last executing test programs:

2.150357928s ago: executing program 0 (id=2850):
socket$kcm(0x1e, 0x4, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)

2.146390613s ago: executing program 0 (id=2852):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f)

2.086494907s ago: executing program 0 (id=2855):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
getpeername$unix(r3, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)=""/20, 0x14}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f000000e280)=""/4096, 0x1000}, {0x0}], 0x4}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f780)=""/4096, 0x1000}, {&(0x7f0000010800)}, {&(0x7f0000010840)=""/4096, 0x1000}, {&(0x7f0000011940)=""/4096, 0x1000}], 0x5, &(0x7f0000000980)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x2, 0x60, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

1.191654062s ago: executing program 1 (id=2871):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x10000000, @private2, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), 0x4)

1.150147166s ago: executing program 0 (id=2872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0)

880.473751ms ago: executing program 0 (id=2876):
r0 = socket(0x1e, 0x4, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r1, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}})

457.020695ms ago: executing program 2 (id=2886):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

359.382433ms ago: executing program 2 (id=2887):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000003"], 0x0, 0x5a}, 0x28)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "16d3e5"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)

200.470667ms ago: executing program 2 (id=2888):
r0 = socket(0x1d, 0x2, 0x6)
recvfrom$packet(r0, 0x0, 0x0, 0x10122, 0x0, 0x0)

200.301915ms ago: executing program 0 (id=2889):
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x5, 0x1, 0x6, 0x0, 0x5, 0x5, 0x79, 0x3}, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f0000000000))

200.137738ms ago: executing program 1 (id=2890):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

140.274316ms ago: executing program 2 (id=2891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

140.084913ms ago: executing program 1 (id=2892):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x10}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x20, 0x0, 0x1, 0x0, 0x2, 0xfd, 0x0, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x3000c084}, 0x24004000)

80.041074ms ago: executing program 2 (id=2893):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x170bd27, 0x0, {0xa, 0x0, 0x80, 0x1, 0x0, 0x0, 0xfd, 0xb, 0x2100}, [@RTA_IIF={0x8, 0x3, r1}, @RTA_SPORT={0x6, 0x1c, 0x4e22}]}, 0x2c}}, 0x200048d4)

79.869261ms ago: executing program 1 (id=2894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)

79.629353ms ago: executing program 2 (id=2895):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6a040000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0)

136.838µs ago: executing program 1 (id=2896):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8)

