last executing test programs:

2.48928032s ago: executing program 2 (id=1901):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90)

2.488798773s ago: executing program 0 (id=1903):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)

2.438694468s ago: executing program 2 (id=1905):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0xc800)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@delchain={0x2c, 0x66, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@filter_kind_options=@f_flow={{}, {0x0, 0x2, [@TCA_FLOW_POLICE={0x0, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x0, 0x2, [0x0, 0x1, 0x4, 0x3, 0x7fff, 0x7, 0x7, 0x9, 0x5, 0x0, 0x4, 0x8, 0x7, 0x9, 0xd3, 0xd, 0x101, 0x40, 0x502c, 0xb, 0x4, 0x1000, 0x8000000, 0x9, 0xffffffff, 0x9f5, 0x197, 0x9, 0xc1, 0xfff, 0x7, 0x10000, 0x7, 0x2, 0xfffffffd, 0xb, 0x80, 0xfffffffd, 0xa, 0x9, 0x6, 0x70d, 0xa, 0xe6c, 0x400, 0x7ff, 0x2, 0x1, 0xf0bb, 0x100, 0x1, 0x2, 0x5e, 0x0, 0x9, 0x8cb, 0x6, 0xb9a9, 0x5, 0x2, 0xce49, 0x85db, 0x1ff, 0x101, 0x0, 0xffffffff, 0x7, 0x5, 0x7f, 0x58, 0x2, 0x4, 0x4, 0x5, 0x1, 0xffff, 0xffffff5e, 0x0, 0x7, 0x2, 0x3, 0x21cf0758, 0xa, 0x3, 0x6, 0x0, 0x7, 0x0, 0x7, 0x8, 0x1, 0x8, 0xb, 0x9, 0x4, 0x9, 0x6, 0x400, 0x83a1, 0x6, 0x81, 0xc, 0x3, 0x2481, 0x3, 0xac8, 0xbe, 0xfb2, 0x0, 0x8, 0x6e, 0x4, 0x8, 0x101, 0xfffffffc, 0x1, 0x7fff, 0x5da6, 0xf, 0x5, 0xffffffff, 0x1, 0x80, 0x9, 0x716a, 0x6, 0x7, 0x4, 0x9, 0x3, 0x5, 0x1, 0x1000, 0x2, 0x1, 0x4, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x5, 0x3, 0x7, 0xff, 0x1, 0xfffffffc, 0xf71, 0x1, 0x9, 0x0, 0x9, 0x3, 0x9, 0x2, 0xffff, 0x9, 0x4, 0x4, 0x6, 0x85, 0x5, 0x7, 0x2, 0x3, 0x6, 0x34, 0x1, 0x0, 0x5, 0x399, 0x10, 0xb, 0x8001, 0xd5ab, 0x5, 0xc, 0x9, 0xd, 0x6, 0x8, 0x80000001, 0x0, 0xfffff105, 0x5, 0x5, 0x5, 0x5, 0xffffffff, 0x8, 0x3, 0x400, 0x8001, 0x6, 0x2, 0x5, 0x0, 0x400, 0x7, 0x400, 0x7, 0x2, 0xfffffffe, 0x659, 0x1, 0xfffffff7, 0x7fff, 0x2, 0x94, 0x9, 0x9, 0x3, 0xffffffd9, 0x9, 0x7ff, 0xa30a, 0x5, 0x42, 0xfffffff8, 0x3ff, 0x1, 0x0, 0x9, 0x2, 0x3, 0x4, 0xfffffffc, 0x1, 0x100, 0x4, 0xfffffff9, 0x8, 0x8001, 0x1ff, 0xfffffff8, 0x1, 0xb, 0x8000000, 0xc, 0xe, 0x31, 0xe, 0x69fc, 0x7, 0x7, 0xf2a, 0x9, 0x6bf, 0xc, 0x41, 0x1, 0x374, 0x8, 0x6, 0x5, 0x40]}]}, @TCA_FLOW_ADDEND={0x0, 0x5, 0x4}]}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004800)

2.357798493s ago: executing program 2 (id=1906):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xb9}}}}, 0x3a)

2.35672737s ago: executing program 0 (id=1908):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32], 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.263057788s ago: executing program 0 (id=1910):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4)

2.26295474s ago: executing program 1 (id=1911):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0})

2.262814959s ago: executing program 0 (id=1912):
r0 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3f, 0xffffffffffffffff, &(0x7f00000000c0)={0x72000002})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x38)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')

