast mode
[  404.832900][T19462] __nla_validate_parse: 3 callbacks suppressed
[  404.832914][T19462] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3881'.
[  404.843844][T19462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3881'.
[  406.297282][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3894'.
[  406.729801][T19510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  407.831238][T19542] openvswitch: netlink: Flow key attr not present in new flow.
[  408.096133][T19548] can: request_module (can-proto-0) failed.
[  409.362043][T19581] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3915'.
[  409.367515][T19581] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3915'.
[  409.372504][T19581] netlink: zone id is out of range
[  409.375183][T19581] netlink: zone id is out of range
[  409.377439][T19581] netlink: zone id is out of range
[  409.379538][T19581] netlink: zone id is out of range
[  409.381306][T19581] netlink: zone id is out of range
[  409.383327][T19581] netlink: zone id is out of range
[  409.386138][T19581] netlink: zone id is out of range
[  409.388585][T19581] netlink: zone id is out of range
[  409.521914][T19594] kvm: user requested TSC rate below hardware speed
[  409.593039][T19598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3920'.
[  409.601763][T19598] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  409.798700][T19609] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  409.977131][T19628] lo speed is unknown, defaulting to 1000
[  410.023480][T19634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3928'.
[  411.668220][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'.
[  411.679662][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'.
[  411.684235][T19684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3943'.
[  412.109293][T19694] bond6: option all_slaves_active: invalid value (5)
[  412.113474][T19694] bond6 (unregistering): Released all slaves
[  412.595351][T19723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3953'.
[  412.600266][T19723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3953'.
[  413.037526][T19763] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3965'.
[  413.157480][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3966'.
[  413.464174][T19798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3975'.
[  413.785672][T19819] netlink: 'syz.0.3980': attribute type 9 has an invalid length.
[  413.796178][T19819] bridge13: entered allmulticast mode
[  413.996442][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'.
[  414.341908][T19844] lo speed is unknown, defaulting to 1000
[  414.700246][T19861] netlink: 'syz.2.3990': attribute type 29 has an invalid length.
[  414.710250][T19861] netlink: 'syz.2.3990': attribute type 29 has an invalid length.
[  415.277975][T19883] netlink: 'syz.0.3995': attribute type 27 has an invalid length.
[  415.281426][T19883] netlink: 'syz.0.3995': attribute type 28 has an invalid length.
[  415.285116][T19883] netlink: 'syz.0.3995': attribute type 29 has an invalid length.
[  415.288458][T19883] netlink: 'syz.0.3995': attribute type 30 has an invalid length.
[  415.291535][T19883] netlink: 'syz.0.3995': attribute type 31 has an invalid length.
[  415.295789][T19883] netlink: 'syz.0.3995': attribute type 32 has an invalid length.
[  415.299509][T19883] netlink: 'syz.0.3995': attribute type 33 has an invalid length.
[  415.302675][T19883] __nla_validate_parse: 1 callbacks suppressed
[  415.302688][T19883] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3995'.
[  416.829106][T19935] tap0: tun_chr_ioctl cmd 1074025692
[  417.620689][T19949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4010'.
[  417.641483][T19952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4012'.
[  418.110039][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4028'.
[  418.942817][T20034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4035'.
[  419.001212][T20042] validate_nla: 12 callbacks suppressed
[  419.001226][T20042] netlink: 'syz.2.4038': attribute type 32 has an invalid length.
[  419.009859][T20042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4038'.
[  419.396662][T20068] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[  420.157516][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'.
[  420.161351][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4054'.
[  420.165202][T20089] netlink: 'syz.1.4054': attribute type 14 has an invalid length.
[  420.425655][T20111] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4062'.
[  420.428888][T20111] net_ratelimit: 393 callbacks suppressed
[  420.428897][T20111] netlink: Conntrack attr has 4 unknown bytes
[  420.864986][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4068'.
[  420.869032][T20140] 8021q: adding VLAN 0 to HW filter on device bond0
[  420.928445][T20142] syzkaller1: tun_chr_ioctl cmd 1074025677
[  420.930899][T20142] syzkaller1: linktype set to 805
[  420.935232][T20142] netlink: 'syz.0.4069': attribute type 1 has an invalid length.
[  420.938317][T20142] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4069'.
[  420.942507][T20142] netlink: 206464 bytes leftover after parsing attributes in process `syz.0.4069'.
[  420.988861][T20144] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  421.046924][T20148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.050044][T20148] syzkaller0: entered promiscuous mode
[  421.052069][T20148] syzkaller0: entered allmulticast mode
[  421.069537][T20148] tipc: Resetting bearer <eth:syzkaller0>
[  421.125286][T20146] tipc: Resetting bearer <eth:syzkaller0>
[  421.138286][T20146] tipc: Disabling bearer <eth:syzkaller0>
[  421.994163][T20172] netlink: 'syz.0.4079': attribute type 1 has an invalid length.
[  421.997172][T20172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.004899][T20172] netlink: 'syz.0.4079': attribute type 1 has an invalid length.
[  422.007554][T20172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.010607][T20172] netlink: 'syz.0.4079': attribute type 1 has an invalid length.
[  422.014153][T20172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.046808][T20177] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4080'.
[  422.535660][T20215] syzkaller0: entered promiscuous mode
[  422.537605][T20215] syzkaller0: entered allmulticast mode
[  423.208619][T20229] netlink: 'syz.0.4092': attribute type 1 has an invalid length.
[  423.246711][T20229] 8021q: adding VLAN 0 to HW filter on device bond6
[  423.257385][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'.
[  423.265759][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4092'.
[  423.285141][T20229] bond6: (slave geneve3): making interface the new active one
[  423.290643][T20229] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  423.293744][ T9816] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.298311][ T9816] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.303179][ T9816] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.309683][T20236] netlink: 'syz.0.4092': attribute type 1 has an invalid length.
[  423.326277][ T9816] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.419379][T20242] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4095'.
[  423.542913][T20258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4099'.
[  423.694619][T20263] netlink: 'syz.1.4102': attribute type 1 has an invalid length.
[  424.636296][T20295] lo speed is unknown, defaulting to 1000
[  425.086656][   T33] audit: type=1800 audit(1778272021.004:10): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4119" name="memory.events" dev="tmpfs" ino=6781 res=0 errno=0
[  425.162931][T20328] syzkaller0: entered promiscuous mode
[  425.165515][T20328] syzkaller0: entered allmulticast mode
[  425.500532][T20358] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4128'.
[  425.713090][T20367] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4131'.
[  425.725634][T20367] netlink: 'syz.0.4131': attribute type 2 has an invalid length.
[  426.818253][T20399] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  426.932332][T20406] netlink: 'syz.2.4144': attribute type 1 has an invalid length.
[  426.937795][T20406] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4144'.
[  426.996904][   T33] audit: type=1800 audit(1778272022.914:11): pid=20407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4144" name="memory.events" dev="tmpfs" ino=7594 res=0 errno=0
[  427.007069][   T33] audit: type=1804 audit(1778272022.924:12): pid=20407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4144" name="/newroot/1463/memory.events" dev="tmpfs" ino=7594 res=1 errno=0
[  427.211720][T20394] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  427.409578][T20394] bond2: left promiscuous mode
[  427.413476][T20394] ip6gre1: left promiscuous mode
[  427.451880][T20394] bond4: left promiscuous mode
[  427.453805][T20394] bond4: left allmulticast mode
[  427.458704][T20394] bond5: left promiscuous mode
[  427.464125][T20394] wireguard0: left promiscuous mode
[  427.476186][T20394] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  427.487248][T20394] geneve3: left promiscuous mode
[  427.504253][T20394] ip6gre2: left promiscuous mode
[  427.511081][T20394] ip6gre2: left allmulticast mode
[  427.519927][T20394] bond0: left promiscuous mode
[  427.544324][ T9816] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.553744][ T9816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.556962][ T9816] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.559885][ T9816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.562863][ T9816] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.568184][ T9816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.571652][ T9816] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  427.575366][ T9816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.637346][T20413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4146'.
[  427.715516][T20421] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  427.831363][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4150'.
[  428.557379][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4158'.
[  428.560518][T20453] netlink: 'syz.2.4158': attribute type 8 has an invalid length.
[  428.567372][T20453] geneve2: entered promiscuous mode
[  428.569300][T20453] geneve2: entered allmulticast mode
[  428.572598][ T9816] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  428.578730][ T9816] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.582362][ T9816] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.586462][ T9816] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.673920][T20460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4160'.
[  428.920031][T20466] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  429.060246][T20476] netlink: 'syz.0.4165': attribute type 58 has an invalid length.
[  429.070349][T20476] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4165'.
[  429.115080][T20486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4165'.
[  430.233075][T20516] netlink: 'syz.0.4176': attribute type 5 has an invalid length.
[  430.483064][T20531] netlink: 'syz.0.4179': attribute type 11 has an invalid length.
[  430.818349][T20561] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  430.825738][T20561] bond9 (unregistering): Released all slaves
[  431.170583][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4192'.
[  431.176597][T20596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4192'.
[  433.909132][T20572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  434.092603][T20620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4199'.
[  434.146984][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4200'.
[  434.224986][T20635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'.
[  434.284144][T20641] sctp: [Deprecated]: syz.0.4203 (pid 20641) Use of int in max_burst socket option.
[  434.284144][T20641] Use struct sctp_assoc_value instead
[  435.318546][T20686] netlink: 'syz.2.4219': attribute type 8 has an invalid length.
[  435.890108][T20704] netlink: 'syz.1.4225': attribute type 21 has an invalid length.
[  435.892729][T20704] netlink: 'syz.1.4225': attribute type 22 has an invalid length.
[  435.895618][T20704] netlink: 'syz.1.4225': attribute type 23 has an invalid length.
[  435.898469][T20704] netlink: 'syz.1.4225': attribute type 25 has an invalid length.
[  435.901579][T20704] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4225'.
[  436.359165][T20727] bond9: entered allmulticast mode
[  436.375881][T20727] macvlan0: entered promiscuous mode
[  436.378473][T20727] macvlan0: entered allmulticast mode
[  436.381511][T20727] bond9: (slave macvlan0): Opening slave failed
[  436.577863][T20742] ip6gretap0: left promiscuous mode
[  436.588747][T20742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.615455][T20742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  436.619689][T20742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  436.630784][T20742] veth1_macvtap: left promiscuous mode
[  436.634618][T20742] veth0_macvtap: left promiscuous mode
[  436.638237][T20742] veth0_macvtap: entered promiscuous mode
[  436.641686][T20742] veth1_macvtap: entered promiscuous mode
[  436.651470][T20742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  436.655066][T20742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  436.658176][T20742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.661355][T20742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.680714][T20742] 8021q: adding VLAN 0 to HW filter on device bond1
[  436.684744][T20742] 8021q: adding VLAN 0 to HW filter on device team0
[  436.687637][T20742] 8021q: adding VLAN 0 to HW filter on device team1
[  436.693707][T20742] 8021q: adding VLAN 0 to HW filter on device bond2
[  436.699509][T20742] 8021q: adding VLAN 0 to HW filter on device bond3
[  436.707566][T20742] 8021q: adding VLAN 0 to HW filter on device bond4
[  436.710772][T20742] 8021q: adding VLAN 0 to HW filter on device bond5
[  436.718017][T20742] 8021q: adding VLAN 0 to HW filter on device bond6
[  436.721032][T20742] 8021q: adding VLAN 0 to HW filter on device bond7
[  436.727406][T20742] batman_adv: batadv0: Interface activated: ip6gretap1
[  436.733566][T20742] ip6gretap0: entered promiscuous mode
[  436.736424][T20742] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.741311][T20742] 8021q: adding VLAN 0 to HW filter on device bond8
[  436.767210][T19809] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  436.770438][T19809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.800536][T19809] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.804065][T19809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.807116][T19809] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.810526][T19809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.817361][T19809] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.820251][T19809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.829955][ T5665] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  436.834117][ T5665] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  436.854662][ T9811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  436.888443][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4235'.