0s ago: executing program 1 (id=2897):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17849' (ED25519) to the list of known hosts.
syzkaller login: [   47.946745][ T5772] cgroup: Unknown subsys name 'net'
[   48.067994][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.071875][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.563675][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   59.203295][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.207471][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.211081][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.215208][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.218719][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.292308][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.296657][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.299587][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.302995][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.306892][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.343173][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.347203][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.349918][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.353846][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.357350][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.630307][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   59.699743][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   59.745302][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   59.800422][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.802921][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.806329][ T5874] bridge_slave_0: entered allmulticast mode
[   59.809172][ T5874] bridge_slave_0: entered promiscuous mode
[   59.825238][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.827718][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.830138][ T5874] bridge_slave_1: entered allmulticast mode
[   59.832875][ T5874] bridge_slave_1: entered promiscuous mode
[   59.879289][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.881823][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.884329][ T5877] bridge_slave_0: entered allmulticast mode
[   59.887674][ T5877] bridge_slave_0: entered promiscuous mode
[   59.891073][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.893777][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.898728][ T5877] bridge_slave_1: entered allmulticast mode
[   59.902393][ T5877] bridge_slave_1: entered promiscuous mode
[   59.916279][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.920982][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.938457][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.940876][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.943733][ T5879] bridge_slave_0: entered allmulticast mode
[   59.947619][ T5879] bridge_slave_0: entered promiscuous mode
[   59.959522][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.972670][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.975290][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.977596][ T5879] bridge_slave_1: entered allmulticast mode
[   59.980360][ T5879] bridge_slave_1: entered promiscuous mode
[   59.986698][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.991409][ T5874] team0: Port device team_slave_0 added
[   60.020907][ T5874] team0: Port device team_slave_1 added
[   60.031104][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.043386][ T5877] team0: Port device team_slave_0 added
[   60.046803][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.050831][ T5877] team0: Port device team_slave_1 added
[   60.079999][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.082877][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.093703][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.100285][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.102968][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.111865][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.141823][ T5879] team0: Port device team_slave_0 added
[   60.146548][ T5879] team0: Port device team_slave_1 added
[   60.149791][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.152386][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.162272][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.193764][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.196865][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.207611][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.240945][ T5874] hsr_slave_0: entered promiscuous mode
[   60.244104][ T5874] hsr_slave_1: entered promiscuous mode
[   60.262754][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.267831][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.278293][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.284202][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.288955][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.299182][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.319536][ T5877] hsr_slave_0: entered promiscuous mode
[   60.322173][ T5877] hsr_slave_1: entered promiscuous mode
[   60.325194][ T5877] debugfs: 'hsr0' already exists in 'hsr'
[   60.327476][ T5877] Cannot create hsr debugfs directory
[   60.411221][ T5879] hsr_slave_0: entered promiscuous mode
[   60.414244][ T5879] hsr_slave_1: entered promiscuous mode
[   60.419046][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   60.421321][ T5879] Cannot create hsr debugfs directory
[   60.685954][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.702718][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.710507][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.728743][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.796795][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.806235][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.827615][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.834174][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.906570][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.914503][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.927004][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.937088][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.973036][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.010427][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   61.027212][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.030450][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.050846][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.053604][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.111803][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.144050][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.158233][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   61.161181][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.182364][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.185327][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.208977][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   61.217481][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.220574][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.235599][   T55] Bluetooth: hci0: command tx timeout
[   61.242381][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.245502][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.261437][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.264064][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.349750][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.385400][   T55] Bluetooth: hci2: command tx timeout
[   61.387990][   T55] Bluetooth: hci1: command tx timeout
[   61.416732][ T5874] veth0_vlan: entered promiscuous mode
[   61.437294][ T5874] veth1_vlan: entered promiscuous mode
[   61.459687][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.517406][ T5874] veth0_macvtap: entered promiscuous mode
[   61.521477][ T5877] veth0_vlan: entered promiscuous mode
[   61.533470][ T5877] veth1_vlan: entered promiscuous mode
[   61.539381][ T5874] veth1_macvtap: entered promiscuous mode
[   61.552693][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.564120][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.587450][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.594454][ T5877] veth0_macvtap: entered promiscuous mode
[   61.603082][ T5877] veth1_macvtap: entered promiscuous mode
[   61.619436][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.628373][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.638706][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.649599][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.656243][ T5879] veth0_vlan: entered promiscuous mode
[   61.663765][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.673175][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.689849][ T5879] veth1_vlan: entered promiscuous mode
[   61.699787][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.703996][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.710816][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.719245][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.759058][ T5879] veth0_macvtap: entered promiscuous mode
[   61.779023][ T5879] veth1_macvtap: entered promiscuous mode
[   61.808870][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.812098][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.813817][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.822350][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.840172][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.848810][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.867557][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.872222][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.880034][  T680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.883165][  T680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.927863][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.930785][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.956827][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.963581][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.983948][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.004378][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.038318][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.091891][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.095582][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.194076][ T5943] Bluetooth: MGMT ver 1.23
[   62.694182][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'.
[   62.771208][ T5983] netlink: 'syz.0.37': attribute type 1 has an invalid length.
[   62.862156][ T5990] Zero length message leads to an empty skb
[   63.272065][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.306245][ T5876] Bluetooth: hci0: command tx timeout
[   63.323865][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.425212][ T6030] Illegal XDP return value 4294967274 on prog  (id 8) dev N/A, expect packet loss!
[   63.467158][ T5876] Bluetooth: hci1: command tx timeout
[   63.467213][   T55] Bluetooth: hci2: command tx timeout
[   63.792961][ T6053] netlink: 'syz.2.70': attribute type 4 has an invalid length.
[   63.814139][ T6053] netlink: 'syz.2.70': attribute type 4 has an invalid length.
[   63.817623][ T2211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.831497][ T6056] netlink: 'syz.0.71': attribute type 1 has an invalid length.
[   63.845690][ T6056] netlink: 244 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.910758][ T6061] netlink: 'syz.0.74': attribute type 1 has an invalid length.
[   63.915311][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   63.921926][ T6061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'.
[   63.935266][ T6061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   63.940075][ T6061] gretap1: entered promiscuous mode
[   63.953165][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'.
[   64.154549][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'.
[   64.195085][ T6087] netlink: 'syz.2.81': attribute type 13 has an invalid length.
[   64.206998][ T6087] netlink: 'syz.2.81': attribute type 17 has an invalid length.
[   64.283905][ T6087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.299126][ T6080] xfrm0: entered promiscuous mode
[   64.317332][ T6080] xfrm0: entered allmulticast mode
[   64.422268][ T6104] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   64.431722][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.608650][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'.
[   64.690311][ T6124] netlink: zone id is out of range
[   64.780689][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'.
[   64.836495][ T6129] netlink: 92 bytes leftover after parsing attributes in process `syz.1.98'.
[   64.880504][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   64.970646][ T6143] bridge_slave_0: left allmulticast mode
[   64.972618][ T6143] bridge_slave_0: left promiscuous mode
[   64.978523][ T6143] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.987085][ T6143] bridge_slave_1: left allmulticast mode
[   64.989455][ T6143] bridge_slave_1: left promiscuous mode
[   64.991828][ T6143] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.002572][ T6143] bond0: (slave bond_slave_0): Releasing backup interface
[   65.014799][ T6143] bond0: (slave bond_slave_1): Releasing backup interface
[   65.018256][ T6144] Bluetooth: MGMT ver 1.23
[   65.033633][ T6143] team0: Port device team_slave_0 removed
[   65.061307][ T6143] team0: Port device team_slave_1 removed
[   65.064517][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.076862][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.088981][ T6143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.091945][ T6143] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.118973][ T6145] team0: Mode changed to "broadcast"
[   65.125576][ T6146] vlan0: entered promiscuous mode
[   65.151574][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.161604][ T6146] team0: Port device vlan0 added
[   65.230505][ T6143] tipc: Started in network mode
[   65.232051][ T6143] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   65.236137][ T6143] tipc: Enabled bearer <eth:team0>, priority 0
[   65.396171][ T5876] Bluetooth: hci0: command tx timeout
[   65.499264][ T6174] veth0_to_bond: entered allmulticast mode
[   65.529962][ T6177] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[   65.532930][ T6177] netlink: 'syz.2.117': attribute type 2 has an invalid length.
[   65.550021][ T5876] Bluetooth: hci2: command tx timeout
[   65.552839][ T5876] Bluetooth: hci1: command tx timeout