2.262600473s ago: executing program 1 (id=1913):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
pselect6(0x40, &(0x7f00000008c0)={0x1, 0x5, 0xfffe, 0x990, 0x40000004, 0x6, 0xa2a, 0x7f}, &(0x7f00000001c0)={0x6, 0x6, 0x7, 0xa23d, 0x8, 0xfffffffffffffffc, 0x7, 0xbb0}, 0x0, &(0x7f0000000240), &(0x7f0000000940)={&(0x7f0000000980)={[0x3ff]}, 0x8})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x3, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)={@remote, @empty}, 0x8)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000280))

2.209364663s ago: executing program 2 (id=1914):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001001000002000000010000000000000014000000000000001001000002"], 0x30}, 0x0)

2.209027508s ago: executing program 0 (id=1915):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
close(0x4)

2.208699388s ago: executing program 2 (id=1916):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e80"], 0x2c}}, 0x0)

1.888328623s ago: executing program 0 (id=1917):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.710843749s ago: executing program 32 (id=1917):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.655888746s ago: executing program 2 (id=1919):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="c80f59bf", 0x4)

1.655768436s ago: executing program 33 (id=1919):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$caif_seqpacket(0x25, 0x5, 0x3)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="c80f59bf", 0x4)

862.058978ms ago: executing program 1 (id=1921):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0xffbe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

118.001187ms ago: executing program 1 (id=1922):
unshare(0x2a020400)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)

48.961014ms ago: executing program 1 (id=1923):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0x8000000000000001, 0x2})