[  436.948216][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'.
[  437.003350][T20753] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4238'.
[  437.460483][T20772] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4243'.
[  437.564057][ T9811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  437.591613][ T5665] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x42
[  437.804116][ T9811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  438.016154][T20793] ipt_REJECT: TCP_RESET invalid for non-tcp
[  438.034682][T20797] syzkaller1: entered promiscuous mode
[  438.037579][T20797] syzkaller1: entered allmulticast mode
[  438.332367][T20816] syzkaller1: tun_chr_ioctl cmd 35111
[  438.447255][T20826] syzkaller1: entered promiscuous mode
[  438.449996][T20826] syzkaller1: entered allmulticast mode
[  438.532044][T20828] netlink: 'syz.1.4259': attribute type 1 has an invalid length.
[  438.547852][T20828] 8021q: adding VLAN 0 to HW filter on device bond9
[  438.565173][T20828] bond9: (slave gretap2): making interface the new active one
[  438.574580][T20828] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  438.631264][T20828] syz.1.4259 (20828) used greatest stack depth: 18688 bytes left
[  438.861633][T20839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  438.869508][T20839] syzkaller0: entered promiscuous mode
[  438.876966][T20839] syzkaller0: entered allmulticast mode
[  438.888168][T20839] tipc: Resetting bearer <eth:syzkaller0>
[  439.189354][T20838] tipc: Resetting bearer <eth:syzkaller0>
[  439.210737][T20838] tipc: Disabling bearer <eth:syzkaller0>
[  439.485915][T20860] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4264'.
[  439.841627][T20878] netlink: 'syz.0.4271': attribute type 4 has an invalid length.
[  439.850980][T20878] netlink: 'syz.0.4271': attribute type 4 has an invalid length.
[  439.859411][T20878] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  440.065294][T20898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4276'.
[  440.178047][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4279'.
[  440.186493][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'.
[  440.476509][T20940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4285'.
[  440.480075][T20940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4285'.
[  440.683711][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  442.126342][T21041] syzkaller1: entered promiscuous mode
[  442.128807][T21041] syzkaller1: entered allmulticast mode
[  442.132661][T21041] __nla_validate_parse: 3 callbacks suppressed
[  442.132672][T21041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'.
[  442.255726][T21050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4316'.
[  443.046692][T21058] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4318'.
[  443.317399][T21069] netlink: 'syz.1.4320': attribute type 2 has an invalid length.
[  443.335326][T21069] netlink: 'syz.1.4320': attribute type 2 has an invalid length.
[  443.369752][T21071] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4322'.
[  443.382686][T21071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4322'.
[  443.737885][T21082] netlink: 'syz.0.4325': attribute type 1 has an invalid length.
[  443.754609][T21082] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.904812][T21085] lo speed is unknown, defaulting to 1000
[  443.953282][T21092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  444.715767][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'.
[  444.729559][T21109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'.
[  444.734594][T21109] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  444.797980][T21114] pim6reg: entered allmulticast mode
[  444.801159][T21118] pim6reg: left allmulticast mode
[  444.964889][T21127] 8021q: adding VLAN 0 to HW filter on device bond10
[  445.798545][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'.
[  445.801955][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4347'.
[  446.123102][T21173] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  446.129095][T21173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  446.720961][T21191] ip6gre3: entered allmulticast mode
[  446.738361][T21191] team0: Port device ip6gre3 added
[  446.758218][T21190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4359'.
[  448.567729][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4382'.
[  448.683909][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  448.826366][T21283] netlink: 'syz.0.4386': attribute type 2 has an invalid length.
[  449.921414][T21311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4393'.
[  449.936640][T21311] bond0: entered promiscuous mode
[  449.941053][T21311] batadv_slave_0: entered promiscuous mode
[  449.944469][T21311] debugfs: 'hsr1' already exists in 'hsr'
[  449.946568][T21311] Cannot create hsr debugfs directory
[  449.982389][T21322] netlink: 'syz.2.4396': attribute type 6 has an invalid length.
[  449.985979][T21322] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.4396'.
[  450.038970][T21322] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4396'.
[  450.093019][T21334] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4400'.
[  450.098987][T21334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4400'.
[  450.106430][T21334] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4400'.
[  450.119200][T21337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4401'.
[  450.974447][T21349] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4405'.
[  451.058583][T21362] batadv0: entered promiscuous mode
[  451.062176][T21362] batadv0: entered allmulticast mode
[  451.121311][T21371] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4411'.
[  451.348716][T21385] : renamed from bond0 (while UP)
[  451.461229][T21387] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  451.469778][T21387] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  451.473043][T21387] tipc: Enabled bearer <udp:syz1>, priority 9
[  452.231183][T21409] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  452.231328][T21410] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  453.269765][   T53] Bluetooth: hci2: link tx timeout
[  453.275759][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  454.183104][T21551] netlink: 'syz.0.4459': attribute type 1 has an invalid length.
[  454.366019][T21564] tap0: tun_chr_ioctl cmd 1074025692
[  454.507558][T21573] __nla_validate_parse: 6 callbacks suppressed
[  454.507572][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4468'.
[  454.514654][T21577] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4470'.
[  454.551058][T21581] xt_cluster: node mask cannot exceed total number of nodes
[  454.601535][T21584] syzkaller0: entered promiscuous mode
[  454.604721][T21584] syzkaller0: entered allmulticast mode
[  454.632502][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4472'.
[  455.325677][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  455.407876][T21607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4479'.
[  455.465745][T21608] sctp: [Deprecated]: syz.2.4479 (pid 21608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.465745][T21608] Use struct sctp_sack_info instead
[  455.471739][T21608] sctp: [Deprecated]: syz.2.4479 (pid 21608) Use of struct sctp_assoc_value in delayed_ack socket option.
[  455.471739][T21608] Use struct sctp_sack_info instead
[  455.706847][T21627] netlink: 'syz.0.4486': attribute type 1 has an invalid length.
[  455.765920][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4487'.
[  456.097799][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4491'.
[  456.105428][T21650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4491'.
[  456.212280][T21664] netem: change failed
[  457.526424][T21709] xt_cluster: node mask cannot exceed total number of nodes
[  459.741900][T21737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4512'.
[  459.808302][T21741] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4513'.
[  459.872827][T21748] netlink: 'syz.2.4516': attribute type 3 has an invalid length.
[  459.882913][T21748] netlink: 'syz.2.4516': attribute type 3 has an invalid length.
[  459.908635][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4516'.
[  460.218116][T21788] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4527'.
[  460.225336][T21786] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4527'.
[  460.472648][T21800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.528171][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.592584][T21803] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[  460.923914][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.269289][T21840] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4539'.
[  461.564127][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.757496][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.760988][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.766149][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.924584][T21868] netlink: 'syz.2.4545': attribute type 13 has an invalid length.
[  461.928229][T21869] netlink: 'syz.2.4545': attribute type 13 has an invalid length.
[  462.616249][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.647124][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.974181][ T9779] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.053672][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  464.350736][T21869] netlink: 'syz.2.4545': attribute type 13 has an invalid length.
[  464.350736][T21868] netlink: 'syz.2.4545': attribute type 13 has an invalid length.
[  464.357481][ T5665] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  464.362232][ T5665] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  464.369068][ T5665] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.375699][ T5665] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.809449][T21914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4552'.
[  464.864953][T21914] lo speed is unknown, defaulting to 1000
[  465.118092][T21922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4554'.
[  465.286738][T21930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4556'.
[  465.290082][T21930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4556'.
[  465.341183][T21932] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4557'.
[  465.343567][T21934] netlink: 'syz.2.4558': attribute type 11 has an invalid length.
[  465.554730][T21944] net_ratelimit: 5 callbacks suppressed
[  465.554754][T21944] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  465.603142][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'.
[  465.724180][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.778287][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'.
[  466.341099][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4568'.
[  466.373919][T21974] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  466.418962][T21977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.427141][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.460169][T21978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.463315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.476402][T21987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4574'.
[  466.495144][T21978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'.
[  466.501321][T21977] sctp: [Deprecated]: syz.1.4571 (pid 21977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  466.501321][T21977] Use struct sctp_sack_info instead
[  466.510932][T21977] netlink: 'syz.1.4571': attribute type 1 has an invalid length.
[  466.568833][T21998] macsec2: entered promiscuous mode
[  466.570855][T21998] bridge0: entered promiscuous mode
[  466.576233][T21998] netlink: 'syz.1.4577': attribute type 3 has an invalid length.
[  466.582558][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.592198][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.596164][T21998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.613919][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.641874][T22006] netlink: 'syz.2.4579': attribute type 1 has an invalid length.
[  467.521772][T22078] netlink: 'syz.0.4601': attribute type 30 has an invalid length.
[  467.636962][T22084] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.680061][T22084] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.743319][T22084] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.798265][T22084] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.881763][ T9816] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.899705][ T9816] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.911149][ T9816] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.927075][ T9816] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  469.136358][T22149] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma?
[  470.024512][T22217] __nla_validate_parse: 8 callbacks suppressed
[  470.024538][T22217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4640'.
[  470.125616][T22220] netlink: 'syz.0.4641': attribute type 4 has an invalid length.
[  470.224286][T22227] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4643'.
[  470.588704][T22261] net_ratelimit: 438 callbacks suppressed
[  470.588731][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.601286][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.605707][T22263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4650'.
[  470.611113][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.629698][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.651052][T22261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.924189][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.963865][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.967757][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.971623][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.976095][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.017615][T22300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'.
[  472.039967][T22298] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  472.046795][T22298] bond10 (unregistering): Released all slaves
[  472.198175][T22317] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4667'.
[  472.208565][T22318] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4668'.
[  472.685538][T22364] netlink: 'syz.1.4677': attribute type 4 has an invalid length.
[  472.698896][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4677'.
[  473.870136][T22423] : renamed from lo (while UP)
[  474.034059][T22435] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4689'.
[  474.105812][T22432] netlink: 'syz.0.4688': attribute type 10 has an invalid length.
[  474.111419][T22432] ipvlan0: entered allmulticast mode
[  474.115428][T22432] veth0_vlan: entered allmulticast mode
[  474.125610][T22432] team0: Device ipvlan0 failed to register rx_handler
[  475.030657][T22507] netlink: 'syz.2.4710': attribute type 83 has an invalid length.
[  475.133488][T22517] syzkaller1: tun_chr_ioctl cmd 35111
[  475.170108][T22515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  475.516560][T22539] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  475.520497][T22539] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  476.123716][ T9773] net_ratelimit: 11 callbacks suppressed
[  476.123735][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.129201][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.152983][T22555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  476.308477][T22569] syzkaller1: entered promiscuous mode
[  476.310703][T22569] syzkaller1: entered allmulticast mode
[  476.596100][T22580] netlink: 'syz.0.4730': attribute type 9 has an invalid length.