[   66.208002][ T6206] netlink: 'syz.2.131': attribute type 6 has an invalid length.
[   66.340054][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.343561][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.358062][ T6215] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   66.366815][ T5925] tipc: Node number set to 11578026
[   66.503004][ T6229] tc_dump_action: action bad kind
[   66.601759][ T6239] ieee802154 phy0 wpan0: encryption failed: -22
[   66.731218][ T6247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.065395][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   67.465488][   T55] Bluetooth: hci0: command 0x0419 tx timeout
[   67.625179][   T55] Bluetooth: hci1: command tx timeout
[   67.625721][ T5881] Bluetooth: hci2: command tx timeout
[   67.648249][ T6317] openvswitch: netlink: IPv4 tun info is not correct
[   67.705185][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   67.769969][ T6327] __nla_validate_parse: 10 callbacks suppressed
[   67.769983][ T6327] netlink: 9 bytes leftover after parsing attributes in process `syz.1.183'.
[   67.779501][ T6327] gretap0: entered promiscuous mode
[   68.131103][ T6363] tipc: Started in network mode
[   68.133112][ T6363] tipc: Node identity , cluster identity 4711
[   68.136588][ T6363] tipc: Failed to obtain node identity
[   68.139112][ T6363] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.143875][ T6363] syzkaller0: entered promiscuous mode
[   68.147485][ T6363] syzkaller0: entered allmulticast mode
[   68.994453][ T6420] validate_nla: 8 callbacks suppressed
[   68.994467][ T6420] netlink: 'syz.2.221': attribute type 3 has an invalid length.
[   69.128639][ T6427] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   69.462190][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   69.469068][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[   69.491368][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'.
[   69.491392][ T5872] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.497558][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'.
[   69.499532][ T5872] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.508300][ T5872] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.516564][ T5872] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.545106][ T5881] Bluetooth: hci0: command 0x0419 tx timeout
[   69.846976][ T6465] netlink: 284 bytes leftover after parsing attributes in process `syz.1.242'.
[   70.122229][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'.
[   70.123619][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'.
[   70.259665][ T6501] netlink: zone id is out of range
[   70.263382][ T6501] netlink: zone id is out of range
[   70.269600][ T6501] netlink: zone id is out of range
[   70.292935][ T6501] netlink: set zone limit has 4 unknown bytes
[   70.298503][ T6501] netlink: del zone limit has 4 unknown bytes
[   70.570574][   T56] block nbd0: Receive control failed (result -104)
[   70.778936][ T6521] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.810632][ T6521] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   70.816987][ T6521] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[   70.857454][ T6521] team0: Port device vlan0 removed
[   70.879695][ T6521] bond1: (slave macvlan2): Releasing backup interface
[   70.902990][  T680] tipc: Resetting bearer <eth:team0>
[   71.095303][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.271'.
[   71.107696][ T6535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'.
[   71.230514][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.233067][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.400330][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.409228][ T6531] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.416776][ T6531] xfrm0: left promiscuous mode
[   71.422608][ T6531] xfrm0: left allmulticast mode
[   71.548502][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.552533][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.559854][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.571498][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.602838][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.608516][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.653173][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   71.660406][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.086071][ T6593] netlink: 'syz.2.295': attribute type 15 has an invalid length.
[   72.318185][ T6615] netlink: 'syz.2.306': attribute type 3 has an invalid length.
[   72.880245][ T6643] __nla_validate_parse: 4 callbacks suppressed
[   72.880261][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   72.901143][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   72.904571][ T6643] netlink: 'syz.2.319': attribute type 12 has an invalid length.
[   72.919915][ T6643] netlink: 'syz.2.319': attribute type 14 has an invalid length.
[   73.151775][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'.
[   73.156569][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'.
[   73.321862][ T6654] tipc: Resetting bearer <eth:team0>
[   73.598209][ T6668] tipc: Started in network mode
[   73.600369][ T6668] tipc: Node identity fadd3b8f71f5, cluster identity 4711
[   73.603577][ T6668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.607917][ T6668] syzkaller0: entered promiscuous mode
[   73.610261][ T6668] syzkaller0: entered allmulticast mode
[   73.623600][ T6668] tipc: Resetting bearer <eth:syzkaller0>
[   73.629738][ T6667] tipc: Resetting bearer <eth:syzkaller0>
[   73.639286][ T6667] tipc: Disabling bearer <eth:syzkaller0>
[   73.682347][ T6666] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   73.686260][ T5314] IPVS: starting estimator thread 0...
[   73.775379][ T6670] IPVS: using max 47 ests per chain, 112800 per kthread
[   73.927416][ T6678] warning: `syz.1.332' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.721342][ T6673] syz.0.331: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.730899][ T6673] CPU: 1 UID: 0 PID: 6673 Comm: syz.0.331 Not tainted syzkaller #0 PREEMPT(full) 
[   74.730917][ T6673] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.730923][ T6673] Call Trace:
[   74.730929][ T6673]  <TASK>
[   74.730934][ T6673]  dump_stack_lvl+0x189/0x250
[   74.730954][ T6673]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.730967][ T6673]  ? __pfx__printk+0x10/0x10
[   74.730983][ T6673]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.730996][ T6673]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   74.731010][ T6673]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   74.731025][ T6673]  warn_alloc+0x214/0x310
[   74.731046][ T6673]  ? __pfx_warn_alloc+0x10/0x10
[   74.731068][ T6673]  ? __get_vm_area_node+0x28f/0x300
[   74.731084][ T6673]  ? hash_netport4_resize+0x235/0x1b60
[   74.731101][ T6673]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   74.731155][ T6673]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.731177][ T6673]  ? rcu_is_watching+0x15/0xb0
[   74.731189][ T6673]  ? hash_netport4_resize+0x235/0x1b60
[   74.731201][ T6673]  ? hash_netport4_resize+0x235/0x1b60
[   74.731213][ T6673]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   74.731229][ T6673]  ? hash_netport4_resize+0x235/0x1b60
[   74.731247][ T6673]  hash_netport4_resize+0x235/0x1b60
[   74.731260][ T6673]  ? hash_netport4_uadt+0xc97/0xf30
[   74.731276][ T6673]  ? __pfx_hash_netport4_add+0x10/0x10
[   74.731296][ T6673]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   74.731316][ T6673]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   74.731335][ T6673]  call_ad+0x44e/0xb00
[   74.731357][ T6673]  ? __pfx_call_ad+0x10/0x10
[   74.731384][ T6673]  ? __nla_parse+0x40/0x60
[   74.731398][ T6673]  ip_set_ad+0x791/0x930
[   74.731420][ T6673]  ? __pfx_ip_set_ad+0x10/0x10
[   74.731463][ T6673]  nfnetlink_rcv_msg+0xb4d/0x1130
[   74.731481][ T6673]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   74.731509][ T6673]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   74.731523][ T6673]  ? kasan_save_free_info+0x46/0x50
[   74.731568][ T6673]  netlink_rcv_skb+0x208/0x470
[   74.731581][ T6673]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   74.731598][ T6673]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   74.731618][ T6673]  ? bpf_lsm_capable+0x9/0x20
[   74.731632][ T6673]  ? security_capable+0x7e/0x2e0
[   74.731654][ T6673]  nfnetlink_rcv+0x26a/0x2520
[   74.731672][ T6673]  ? __dev_queue_xmit+0x1d79/0x3b50
[   74.731694][ T6673]  ? __dev_queue_xmit+0x27b/0x3b50
[   74.731717][ T6673]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   74.731732][ T6673]  ? __pfx___dev_queue_xmit+0x10/0x10
[   74.731756][ T6673]  ? ref_tracker_free+0x63a/0x7d0
[   74.731766][ T6673]  ? __asan_memcpy+0x40/0x70
[   74.731806][ T6673]  ? __pfx_ref_tracker_free+0x10/0x10
[   74.731815][ T6673]  ? __skb_clone+0x63/0x7a0
[   74.731832][ T6673]  ? __skb_clone+0x483/0x7a0
[   74.731851][ T6673]  ? skb_clone+0x246/0x3a0
[   74.731867][ T6673]  ? __netlink_deliver_tap+0x807/0x850
[   74.731878][ T6673]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.731894][ T6673]  ? netlink_deliver_tap+0x2e/0x1b0
[   74.731910][ T6673]  netlink_unicast+0x82f/0x9e0
[   74.731933][ T6673]  ? __pfx_netlink_unicast+0x10/0x10
[   74.731951][ T6673]  ? netlink_sendmsg+0x642/0xb30
[   74.731961][ T6673]  ? skb_put+0x11b/0x210
[   74.731975][ T6673]  netlink_sendmsg+0x805/0xb30
[   74.731993][ T6673]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.732007][ T6673]  ? aa_sock_msg_perm+0xf1/0x1d0
[   74.732020][ T6673]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   74.732032][ T6673]  ? __pfx_netlink_sendmsg+0x10/0x10
[   74.732043][ T6673]  __sock_sendmsg+0x21c/0x270
[   74.732062][ T6673]  ____sys_sendmsg+0x505/0x830
[   74.732080][ T6673]  ? __pfx_____sys_sendmsg+0x10/0x10
[   74.732099][ T6673]  ? import_iovec+0x74/0xa0
[   74.732116][ T6673]  ___sys_sendmsg+0x21f/0x2a0
[   74.732131][ T6673]  ? __pfx____sys_sendmsg+0x10/0x10
[   74.732169][ T6673]  ? __fget_files+0x2a/0x420
[   74.732178][ T6673]  ? __fget_files+0x3a0/0x420
[   74.732195][ T6673]  __x64_sys_sendmsg+0x19b/0x260
[   74.732210][ T6673]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   74.732231][ T6673]  ? rcu_is_watching+0x15/0xb0
[   74.732245][ T6673]  ? do_syscall_64+0xbe/0x3b0
[   74.732259][ T6673]  do_syscall_64+0xfa/0x3b0
[   74.732269][ T6673]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.732278][ T6673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.732295][ T6673]  ? exc_page_fault+0x9f/0xf0
[   74.732305][ T6673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.732314][ T6673] RIP: 0033:0x7fc5a578ebe9
[   74.732325][ T6673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.732333][ T6673] RSP: 002b:00007fc5a658d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   74.732345][ T6673] RAX: ffffffffffffffda RBX: 00007fc5a59c5fa0 RCX: 00007fc5a578ebe9
[   74.732352][ T6673] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[   74.732359][ T6673] RBP: 00007fc5a5811e19 R08: 0000000000000000 R09: 0000000000000000
[   74.732364][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.732370][ T6673] R13: 00007fc5a59c6038 R14: 00007fc5a59c5fa0 R15: 00007ffc0e9e59a8
[   74.732388][ T6673]  </TASK>
[   74.732555][ T6673] Mem-Info:
[   74.930331][ T6673] active_anon:6304 inactive_anon:0 isolated_anon:0
[   74.930331][ T6673]  active_file:1264 inactive_file:38231 isolated_file:0
[   74.930331][ T6673]  unevictable:1768 dirty:1513 writeback:0
[   74.930331][ T6673]  slab_reclaimable:9682 slab_unreclaimable:65513
[   74.930331][ T6673]  mapped:18154 shmem:2433 pagetables:986
[   74.930331][ T6673]  sec_pagetables:0 bounce:0
[   74.930331][ T6673]  kernel_misc_reclaimable:0
[   74.930331][ T6673]  free:281692 free_pcp:21302 free_cma:0
[   74.946844][ T6673] Node 0 active_anon:17464kB inactive_anon:0kB active_file:2332kB inactive_file:16236kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35748kB dirty:4656kB writeback:0kB shmem:4704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6680kB pagetables:2364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.958222][ T6673] Node 1 active_anon:7752kB inactive_anon:0kB active_file:2724kB inactive_file:136688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36868kB dirty:1396kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4788kB pagetables:1580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   74.981299][ T6673] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.011961][ T6673] lowmem_reserve[]: 0 811 811 811 811
[   75.013897][ T6673] Node 0 DMA32 free:393140kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18824kB inactive_anon:0kB active_file:2332kB inactive_file:16236kB unevictable:3536kB writepending:4656kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:27620kB local_pcp:13964kB free_cma:0kB
[   75.028767][ T6704] netlink: 36 bytes leftover after parsing attributes in process `syz.1.343'.
[   75.033143][ T6673] lowmem_reserve[]: 0 0 0 0 0
[   75.035187][ T6673] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   75.052299][ T6673] lowmem_reserve[]: 0 0 854 854 854
[   75.058669][ T6673] Node 1 Normal free:266572kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7888kB inactive_anon:0kB active_file:2724kB inactive_file:136688kB unevictable:3536kB writepending:1396kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46660kB local_pcp:25724kB free_cma:0kB
[   75.073727][ T6673] lowmem_reserve[]: 0 0 0 0 0
[   75.075551][ T6673] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   75.080017][ T6673] Node 0 DMA32: 190*4kB (UE) 36*8kB (UME) 13*16kB (UME) 168*32kB (UME) 23*64kB (UE) 4*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 1*2048kB (M) 92*4096kB (UM) = 391848kB
[   75.124887][ T6673] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   75.131421][ T6673] Node 1 Normal: 3*4kB (UME) 6*8kB (UE) 3*16kB (E) 37*32kB (UME) 22*64kB (UME) 19*128kB (UM) 17*256kB (UME) 6*512kB (M) 6*1024kB (UM) 5*2048kB (UME) 58*4096kB (M) = 266508kB
[   75.155194][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.343'.
[   75.165816][ T6673] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.170512][ T6673] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   75.177630][ T6673] 41928 total pagecache pages
[   75.181271][ T6673] 0 pages in swap cache
[   75.185053][ T6673] Free swap  = 124996kB
[   75.189369][ T6673] Total swap = 124996kB
[   75.192394][ T6673] 786301 pages RAM
[   75.195343][ T6673] 0 pages HighMem/MovableOnly
[   75.199913][ T6673] 241344 pages reserved