0s ago: executing program 1 (id=1924):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000006c0)={0x7, 0xfffb, 0xc201, 0x6, 0x0, 0x8, 0x4, 0x4}, &(0x7f0000000700)=0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2462' (ED25519) to the list of known hosts.
syzkaller login: [   55.956138][ T5774] cgroup: Unknown subsys name 'net'
[   56.044467][ T5774] cgroup: Unknown subsys name 'cpuset'
[   56.051995][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.785679][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.985603][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.395329][ T5888] chnl_net:caif_netlink_parms(): no params data found
[   69.515046][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.517836][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.521038][ T5888] bridge_slave_0: entered allmulticast mode
[   69.523944][ T5888] bridge_slave_0: entered promiscuous mode
[   69.530855][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.533537][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.535896][ T5888] bridge_slave_1: entered allmulticast mode
[   69.540072][ T5888] bridge_slave_1: entered promiscuous mode
[   69.576963][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.582282][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.605883][ T5888] team0: Port device team_slave_0 added
[   69.609820][ T5888] team0: Port device team_slave_1 added
[   69.627878][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.630229][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.638384][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.643854][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.646109][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.654389][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.699175][ T5888] hsr_slave_0: entered promiscuous mode
[   69.701555][ T5888] hsr_slave_1: entered promiscuous mode
[   69.813213][ T5888] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.820393][ T5888] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.825035][ T5888] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.829835][ T5888] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.854174][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.856589][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.859230][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.861472][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.894997][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.907020][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.910453][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.918211][ T5888] 8021q: adding VLAN 0 to HW filter on device team0
[   69.925426][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.927617][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.940353][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.942554][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.034347][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.058405][ T5888] veth0_vlan: entered promiscuous mode
[   70.068137][ T5888] veth1_vlan: entered promiscuous mode
[   70.084797][ T5888] veth0_macvtap: entered promiscuous mode
[   70.088877][ T5888] veth1_macvtap: entered promiscuous mode
[   70.099540][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.106327][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.113480][ T5906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.116956][ T5696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.120832][ T5696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.123864][ T5696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.114980][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.120962][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.125592][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.131323][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.135910][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.150399][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.159657][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.161861][ T5696] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.210355][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.216007][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.219687][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.245091][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.249751][ T5926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.253032][ T5926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.257447][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.262186][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.623964][ T5925] chnl_net:caif_netlink_parms(): no params data found
[   71.637882][ T5932] chnl_net:caif_netlink_parms(): no params data found
[   71.752859][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   71.826196][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.831603][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.834533][ T5932] bridge_slave_0: entered allmulticast mode
[   71.838226][ T5932] bridge_slave_0: entered promiscuous mode
[   71.844059][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.847102][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.850810][ T5925] bridge_slave_0: entered allmulticast mode
[   71.853647][ T5925] bridge_slave_0: entered promiscuous mode
[   71.866198][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.869025][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.871578][ T5932] bridge_slave_1: entered allmulticast mode
[   71.874721][ T5932] bridge_slave_1: entered promiscuous mode
[   71.899251][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.901602][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.904118][ T5925] bridge_slave_1: entered allmulticast mode
[   71.907033][ T5925] bridge_slave_1: entered promiscuous mode
[   71.944306][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.962147][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.982913][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.989497][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.045294][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.048118][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.051870][ T5928] bridge_slave_0: entered allmulticast mode
[   72.055711][ T5928] bridge_slave_0: entered promiscuous mode
[   72.073100][ T5932] team0: Port device team_slave_0 added
[   72.077845][ T5932] team0: Port device team_slave_1 added
[   72.081983][ T5925] team0: Port device team_slave_0 added
[   72.095063][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.097289][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.102941][ T5928] bridge_slave_1: entered allmulticast mode
[   72.106500][ T5928] bridge_slave_1: entered promiscuous mode
[   72.121595][ T5925] team0: Port device team_slave_1 added
[   72.146121][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.149078][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.158141][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.178116][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.185084][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.189715][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.192317][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.202009][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.221789][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.223956][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.234325][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.277113][ T5928] team0: Port device team_slave_0 added
[   72.280640][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.283044][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.292818][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.305955][ T5928] team0: Port device team_slave_1 added
[   72.319623][ T5696] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.386572][ T5925] hsr_slave_0: entered promiscuous mode
[   72.390847][ T5925] hsr_slave_1: entered promiscuous mode
[   72.393834][ T5925] debugfs: 'hsr0' already exists in 'hsr'
[   72.396172][ T5925] Cannot create hsr debugfs directory
[   72.443572][ T5932] hsr_slave_0: entered promiscuous mode
[   72.446984][ T5932] hsr_slave_1: entered promiscuous mode
[   72.450736][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[   72.452928][ T5932] Cannot create hsr debugfs directory
[   72.455734][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.458330][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.467729][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.472797][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.475226][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.484498][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.609029][ T5928] hsr_slave_0: entered promiscuous mode