[  477.163962][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.280934][T22616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'.
[  477.334617][T22618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4741'.
[  477.348378][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4741'.
[  477.839435][T22640] syzkaller0: entered promiscuous mode
[  477.841987][T22640] syzkaller0: entered allmulticast mode
[  477.899172][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4751'.
[  478.013656][T22656] bridge0: entered allmulticast mode
[  478.072071][T22669] netlink: 'syz.1.4757': attribute type 1 has an invalid length.
[  478.075203][T22669] netlink: 'syz.1.4757': attribute type 2 has an invalid length.
[  478.205066][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.270356][T22687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.280775][T22687] tipc: Resetting bearer <eth:syzkaller0>
[  478.288503][T22686] tipc: Disabling bearer <eth:syzkaller0>
[  478.683618][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.686552][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.689385][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.822849][T22709] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.4770'.
[  479.164059][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.244188][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.258783][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4776'.
[  479.900778][T22763] syzkaller0: entered promiscuous mode
[  479.903329][T22763] syzkaller0: entered allmulticast mode
[  481.336513][  T876] net_ratelimit: 1 callbacks suppressed
[  481.336530][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.053657][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.056660][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.059510][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.214013][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.363845][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.523668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.528901][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.531977][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.631378][T22832] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.635265][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.635636][T22834] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.638447][T22832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.648699][T22834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.652643][T22834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'.
[  482.730430][T22832] netlink: 'syz.1.4802': attribute type 16 has an invalid length.
[  482.736119][T22832] netlink: 'syz.1.4802': attribute type 17 has an invalid length.
[  482.781371][T22834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  482.799619][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.829761][ T9811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  482.948759][T22852] team_slave_1: entered allmulticast mode
[  482.951934][T22852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4806'.
[  483.273940][ T9811] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  483.292784][T22874] netlink: 'syz.2.4814': attribute type 10 has an invalid length.
[  483.337546][T22876] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4815'.
[  483.523709][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'.
[  483.526865][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4818'.
[  483.529918][T22885] netlink: 'syz.0.4818': attribute type 11 has an invalid length.
[  483.536538][ T9816] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  483.539259][T22885] netlink: 'syz.0.4818': attribute type 11 has an invalid length.
[  483.541873][ T9816] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  483.547284][ T9816] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  483.550119][ T9816] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.957195][T22906] vlan2: entered promiscuous mode
[  484.035471][T22908] syzkaller0: entered promiscuous mode
[  484.037701][T22908] syzkaller0: entered allmulticast mode
[  484.164392][T22914] xt_socket: unknown flags 0x8
[  484.698756][T22933] netlink: 'syz.0.4831': attribute type 58 has an invalid length.
[  485.221028][T22957] x_tables: ip_tables: icmp match: only valid for protocol 1
[  486.165480][T22962] Bluetooth: hci0: Opcode 0x080f failed: -4
[  486.523933][ T9773] net_ratelimit: 18 callbacks suppressed
[  486.523957][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.413596][ T5002] Bluetooth: hci0: command 0x0406 tx timeout
[  487.563885][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.283833][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.604297][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.763856][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.767885][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.771519][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.453279][T22982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  489.493987][T22995] __nla_validate_parse: 4 callbacks suppressed
[  489.494000][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4847'.
[  489.645223][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.666003][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4852'.
[  489.742500][T23022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  489.846800][T23028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4856'.
[  489.850953][T23029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4856'.
[  490.247616][T23050] netlink: 'syz.2.4861': attribute type 1 has an invalid length.
[  490.425607][T23055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4863'.
[  490.508806][T23059] syzkaller1: entered promiscuous mode
[  490.511148][T23059] syzkaller1: entered allmulticast mode
[  490.683660][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.939412][T23085] netlink: 'syz.1.4873': attribute type 30 has an invalid length.
[  490.942165][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'.
[  490.950274][T23085] netlink: 'syz.1.4873': attribute type 30 has an invalid length.
[  490.952939][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4873'.
[  491.079679][T23087] netlink: 'syz.1.4874': attribute type 10 has an invalid length.
[  491.324723][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.636418][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4885'.
[  491.641134][T23127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4885'.
[  491.725415][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.734297][T23133] netlink: 'syz.0.4888': attribute type 21 has an invalid length.
[  491.737685][T23133] IPv6: NLM_F_CREATE should be specified when creating new route
[  491.741332][T23133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  491.744409][T23133] IPv6: NLM_F_CREATE should be set when creating new route
[  491.747422][T23133] IPv6: NLM_F_CREATE should be set when creating new route
[  491.750455][T23133] IPv6: NLM_F_CREATE should be set when creating new route
[  492.068912][T23175] syzkaller0: entered promiscuous mode
[  492.071166][T23175] syzkaller0: entered allmulticast mode
[  492.123640][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.126537][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.129267][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.328922][T23197] netlink: 'syz.1.4906': attribute type 21 has an invalid length.
[  492.764024][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.738038][T23274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  493.804161][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.133619][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  494.137557][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.310395][T23297] lo speed is unknown, defaulting to 1000
[  494.342450][T23299] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  494.347854][T23299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.352915][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.471842][T23307] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  494.649825][ T5665] nci: nci_rsp_packet: unknown rsp opcode 0x13f
[  495.418060][T23321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  495.500534][T23338] syzkaller0: entered promiscuous mode
[  495.502562][T23338] syzkaller0: entered allmulticast mode
[  495.665633][T23366] __nla_validate_parse: 6 callbacks suppressed
[  495.665647][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4950'.
[  495.714722][T23375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4953'.
[  495.731733][T23375] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.523295][T23383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4954'.
[  496.531958][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4954'.
[  496.590010][T23388] x_tables: duplicate underflow at hook 2
[  496.642108][T23394] syzkaller1: entered promiscuous mode
[  496.645424][T23394] syzkaller1: entered allmulticast mode
[  496.778477][T23402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4961'.
[  496.786756][T23402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4961'.
[  496.840557][T23410] x_tables: ip_tables: icmp match: only valid for protocol 1
[  496.852539][T23410] netlink: 'syz.1.4963': attribute type 1 has an invalid length.
[  496.855993][T23410] netlink: 'syz.1.4963': attribute type 2 has an invalid length.
[  496.862177][T23410] netlink: 'syz.1.4963': attribute type 1 has an invalid length.
[  496.866812][T23410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4963'.
[  496.935801][  T876] net_ratelimit: 6 callbacks suppressed
[  496.935819][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.097752][   T55] block nbd2: Receive control failed (result -32)
[  497.100934][T16515] block nbd2: Receive control failed (result -32)
[  497.147436][T23422] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4966'.
[  497.151826][T23422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4966'.
[  497.188986][T23422] netlink: 'syz.1.4966': attribute type 11 has an invalid length.
[  497.404169][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.963869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.968755][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.843743][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.846837][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.850423][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.003783][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.883710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.886997][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.123673][ T5687] net_ratelimit: 3 callbacks suppressed
[  502.123687][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.203611][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.206873][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.209707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.443697][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.164544][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.494057][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.729852][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.204103][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.244208][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.323996][ T5687] net_ratelimit: 6 callbacks suppressed
[  507.324022][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.363929][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.843817][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.847478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.851110][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.403977][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.574631][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.444782][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.851430][T23445] syzkaller0: entered promiscuous mode
[  510.854515][T23445] syzkaller0: entered allmulticast mode
[  510.883073][T23453] syzkaller0: entered promiscuous mode
[  510.885736][T23453] syzkaller0: entered allmulticast mode
[  511.500415][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.213711][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.546197][ T5687] net_ratelimit: 2 callbacks suppressed
[  512.546219][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.606134][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.333344][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.459666][T23460] : renamed from vlan0
[  513.463546][T23470] netlink: 'syz.1.4979': attribute type 1 has an invalid length.
[  513.573731][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.586587][T23483] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  513.738947][T23496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4987'.
[  513.791095][T23496] bond10: (slave bridge9): Enslaving as an active interface with an up link
[  514.167185][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4995'.
[  514.170367][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4995'.
[  514.616245][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.819361][T23563] netlink: 'syz.2.5007': attribute type 8 has an invalid length.
[  515.563684][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.566621][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.569412][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.645135][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.751257][T23575] syzkaller1: entered promiscuous mode
[  515.753315][T23575] syzkaller1: entered allmulticast mode
[  516.881264][T23631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5025'.
[  517.324645][T23652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5030'.
[  517.334611][T23652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5030'.
[  517.334636][T23653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5030'.
[  517.723830][ T9773] net_ratelimit: 2 callbacks suppressed
[  517.723855][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.032398][T23684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5037'.
[  518.040066][T23684] netlink: 'syz.2.5037': attribute type 1 has an invalid length.
[  518.044882][T23684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.134851][T23693] sctp: [Deprecated]: syz.0.5040 (pid 23693) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.134851][T23693] Use struct sctp_sack_info instead
[  518.627808][T23724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5049'.
[  518.695176][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.730108][T23728] syzkaller0: entered promiscuous mode
[  518.733032][T23728] syzkaller0: entered allmulticast mode
[  518.763867][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.003793][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.006746][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.009328][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.041023][T23738] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  519.055486][T23740] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5056'.
[  519.804277][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.943660][T23767] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5064'.
[  520.476577][T23807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5076'.
[  520.844013][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.326253][T23856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'.
[  521.946043][   T13] tipc: Subscription rejected, illegal request
[  522.885955][T23909] net_ratelimit: 5 callbacks suppressed
[  522.885976][T23909] openvswitch: netlink: Flow key attr not present in new flow.
[  522.923904][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.928398][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.386057][T23922] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  523.462014][T23920] netem: change failed
[  523.466651][T23920] sit0: entered promiscuous mode
[  523.479657][T23920] netlink: 'syz.1.5109': attribute type 1 has an invalid length.
[  523.485795][T23920] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5109'.
[  523.491840][T23350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  523.494888][T23350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  523.510343][T23927] 8021q: VLANs not supported on sit0
[  523.544024][T23930] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5113'.
[  523.736781][T23937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5114'.
[  523.747730][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'.
[  523.751156][T23935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5115'.
[  523.782721][T23937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'.
[  523.964323][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.383135][T23967] netlink: 'syz.1.5123': attribute type 27 has an invalid length.
[  524.764220][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.004067][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.365749][T23991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  525.465524][T24007] x_tables: duplicate underflow at hook 2
[  525.600486][T24012] syzkaller0: entered promiscuous mode
[  525.602552][T24012] syzkaller0: entered allmulticast mode
[  525.634902][T24022] __nla_validate_parse: 1 callbacks suppressed
[  525.634915][T24022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5134'.
[  525.640801][T24024] openvswitch: netlink: EtherType 50a is less than min 600
[  525.690326][T24027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5136'.
[  525.694061][T24027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5136'.
[  525.716944][T24029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5137'.
[  525.733691][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.736770][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.749720][T24031] veth14: entered allmulticast mode
[  525.824873][T24038] syzkaller1: entered promiscuous mode
[  525.826974][T24038] syzkaller1: entered allmulticast mode
[  525.939814][T24042] netlink: 'syz.2.5142': attribute type 12 has an invalid length.
[  525.989828][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5143'.
[  525.995812][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5143'.