[   75.204077][ T6673] 0 pages cma reserved
[   75.326218][ T6709] dvmrp8: entered allmulticast mode
[   75.591604][ T6718] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   75.884568][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'.
[   76.015728][ T6741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.022915][ T6741] syzkaller0: entered promiscuous mode
[   76.025756][ T6741] syzkaller0: entered allmulticast mode
[   76.044483][ T6741] tipc: Resetting bearer <eth:syzkaller0>
[   76.053677][ T6740] tipc: Resetting bearer <eth:syzkaller0>
[   76.064374][ T6740] tipc: Disabling bearer <eth:syzkaller0>
[   76.196008][ T6753] netlink: 51 bytes leftover after parsing attributes in process `syz.0.364'.
[   76.770456][ T6794] syzkaller1: entered promiscuous mode
[   76.772314][ T6794] syzkaller1: entered allmulticast mode
[   76.858425][ T6799] syzkaller1: entered promiscuous mode
[   76.860394][ T6799] syzkaller1: entered allmulticast mode
[   77.287656][ T6823] netlink: 'syz.2.396': attribute type 7 has an invalid length.
[   77.290778][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'.
[   77.320003][ T6823] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.323013][ T6823] bridge1: port 1(bond1) entered blocking state
[   77.325730][ T6823] bridge1: port 1(bond1) entered disabled state
[   77.328168][ T6823] bond1: entered allmulticast mode
[   77.333798][ T6823] bridge1: port 1(bond1) entered blocking state
[   77.336432][ T6823] bridge1: port 1(bond1) entered forwarding state
[   77.467718][ T1152] bridge1: port 1(bond1) entered disabled state
[   78.100076][ T6847] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[   78.103333][ T6847] netlink: 140 bytes leftover after parsing attributes in process `syz.1.404'.
[   78.107390][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'.
[   78.111251][ T6847] netlink: 96 bytes leftover after parsing attributes in process `syz.1.404'.
[   78.651424][ T6870] bridge0: port 3(erspan0) entered blocking state
[   78.655307][ T6870] bridge0: port 3(erspan0) entered disabled state
[   78.659546][ T6870] erspan0: entered allmulticast mode
[   78.669613][ T6870] erspan0: entered promiscuous mode
[   78.678159][ T6870] erspan0: left allmulticast mode
[   78.680567][ T6870] erspan0: left promiscuous mode
[   78.683942][ T6870] bridge0: port 3(erspan0) entered disabled state
[   79.100212][ T6894] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   79.246075][ T6905] netlink: 7 bytes leftover after parsing attributes in process `syz.2.431'.
[   79.442202][ T6920] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   79.932066][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[   79.989130][ T6960] netlink: 'syz.1.457': attribute type 10 has an invalid length.
[   80.011886][ T6960] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   80.261372][ T6978] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   80.277431][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'.
[   80.463323][ T6994] netlink: 84 bytes leftover after parsing attributes in process `syz.0.474'.
[   80.522128][ T6998] openvswitch: netlink: Flow key attr not present in new flow.
[   80.680375][ T7011] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.208147][ T7047] xt_l2tp: unknown flags: 51
[   81.466184][   T24] cfg80211: failed to load regulatory.db
[   81.673226][ T7081] netlink: 'syz.1.515': attribute type 3 has an invalid length.
[   81.703970][ T7087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'.
[   81.999310][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'.
[   82.273924][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   82.338156][ T7143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.603070][ T7166] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   82.727301][ T7174] team0 (unregistering): Port device team_slave_0 removed
[   82.731984][ T7174] team0 (unregistering): Port device team_slave_1 removed
[   82.888306][ T7188] atomic_op ffff888120973998 conn xmit_atomic 0000000000000000
[   83.273972][ T7227] __nla_validate_parse: 3 callbacks suppressed
[   83.273986][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'.
[   84.360078][ T7261] trusted_key: syz.2.592 sent an empty control message without MSG_MORE.
[   84.489662][ T7265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.853548][ T7281] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[   85.023547][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.609'.
[   85.149843][ T7310] netlink: 92 bytes leftover after parsing attributes in process `syz.1.615'.
[   85.153468][ T7308] erspan0: entered promiscuous mode
[   85.256555][ T7318] bond0: entered promiscuous mode
[   85.281922][ T7322] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   85.326859][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'.
[   85.330900][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.623'.
[   85.556099][ T7342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.630'.
[   85.559823][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'.
[   86.602795][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[   86.611081][ T7407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'.
[   86.622114][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'.
[   86.750050][ T7430] GUP no longer grows the stack in syz.1.671 (7430): 200000003000-20000000a000 (200000001000)
[   86.754618][ T7430] CPU: 0 UID: 0 PID: 7430 Comm: syz.1.671 Not tainted syzkaller #0 PREEMPT(full) 
[   86.754676][ T7430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.754684][ T7430] Call Trace:
[   86.754689][ T7430]  <TASK>
[   86.754694][ T7430]  dump_stack_lvl+0x189/0x250
[   86.754715][ T7430]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.754729][ T7430]  ? __pfx__printk+0x10/0x10
[   86.754744][ T7430]  ? find_vma+0xe7/0x160
[   86.754761][ T7430]  ? __lock_acquire+0xab9/0xd20
[   86.754786][ T7430]  __get_user_pages+0x24d0/0x2ce0
[   86.754802][ T7430]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   86.754833][ T7430]  ? rcu_is_watching+0x15/0xb0
[   86.754848][ T7430]  __gup_longterm_locked+0xde9/0x1660
[   86.754869][ T7430]  ? sanity_check_pinned_pages+0x123a/0x1300
[   86.754887][ T7430]  gup_fast_fallback+0x1e6a/0x2010
[   86.754914][ T7430]  ? __pfx_gup_fast_fallback+0x10/0x10
[   86.754921][ T7430]  ? stack_trace_save+0x9c/0xe0
[   86.754929][ T7430]  ? __pfx_stack_trace_save+0x10/0x10
[   86.754941][ T7430]  ? pin_user_pages_fast+0x4d/0xb0
[   86.754950][ T7430]  iov_iter_extract_pages+0x35a/0x5e0
[   86.754962][ T7430]  extract_iter_to_sg+0xe46/0x24e0
[   86.754976][ T7430]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   86.754990][ T7430]  ? __asan_memset+0x22/0x50
[   86.754999][ T7430]  af_alg_get_rsgl+0x436/0x810
[   86.755015][ T7430]  aead_recvmsg+0x4cc/0x13f0
[   86.755034][ T7430]  ? __pfx_aead_recvmsg+0x10/0x10
[   86.755045][ T7430]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   86.755054][ T7430]  ? __pfx_aead_recvmsg+0x10/0x10
[   86.755065][ T7430]  sock_recvmsg_nosec+0x186/0x1c0
[   86.755076][ T7430]  ____sys_recvmsg+0x3aa/0x460
[   86.755088][ T7430]  ? __pfx_____sys_recvmsg+0x10/0x10
[   86.755103][ T7430]  ? import_iovec+0x74/0xa0
[   86.755112][ T7430]  ___sys_recvmsg+0x1b5/0x510
[   86.755142][ T7430]  ? __pfx____sys_recvmsg+0x10/0x10
[   86.755163][ T7430]  ? __might_fault+0xb0/0x130
[   86.755173][ T7430]  do_recvmmsg+0x307/0x770
[   86.755186][ T7430]  ? __pfx_do_recvmmsg+0x10/0x10
[   86.755194][ T7430]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   86.755211][ T7430]  ? __pfx_do_futex+0x10/0x10
[   86.755234][ T7430]  __x64_sys_recvmmsg+0x190/0x240
[   86.755248][ T7430]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   86.755259][ T7430]  ? rcu_is_watching+0x15/0xb0
[   86.755272][ T7430]  ? do_syscall_64+0xbe/0x3b0
[   86.755286][ T7430]  do_syscall_64+0xfa/0x3b0
[   86.755297][ T7430]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.755307][ T7430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.755317][ T7430]  ? exc_page_fault+0x9f/0xf0
[   86.755330][ T7430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.755341][ T7430] RIP: 0033:0x7ffae818ebe9
[   86.755353][ T7430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.755361][ T7430] RSP: 002b:00007ffae63f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   86.755375][ T7430] RAX: ffffffffffffffda RBX: 00007ffae83c5fa0 RCX: 00007ffae818ebe9
[   86.755384][ T7430] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[   86.755390][ T7430] RBP: 00007ffae8211e19 R08: 0000000000000000 R09: 0000000000000000
[   86.755396][ T7430] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   86.755401][ T7430] R13: 00007ffae83c6038 R14: 00007ffae83c5fa0 R15: 00007ffc4c59fd68
[   86.755417][ T7430]  </TASK>
[   87.032282][ T7452] sctp: [Deprecated]: syz.1.681 (pid 7452) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.032282][ T7452] Use struct sctp_sack_info instead
[   87.039818][ T7452] sctp: [Deprecated]: syz.1.681 (pid 7452) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.039818][ T7452] Use struct sctp_sack_info instead
[   87.648827][ T7474] netlink: 'syz.1.692': attribute type 2 has an invalid length.
[   87.849833][ T7490] tipc: Cannot configure node identity twice
[   87.852542][ T7490] tipc: Cannot configure node identity twice
[   88.070352][ T7512] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   88.076423][ T7514] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   88.188323][ T7528] tipc: Invalid UDP bearer configuration
[   88.188363][ T7528] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.359154][ T7548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.551937][ T7568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.617582][ T7568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.681431][ T7568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.762013][ T7568] bond0: (slave netdevsim0): Releasing backup interface
[   88.768947][ T7568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.826529][ T5872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.848888][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.852299][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.878818][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.916672][ T7579] __nla_validate_parse: 5 callbacks suppressed
[   88.916686][ T7579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.736'.
[   89.910149][ T7601] netlink: 830 bytes leftover after parsing attributes in process `syz.1.745'.
[   89.963047][ T7605] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[   89.974144][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[   89.992004][ T7605] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.048519][ T7597] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   90.070539][ T7597] vlan2: entered allmulticast mode
[   90.072777][ T7597] veth1: entered allmulticast mode
[   90.076397][ T7597] veth1: entered promiscuous mode
[   90.085363][ T7597] veth1: left promiscuous mode
[   90.089167][ T7597] bond1: (slave vlan2): making interface the new active one
[   90.092316][ T7597] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   90.103829][ T7597] veth1: entered promiscuous mode
[   90.108462][ T7597] vlan2: entered promiscuous mode
[   90.111072][ T7597] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   90.152811][ T7597] syz.0.743 (7597) used greatest stack depth: 19928 bytes left
[   90.278078][ T7617] wg1: entered promiscuous mode
[   90.280078][ T7617] wg1: entered allmulticast mode
[   90.680719][ T7639] bridge1: entered promiscuous mode
[   90.683161][ T7639] bridge1: entered allmulticast mode
[   90.689858][ T7639] team0: Port device bridge1 added
[   90.761595][ T7643] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.887895][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[   91.169192][   T24] IPVS: starting estimator thread 0...
[   91.340499][ T7669] IPVS: using max 41 ests per chain, 98400 per kthread
[   91.402418][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'.
[   91.550071][ T7708] netlink: 'syz.2.790': attribute type 7 has an invalid length.
[   91.552985][ T7708] netlink: 'syz.2.790': attribute type 3 has an invalid length.
[   91.565144][ T7708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.790'.
[   92.900688][ T7838] netlink: 'syz.2.811': attribute type 13 has an invalid length.
[   92.916638][ T7838] netlink: 'syz.2.811': attribute type 17 has an invalid length.
[   92.971277][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.079258][ T7838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.389329][ T7863] vlan2: entered promiscuous mode
[   93.394579][ T7863] bond0: entered promiscuous mode
[   93.405247][ T7863] bond_slave_0: entered promiscuous mode
[   93.410202][ T7863] bond_slave_1: entered promiscuous mode
[   93.480024][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.824'.
[   93.581900][ T7873] IPVS: length: 91191230 != 8
[   93.737216][ T7881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.740087][ T7881] syzkaller0: entered promiscuous mode
[   93.742123][ T7881] syzkaller0: entered allmulticast mode
[   93.796666][ T7881] netlink: 2 bytes leftover after parsing attributes in process `syz.1.831'.
[   93.811476][ T7881] tipc: Resetting bearer <eth:syzkaller0>
[   93.816800][ T7880] tipc: Resetting bearer <eth:syzkaller0>
[   93.832203][ T7880] tipc: Disabling bearer <eth:syzkaller0>
[   93.868789][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[   93.907863][ T7887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.914158][ T7887] syzkaller0: entered promiscuous mode
[   93.919713][ T7887] syzkaller0: entered allmulticast mode
[   93.938300][ T7887] tipc: Resetting bearer <eth:syzkaller0>
[   93.943076][ T7886] tipc: Resetting bearer <eth:syzkaller0>
[   93.983683][ T7886] tipc: Disabling bearer <eth:syzkaller0>
[   94.180972][ T7907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.189224][ T7907] syzkaller0: entered promiscuous mode
[   94.191064][ T7907] syzkaller0: entered allmulticast mode
[   94.214273][ T7907] tipc: Resetting bearer <eth:syzkaller0>
[   94.219545][ T7904] tipc: Resetting bearer <eth:syzkaller0>
[   94.230034][ T7904] tipc: Disabling bearer <eth:syzkaller0>
[   94.722649][ T7954] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'.
[   94.742229][ T7954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[   94.826686][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.868'.