[   72.612170][ T5928] hsr_slave_1: entered promiscuous mode
[   72.615162][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   72.617314][ T5928] Cannot create hsr debugfs directory
[   73.191065][ T5929] Bluetooth: hci0: command tx timeout
[   73.268973][ T5929] Bluetooth: hci2: command tx timeout
[   73.270588][ T5926] Bluetooth: hci1: command tx timeout
[   73.586174][ T5696] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.655300][ T5696] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.785972][ T5696] bridge_slave_1: left allmulticast mode
[   73.790835][ T5696] bridge_slave_1: left promiscuous mode
[   73.793993][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.802434][ T5696] bridge_slave_0: left allmulticast mode
[   73.804586][ T5696] bridge_slave_0: left promiscuous mode
[   73.806959][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.130345][ T5696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.136240][ T5696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.141817][ T5696] bond0 (unregistering): Released all slaves
[   74.283293][ T5696] hsr_slave_0: left promiscuous mode
[   74.286367][ T5696] hsr_slave_1: left promiscuous mode
[   74.289515][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.292573][ T5696] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.296583][ T5696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.309671][ T5696] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.325247][ T5696] veth1_macvtap: left promiscuous mode
[   74.327604][ T5696] veth0_macvtap: left promiscuous mode
[   74.330145][ T5696] veth1_vlan: left promiscuous mode
[   74.332389][ T5696] veth0_vlan: left promiscuous mode
[   74.762257][ T5696] team0 (unregistering): Port device team_slave_1 removed
[   74.796346][ T5696] team0 (unregistering): Port device team_slave_0 removed
[   75.282619][ T5926] Bluetooth: hci0: command tx timeout
[   75.349661][ T5926] Bluetooth: hci2: command tx timeout
[   75.349693][ T5929] Bluetooth: hci1: command tx timeout
[   75.415643][ T5925] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.442680][ T5925] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.450378][ T5925] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.462670][ T5925] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.560462][ T5932] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.579808][ T5932] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.607596][ T5932] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.632791][ T5932] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.700230][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.711881][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.722220][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.733662][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.785971][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.833646][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[   75.857180][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.860267][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.875805][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.878938][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.937605][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.983637][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[   76.001088][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.013550][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.016730][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.024235][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.027164][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.051147][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   76.090671][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.093836][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.101830][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.104918][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.287698][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.355645][ T5925] veth0_vlan: entered promiscuous mode
[   76.373184][ T5925] veth1_vlan: entered promiscuous mode
[   76.407480][ T5925] veth0_macvtap: entered promiscuous mode
[   76.414698][ T5925] veth1_macvtap: entered promiscuous mode
[   76.447446][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.459771][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.477428][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   76.482143][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   76.482986][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.496566][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.503517][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.507596][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.533434][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.537251][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.643649][ T5932] veth0_vlan: entered promiscuous mode
[   76.644591][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.656021][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.682059][ T5932] veth1_vlan: entered promiscuous mode
[   76.708294][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.713353][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.768070][ T5928] veth0_vlan: entered promiscuous mode
[   76.785973][ T5932] veth0_macvtap: entered promiscuous mode
[   76.817043][ T5932] veth1_macvtap: entered promiscuous mode
[   76.823619][ T5928] veth1_vlan: entered promiscuous mode
[   76.853628][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.872824][ T5928] veth0_macvtap: entered promiscuous mode
[   76.878346][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.879220][ T6002] netlink: 'syz.1.24': attribute type 1 has an invalid length.
[   76.884328][ T6002] netlink: 244 bytes leftover after parsing attributes in process `syz.1.24'.
[   76.894199][ T5928] veth1_macvtap: entered promiscuous mode
[   76.912515][ T5696] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.916289][ T5696] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.946358][ T5696] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.958120][ T5696] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.984947][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   77.009503][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.064296][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.121001][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.124549][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.153149][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.156881][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.161962][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.166131][ T5953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.276191][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.289003][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.311895][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.315060][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.349493][ T5929] Bluetooth: hci0: command tx timeout
[   77.396805][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.400802][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.429374][ T5929] Bluetooth: hci1: command tx timeout
[   77.431608][ T5929] Bluetooth: hci2: command tx timeout
[   77.553603][ T6020] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET)
[   77.857301][ T5953] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   78.267664][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   78.292901][ T5906] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.293056][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'.
[   78.297323][ T5906] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.306116][ T6035] Zero length message leads to an empty skb
[   78.306148][ T5906] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.319634][ T5906] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.732619][ T6049] pim6reg1: entered promiscuous mode
[   78.739433][ T6049] pim6reg1: entered allmulticast mode
[   79.428763][ T5926] Bluetooth: hci0: command tx timeout
[   79.518729][ T5926] Bluetooth: hci2: command tx timeout
[   79.519793][ T5929] Bluetooth: hci1: command tx timeout
[   79.667849][ T6090] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.970265][ T6106] tipc: Started in network mode
[   79.972502][ T6106] tipc: Node identity , cluster identity 4711
[   79.975177][ T6106] tipc: Failed to set node id, please configure manually
[   79.988417][ T6106] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.094074][ T6111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.147382][ T6115] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   80.159183][ T6115] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   80.549984][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.78'.