[  526.054780][T24046] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  526.062494][T24046] CPU: 0 UID: 0 PID: 24046 Comm: syz.2.5144 Not tainted syzkaller #0 PREEMPT(full) 
[  526.062521][T24046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  526.062530][T24046] Call Trace:
[  526.062536][T24046]  <TASK>
[  526.062542][T24046]  dump_stack_lvl+0xe8/0x150
[  526.062563][T24046]  sysfs_warn_dup+0x8e/0xa0
[  526.062580][T24046]  sysfs_do_create_link_sd+0xc0/0x110
[  526.062600][T24046]  device_add_class_symlinks+0x1cf/0x240
[  526.062619][T24046]  device_add+0x475/0xbb0
[  526.062637][T24046]  wiphy_register+0x1dc5/0x2dc0
[  526.062670][T24046]  ? __pfx_wiphy_register+0x10/0x10
[  526.062684][T24046]  ? __pfx_netdev_run_todo+0x10/0x10
[  526.062705][T24046]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  526.062725][T24046]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  526.062747][T24046]  ieee80211_register_hw+0x3d82/0x4a70
[  526.062771][T24046]  ? ieee80211_register_hw+0x1911/0x4a70
[  526.062804][T24046]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  526.062825][T24046]  ? __asan_memset+0x22/0x50
[  526.062843][T24046]  ? __hrtimer_setup+0x1b7/0x260
[  526.062855][T24046]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  526.062873][T24046]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  526.062903][T24046]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  526.062917][T24046]  ? kstrndup+0xbf/0x160
[  526.062936][T24046]  hwsim_new_radio_nl+0xf6a/0x1c00
[  526.062963][T24046]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  526.062985][T24046]  ? rcu_is_watching+0x15/0xb0
[  526.063002][T24046]  ? trace_kmalloc+0x2a/0xf0
[  526.063025][T24046]  ? __nla_parse+0x40/0x60
[  526.063047][T24046]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  526.063061][T24046]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  526.063080][T24046]  genl_family_rcv_msg_doit+0x22a/0x330
[  526.063094][T24046]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  526.063108][T24046]  ? bpf_lsm_capable+0x9/0x20
[  526.063117][T24046]  ? security_capable+0x7e/0x2c0
[  526.063131][T24046]  genl_rcv_msg+0x61c/0x7a0
[  526.063142][T24046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  526.063150][T24046]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  526.063165][T24046]  netlink_rcv_skb+0x232/0x4b0
[  526.063176][T24046]  ? __pfx_genl_rcv_msg+0x10/0x10
[  526.063186][T24046]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  526.063208][T24046]  ? down_read+0x270/0x2e0
[  526.063216][T24046]  ? genl_rcv+0xd/0x40
[  526.063225][T24046]  genl_rcv+0x28/0x40
[  526.063232][T24046]  netlink_unicast+0x75c/0x8e0
[  526.063246][T24046]  netlink_sendmsg+0x813/0xb40
[  526.063262][T24046]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.063274][T24046]  ? aa_sock_msg_perm+0xf1/0x1b0
[  526.063305][T24046]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  526.063319][T24046]  ____sys_sendmsg+0x972/0x9f0
[  526.063333][T24046]  ? __might_fault+0xaf/0x130
[  526.063348][T24046]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.063371][T24046]  ? import_iovec+0x73/0xa0
[  526.063416][T24046]  ___sys_sendmsg+0x2a5/0x360
[  526.063433][T24046]  ? __lock_acquire+0x6b5/0x2cf0
[  526.063453][T24046]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.063476][T24046]  ? futex_wait+0x2a2/0x390
[  526.063508][T24046]  ? __fget_files+0x2a/0x420
[  526.063522][T24046]  ? __fget_files+0x3a0/0x420
[  526.063543][T24046]  __x64_sys_sendmsg+0x1bd/0x2a0
[  526.063562][T24046]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.063597][T24046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.063613][T24046]  do_syscall_64+0x15f/0xf80
[  526.063631][T24046]  ? trace_irq_disable+0x3b/0x140
[  526.063651][T24046]  ? clear_bhb_loop+0x40/0x90
[  526.063668][T24046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.063682][T24046] RIP: 0033:0x7fcc4639cdd9
[  526.063697][T24046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.063709][T24046] RSP: 002b:00007fcc47174028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.063725][T24046] RAX: ffffffffffffffda RBX: 00007fcc46615fa0 RCX: 00007fcc4639cdd9
[  526.063734][T24046] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  526.063743][T24046] RBP: 00007fcc46432d69 R08: 0000000000000000 R09: 0000000000000000
[  526.063751][T24046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  526.063760][T24046] R13: 00007fcc46616038 R14: 00007fcc46615fa0 R15: 00007ffc3db38a78
[  526.063782][T24046]  </TASK>
[  526.488256][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5147'.
[  526.500485][T24062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  526.503533][T24062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  526.771336][T24078] syzkaller0: entered promiscuous mode
[  526.775817][T24078] syzkaller0: entered allmulticast mode
[  527.010374][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5153'.
[  527.022988][T24083] veth7: entered promiscuous mode
[  527.080459][T24084] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  527.689227][T24098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5159'.
[  527.900630][T24103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5160'.
[  528.123990][ T5687] net_ratelimit: 5 callbacks suppressed
[  528.124014][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.083773][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.087308][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.090253][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.161040][T24152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.174292][T24152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.177391][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.181383][T24152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.188739][T24152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.192083][T24152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.329943][T24168] netlink: 'syz.1.5182': attribute type 13 has an invalid length.
[  529.336981][T24168] netlink: 'syz.1.5182': attribute type 11 has an invalid length.
[  529.409060][T24173] netlink: 'syz.0.5184': attribute type 4 has an invalid length.
[  529.428026][T24175] netlink: 'syz.1.5185': attribute type 5 has an invalid length.
[  529.431103][T24175] netlink: 'syz.1.5185': attribute type 6 has an invalid length.
[  529.831124][T24189] xt_policy: too many policy elements
[  530.121948][T24200] tipc: Enabled bearer <udp:syz1>, priority 10
[  530.763201][T24257] tc action pedit 'at' offset -2147483647 out of bounds
[  531.059378][T24268] Cannot find del_set index 49151 as target
[  531.213119][T24278] __nla_validate_parse: 11 callbacks suppressed
[  531.213144][T24278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5213'.
[  531.420058][T24284] syzkaller1: entered promiscuous mode
[  531.422608][T24284] syzkaller1: entered allmulticast mode
[  531.560558][T24294] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5218'.
[  531.565905][T24294] netlink: 'syz.2.5218': attribute type 1 has an invalid length.
[  531.611782][T24294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5218'.
[  532.082709][T24307] netlink: 'syz.1.5221': attribute type 1 has an invalid length.
[  532.486495][T24322] netlink: 'syz.0.5225': attribute type 1 has an invalid length.
[  532.494688][T24322] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5225'.
[  532.642934][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5227'.
[  532.647058][T24327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5227'.
[  532.692199][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5228'.
[  532.813733][T24337] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5230'.
[  533.162938][T19809] nci: nci_ntf_packet: unknown ntf opcode 0x13c
[  533.191706][T24376] netlink: 'syz.2.5238': attribute type 21 has an invalid length.
[  533.195621][T24376] netlink: 'syz.2.5238': attribute type 7 has an invalid length.
[  533.323684][ T9773] net_ratelimit: 24 callbacks suppressed
[  533.323709][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.886116][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.363828][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.243635][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.404002][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.803718][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.807400][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.810925][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.009302][T24350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  536.119845][T24396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'.
[  536.259595][T24407] bond11 (unregistering): Released all slaves
[  536.261586][T24410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5247'.
[  536.261647][T24410] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5247'.
[  536.454346][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.923644][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.957527][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5259'.
[  537.040537][T24455] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5260'.
[  537.396568][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'.
[  537.411956][T24488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5271'.
[  537.570071][T24499] ip6gre2: entered allmulticast mode
[  537.576760][T24499] ip6gre2: entered promiscuous mode
[  537.579489][T24499] team0: Device ip6gre2 is of different type
[  538.178227][T24523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5280'.
[  538.236148][T24526] syzkaller1: entered promiscuous mode
[  538.238152][T24526] syzkaller1: entered allmulticast mode
[  538.392988][T24538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5286'.
[  538.407697][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5286'.
[  538.465718][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'.
[  538.483703][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.491063][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.499285][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.507246][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.514064][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.522417][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.525423][  T876] net_ratelimit: 3 callbacks suppressed
[  538.525432][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.534936][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.542723][T24547] netlink: 'syz.1.5289': attribute type 29 has an invalid length.
[  538.654986][T24558] xt_ecn: cannot match TCP bits for non-tcp packets
[  539.083650][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.087343][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.090884][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.564549][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.970422][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.363620][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.603751][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.041165][T24652] IPv6: Can't replace route, no match found
[  541.043725][T24652] IPv6: Can't replace route, no match found
[  541.113172][T24658] ip6tnl5: entered promiscuous mode
[  541.264246][T24676] __nla_validate_parse: 26 callbacks suppressed
[  541.264263][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5327'.
[  541.276610][T24665] xt_nfacct: accounting object `syz0' does not exist
[  541.404977][T24684] xfrm1: entered allmulticast mode
[  541.653814][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.077457][T24693] batman_adv: batadv0: Adding interface: dummy0
[  542.079554][T24693] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  542.090334][T24693] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  542.125485][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.210785][T24698] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5332'.
[  542.225289][T24684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  542.567134][T24719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5340'.
[  543.299187][T24731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5344'.
[  543.431853][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'.
[  543.439812][T24740] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5347'.
[  543.450366][T24740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5347'.
[  543.494775][T24745] syzkaller1: entered promiscuous mode
[  543.496947][T24745] syzkaller1: entered allmulticast mode
[  543.510935][T24749] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5350'.
[  543.517503][T24749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5350'.
[  543.670209][T24753] "syz.0.5352" (24753) uses obsolete ecb(arc4) skcipher
[  543.733799][ T9773] net_ratelimit: 9 callbacks suppressed
[  543.733818][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.522184][T24762] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5356'.
[  544.640533][T24774] syzkaller0: entered promiscuous mode
[  544.642387][T24774] syzkaller0: entered allmulticast mode
[  544.765746][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.927111][T24802] syzkaller0: entered promiscuous mode
[  544.929576][T24802] syzkaller0: entered allmulticast mode
[  544.939582][T24802] tc action pedit offset must be on 32 bit boundaries
[  544.976737][T24808] netlink: 'syz.0.5370': attribute type 7 has an invalid length.
[  544.980109][T24808] netlink: 'syz.0.5370': attribute type 8 has an invalid length.
[  545.023916][T24810] syzkaller0: entered promiscuous mode
[  545.026356][T24810] syzkaller0: entered allmulticast mode
[  545.399179][T24827] netlink: 'syz.0.5375': attribute type 12 has an invalid length.
[  545.803767][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.807686][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.811481][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  545.815719][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.044597][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.456312][T24889] openvswitch: netlink: VLAN attribute unexpected.
[  546.577691][T24886] __nla_validate_parse: 8 callbacks suppressed
[  546.577708][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5394'.
[  546.624538][T24898] netlink: 'syz.1.5396': attribute type 29 has an invalid length.
[  546.627807][T24898] netlink: 'syz.1.5396': attribute type 29 has an invalid length.