[   95.576812][ T7988] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   96.187737][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[   96.192484][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[   96.980497][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'.
[   96.984149][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[   96.990376][ T8035] netlink: 'syz.1.897': attribute type 13 has an invalid length.
[   96.993792][ T8035] netlink: 'syz.1.897': attribute type 11 has an invalid length.
[   97.382935][ T8052] netlink: 'syz.0.905': attribute type 1 has an invalid length.
[   97.387245][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.639130][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.911'.
[   97.851533][ T8087] bridge_slave_0: left allmulticast mode
[   97.853740][ T8087] bridge_slave_0: left promiscuous mode
[   97.858065][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.861839][ T8087] bridge_slave_1: left allmulticast mode
[   97.864075][ T8087] bridge_slave_1: left promiscuous mode
[   97.869080][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.877031][ T8087] bond0: (slave bond_slave_0): Releasing backup interface
[   97.881129][ T8087] bond_slave_0: left promiscuous mode
[   97.885238][ T8087] bond0: (slave bond_slave_1): Releasing backup interface
[   97.893686][ T8087] bond_slave_1: left promiscuous mode
[   97.897061][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.902325][ T8087] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.909640][ T8087] bond1: left allmulticast mode
[   97.912280][ T8087] bridge1: port 1(bond1) entered disabled state
[   98.038967][ T8087] ieee802154 phy0 wpan0: encryption failed: -126
[   98.570134][ T8131] netlink: 'syz.2.941': attribute type 4 has an invalid length.
[   98.674484][ T8140] netlink: 'syz.2.943': attribute type 13 has an invalid length.
[   98.681331][ T8140] netlink: 'syz.2.943': attribute type 17 has an invalid length.
[   98.689069][ T8140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.707462][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'.
[   98.710290][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'.
[   98.834813][ T8140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.899788][ T8148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.962084][ T8148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.032608][ T8158] netlink: 'syz.0.951': attribute type 9 has an invalid length.
[   99.413656][ T8185] batadv_slave_0: entered promiscuous mode
[   99.689332][ T8208] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  100.061255][ T8228] geneve2: entered promiscuous mode
[  100.293895][ T8245] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  100.578635][   T47] IPVS: starting estimator thread 0...
[  100.581788][ T8261] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  100.666327][ T8269] IPVS: using max 74 ests per chain, 177600 per kthread
[  100.709689][ T8279] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  100.724943][ T8279] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  100.729353][ T8279] netlink: 'syz.1.1008': attribute type 12 has an invalid length.
[  100.843021][ T8288] netlink: 'syz.0.1011': attribute type 1 has an invalid length.
[  100.855135][ T8288] __nla_validate_parse: 6 callbacks suppressed
[  100.855145][ T8288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1011'.
[  100.895463][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.062597][ T8299] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1017'.
[  101.320427][ T8318] netlink: 'syz.2.1024': attribute type 4 has an invalid length.
[  101.360545][   T12] vlan2: left promiscuous mode
[  101.698261][ T8338] netlink: 'syz.2.1030': attribute type 1 has an invalid length.
[  101.701781][ T8338] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1030'.
[  102.428170][ T8346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.709636][ T8373] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  102.992351][ T8382] vlan2: left promiscuous mode
[  102.997373][ T8382] bond0: left promiscuous mode
[  103.701193][ T8426] netlink: 'syz.2.1071': attribute type 2 has an invalid length.
[  103.756673][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'.
[  103.760415][ T8429] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1072'.
[  103.764225][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'.
[  103.909202][ T8442] netlink: 'syz.1.1079': attribute type 1 has an invalid length.
[  103.948304][ T8442] 8021q: adding VLAN 0 to HW filter on device bond2
[  103.995775][ T8442] bond2: entered promiscuous mode
[  104.109853][ T8459] xt_limit: Overflow, try lower: 271964/0
[  104.189224][ T8467] netlink: 'syz.1.1091': attribute type 11 has an invalid length.
[  104.489564][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'.
[  104.599857][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'.
[  104.856803][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'.
[  105.966147][ T8585] infiniband syz2: set down
[  105.968880][ T8585] infiniband syz2: added ipvlan0
[  106.022732][ T8585] RDS/IB: syz2: added
[  106.028210][ T8585] smc: adding ib device syz2 with port count 1
[  106.030635][ T8585] smc:    ib device syz2 port 1 has pnetid 
[  106.368157][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.552574][ T8602] syzkaller0: entered promiscuous mode
[  106.566389][ T8602] syzkaller0: entered allmulticast mode
[  106.739276][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'.
[  106.877273][ T8585] syz.0.1141 (8585) used greatest stack depth: 19808 bytes left
[  107.035408][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'.
[  107.068218][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'.
[  107.137410][ T8641] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1168'.
[  107.651670][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'.
[  107.825467][ T8664] netlink: 'syz.0.1179': attribute type 30 has an invalid length.
[  107.895409][ T8667] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1180'.
[  107.904763][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  108.050068][ T8679] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1185'.
[  108.284084][ T8688] netlink: 'syz.0.1190': attribute type 1 has an invalid length.
[  108.287550][ T8688] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1190'.
[  108.290769][ T8688] netlink: 'syz.0.1190': attribute type 2 has an invalid length.
[  108.293810][ T8688] netlink: 'syz.0.1190': attribute type 1 has an invalid length.
[  108.776102][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1207'.
[  108.832097][ T8735] netlink: 'syz.0.1210': attribute type 21 has an invalid length.
[  109.394195][ T8781] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  109.592783][ T8785] gretap0: left promiscuous mode
[  109.661729][ T8785] bond0: left promiscuous mode
[  109.665577][ T8785] tipc: Resetting bearer <eth:team0>
[  109.718550][ T8785] wg1: left promiscuous mode
[  109.720723][ T8785] wg1: left allmulticast mode
[  109.759298][ T8785] veth0_to_bond: left allmulticast mode
[  109.799176][ T8785] batadv_slave_0: left promiscuous mode
[  109.895654][ T8785] vlan0: left promiscuous mode
[  109.997554][ T8785] geneve2: left promiscuous mode
[  110.002542][ T8785] bond2: left promiscuous mode
[  110.008757][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.045334][ T5872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.048809][ T5872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.052244][ T5872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.790331][ T8927] __nla_validate_parse: 11 callbacks suppressed
[  111.790342][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'.
[  111.978266][ T8943] !: renamed from dummy0
[  112.053277][ T8947] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  112.093430][ T8938] netlink: 'syz.0.1292': attribute type 1 has an invalid length.
[  113.049907][ T9019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.406521][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'.
[  113.412802][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.417214][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.533316][ T9026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1309'.
[  113.558224][ T9026] ip6tnl3: entered allmulticast mode
[  113.624405][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  114.009963][ T9074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.272410][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.278435][ T9082] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.399444][ T9082] gretap1: left promiscuous mode
[  114.411494][ T9082] vlan2: left allmulticast mode
[  114.413556][ T9082] veth1: left allmulticast mode
[  114.417601][ T9082] bridge1: left promiscuous mode
[  114.419681][ T9082] bridge1: left allmulticast mode
[  114.428177][ T9082] ip6tnl3: left allmulticast mode
[  114.430897][ T5909] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.435117][ T5909] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.439917][ T5909] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.443773][ T5909] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.514259][ T9101] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1344'.
[  114.568226][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1348'.
[  114.610962][ T9112] nbd: socks must be embedded in a SOCK_ITEM attr
[  114.620106][ T7492] block nbd64: NBD_DISCONNECT
[  114.752719][ T9123] rdma_rxe: rxe_newlink: failed to add dummy0
[  115.003630][ T9135] netlink: 'syz.2.1356': attribute type 29 has an invalid length.
[  115.008640][ T9135] netlink: 'syz.2.1356': attribute type 29 has an invalid length.
[  115.012738][ T9135] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1356'.
[  115.100781][ T9139] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  116.504798][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  116.658858][ T9225] siw: device registration error -23
[  116.753008][ T9229] bridge: RTM_NEWNEIGH with invalid ether address
[  117.493517][ T9286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1419'.
[  117.542738][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'.
[  117.743528][ T9304] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1427'.
[  118.098270][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1437'.
[  118.123221][ T9327] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  118.129943][ T9327] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  118.198794][ T9331] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1440'.
[  118.279136][ T9337] netlink: 'syz.2.1443': attribute type 11 has an invalid length.
[  118.435307][ T9341] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1445'.
[  118.630007][ T9351] bridge0: entered promiscuous mode
[  119.380611][ T9370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.384122][ T9370] syzkaller0: entered promiscuous mode
[  119.389408][ T9370] syzkaller0: entered allmulticast mode
[  119.395358][ T9370] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  119.417815][ T9370] tipc: Resetting bearer <eth:syzkaller0>
[  119.421347][ T9369] tipc: Resetting bearer <eth:syzkaller0>
[  119.432971][ T9369] tipc: Disabling bearer <eth:syzkaller0>
[  119.768732][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'.
[  119.953875][ T9407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.059408][ T9416] syzkaller1: entered promiscuous mode
[  120.061750][ T9416] syzkaller1: entered allmulticast mode
[  120.428228][ T9429] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1484'.
[  120.603475][ T9445] syzkaller1: entered promiscuous mode
[  120.605847][ T9445] syzkaller1: entered allmulticast mode
[  120.621728][ T9446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.652882][ T9446] syzkaller0: entered promiscuous mode
[  120.656237][ T9446] syzkaller0: entered allmulticast mode
[  120.658569][ T9446] tipc: Resetting bearer <eth:syzkaller0>
[  120.663401][ T9444] tipc: Resetting bearer <eth:syzkaller0>
[  121.613560][ T9444] tipc: Disabling bearer <eth:syzkaller0>
[  122.860353][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  123.704744][   T55] Bluetooth: hci2: link tx timeout
[  123.709679][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.713605][ T5881] Bluetooth: hci2: link tx timeout
[  123.715949][ T5881] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.723818][ T5881] Bluetooth: hci2: link tx timeout
[  123.726150][ T5881] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  123.729231][ T5881] Bluetooth: hci2: link tx timeout
[  123.731254][ T5881] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  124.151883][ T9506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1517'.
[  124.155957][ T9506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1517'.
[  124.229251][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'.
[  124.588182][ T9542] netlink: 'syz.2.1531': attribute type 1 has an invalid length.
[  124.759383][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1536'.
[  124.780872][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'.
[  124.791130][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  125.017159][ T9565] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1541'.
[  125.071175][ T9568] netlink: 'syz.2.1542': attribute type 2 has an invalid length.
[  125.585701][ T9618] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1567'.
[  125.627575][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'.
[  125.784860][ T5881] Bluetooth: hci2: command 0x0405 tx timeout
[  126.055782][ T9649] pimreg3: entered allmulticast mode
[  126.398614][ T9664] C: renamed from team_slave_0
[  126.401867][ T9664] netlink: 'syz.1.1588': attribute type 4 has an invalid length.
[  126.404390][ T9664] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  126.936965][ T9691] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  127.119842][ T9702] netlink: 'syz.2.1606': attribute type 10 has an invalid length.
[  127.123927][ T9702] netlink: 'syz.2.1606': attribute type 10 has an invalid length.
[  127.141914][ T9702] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  127.288443][ T9716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.294546][ T9716] syzkaller0: entered promiscuous mode
[  127.297162][ T9716] syzkaller0: entered allmulticast mode
[  127.312053][ T9718] syzkaller1: entered promiscuous mode
[  127.314185][ T9718] syzkaller1: entered allmulticast mode
[  127.321175][ T9716] tipc: Resetting bearer <eth:syzkaller0>
[  127.336472][ T9715] tipc: Resetting bearer <eth:syzkaller0>
[  127.344544][ T9715] tipc: Disabling bearer <eth:syzkaller0>
[  128.044518][ T9762] __nla_validate_parse: 6 callbacks suppressed