[  546.631216][T24898] netlink: 508 bytes leftover after parsing attributes in process `syz.1.5396'.
[  546.843616][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.884433][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.319293][T24935] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5408'.
[  548.323065][T24935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5408'.
[  548.831518][T24963] can: request_module (can-proto-0) failed.
[  548.891108][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5417'.
[  548.895213][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5417'.
[  548.899864][T24966] erspan0: invalid flags given to default FDB implementation
[  548.924142][ T9773] net_ratelimit: 2 callbacks suppressed
[  548.924158][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.083737][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.087627][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.091957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.099399][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  549.456400][T24888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  549.568758][T24979] netlink: set zone limit has 4 unknown bytes
[  549.739559][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5424'.
[  549.964104][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  550.690854][   T33] audit: type=1107 audit(1778272146.604:13): pid=25008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';:ЏC4Pݶ-bܿX&a3o:֍[l7~~-=g9iǹ㽴 d*SRh{/3ЖJO82g'
[  550.767731][T25015] Cannot find set identified by id 0 to match
[  550.771056][T25015] netlink: 'syz.0.5431': attribute type 21 has an invalid length.
[  551.004081][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.724171][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.043770][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.068469][  T876] hsr0: entered promiscuous mode
[  553.911151][T25123] can: request_module (can-proto-0) failed.
[  553.918165][T25123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5460'.
[  553.924487][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5460'.
[  553.958614][T25128] 8021q: VLANs not supported on team0
[  554.123755][  T876] net_ratelimit: 7 callbacks suppressed
[  554.123778][  T876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.919450][T25150] pim6reg1: entered promiscuous mode
[  554.921846][T25150] pim6reg1: entered allmulticast mode
[  555.163981][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.167412][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.803735][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.806810][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.810647][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.973743][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.977514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  555.981351][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.208435][ T9773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  556.652215][T25176] netlink: 364 bytes leftover after parsing attributes in process `syz.0.5474'.
[  558.135507][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  559.171856][    C1] net_ratelimit: 4 callbacks suppressed
[  559.171874][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.177241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.180562][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.325128][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  559.675366][T25198] syzkaller0: entered promiscuous mode
[  559.677895][T25198] syzkaller0: entered allmulticast mode
[  559.739517][T25207] IPv6: NLM_F_CREATE should be specified when creating new route
[  559.743111][T25207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  559.746318][T25207] IPv6: NLM_F_CREATE should be set when creating new route
[  559.749520][T25207] IPv6: NLM_F_CREATE should be set when creating new route
[  559.752639][T25207] IPv6: NLM_F_CREATE should be set when creating new route
[  559.887170][T25217] netlink: 'syz.2.5485': attribute type 1 has an invalid length.
[  559.935982][T25217] 8021q: adding VLAN 0 to HW filter on device bond11
[  559.960550][T25217] vlan0: entered allmulticast mode
[  560.191689][T25227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5487'.
[  560.366128][ T5687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.771650][T25244] netlink: 'syz.0.5492': attribute type 1 has an invalid length.
[  560.777770][T25244] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5492'.
[  561.260317][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.340727][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.357392][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.373627][ T9790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.391902][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  561.774548][T25255] xt_socket: unknown flags 0x50
[  561.950905][T25264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5499'.
[  564.088359][ T5476] tipc: Subscription rejected, illegal request
[  564.109392][T25296] netlink: 'syz.1.5504': attribute type 15 has an invalid length.
[  564.161799][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'.
[  564.247399][T25312] net_ratelimit: 8 callbacks suppressed
[  564.247418][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.254198][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.257034][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.259770][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.262372][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.265151][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.268150][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.270836][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.273689][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.276434][T25312] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  564.348057][T25321] bridge20: the hash_elasticity option has been deprecated and is always 16
[  564.351181][T25321] bridge20: entered allmulticast mode
[  564.810675][T25323] netlink: 'syz.0.5514': attribute type 1 has an invalid length.
[  566.142259][T25359] netlink: 'syz.2.5524': attribute type 1 has an invalid length.
[  566.150216][T25359] netlink: 280 bytes leftover after parsing attributes in process `syz.2.5524'.
[  566.260542][T25373] sctp: [Deprecated]: syz.0.5527 (pid 25373) Use of int in max_burst socket option.
[  566.260542][T25373] Use struct sctp_assoc_value instead
[  566.469301][T25389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'.
[  566.591278][T25402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5539'.
[  566.664203][T25402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5539'.
[  566.783075][T25428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5545'.
[  566.789156][T25428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5545'.
[  567.627782][T25448] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5551'.
[  567.979704][T25471] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  568.016125][T25471] syzkaller0: entered promiscuous mode
[  568.018391][T25471] syzkaller0: entered allmulticast mode
[  568.021086][T25471] tipc: Resetting bearer <eth:syzkaller0>
[  568.093134][   T27] tipc: Resetting bearer <eth:syzkaller0>
[  568.100020][T25470] tipc: Resetting bearer <eth:syzkaller0>
[  571.002487][T25470] tipc: Disabling bearer <eth:syzkaller0>
[  571.062685][T25486] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5563'.
[  571.074131][T25486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5563'.
[  571.097238][T25490] netlink: 'syz.1.5565': attribute type 1 has an invalid length.
[  571.100796][T25490] netlink: 'syz.1.5565': attribute type 1 has an invalid length.
[  572.292980][T25527] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002
[  573.046949][T25585] lo speed is unknown, defaulting to 1000
[  573.664719][T25613] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5598'.
[  573.735799][T25615] tc action pedit 'at' offset -2147483647 out of bounds
[  573.812411][T25621] netlink: 'syz.1.5602': attribute type 1 has an invalid length.
[  573.830283][T25624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5603'.
[  573.848024][T25621] gretap3: entered allmulticast mode
[  573.863976][T25621] bond11: (slave gretap3): making interface the new active one
[  573.871465][T25621] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  573.877225][T25629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5604'.
[  574.065385][T25631] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5605'.
[  574.068502][T25631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5605'.
[  574.072191][T25631] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5605'.
[  574.076123][T25631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5605'.
[  574.080151][T25631] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5605'.
[  574.157023][T25641] syzkaller0: entered promiscuous mode
[  574.162053][T25641] syzkaller0: entered allmulticast mode
[  574.356757][T25647] batadv_slave_0: entered promiscuous mode
[  574.370265][T25646] batadv_slave_0: left promiscuous mode
[  574.535662][T25670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5615'.
[  574.539461][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5615'.
[  574.545614][T25671] tipc: Disabling bearer <eth:vcan0>
[  576.268796][T25740] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  578.108693][T25805] netlink: 'syz.2.5649': attribute type 6 has an invalid length.
[  579.573172][T25822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  579.907283][T25868] net_ratelimit: 5278 callbacks suppressed
[  579.907298][T25868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  579.966392][T25873] __nla_validate_parse: 4 callbacks suppressed
[  579.966403][T25873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5669'.
[  579.976658][T25870] bond9: Unable to set up delay as MII monitoring is disabled
[  579.981224][T25870] bond9 (unregistering): Released all slaves
[  580.190866][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5674'.
[  580.213304][T25893] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5675'.
[  580.427635][T25911] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  580.547567][T25925] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5684'.
[  580.657517][T25931] netlink: 876 bytes leftover after parsing attributes in process `syz.1.5686'.
[  580.661369][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5686'.
[  580.672959][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5687'.
[  580.839293][T25952] netlink: 'syz.0.5692': attribute type 3 has an invalid length.
[  580.842301][T25952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5692'.
[  581.080183][T25968] tc action pedit 'at' offset -2147483647 out of bounds
[  581.623605][T25949] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  581.651342][T25975] netlink: 'syz.1.5699': attribute type 15 has an invalid length.
[  581.843637][T25994] block nbd3: server does not support multiple connections per device.
[  581.848948][T25994] block nbd3: shutting down sockets
[  582.370703][T26012] tc action pedit 'at' offset -2147483647 out of bounds
[  582.562339][T26014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5711'.
[  582.588980][T26014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5711'.
[  583.175266][T26045] netlink: 'syz.1.5721': attribute type 12 has an invalid length.
[  583.701100][T26090] netlink: 'syz.0.5734': attribute type 1 has an invalid length.
[  583.707721][T26090] netlink: 'syz.0.5734': attribute type 1 has an invalid length.
[  584.561473][T26108] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  585.559136][T26138] netlink: 'syz.1.5752': attribute type 21 has an invalid length.
[  585.805871][T26155] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  585.818904][T26155] __nla_validate_parse: 12 callbacks suppressed
[  585.818915][T26155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5755'.
[  585.828985][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'.
[  586.789950][T26188] bond12: entered promiscuous mode
[  586.795741][T26188] 8021q: adding VLAN 0 to HW filter on device bond12
[  587.032881][T26202] netlink: 'syz.1.5766': attribute type 1 has an invalid length.
[  587.128885][T26206] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5768'.
[  587.138146][T26206] syzkaller1: entered promiscuous mode
[  587.140043][T26206] syzkaller1: entered allmulticast mode
[  587.966824][T26214] syzkaller1: entered promiscuous mode
[  587.969323][T26214] syzkaller1: entered allmulticast mode
[  588.038730][T26220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  588.684999][T26238] tc_dump_action: action bad kind
[  589.321456][T26274] syzkaller0: entered promiscuous mode
[  589.323812][T26274] syzkaller0: entered allmulticast mode
[  589.331373][T26274] GUP no longer grows the stack in syz.2.5790 (26274): 200000002000-20000000a000 (200000001000)
[  589.337674][T26274] CPU: 0 UID: 0 PID: 26274 Comm: syz.2.5790 Not tainted syzkaller #0 PREEMPT(full) 
[  589.337689][T26274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  589.337696][T26274] Call Trace:
[  589.337700][T26274]  <TASK>
[  589.337705][T26274]  dump_stack_lvl+0xe8/0x150
[  589.337722][T26274]  __get_user_pages+0x2378/0x2720
[  589.337736][T26274]  ? __gup_longterm_locked+0xc4e/0x1630
[  589.337753][T26274]  ? __gup_longterm_locked+0xc4e/0x1630
[  589.337764][T26274]  ? down_read_killable+0x1bb/0x340
[  589.337777][T26274]  __gup_longterm_locked+0xdcf/0x1630
[  589.337791][T26274]  ? lock_acquire+0x106/0x350
[  589.337810][T26274]  gup_fast_fallback+0x1d84/0x20d0
[  589.337832][T26274]  ? __pfx_gup_fast_fallback+0x10/0x10
[  589.337844][T26274]  ? is_valid_gup_args+0x11f/0x200
[  589.337856][T26274]  ? get_user_pages_fast+0x4d/0xb0
[  589.337867][T26274]  __iov_iter_get_pages_alloc+0x370/0xa10
[  589.337883][T26274]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  589.337896][T26274]  iov_iter_get_pages2+0x5e/0xa0
[  589.337908][T26274]  __se_sys_vmsplice+0x7c7/0x1620
[  589.337926][T26274]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  589.337941][T26274]  ? __pfx_futex_wake+0x10/0x10
[  589.337995][T26274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.338012][T26274]  do_syscall_64+0x15f/0xf80
[  589.338031][T26274]  ? trace_irq_disable+0x3b/0x140
[  589.338052][T26274]  ? clear_bhb_loop+0x40/0x90
[  589.338066][T26274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.338079][T26274] RIP: 0033:0x7fcc4639cdd9
[  589.338092][T26274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.338103][T26274] RSP: 002b:00007fcc47174028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  589.338140][T26274] RAX: ffffffffffffffda RBX: 00007fcc46615fa0 RCX: 00007fcc4639cdd9
[  589.338152][T26274] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  589.338162][T26274] RBP: 00007fcc46432d69 R08: 0000000000000000 R09: 0000000000000000
[  589.338171][T26274] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  589.338179][T26274] R13: 00007fcc46616038 R14: 00007fcc46615fa0 R15: 00007ffc3db38a78
[  589.338197][T26274]  </TASK>
[  589.341760][T26274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'.