[  128.044527][ T9762] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1636'.
[  128.258828][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'.
[  128.277296][ T9810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1645'.
[  128.288819][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'.
[  128.297704][ T9810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1645'.
[  128.922920][ T9822] netlink: 'syz.0.1651': attribute type 10 has an invalid length.
[  128.929332][ T9822] team0: Port device dummy0 added
[  128.932717][ T9822] netlink: 'syz.0.1651': attribute type 10 has an invalid length.
[  128.951110][ T9822] team0: Port device dummy0 removed
[  128.955101][ T9822] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  129.263733][ T9844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1660'.
[  129.270383][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1660'.
[  129.429874][ T9848] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1663'.
[  129.789573][ T9860] bond0: option xmit_hash_policy: invalid value (8)
[  129.819593][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1665'.
[  130.139354][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'.
[  130.499764][ T9894] netlink: 'syz.1.1681': attribute type 12 has an invalid length.
[  130.520921][ T9896] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  130.685169][ T9915] syzkaller1: entered promiscuous mode
[  130.687706][ T9915] syzkaller1: entered allmulticast mode
[  130.721990][ T9919] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  132.574223][T10009] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  132.677848][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  135.047969][T10091] __nla_validate_parse: 3 callbacks suppressed
[  135.047983][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'.
[  135.126999][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'.
[  135.130254][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'.
[  135.343893][T10119] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  135.344941][T10117] tipc: Failed to obtain node identity
[  135.349772][T10117] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  135.861216][T10144] macsec1: entered promiscuous mode
[  135.863503][T10144] macsec0: entered promiscuous mode
[  135.866896][T10144] macsec1: entered allmulticast mode
[  135.869308][T10144] macsec0: entered allmulticast mode
[  135.932044][T10148] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1779'.
[  135.936830][T10148] gretap0: entered promiscuous mode
[  136.219282][T10154] openvswitch: netlink: Message has 1 unknown bytes.
[  136.222129][T10154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.459354][T10167] can: request_module (can-proto-5) failed.
[  136.632314][T10183] netlink: 'syz.2.1795': attribute type 1 has an invalid length.
[  136.854399][T10194] bond0: (slave gretap0): Opening slave failed
[  137.728860][T10267] netlink: 'syz.1.1834': attribute type 10 has an invalid length.
[  137.742122][T10267] veth1_macvtap: entered allmulticast mode
[  137.746166][T10267] bridge0: port 1(macsec0) entered blocking state
[  137.749011][T10267] bridge0: port 1(macsec0) entered disabled state
[  137.851390][T10277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.923290][T10282] syzkaller1: entered promiscuous mode
[  137.926928][T10282] syzkaller1: entered allmulticast mode
[  138.112925][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'.
[  138.157967][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'.
[  138.163744][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'.
[  138.793704][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'.
[  139.080604][T10318] syzkaller1: entered promiscuous mode
[  139.085113][T10318] syzkaller1: entered allmulticast mode
[  139.513543][T10341] netlink: 'syz.2.1858': attribute type 5 has an invalid length.
[  140.050276][T10365] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  140.415547][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1875'.
[  140.421629][T10382] ip6tnl1: entered promiscuous mode
[  140.735375][T10405] openvswitch: netlink: Message has 16 unknown bytes.
[  140.760667][T10408] syz.2.1890 uses old SIOCAX25GETINFO
[  140.784987][   T33] audit: type=1800 audit(1757402509.783:2): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1888" name="memory.events" dev="tmpfs" ino=3432 res=0 errno=0
[  140.972476][T10422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.110895][T10432] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1902'.
[  141.165879][ T5925] tipc: Node number set to 2334669711
[  141.586843][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'.
[  141.609802][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1919'.
[  141.629833][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'.
[  141.730773][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'.
[  141.775815][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.779591][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.198176][T10501] netlink: 'syz.0.1935': attribute type 3 has an invalid length.
[  142.506617][T10538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'.
[  143.036984][T10582] netlink: 'syz.2.1965': attribute type 9 has an invalid length.
[  143.143713][T10588] tun0: tun_chr_ioctl cmd 2148553947
[  143.714067][T10618] warn_alloc: 1 callbacks suppressed
[  143.714105][T10618] syz.0.1983: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  143.722357][T10618] CPU: 0 UID: 0 PID: 10618 Comm: syz.0.1983 Not tainted syzkaller #0 PREEMPT(full) 
[  143.722374][T10618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.722381][T10618] Call Trace:
[  143.722388][T10618]  <TASK>
[  143.722394][T10618]  dump_stack_lvl+0x189/0x250
[  143.722416][T10618]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.722430][T10618]  ? __pfx__printk+0x10/0x10
[  143.722447][T10618]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.722462][T10618]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  143.722477][T10618]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  143.722498][T10618]  warn_alloc+0x214/0x310
[  143.722520][T10618]  ? stack_depot_save_flags+0x40/0x860
[  143.722537][T10618]  ? __pfx_warn_alloc+0x10/0x10
[  143.722556][T10618]  ? kasan_save_track+0x4f/0x80
[  143.722570][T10618]  ? xskq_create+0x56/0x170
[  143.722578][T10618]  ? xsk_init_queue+0xb0/0x110
[  143.722600][T10618]  ? xsk_setsockopt+0x4dc/0x8d0
[  143.722612][T10618]  ? do_sock_setsockopt+0x17c/0x1b0
[  143.722623][T10618]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  143.722633][T10618]  ? do_syscall_64+0xfa/0x3b0
[  143.722642][T10618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.722656][T10618]  __vmalloc_node_range_noprof+0x125/0x12f0
[  143.722686][T10618]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  143.722697][T10618]  ? __kasan_kmalloc+0x93/0xb0
[  143.722707][T10618]  vmalloc_user_noprof+0xad/0xf0
[  143.722716][T10618]  ? xskq_create+0xbf/0x170
[  143.722722][T10618]  xskq_create+0xbf/0x170
[  143.722730][T10618]  xsk_init_queue+0xb0/0x110
[  143.722740][T10618]  xsk_setsockopt+0x4dc/0x8d0
[  143.722750][T10618]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.722758][T10618]  ? __pfx_aa_sk_perm+0x10/0x10
[  143.722770][T10618]  ? aa_sock_opt_perm+0xff/0x1b0
[  143.722777][T10618]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  143.722784][T10618]  ? __pfx_xsk_setsockopt+0x10/0x10
[  143.722793][T10618]  do_sock_setsockopt+0x17c/0x1b0
[  143.722803][T10618]  __x64_sys_setsockopt+0x13f/0x1b0
[  143.722812][T10618]  do_syscall_64+0xfa/0x3b0
[  143.722818][T10618]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.722824][T10618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.722830][T10618]  ? exc_page_fault+0x9f/0xf0
[  143.722837][T10618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.722845][T10618] RIP: 0033:0x7fc5a578ebe9
[  143.722853][T10618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.722858][T10618] RSP: 002b:00007fc5a658d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  143.722866][T10618] RAX: ffffffffffffffda RBX: 00007fc5a59c5fa0 RCX: 00007fc5a578ebe9
[  143.722870][T10618] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  143.722874][T10618] RBP: 00007fc5a5811e19 R08: 0000000000000004 R09: 0000000000000000
[  143.722878][T10618] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.722882][T10618] R13: 00007fc5a59c6038 R14: 00007fc5a59c5fa0 R15: 00007ffc0e9e59a8
[  143.722893][T10618]  </TASK>
[  143.722896][T10618] Mem-Info:
[  143.840913][T10618] active_anon:11436 inactive_anon:0 isolated_anon:0
[  143.840913][T10618]  active_file:1392 inactive_file:38260 isolated_file:0
[  143.840913][T10618]  unevictable:1768 dirty:207 writeback:0
[  143.840913][T10618]  slab_reclaimable:10200 slab_unreclaimable:69735
[  143.840913][T10618]  mapped:18100 shmem:2405 pagetables:1089
[  143.840913][T10618]  sec_pagetables:0 bounce:0
[  143.840913][T10618]  kernel_misc_reclaimable:0
[  143.840913][T10618]  free:268754 free_pcp:20691 free_cma:0
[  143.859544][T10618] Node 0 active_anon:27088kB inactive_anon:0kB active_file:2708kB inactive_file:16240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35688kB dirty:324kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6668kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.873007][T10618] Node 1 active_anon:18656kB inactive_anon:0kB active_file:2860kB inactive_file:136800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36712kB dirty:504kB writeback:0kB shmem:4884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5180kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  143.885806][T10618] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.896029][T10618] lowmem_reserve[]: 0 811 811 811 811
[  143.898171][T10618] Node 0 DMA32 free:352004kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27088kB inactive_anon:0kB active_file:2708kB inactive_file:16240kB unevictable:3536kB writepending:324kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:44320kB local_pcp:27684kB free_cma:0kB
[  143.910982][T10618] lowmem_reserve[]: 0 0 0 0 0
[  143.913131][T10618] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  143.924494][T10618] lowmem_reserve[]: 0 0 854 854 854
[  143.928033][T10618] Node 1 Normal free:248764kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18656kB inactive_anon:0kB active_file:2860kB inactive_file:136800kB unevictable:3536kB writepending:504kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38904kB local_pcp:19476kB free_cma:0kB
[  143.948334][T10618] lowmem_reserve[]: 0 0 0 0 0
[  143.951960][T10618] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  143.957145][T10618] Node 0 DMA32: 665*4kB (UME) 156*8kB (UME) 84*16kB (UM) 848*32kB (UME) 286*64kB (UME) 94*128kB (UME) 48*256kB (UME) 29*512kB (UM) 26*1024kB 
[  143.957224][T10632] nbd: couldn't find device at index 536870912
[  143.962605][T10618] (UME) 13*2048kB (UM) 51*4096kB (UM) = 352004kB
[  143.962679][T10618] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  143.981749][T10618] Node 1 Normal: 174*4kB (ME) 429*8kB (UME) 156*16kB (UME) 176*32kB (UME) 67*64kB (UME) 78*128kB (UME) 32*256kB (UM) 6*512kB (UM) 6*1024kB (UM) 6*2048kB (UM) 47*4096kB (UM) = 248736kB
[  143.989323][T10618] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.993124][T10618] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  143.997435][T10618] 42057 total pagecache pages
[  143.999503][T10618] 0 pages in swap cache
[  144.001290][T10618] Free swap  = 124996kB
[  144.003115][T10618] Total swap = 124996kB
[  144.005016][T10618] 786301 pages RAM
[  144.006668][T10618] 0 pages HighMem/MovableOnly
[  144.008704][T10618] 241344 pages reserved
[  144.010521][T10618] 0 pages cma reserved
[  144.193932][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'.
[  144.299558][T10652] netlink: 'syz.0.2000': attribute type 1 has an invalid length.
[  144.302851][T10652] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2000'.
[  146.345157][T10736] tipc: Started in network mode
[  146.350730][T10736] tipc: Node identity 4e71dd2ea078, cluster identity 4711
[  146.355228][T10736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.362753][T10736] syzkaller0: entered promiscuous mode
[  146.365163][T10736] syzkaller0: entered allmulticast mode
[  146.385290][T10736] tipc: Resetting bearer <eth:syzkaller0>
[  146.388595][T10735] tipc: Resetting bearer <eth:syzkaller0>
[  146.402186][T10735] tipc: Disabling bearer <eth:syzkaller0>
[  146.473090][T10738] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2027'.
[  146.680671][T10752] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2034'.
[  146.740282][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  147.052934][T10772] netlink: 'syz.0.2043': attribute type 37 has an invalid length.
[  147.099827][T10775] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  147.156858][T10780] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  147.195695][T10785] netlink: 'syz.1.2048': attribute type 3 has an invalid length.
[  147.953272][T10807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2059'.
[  148.363695][T10832] netlink: 'syz.0.2071': attribute type 2 has an invalid length.
[  148.420065][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.638453][T10854] netlink: 'syz.1.2082': attribute type 1 has an invalid length.
[  149.271507][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2102'.
[  149.384862][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  149.642326][T10928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.646107][T10928] syzkaller0: MTU too low for tipc bearer
[  149.648100][T10928] tipc: Disabling bearer <eth:syzkaller0>
[  150.129574][T10960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2125'.
[  150.155803][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'.
[  150.438794][T10978] IPVS: stopping backup sync thread 8245 ...
[  150.467922][T10980] netlink: 'syz.0.2137': attribute type 2 has an invalid length.
[  150.959907][T11011] team0: Device gtp1 is of different type
[  151.417688][T11036] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  151.465912][T11040] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2164'.
[  151.788103][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'.
[  151.946580][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'.
[  152.141901][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  152.167496][T11087] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.2185'.
[  153.460691][T11110] sock: sock_timestamping_bind_phc: sock not bind to device