[  589.525505][T26296] can: request_module (can-proto-3) failed.
[  589.789670][T26326] xt_connbytes: Forcing CT accounting to be enabled
[  589.792952][T26326] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  590.493088][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5812'.
[  591.026843][T26394] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5822'.
[  591.393171][T26410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5826'.
[  591.399006][T26410] netlink: 'syz.0.5826': attribute type 30 has an invalid length.
[  591.402889][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5826'.
[  591.940076][T26431] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5834'.
[  591.944194][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5833'.
[  591.955267][T26437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5833'.
[  592.111827][T26456] lo speed is unknown, defaulting to 1000
[  592.203108][T26464] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001
[  592.400990][T26472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5842'.
[  592.459502][T26477] netlink: 'syz.1.5844': attribute type 4 has an invalid length.
[  592.681040][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'.
[  592.913269][T26493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5848'.
[  592.929362][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'.
[  593.455422][T26505] netlink: 'syz.2.5852': attribute type 13 has an invalid length.
[  593.459020][T26505] netlink: 'syz.2.5852': attribute type 17 has an invalid length.
[  593.578528][T26505] bridge0: entered allmulticast mode
[  593.587273][T26505] pim6reg: entered allmulticast mode
[  593.692688][T26511] tc action pedit 'at' offset -2147483647 out of bounds
[  593.841038][T26524] netlink: 'syz.2.5857': attribute type 3 has an invalid length.
[  593.946329][T26528] netlink: 'syz.2.5859': attribute type 29 has an invalid length.
[  594.153799][T26541] tc action pedit 'at' offset -2147483647 out of bounds
[  596.110534][T26603] __nla_validate_parse: 2 callbacks suppressed
[  596.110546][T26603] netlink: 304 bytes leftover after parsing attributes in process `syz.2.5880'.
[  596.251076][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5884'.
[  596.424791][T26616] tc action pedit 'at' offset -2147483647 out of bounds
[  597.003168][T26656] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5897'.
[  597.150777][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5898'.
[  597.177242][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'.
[  597.286172][T26679] syzkaller0: entered promiscuous mode
[  597.288059][T26679] syzkaller0: entered allmulticast mode
[  599.137988][T26699] netlink: 'syz.1.5910': attribute type 2 has an invalid length.
[  599.151599][T26699] netlink: 'syz.1.5910': attribute type 1 has an invalid length.
[  599.159054][T26699] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5910'.
[  599.233318][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5911'.
[  599.238517][T26704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5911'.
[  599.454672][T26716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5915'.
[  599.468312][T26716] bond6: (slave lo): Releasing backup interface
[  599.471246][T26716] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  599.475680][T26716] team0: left allmulticast mode
[  599.477382][T26716] team_slave_0: left allmulticast mode
[  599.479265][T26716] team_slave_1: left allmulticast mode
[  599.481579][T26716] bridge1: left allmulticast mode
[  599.484364][T26716] team0: left promiscuous mode
[  599.486613][T26716] team_slave_0: left promiscuous mode
[  599.489181][T26716] team_slave_1: left promiscuous mode
[  599.491790][T26716] bridge1: left promiscuous mode
[  599.495367][T26716] bridge0: port 3(team0) entered disabled state
[  599.499473][T26716] batman_adv: batadv0: Removing interface: dummy0
[  599.502777][T26716] bridge_slave_0: left allmulticast mode
[  599.505577][T26716] bridge_slave_0: left promiscuous mode
[  599.507818][T26716] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.512220][T26716] bridge_slave_1: left allmulticast mode
[  599.514367][T26716] bridge_slave_1: left promiscuous mode
[  599.516911][T26716] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.521530][T26716] : (slave bond_slave_0): Releasing backup interface
[  599.527350][T26716] : (slave bond_slave_1): Releasing backup interface
[  599.532963][T26716] team0: Port device team_slave_0 removed
[  599.538897][T26716] team0: Port device team_slave_1 removed
[  599.541330][T26716] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.544738][T26716] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.547456][T26716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  599.552694][ T9773] lo speed is unknown, defaulting to 1000
[  599.555471][ T9773] syz2: Port: 1 Link DOWN
[  600.065153][T26727] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.5919'.
[  600.106687][T26733] can: request_module (can-proto-4) failed.
[  600.128151][T26733] syzkaller1: entered promiscuous mode
[  600.130789][T26733] syzkaller1: entered allmulticast mode
[  600.454353][T26758] sch_tbf: peakrate 7 is lower than or equals to rate 16757972887936040645 !
[  600.916447][T26795] IPv6: NLM_F_CREATE should be specified when creating new route
[  601.519238][T26820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  601.522483][T26820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  602.482309][T26883] syzkaller0: entered promiscuous mode
[  602.484835][T26883] syzkaller0: entered allmulticast mode
[  602.502295][T26883] __nla_validate_parse: 4 callbacks suppressed
[  602.502305][T26883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5960'.
[  602.511741][T26883] netlink: zone id is out of range
[  602.514554][T26883] netlink: zone id is out of range
[  602.516940][T26883] netlink: zone id is out of range
[  602.519154][T26883] netlink: zone id is out of range
[  602.521628][T26883] netlink: zone id is out of range
[  602.523724][T26883] netlink: zone id is out of range
[  602.525689][T26883] netlink: zone id is out of range
[  602.527411][T26883] netlink: zone id is out of range
[  602.529538][T26883] netlink: zone id is out of range
[  602.745622][T26893] sock: sock_timestamping_bind_phc: sock not bind to device
[  602.880393][T26900] lo speed is unknown, defaulting to 1000
[  603.003242][T26911] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5968'.
[  603.801530][T26921] syzkaller0: entered promiscuous mode
[  603.804191][T26921] syzkaller0: entered allmulticast mode
[  603.815142][T26921] syzkaller1: entered promiscuous mode
[  603.817900][T26921] syzkaller1: entered allmulticast mode
[  604.057287][T26937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5977'.
[  604.060580][T26937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5977'.
[  604.068108][T26937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5977'.
[  604.072868][T26937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5977'.
[  604.086890][T26938] tipc: Failed to remove unknown binding: 66,1,1/4294246401:2406027858/2406027860
[  604.104183][T26938] tipc: Failed to remove unknown binding: 66,1,1/4294246401:2406027858/2406027860
[  604.110994][T26938] tipc: Failed to remove unknown binding: 66,1,1/4294246401:2406027858/2406027860
[  604.124071][T26938] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5976'.
[  604.193170][T26949] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5981'.
[  604.556850][T26985] syzkaller0: entered promiscuous mode
[  604.558912][T26985] syzkaller0: entered allmulticast mode
[  604.562073][T26985] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  605.008914][T26949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  605.804208][T27018] net_ratelimit: 391 callbacks suppressed
[  605.804228][T27018] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  605.811116][T27018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6001'.
[  605.947489][   T33] audit: type=1804 audit(1778272201.864:14): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6004" name="/newroot/1962/cgroup.controllers" dev="tmpfs" ino=10191 res=1 errno=0
[  605.959057][   T33] audit: type=1800 audit(1778272201.874:15): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6004" name="cgroup.controllers" dev="tmpfs" ino=10191 res=0 errno=0
[  606.292742][T27047] lo speed is unknown, defaulting to 1000
[  606.337501][T27047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6010'.
[  609.766936][T27082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.958805][T27119] __nla_validate_parse: 1 callbacks suppressed
[  609.958818][T27119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6025'.
[  609.966061][T27119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6025'.
[  610.147829][T27134] netlink: 'syz.2.6030': attribute type 1 has an invalid length.
[  610.150817][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6030'.
[  611.052101][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'.
[  611.292016][T27174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6045'.
[  611.405667][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'.
[  611.420198][T27184] bond13: entered promiscuous mode
[  611.422998][T27184] 8021q: adding VLAN 0 to HW filter on device bond13
[  611.442930][T27184] 8021q: adding VLAN 0 to HW filter on device bond13
[  611.447851][T27184] bond13: (slave sit3): The slave device specified does not support setting the MAC address
[  611.457593][T27184] bond13: (slave sit3): Error -95 calling set_mac_address
[  611.490565][T27191] xt_recent: Unsupported userspace flags (000000b1)
[  612.300713][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6054'.
[  612.382661][T27227] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6056'.
[  612.502723][T27235] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6060'.
[  612.566745][T27234] nbd3: detected capacity change from 0 to 127
[  612.576155][T16515] block nbd3: Receive control failed (result -32)
[  612.578346][T26901] block nbd3: Send control failed (result -32)
[  612.583066][T26901] block nbd3: Request send failed, requeueing
[  612.595557][  T134] block nbd3: Dead connection, failed to find a fallback
[  612.602650][  T134] block nbd3: shutting down sockets
[  612.605143][  T134] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.605773][T26901] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.613585][  T134] Buffer I/O error on dev nbd3, logical block 0, async page read
[  612.629002][T26901] Buffer I/O error on dev nbd3, logical block 1, async page read
[  612.654036][T26901] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.660887][T26901] Buffer I/O error on dev nbd3, logical block 2, async page read
[  612.664770][T26901] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.668326][T26901] Buffer I/O error on dev nbd3, logical block 3, async page read
[  612.673316][T26901] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.679786][T26901] Buffer I/O error on dev nbd3, logical block 0, async page read
[  612.685592][T26901] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.689670][T26901] Buffer I/O error on dev nbd3, logical block 1, async page read
[  612.693991][T26901] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.697121][T26901] Buffer I/O error on dev nbd3, logical block 2, async page read
[  612.700656][T26901] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.705646][T26901] Buffer I/O error on dev nbd3, logical block 3, async page read
[  612.709319][T26901] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.713231][T26901] Buffer I/O error on dev nbd3, logical block 0, async page read
[  612.720266][T26901] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  612.727394][T26901] Buffer I/O error on dev nbd3, logical block 1, async page read
[  612.733270][T26901] ldm_validate_partition_table(): Disk read failed.
[  612.744849][T26901] Dev nbd3: unable to read RDB block 0
[  612.753017][T26901]  nbd3: unable to read partition table
[  612.777481][T26901] ldm_validate_partition_table(): Disk read failed.
[  612.785420][T26901] Dev nbd3: unable to read RDB block 0
[  612.788299][T26901]  nbd3: unable to read partition table
[  612.804615][T27257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6065'.
[  613.152698][T27281] syzkaller0: entered promiscuous mode
[  613.154782][T27281] syzkaller0: entered allmulticast mode
[  613.403106][T27294] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  613.426979][T27294] syzkaller0: entered promiscuous mode
[  613.430322][T27294] syzkaller0: entered allmulticast mode
[  614.661629][T27334] xt_cluster: node mask cannot exceed total number of nodes
[  615.306575][T27375] __nla_validate_parse: 2 callbacks suppressed
[  615.306587][T27375] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6100'.
[  615.312655][T27374] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6100'.
[  616.162030][T27408] sctp: [Deprecated]: syz.0.6110 (pid 27408) Use of int in maxseg socket option.
[  616.162030][T27408] Use struct sctp_assoc_value instead
[  616.230091][T27422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6113'.
[  616.233132][T27422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6113'.
[  616.650139][   T33] audit: type=1804 audit(1778272212.564:16): pid=27444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6120" name="/newroot/2001/cgroup.controllers" dev="tmpfs" ino=10384 res=1 errno=0
[  616.669729][   T33] audit: type=1800 audit(1778272212.564:17): pid=27444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6120" name="cgroup.controllers" dev="tmpfs" ino=10384 res=0 errno=0
[  616.998150][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6125'.
[  617.004929][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6125'.
[  617.868658][T27488] batadv_slave_0: entered promiscuous mode
[  617.872764][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6130'.
[  617.876311][T27489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6130'.
[  617.885944][T27489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6130'.
[  617.889034][T27489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6130'.
[  617.975745][T27496] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  618.777659][T27487] batadv_slave_0: left promiscuous mode
[  618.920851][T27512] syzkaller0: entered promiscuous mode
[  618.922797][T27512] syzkaller0: entered allmulticast mode
[  619.950075][T27539] openvswitch: netlink: Flow actions attr not present in new flow.
[  620.122070][T27554] syzkaller1: entered promiscuous mode
[  620.124157][T27554] syzkaller1: entered allmulticast mode
[  621.033051][T27570] __nla_validate_parse: 4 callbacks suppressed
[  621.033066][T27570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6157'.
[  621.125828][T27570] IPVS: set_ctl: invalid protocol: 98 172.30.1.2:20004
[  622.456610][T27634] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6173'.
[  622.652322][T27644] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6175'.
[  622.891790][T27656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6180'.
[  622.895061][T27656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6180'.
[  623.167503][T27664] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6183'.
[  623.191433][T27664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6183'.
[  623.197882][T27664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6183'.
[  623.273571][T27672] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6186'.
[  623.305793][T27675] block nbd0: reconnected socket
[  623.308448][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6187'.
[  623.320921][T16515] block nbd0: Receive control failed (result -32)
[  623.641346][T27690] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  623.646907][T27690] bond12 (unregistering): Released all slaves
[  623.943237][T27696] netlink: 'syz.1.6192': attribute type 11 has an invalid length.
[  624.045839][T27700] netlink: 'syz.1.6194': attribute type 3 has an invalid length.
[  624.182200][T27712] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  624.321205][T27714] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  625.305112][T27792] 8021q: adding VLAN 0 to HW filter on device bond12
[  625.325446][T27791] 8021q: adding VLAN 0 to HW filter on device bond13
[  625.334402][T27791] bond12: (slave bond13): Enslaving as an active interface with an up link
[  625.350683][T27791] bond12 (unregistering): (slave bond13): Releasing backup interface
[  625.357145][T27791] bond12 (unregistering): Released all slaves
[  625.912400][T27839] ipt_ECN: cannot use operation on non-tcp rule
[  625.927503][T27839] vlan4: entered allmulticast mode
[  625.930287][T27839] syz_tun: entered allmulticast mode
[  626.476062][T27877] netlink: 'syz.1.6232': attribute type 1 has an invalid length.
[  626.506105][T27877] bond14: entered promiscuous mode
[  626.508198][T27877] 8021q: adding VLAN 0 to HW filter on device bond14
[  626.680504][T27894] __nla_validate_parse: 8 callbacks suppressed
[  626.680521][T27894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6238'.
[  626.802250][T27902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6239'.
[  626.989926][T27918] @0: renamed from bond_slave_1
[  627.130718][T27925] netlink: 'syz.2.6246': attribute type 8 has an invalid length.
[  627.135057][T27925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6246'.
[  627.138834][T27925] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6246'.
[  627.145282][T27925] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6246'.
[  627.245019][T27930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6247'.
[  627.602742][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'.
[  627.911965][T27957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  627.941046][T27957] syzkaller0: entered promiscuous mode
[  627.942914][T27957] syzkaller0: entered allmulticast mode
[  627.945641][T27957] tipc: Resetting bearer <eth:syzkaller0>
[  627.964706][T27957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6253'.
[  627.978517][T27957] tipc: Resetting bearer <eth:syzkaller0>
[  628.071144][T27959] netlink: 'syz.2.6254': attribute type 2 has an invalid length.
[  629.207200][T27970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6257'.
[  629.930198][T27957] tipc: Disabling bearer <eth:syzkaller0>
[  630.279686][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6266'.
[  630.311214][T28003] syzkaller1: entered promiscuous mode
[  630.313169][T28003] syzkaller1: entered allmulticast mode
[  631.292802][T28031] netlink: 'syz.0.6274': attribute type 1 has an invalid length.
[  631.295680][T28031] netlink: 'syz.0.6274': attribute type 1 has an invalid length.
[  631.298358][T28031] netlink: 'syz.0.6274': attribute type 8 has an invalid length.
[  632.097489][T28044] __nla_validate_parse: 3 callbacks suppressed
[  632.097627][T28044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6278'.
[  632.270908][T28056] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6280'.
[  632.443060][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6285'.
[  632.994051][T28084] netlink: 51 bytes leftover after parsing attributes in process `syz.2.6290'.
[  633.478461][T28110] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  633.596525][T28118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6299'.
[  633.608818][T28118] bond0: entered promiscuous mode
[  633.612427][T28118] bond0: left promiscuous mode
[  634.061455][T28145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6306'.
[  634.652767][T28164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6311'.
[  634.923161][T28184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6319'.
[  634.934556][T28184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6319'.
[  634.939887][T28184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6319'.
[  634.986636][T28190] netlink: 'syz.0.6320': attribute type 1 has an invalid length.
[  636.378827][T28252] TCP: TCP_TX_DELAY enabled
[  636.506190][T28260] netlink: 'syz.0.6341': attribute type 4 has an invalid length.
[  636.749277][T28289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  637.230463][T28315] syzkaller0: entered promiscuous mode
[  637.233706][T28315] syzkaller0: entered allmulticast mode
[  639.375316][T28350] syzkaller1: entered promiscuous mode
[  639.379906][T28350] syzkaller1: entered allmulticast mode
[  639.410345][T28353] syzkaller0: entered promiscuous mode
[  639.423518][T28353] syzkaller0: entered allmulticast mode
[  639.504528][T28360] __nla_validate_parse: 6 callbacks suppressed
[  639.504538][T28360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6368'.
[  639.678036][T28366] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6370'.
[  640.315716][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'.
[  640.330568][T28401] syzkaller1: left promiscuous mode
[  640.332964][T28401] syzkaller1: left allmulticast mode
[  640.462016][T28411] ip6t_srh: unknown srh match flags  4000
[  640.793235][T28437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6389'.
[  640.986786][T28455] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6396'.
[  641.048775][T28458] 
[  641.049593][T28458] ======================================================
[  641.051819][T28458] WARNING: possible circular locking dependency detected
[  641.054033][T28458] syzkaller #0 Not tainted
[  641.055695][T28458] ------------------------------------------------------
[  641.058052][T28458] syz.0.6397/28458 is trying to acquire lock:
[  641.060019][T28458] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.063126][T28458] 
[  641.063126][T28458] but task is already holding lock:
[  641.065448][T28458] ffff8881012cf980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  641.068520][T28458] 
[  641.068520][T28458] which lock already depends on the new lock.
[  641.068520][T28458] 
[  641.071789][T28458] 
[  641.071789][T28458] the existing dependency chain (in reverse order) is:
[  641.074656][T28458] 
[  641.074656][T28458] -> #8 (&root->kernfs_rwsem){++++}-{4:4}:
[  641.077310][T28458]        down_write+0x96/0x200
[  641.078880][T28458]        kernfs_add_one+0x41/0x5c0
[  641.080546][T28458]        kernfs_create_dir_ns+0xde/0x130
[  641.082377][T28458]        internal_create_group+0x425/0x1180
[  641.084285][T28458]        cpuhp_invoke_callback+0x445/0x860
[  641.086172][T28458]        cpuhp_issue_call+0x430/0x7a0
[  641.087920][T28458]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  641.090043][T28458]        __cpuhp_setup_state+0x3f/0x60
[  641.091942][T28458]        do_one_initcall+0x250/0x870
[  641.093683][T28458]        do_initcall_level+0x104/0x190
[  641.095461][T28458]        do_initcalls+0x59/0xa0
[  641.097190][T28458]        kernel_init_freeable+0x2a6/0x3e0
[  641.099084][T28458]        kernel_init+0x1d/0x1d0
[  641.100669][T28458]        ret_from_fork+0x514/0xb70
[  641.102376][T28458]        ret_from_fork_asm+0x1a/0x30
[  641.103993][T28458] 
[  641.103993][T28458] -> #7 (cpuhp_state_mutex){+.+.}-{4:4}:
[  641.106445][T28458] 
[  641.106445][T28458] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  641.109029][T28458]        cpus_read_lock+0x42/0x160
[  641.110745][T28458]        static_key_slow_inc+0x12/0x30
[  641.112503][T28458]        nbd_genl_reconfigure+0x132f/0x1ea0
[  641.114343][T28458]        genl_family_rcv_msg_doit+0x22a/0x330
[  641.116323][T28458]        genl_rcv_msg+0x61c/0x7a0
[  641.118125][T28458]        netlink_rcv_skb+0x232/0x4b0
[  641.119859][T28458]        genl_rcv+0x28/0x40
[  641.121372][T28458]        netlink_unicast+0x75c/0x8e0
[  641.123104][T28458]        netlink_sendmsg+0x813/0xb40
[  641.124839][T28458]        ____sys_sendmsg+0x972/0x9f0
[  641.126564][T28458]        ___sys_sendmsg+0x2a5/0x360
[  641.128415][T28458]        __x64_sys_sendmsg+0x1bd/0x2a0
[  641.130216][T28458]        do_syscall_64+0x15f/0xf80
[  641.132170][T28458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.134276][T28458] 