[  153.579742][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2200'.
[  153.634600][T11120] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  153.816639][T11139] netlink: 'syz.0.2210': attribute type 10 has an invalid length.
[  153.819951][T11139] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2210'.
[  153.823785][T11139] dummy0: entered promiscuous mode
[  153.838142][T11139] bond0: (slave dummy0): Releasing backup interface
[  153.843209][T11139] bridge0: port 3(dummy0) entered blocking state
[  153.853438][T11139] bridge0: port 3(dummy0) entered disabled state
[  153.855877][T11139] dummy0: entered allmulticast mode
[  154.422304][T11202] netlink: 'syz.1.2240': attribute type 8 has an invalid length.
[  154.467630][T11207] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2243'.
[  154.501671][T11211] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  154.506524][T11211] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  154.539352][T11214] netlink: 'syz.1.2246': attribute type 1 has an invalid length.
[  154.542785][T11214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2246'.
[  154.828788][T11231] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  154.887318][T11237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.892081][T11237] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  154.900052][T11237] tipc: Resetting bearer <eth:syzkaller0>
[  154.915611][T11236] tipc: Disabling bearer <eth:syzkaller0>
[  155.010333][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'.
[  155.071065][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2259'.
[  155.330748][T11267] netlink: 'syz.1.2271': attribute type 11 has an invalid length.
[  156.270294][T11306] netlink: 'syz.2.2289': attribute type 2 has an invalid length.
[  156.394432][T11326] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  156.729881][T11348] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  156.734732][T11347] IPVS: stopping backup sync thread 11348 ...
[  157.088490][T11364] syzkaller0: entered promiscuous mode
[  157.091063][T11364] syzkaller0: entered allmulticast mode
[  158.409980][T11394] __nla_validate_parse: 4 callbacks suppressed
[  158.409989][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2325'.
[  158.690155][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'.
[  158.874034][T11452] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2344'.
[  159.180687][T11478] netlink: 'syz.0.2354': attribute type 10 has an invalid length.
[  159.183597][T11478] dummy0: left allmulticast mode
[  159.185670][T11478] dummy0: left promiscuous mode
[  159.187604][T11478] bridge0: port 3(dummy0) entered disabled state
[  159.194362][T11478] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  159.482715][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2356'.
[  160.523835][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'.
[  160.708783][T11568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2390'.
[  160.802621][T11574] tc_dump_action: action bad kind
[  160.866846][ T5874] cgroup: fork rejected by pids controller in /syz2
[  160.995598][T11582] block nbd1: server does not support multiple connections per device.
[  161.002983][T11582] block nbd1: shutting down sockets
[  161.293058][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  161.297001][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  161.300549][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  161.304607][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  161.309535][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  161.703991][T11587] chnl_net:caif_netlink_parms(): no params data found
[  161.754876][T11587] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.757385][T11587] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.759860][T11587] bridge_slave_0: entered allmulticast mode
[  161.762668][T11587] bridge_slave_0: entered promiscuous mode
[  161.767505][T11587] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.769959][T11587] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.772416][T11587] bridge_slave_1: entered allmulticast mode
[  161.775774][T11587] bridge_slave_1: entered promiscuous mode
[  161.797735][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.802341][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.830681][T11587] team0: Port device team_slave_0 added
[  161.834244][T11587] team0: Port device team_slave_1 added
[  161.857721][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.860277][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.869132][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.873578][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.877805][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.886983][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.916162][T11587] hsr_slave_0: entered promiscuous mode
[  161.919313][T11587] hsr_slave_1: entered promiscuous mode
[  161.921751][T11587] debugfs: 'hsr0' already exists in 'hsr'
[  161.923772][T11587] Cannot create hsr debugfs directory
[  162.288211][T11587] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  162.302062][T11587] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  162.312338][T11587] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  162.319309][T11587] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  162.364419][T11618] syzkaller1: entered promiscuous mode
[  162.369002][T11618] syzkaller1: entered allmulticast mode
[  162.440337][T11587] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.457385][T11587] 8021q: adding VLAN 0 to HW filter on device team0
[  162.462527][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.465163][ T7785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.476279][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.478800][ T7785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.582293][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.620387][T11587] veth0_vlan: entered promiscuous mode
[  162.626325][T11587] veth1_vlan: entered promiscuous mode
[  162.642068][T11587] veth0_macvtap: entered promiscuous mode
[  162.646877][T11587] veth1_macvtap: entered promiscuous mode
[  162.657768][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  162.667620][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.674482][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.678782][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.682852][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.688038][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.737028][ T7785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.743134][ T7785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.765758][ T7785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.769316][ T7785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.832882][T11635] tipc: Started in network mode
[  162.836829][T11635] tipc: Node identity 3284aae44b68, cluster identity 4711
[  162.839835][T11635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.843985][T11635] syzkaller0: entered promiscuous mode
[  162.848254][T11635] syzkaller0: entered allmulticast mode
[  162.862581][T11635] tipc: Resetting bearer <eth:syzkaller0>
[  162.866984][T11634] tipc: Resetting bearer <eth:syzkaller0>
[  162.878706][T11634] tipc: Disabling bearer <eth:syzkaller0>
[  163.384863][ T5881] Bluetooth: hci0: command tx timeout
[  163.842340][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2433'.
[  163.998361][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2436'.
[  164.089066][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'.
[  164.092428][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2440'.
[  165.454083][T11763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.461379][T11763] syzkaller0: entered promiscuous mode
[  165.464955][ T5881] Bluetooth: hci0: command tx timeout
[  165.471074][T11763] syzkaller0: entered allmulticast mode
[  165.498395][T11763] tipc: Resetting bearer <eth:syzkaller0>
[  165.501845][T11762] tipc: Resetting bearer <eth:syzkaller0>
[  165.511489][T11771] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  165.518100][T11762] tipc: Disabling bearer <eth:syzkaller0>
[  165.524267][T11771] 8021q: adding VLAN 0 to HW filter on device team0
[  165.530597][T11771] bond0: (slave team0): Enslaving as an active interface with an up link
[  165.540782][T11771] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  165.549836][T11771] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  165.578228][T11771] 8021q: adding VLAN 0 to HW filter on device bond4
[  165.591317][T11771] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  165.595919][T11771] bond4: (slave macvlan2): Enslaving as a backup interface with an up link
[  166.550407][T11786] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  166.967356][T11826] block nbd1: server does not support multiple connections per device.
[  166.970434][T11826] block nbd1: shutting down sockets
[  167.256591][T11845] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  167.274459][T11845] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  167.285127][T11845] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  167.345301][T11849] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2501'.
[  167.544893][ T5881] Bluetooth: hci0: command tx timeout
[  167.750639][T11868] netlink: 'syz.1.2510': attribute type 3 has an invalid length.
[  167.764776][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2510'.
[  167.843106][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'.
[  168.145819][T11896] syzkaller1: entered promiscuous mode
[  168.148360][T11896] syzkaller1: entered allmulticast mode
[  168.204336][T11898] sctp: [Deprecated]: syz.1.2525 (pid 11898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  168.204336][T11898] Use struct sctp_sack_info instead
[  168.527136][T11928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.542875][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'.
[  168.550237][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'.
[  168.613959][T11935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2543'.
[  169.371969][T11968] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2554'.
[  169.401621][T11953] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2551'.
[  169.635036][ T5881] Bluetooth: hci0: command tx timeout
[  169.637990][T11980] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  169.799766][T11993] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  169.812361][T11993] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.815234][T11993] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.932931][T12001] netlink: 'syz.0.2570': attribute type 2 has an invalid length.
[  169.950066][T12001] k*]: entered promiscuous mode
[  169.963163][T12001] erspan0: left promiscuous mode
[  169.984491][T12001] dummy0: entered promiscuous mode
[  169.987699][T12001] syz_tun: entered promiscuous mode
[  169.993852][T12001] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.001720][T12001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  170.058952][T12001] veth0_to_team: entered promiscuous mode
[  170.061059][T12001] veth0_to_team: entered allmulticast mode
[  170.071927][T12001] syz.0.2570 (12001) used greatest stack depth: 19000 bytes left
[  170.136610][T12012] siw: device registration error -23
[  170.141235][T12012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2575'.
[  170.147140][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2575'.
[  170.162651][T12012] smc: removing ib device syz2
[  170.192785][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'.
[  170.267216][T12016] bridge_slave_1 (unregistering): left allmulticast mode
[  170.270126][T12016] bridge_slave_1 (unregistering): left promiscuous mode
[  170.273036][T12016] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.296010][T12017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.302087][T12020] veth0_to_bridge: entered promiscuous mode
[  170.307488][T12021] netlink: 'syz.0.2578': attribute type 4 has an invalid length.
[  170.312115][T12020] veth0_to_bridge: entered allmulticast mode
[  170.372349][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'.
[  170.631541][T12036] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2584'.
[  170.975963][T12011] tipc: Disabling bearer <eth:syzkaller0>
[  171.595480][T12089] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2607'.
[  171.597778][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2608'.
[  172.787617][T12142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2628'.
[  172.943655][T12149] wg1 speed is unknown, defaulting to 1000
[  172.946505][T12149] wg1 speed is unknown, defaulting to 1000
[  172.950118][T12149] wg1 speed is unknown, defaulting to 1000
[  172.958839][T12149] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  172.981194][T12149] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  173.040177][T12149] wg1 speed is unknown, defaulting to 1000
[  173.046620][T12149] wg1 speed is unknown, defaulting to 1000
[  173.055584][T12149] wg1 speed is unknown, defaulting to 1000
[  173.063744][T12149] wg1 speed is unknown, defaulting to 1000
[  173.153034][T12165] netlink: 'syz.0.2639': attribute type 4 has an invalid length.
[  173.307527][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.440274][T12187] wg1 speed is unknown, defaulting to 1000
[  173.498266][T12190] ieee802154 phy1 wpan1: encryption failed: -22
[  173.553714][ T5314] IPVS: starting estimator thread 0...
[  173.655020][T12195] IPVS: using max 51 ests per chain, 122400 per kthread
[  173.759388][T12209] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  173.849304][ T5909] IPVS: stop unused estimator thread 0...
[  175.205464][T12251] syz_tun: entered promiscuous mode
[  175.207934][T12251] macsec1: entered promiscuous mode
[  175.210234][T12251] macsec1: entered allmulticast mode
[  175.212430][T12251] syz_tun: entered allmulticast mode
[  175.217508][T12251] syz_tun: left allmulticast mode
[  175.219865][T12251] syz_tun: left promiscuous mode
[  175.473433][T12271] __nla_validate_parse: 7 callbacks suppressed
[  175.473443][T12271] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.2686'.
[  175.543704][T12283] netlink: 'syz.1.2691': attribute type 16 has an invalid length.
[  175.548354][T12283] netlink: 'syz.1.2691': attribute type 3 has an invalid length.
[  175.550778][T12283] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2691'.
[  175.569492][ T5909] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  175.593171][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.298593][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'.