[  641.134276][T28458] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  641.136732][T28458]        __mutex_lock+0x1a3/0x1550
[  641.138401][T28458]        nbd_queue_rq+0x37b/0x1100
[  641.140075][T28458]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  641.142064][T28458]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  641.144274][T28458]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  641.146397][T28458]        blk_mq_run_hw_queue+0x348/0x4f0
[  641.148218][T28458]        blk_mq_dispatch_list+0xd16/0xe10
[  641.150072][T28458]        blk_mq_flush_plug_list+0x48d/0x570
[  641.152016][T28458]        __blk_flush_plug+0x3ed/0x4d0
[  641.153767][T28458]        __submit_bio+0x28d/0x580
[  641.155417][T28458]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  641.157513][T28458]        block_read_full_folio+0x599/0x830
[  641.159457][T28458]        filemap_read_folio+0x137/0x3b0
[  641.161287][T28458]        do_read_cache_folio+0x358/0x590
[  641.163128][T28458]        read_part_sector+0xb6/0x2b0
[  641.164842][T28458]        adfspart_check_ICS+0xb1/0x960
[  641.166614][T28458]        bdev_disk_changed+0x817/0x1770
[  641.168665][T28458]        blkdev_get_whole+0x380/0x510
[  641.170401][T28458]        bdev_open+0x31e/0xd30
[  641.171940][T28458]        blkdev_open+0x470/0x610
[  641.173549][T28458]        do_dentry_open+0x785/0x14e0
[  641.175245][T28458]        vfs_open+0x3b/0x340
[  641.176761][T28458]        path_openat+0x2e08/0x3860
[  641.178420][T28458]        do_file_open+0x23e/0x4a0
[  641.180155][T28458]        do_sys_openat2+0x113/0x200
[  641.181873][T28458]        __x64_sys_openat+0x138/0x170
[  641.183556][T28458]        do_syscall_64+0x15f/0xf80
[  641.185166][T28458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.187347][T28458] 
[  641.187347][T28458] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  641.189742][T28458]        __mutex_lock+0x1a3/0x1550
[  641.191447][T28458]        nbd_queue_rq+0xc6/0x1100
[  641.193087][T28458]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  641.195031][T28458]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  641.197279][T28458]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  641.199383][T28458]        blk_mq_run_hw_queue+0x348/0x4f0
[  641.201212][T28458]        blk_mq_dispatch_list+0xd16/0xe10
[  641.203048][T28458]        blk_mq_flush_plug_list+0x48d/0x570
[  641.204988][T28458]        __blk_flush_plug+0x3ed/0x4d0
[  641.206938][T28458]        __submit_bio+0x28d/0x580
[  641.208724][T28458]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  641.210873][T28458]        block_read_full_folio+0x599/0x830
[  641.212814][T28458]        filemap_read_folio+0x137/0x3b0
[  641.214624][T28458]        do_read_cache_folio+0x358/0x590
[  641.216839][T28458]        read_part_sector+0xb6/0x2b0
[  641.218562][T28458]        adfspart_check_ICS+0xb1/0x960
[  641.220326][T28458]        bdev_disk_changed+0x817/0x1770
[  641.222162][T28458]        blkdev_get_whole+0x380/0x510
[  641.223855][T28458]        bdev_open+0x31e/0xd30
[  641.225420][T28458]        blkdev_open+0x470/0x610
[  641.227133][T28458]        do_dentry_open+0x785/0x14e0
[  641.228929][T28458]        vfs_open+0x3b/0x340
[  641.230472][T28458]        path_openat+0x2e08/0x3860
[  641.232126][T28458]        do_file_open+0x23e/0x4a0
[  641.233748][T28458]        do_sys_openat2+0x113/0x200
[  641.235467][T28458]        __x64_sys_openat+0x138/0x170
[  641.237433][T28458]        do_syscall_64+0x15f/0xf80
[  641.239109][T28458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.241122][T28458] 
[  641.241122][T28458] -> #3 (set->srcu){.+.+}-{0:0}:
[  641.243339][T28458]        __synchronize_srcu+0xca/0x300
[  641.245152][T28458]        elevator_switch+0x1e8/0x7a0
[  641.246869][T28458]        elevator_change+0x2cc/0x450
[  641.248583][T28458]        elevator_set_default+0x36c/0x430
[  641.250425][T28458]        blk_register_queue+0x3e9/0x4e0
[  641.252231][T28458]        __add_disk+0x677/0xd50
[  641.253840][T28458]        add_disk_fwnode+0xfb/0x480
[  641.255537][T28458]        nbd_dev_add+0x72c/0xb50
[  641.257162][T28458]        nbd_init+0x168/0x1f0
[  641.258710][T28458]        do_one_initcall+0x250/0x870
[  641.260433][T28458]        do_initcall_level+0x104/0x190
[  641.262176][T28458]        do_initcalls+0x59/0xa0
[  641.263772][T28458]        kernel_init_freeable+0x2a6/0x3e0
[  641.265638][T28458]        kernel_init+0x1d/0x1d0
[  641.267390][T28458]        ret_from_fork+0x514/0xb70
[  641.269081][T28458]        ret_from_fork_asm+0x1a/0x30
[  641.270804][T28458] 
[  641.270804][T28458] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  641.273453][T28458]        __mutex_lock+0x1a3/0x1550
[  641.275137][T28458]        elevator_change+0x1b3/0x450
[  641.276871][T28458]        elevator_set_none+0xb5/0x140
[  641.278624][T28458]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  641.280829][T28458]        nbd_start_device+0x17f/0xb10
[  641.282607][T28458]        nbd_genl_connect+0x165b/0x1cf0
[  641.284426][T28458]        genl_family_rcv_msg_doit+0x22a/0x330
[  641.286424][T28458]        genl_rcv_msg+0x61c/0x7a0
[  641.288236][T28458]        netlink_rcv_skb+0x232/0x4b0
[  641.290021][T28458]        genl_rcv+0x28/0x40
[  641.291535][T28458]        netlink_unicast+0x75c/0x8e0
[  641.293258][T28458]        netlink_sendmsg+0x813/0xb40
[  641.295093][T28458]        ____sys_sendmsg+0x972/0x9f0
[  641.296879][T28458]        ___sys_sendmsg+0x2a5/0x360
[  641.298589][T28458]        __x64_sys_sendmsg+0x1bd/0x2a0
[  641.300367][T28458]        do_syscall_64+0x15f/0xf80
[  641.302179][T28458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.304298][T28458] 
[  641.304298][T28458] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  641.307304][T28458]        blk_alloc_queue+0x546/0x680
[  641.309041][T28458]        __blk_mq_alloc_disk+0x197/0x390
[  641.310822][T28458]        nbd_dev_add+0x499/0xb50
[  641.312396][T28458]        nbd_init+0x168/0x1f0
[  641.313919][T28458]        do_one_initcall+0x250/0x870
[  641.315661][T28458]        do_initcall_level+0x104/0x190
[  641.317416][T28458]        do_initcalls+0x59/0xa0
[  641.318995][T28458]        kernel_init_freeable+0x2a6/0x3e0
[  641.320851][T28458]        kernel_init+0x1d/0x1d0
[  641.322450][T28458]        ret_from_fork+0x514/0xb70
[  641.324105][T28458]        ret_from_fork_asm+0x1a/0x30
[  641.325802][T28458] 
[  641.325802][T28458] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  641.328119][T28458]        __lock_acquire+0x15a5/0x2cf0
[  641.329900][T28458]        lock_acquire+0x106/0x350
[  641.331723][T28458]        fs_reclaim_acquire+0x71/0x100
[  641.333648][T28458]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.335671][T28458]        alloc_inode+0xb8/0x1b0
[  641.337276][T28458]        iget_locked+0x131/0x6a0
[  641.338924][T28458]        kernfs_get_inode+0x4f/0x780
[  641.340789][T28458]        kernfs_iop_lookup+0x1fe/0x320
[  641.342640][T28458]        lookup_one_qstr_excl+0x12d/0x360
[  641.344508][T28458]        filename_create+0x20e/0x370
[  641.346388][T28458]        filename_mkdirat+0xd2/0x510
[  641.348228][T28458]        __se_sys_mkdirat+0x35/0x150
[  641.349971][T28458]        do_syscall_64+0x15f/0xf80
[  641.351684][T28458]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.353820][T28458] 
[  641.353820][T28458] other info that might help us debug this:
[  641.353820][T28458] 
[  641.357269][T28458] Chain exists of:
[  641.357269][T28458]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  641.357269][T28458] 
[  641.361519][T28458]  Possible unsafe locking scenario:
[  641.361519][T28458] 
[  641.363936][T28458]        CPU0                    CPU1
[  641.365687][T28458]        ----                    ----
[  641.367531][T28458]   rlock(&root->kernfs_rwsem);
[  641.369142][T28458]                                lock(cpuhp_state_mutex);
[  641.371652][T28458]                                lock(&root->kernfs_rwsem);
[  641.374231][T28458]   lock(fs_reclaim);
[  641.375556][T28458] 
[  641.375556][T28458]  *** DEADLOCK ***
[  641.375556][T28458] 
[  641.378259][T28458] 3 locks held by syz.0.6397/28458:
[  641.379984][T28458]  #0: ffff8881704d4410 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  641.382947][T28458]  #1: ffff888118725460 (&type->i_mutex_dir_key#6/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  641.386539][T28458]  #2: ffff8881012cf980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_iop_lookup+0x5f/0x320
[  641.389990][T28458] 
[  641.389990][T28458] stack backtrace:
[  641.391897][T28458] CPU: 0 UID: 0 PID: 28458 Comm: syz.0.6397 Not tainted syzkaller #0 PREEMPT(full) 
[  641.391910][T28458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  641.391917][T28458] Call Trace:
[  641.391922][T28458]  <TASK>
[  641.391930][T28458]  dump_stack_lvl+0xe8/0x150
[  641.391944][T28458]  print_circular_bug+0x2e1/0x300
[  641.391957][T28458]  check_noncircular+0x12e/0x150
[  641.391969][T28458]  __lock_acquire+0x15a5/0x2cf0
[  641.391981][T28458]  ? percpu_ref_get_many+0x19/0x140
[  641.391997][T28458]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.392009][T28458]  lock_acquire+0x106/0x350
[  641.392023][T28458]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.392035][T28458]  ? find_inode_fast+0xd2/0x550
[  641.392048][T28458]  ? alloc_inode+0xb8/0x1b0
[  641.392056][T28458]  fs_reclaim_acquire+0x71/0x100
[  641.392067][T28458]  ? kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.392079][T28458]  kmem_cache_alloc_lru_noprof+0x45/0x640
[  641.392092][T28458]  alloc_inode+0xb8/0x1b0
[  641.392102][T28458]  iget_locked+0x131/0x6a0
[  641.392114][T28458]  kernfs_get_inode+0x4f/0x780
[  641.392127][T28458]  kernfs_iop_lookup+0x1fe/0x320
[  641.392140][T28458]  lookup_one_qstr_excl+0x12d/0x360
[  641.392152][T28458]  filename_create+0x20e/0x370
[  641.392164][T28458]  ? __pfx_filename_create+0x10/0x10
[  641.392176][T28458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.392184][T28458]  filename_mkdirat+0xd2/0x510
[  641.392197][T28458]  ? __pfx_filename_mkdirat+0x10/0x10
[  641.392208][T28458]  ? do_getname+0x151/0x250
[  641.392216][T28458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.392224][T28458]  __se_sys_mkdirat+0x35/0x150
[  641.392236][T28458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.392243][T28458]  do_syscall_64+0x15f/0xf80
[  641.392255][T28458]  ? trace_irq_disable+0x3b/0x140
[  641.392266][T28458]  ? clear_bhb_loop+0x40/0x90
[  641.392274][T28458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.392283][T28458] RIP: 0033:0x7f477979cdd9
[  641.392293][T28458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.392302][T28458] RSP: 002b:00007f477a71d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  641.392312][T28458] RAX: ffffffffffffffda RBX: 00007f4779a15fa0 RCX: 00007f477979cdd9
[  641.392318][T28458] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  641.392324][T28458] RBP: 00007f4779832d69 R08: 0000000000000000 R09: 0000000000000000
[  641.392329][T28458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  641.392334][T28458] R13: 00007f4779a16038 R14: 00007f4779a15fa0 R15: 00007ffe0833ffc8
[  641.392343][T28458]  </TASK>