[  177.778228][T12358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  177.874926][   T33] audit: type=1800 audit(1757402546.873:3): pid=12354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2721" name="memory.events" dev="tmpfs" ino=4448 res=0 errno=0
[  178.029548][T12372] geneve3: entered promiscuous mode
[  178.032535][T12372] geneve3: entered allmulticast mode
[  178.038386][ T5909] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 56702 - 0
[  178.041956][ T5909] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55709 - 0
[  178.046160][ T5909] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 56702 - 0
[  178.050130][ T5909] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55709 - 0
[  178.053705][ T5909] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 56702 - 0
[  178.061853][ T5909] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55709 - 0
[  178.068636][ T5909] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 56702 - 0
[  178.073008][ T5909] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55709 - 0
[  178.256516][T12384] netlink: 'syz.2.2732': attribute type 4 has an invalid length.
[  179.032003][T12395] netlink: 'syz.2.2737': attribute type 7 has an invalid length.
[  179.036174][T12395] netlink: 'syz.2.2737': attribute type 8 has an invalid length.
[  179.122635][T12403] syzkaller1: entered promiscuous mode
[  179.126975][T12403] syzkaller1: entered allmulticast mode
[  179.252553][T12414] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2747'.
[  179.300951][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'.
[  179.391270][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'.
[  179.521352][T12433] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  179.531013][T12433] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  179.585000][T12437] netlink: 'syz.0.2758': attribute type 1 has an invalid length.
[  179.588538][T12437] netlink: 'syz.0.2758': attribute type 3 has an invalid length.
[  179.591932][T12437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2758'.
[  179.696369][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2759'.
[  179.747364][T12444] netlink: 'syz.0.2761': attribute type 24 has an invalid length.
[  179.750820][T12444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2761'.
[  179.789219][T12444] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  179.793248][T12444] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  180.165194][T12471] syzkaller0: entered promiscuous mode
[  180.167495][T12471] syzkaller0: entered allmulticast mode
[  181.436897][T12484] __nla_validate_parse: 1 callbacks suppressed
[  181.436911][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2779'.
[  182.971399][T12575] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  182.983175][T12575] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  183.071108][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'.
[  183.266274][T12603] netlink: 'syz.2.2832': attribute type 1 has an invalid length.
[  183.293234][T12603] bond1: entered promiscuous mode
[  183.305813][T12603] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.323793][T12603] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.327113][T12603] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  183.334792][T12603] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  183.344328][T12603] bond1: (slave wireguard0): making interface the new active one
[  183.352802][T12603] wireguard0: entered promiscuous mode
[  183.360291][T12603] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  183.368041][T12603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.371958][T12603] IPv6: NLM_F_CREATE should be set when creating new route
[  183.374600][T12603] IPv6: NLM_F_CREATE should be set when creating new route
[  183.379666][T12603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  183.386825][T12603] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  183.393770][T12603] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  183.452377][T12621] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2839'.
[  183.458220][T12621] ip6gretap0: entered promiscuous mode
[  183.461490][T12621] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2839'.
[  183.497990][T12624] bridge1: entered promiscuous mode
[  183.630719][T12635] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  183.787835][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2853'.
[  183.792642][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'.
[  183.836850][T12651] netlink: 'syz.0.2855': attribute type 1 has an invalid length.
[  183.871435][T12651] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.034589][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'.
[  184.330759][T12680] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  184.334074][T12680] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2867'.
[  184.338472][T12680] NCSI netlink: No device for ifindex 0
[  184.517851][ T5909] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  184.525931][ T5909] bond0 (unregistering): Released all slaves
[  184.607796][ T5909] bond1 (unregistering): Released all slaves
[  184.619318][T12651] bond1: (slave wlan0): Releasing active interface
[  184.622031][T12651] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  184.629019][T12651] vlan2: entered promiscuous mode
[  184.635566][T12651] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  184.685754][ T5909] tipc: Left network mode
[  184.779393][T12690] netlink: 'syz.0.2872': attribute type 1 has an invalid length.
[  184.818894][T12690] bond6: (slave gretap2): making interface the new active one
[  184.822815][T12690] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  184.870989][T12690] vlan1: entered allmulticast mode
[  184.873211][T12690] bond6: entered allmulticast mode
[  184.875926][T12690] gretap2: entered allmulticast mode
[  184.878945][T12690] bond6: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  184.930368][ T5909] hsr_slave_0: left promiscuous mode
[  184.933300][ T5909] hsr_slave_1: left promiscuous mode
[  185.639148][T12725] netlink: 'syz.2.2887': attribute type 1 has an invalid length.
[  185.946118][ T5909] IPVS: stop unused estimator thread 0...
[  185.946968][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  185.970191][ T5909] ------------[ cut here ]------------
[  185.972526][ T5909] WARNING: CPU: 1 PID: 5909 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  185.977108][ T5909] Modules linked in:
[  185.979076][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  185.984296][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.989027][ T5909] Workqueue: netns cleanup_net
[  185.991205][ T5909] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  185.993367][ T5909] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 92 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 4c e1 f7 e8 74 20 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 20 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  186.001276][ T5909] RSP: 0018:ffffc900037ff898 EFLAGS: 00010293
[  186.003722][ T5909] RAX: ffffffff8a228e6c RBX: ffff8881071fa440 RCX: ffff88801cb21cc0
[  186.006421][ T5909] RDX: 0000000000000000 RSI: ffffffff8dba8965 RDI: ffff88801cb21cc0
[  186.009053][ T5909] RBP: ffffc900037ff9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  186.011674][ T5909] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffffffff8f632900
[  186.014174][ T5909] R13: 1ffff920006fff40 R14: ffff8881071fb8c0 R15: dffffc0000000000
[  186.017054][ T5909] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  186.019836][ T5909] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  186.022035][ T5909] CR2: 000000110c2b077d CR3: 0000000105a22000 CR4: 00000000000006f0
[  186.025755][ T5909] Call Trace:
[  186.027111][ T5909]  <TASK>
[  186.028347][ T5909]  xfrm_net_exit+0x2d/0x70
[  186.030196][ T5909]  ops_undo_list+0x49a/0x990
[  186.032112][ T5909]  ? __pfx_ops_undo_list+0x10/0x10
[  186.034246][ T5909]  ? do_raw_spin_unlock+0x4d/0x240
[  186.036686][ T5909]  cleanup_net+0x4c5/0x800
[  186.038620][ T5909]  ? __pfx_cleanup_net+0x10/0x10
[  186.040799][ T5909]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.042787][ T5909]  ? process_scheduled_works+0x9ef/0x17b0
[  186.045224][ T5909]  ? process_scheduled_works+0x9ef/0x17b0
[  186.047467][ T5909]  process_scheduled_works+0xae1/0x17b0
[  186.049304][ T5909]  ? __pfx_process_scheduled_works+0x10/0x10
[  186.051504][ T5909]  worker_thread+0x8a0/0xda0
[  186.053427][ T5909]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  186.056097][ T5909]  ? __kthread_parkme+0x7b/0x200
[  186.057923][ T5909]  kthread+0x711/0x8a0
[  186.059247][ T5909]  ? __pfx_worker_thread+0x10/0x10
[  186.060992][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.062840][ T5909]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.064853][ T5909]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.066905][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.069019][ T5909]  ret_from_fork+0x3fc/0x770
[  186.070960][ T5909]  ? __pfx_ret_from_fork+0x10/0x10
[  186.073061][ T5909]  ? __switch_to_asm+0x39/0x70
[  186.075103][ T5909]  ? __switch_to_asm+0x33/0x70
[  186.081693][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.083509][ T5909]  ret_from_fork_asm+0x1a/0x30
[  186.085540][ T5909]  </TASK>
[  186.086723][ T5909] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  186.089140][ T5909] CPU: 1 UID: 0 PID: 5909 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  186.092634][ T5909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.096234][ T5909] Workqueue: netns cleanup_net
[  186.097735][ T5909] Call Trace:
[  186.098778][ T5909]  <TASK>
[  186.099980][ T5909]  dump_stack_lvl+0x99/0x250
[  186.101830][ T5909]  ? __asan_memcpy+0x40/0x70
[  186.103710][ T5909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.105803][ T5909]  ? __pfx__printk+0x10/0x10
[  186.107813][ T5909]  vpanic+0x281/0x750
[  186.109509][ T5909]  ? __pfx__printk+0x10/0x10
[  186.111438][ T5909]  ? __pfx_vpanic+0x10/0x10
[  186.113315][ T5909]  ? is_bpf_text_address+0x292/0x2b0
[  186.115613][ T5909]  panic+0xb9/0xc0
[  186.117214][ T5909]  ? __pfx_panic+0x10/0x10
[  186.119150][ T5909]  __warn+0x31b/0x4b0
[  186.120875][ T5909]  ? xfrm_state_fini+0x26d/0x2f0
[  186.122986][ T5909]  ? xfrm_state_fini+0x26d/0x2f0
[  186.125018][ T5909]  report_bug+0x2be/0x4f0
[  186.126862][ T5909]  ? xfrm_state_fini+0x26d/0x2f0
[  186.128827][ T5909]  ? xfrm_state_fini+0x26d/0x2f0
[  186.130892][ T5909]  ? xfrm_state_fini+0x26f/0x2f0
[  186.132998][ T5909]  handle_bug+0x84/0x160
[  186.134834][ T5909]  exc_invalid_op+0x1a/0x50
[  186.136793][ T5909]  asm_exc_invalid_op+0x1a/0x20
[  186.138906][ T5909] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  186.141282][ T5909] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 92 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 4c e1 f7 e8 74 20 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 20 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  186.148971][ T5909] RSP: 0018:ffffc900037ff898 EFLAGS: 00010293
[  186.151459][ T5909] RAX: ffffffff8a228e6c RBX: ffff8881071fa440 RCX: ffff88801cb21cc0
[  186.154802][ T5909] RDX: 0000000000000000 RSI: ffffffff8dba8965 RDI: ffff88801cb21cc0
[  186.158206][ T5909] RBP: ffffc900037ff9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  186.161638][ T5909] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffffffff8f632900
[  186.165049][ T5909] R13: 1ffff920006fff40 R14: ffff8881071fb8c0 R15: dffffc0000000000
[  186.168365][ T5909]  ? xfrm_state_fini+0x26c/0x2f0
[  186.170399][ T5909]  ? xfrm_state_fini+0x26c/0x2f0
[  186.172517][ T5909]  xfrm_net_exit+0x2d/0x70
[  186.174462][ T5909]  ops_undo_list+0x49a/0x990
[  186.176346][ T5909]  ? __pfx_ops_undo_list+0x10/0x10
[  186.178413][ T5909]  ? do_raw_spin_unlock+0x4d/0x240
[  186.180466][ T5909]  cleanup_net+0x4c5/0x800
[  186.182343][ T5909]  ? __pfx_cleanup_net+0x10/0x10
[  186.184320][ T5909]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.186208][ T5909]  ? process_scheduled_works+0x9ef/0x17b0
[  186.188501][ T5909]  ? process_scheduled_works+0x9ef/0x17b0
[  186.190801][ T5909]  process_scheduled_works+0xae1/0x17b0
[  186.192910][ T5909]  ? __pfx_process_scheduled_works+0x10/0x10
[  186.195390][ T5909]  worker_thread+0x8a0/0xda0
[  186.197376][ T5909]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  186.200034][ T5909]  ? __kthread_parkme+0x7b/0x200
[  186.202110][ T5909]  kthread+0x711/0x8a0
[  186.203919][ T5909]  ? __pfx_worker_thread+0x10/0x10
[  186.206143][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.208163][ T5909]  ? _raw_spin_unlock_irq+0x23/0x50
[  186.210355][ T5909]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.212466][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.214512][ T5909]  ret_from_fork+0x3fc/0x770
[  186.216798][ T5909]  ? __pfx_ret_from_fork+0x10/0x10
[  186.219307][ T5909]  ? __switch_to_asm+0x39/0x70
[  186.221306][ T5909]  ? __switch_to_asm+0x33/0x70
[  186.223275][ T5909]  ? __pfx_kthread+0x10/0x10
[  186.225235][ T5909]  ret_from_fork_asm+0x1a/0x30
[  186.227756][ T5909]  </TASK>
[  186.229822][ T5909] Kernel Offset: disabled
[  186.231631][ T5909] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:22:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000003 RBX=0000000000000003 RCX=0000000000000003 RDX=0000000000000003
RSI=0000000000000003 RDI=ffff8880206ed640 RBP=0000000000000000 RSP=ffffc900032df460
R8 =0000000000000000 R9 =ffffffff822e4c87 R10=dffffc0000000000 R11=fffff94000901e59
R12=0000000000000003 R13=0000000000000001 R14=ffff8880206ee1a8 R15=ffff8880206ee1c8
RIP=ffffffff819d67cb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555593f2f500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34121ff8 CR3=0000000111eec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8173c37f ffffffff81688a3f
XMM02=0000000000000000 ffffffff81688a3f XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900037ff030
R8 =ffff888020690237 R9 =1ffff110040d2046 R10=dffffc0000000000 R11=ffffffff854f6e40
R12=dffffc0000000000 R13=ffffffff99b008d9 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6ebc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b077d CR3=0000000105a22000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc5a5812e53
XMM06=0000000000000000 00007fc5a5812e4d XMM07=0000000000000000 00007fc5a5812e61
XMM08=0000000000000000 00007fc5a5812ee7 XMM09=0000000000000000 00007fc5a5812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