[   80.874239][ T6159] syz_tun: entered allmulticast mode
[   80.924795][ T6158] syz_tun: left allmulticast mode
[   82.402620][ T6177] team_slave_0: entered promiscuous mode
[   82.405506][ T6177] team_slave_1: entered promiscuous mode
[   82.412946][ T6177] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   83.033947][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   83.223218][ T6217] netlink: 200 bytes leftover after parsing attributes in process `syz.0.111'.
[   83.514423][ T6235] syzkaller1: entered promiscuous mode
[   83.516955][ T6235] syzkaller1: entered allmulticast mode
[   83.523198][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.560497][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'.
[   83.797911][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'.
[   83.997807][ T6271] Bluetooth: MGMT ver 1.23
[   84.031270][ T6273] veth0_to_bond: entered allmulticast mode
[   84.298849][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[   84.927159][ T6316] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   85.034533][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'.
[   85.157564][ T6328] Illegal XDP return value 3408414465 on prog  (id 19) dev N/A, expect packet loss!
[   85.297445][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   85.919879][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.173'.
[   86.658017][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'.
[   86.787383][  T792] cfg80211: failed to load regulatory.db
[   87.046727][ T6394] netlink: 'syz.2.188': attribute type 5 has an invalid length.
[   87.685760][ T6423] netlink: 'syz.1.195': attribute type 3 has an invalid length.
[   88.578216][ T6452] tipc: Started in network mode
[   88.588753][ T6452] tipc: Node identity 820f72827d92, cluster identity 4711
[   88.592110][ T6452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.684772][ T6452] syzkaller0: entered promiscuous mode
[   88.687702][ T6452] syzkaller0: entered allmulticast mode
[   88.694445][ T6452] tipc: Resetting bearer <eth:syzkaller0>
[   88.720925][ T6451] tipc: Resetting bearer <eth:syzkaller0>
[   89.069040][ T6461] __nla_validate_parse: 1 callbacks suppressed
[   89.069058][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'.
[   89.254741][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   89.592558][ T5875] tipc: Node number set to 4288508546
[   90.696530][ T6451] tipc: Disabling bearer <eth:syzkaller0>
[   90.874190][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.924939][ T6482] warning: `syz.1.218' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   91.687773][ T6528] netlink: 'syz.1.240': attribute type 14 has an invalid length.
[   92.098783][ T6548] pim6reg1: entered promiscuous mode
[   92.100733][ T6548] pim6reg1: entered allmulticast mode
[   92.263778][ T6555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.267135][ T6555] syzkaller0: entered promiscuous mode
[   92.269625][ T6555] syzkaller0: entered allmulticast mode
[   92.276806][ T6555] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.289701][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'.
[   92.297615][ T6555] tipc: Resetting bearer <eth:syzkaller0>
[   92.302539][ T6554] tipc: Resetting bearer <eth:syzkaller0>
[   92.311613][ T6554] tipc: Disabling bearer <eth:syzkaller0>
[   93.209371][ T6589] netlink: 830 bytes leftover after parsing attributes in process `syz.0.262'.
[   93.912740][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   93.916850][ T6601] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   93.927947][ T6601] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.348045][ T6616] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.355397][ T6619] bond_slave_0: entered promiscuous mode
[   94.358127][ T6619] bond_slave_1: entered promiscuous mode
[   94.365115][ T6619] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   94.382178][ T6619] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   94.423404][ T6616] bridge_slave_0: left allmulticast mode
[   94.425967][ T6616] bridge_slave_0: left promiscuous mode
[   94.432381][ T6616] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.443882][ T6616] bridge_slave_1: left allmulticast mode
[   94.446649][ T6616] bridge_slave_1: left promiscuous mode
[   94.456581][ T6616] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.465939][ T6616] bond0: (slave bond_slave_0): Releasing backup interface
[   94.477016][ T6616] bond_slave_0: left promiscuous mode
[   94.485163][ T6616] bond0: (slave bond_slave_1): Releasing backup interface
[   94.492048][ T6616] bond_slave_1: left promiscuous mode
[   94.510640][ T6616] team0: Port device team_slave_0 removed
[   94.520190][ T6616] team0: Port device team_slave_1 removed
[   94.523690][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.527111][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.532751][ T6616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.536387][ T6616] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.563980][ T6616] bond1: (slave macvlan2): Removing an active aggregator
[   94.567592][ T6616] bond1: (slave macvlan2): Releasing backup interface
[   94.652595][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'.
[   94.692732][ T6616] syz.1.274 (6616) used greatest stack depth: 19896 bytes left
[   95.161613][ T6641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.167420][ T6641] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.241068][ T6641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.245011][ T6641] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.308075][ T6641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.313409][ T6641] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.397435][ T6641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   95.402352][ T6641] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.436690][ T6651] netlink: 188 bytes leftover after parsing attributes in process `syz.2.289'.
[   95.537481][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.547239][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.553258][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.558383][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.586953][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.590984][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.998609][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.001735][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.033919][ T6660] netlink: 'syz.1.292': attribute type 30 has an invalid length.
[   96.119852][ T6666] bridge0: entered promiscuous mode
[   97.396301][ T6723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.315'.
[   97.405595][ T6723] netlink: 560 bytes leftover after parsing attributes in process `syz.0.315'.
[   97.775642][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.779649][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.785654][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.816898][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.943887][ T6753] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   97.951368][ T6750] IPVS: stopping backup sync thread 6753 ...
[   98.113877][ T6757] dvmrp0: entered allmulticast mode
[   98.177267][ T6763] netlink: 128 bytes leftover after parsing attributes in process `syz.2.334'.
[   98.197440][ T6763] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.201745][ T6763] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.655582][ T6874] netlink: 'syz.0.358': attribute type 1 has an invalid length.
[  100.723037][ T6874] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.729650][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'.
[  100.768809][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.771837][ T6877] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.781340][ T6877] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  100.814236][ T6874] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  101.792591][ T6950] netlink: 'syz.0.392': attribute type 2 has an invalid length.
[  102.216730][ T6981] netlink: 'syz.1.405': attribute type 1 has an invalid length.
[  102.240145][ T6981] netlink: 17231 bytes leftover after parsing attributes in process `syz.1.405'.
[  102.539080][ T7007] syz_tun: entered allmulticast mode
[  102.662744][ T6996] syz_tun: left allmulticast mode
[  103.152073][ T7042] netlink: zone id is out of range
[  103.154633][ T7042] netlink: zone id is out of range
[  103.156890][ T7042] netlink: set zone limit has 4 unknown bytes
[  103.239832][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.425'.
[  103.531082][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[  104.403893][ T7087] netlink: 36 bytes leftover after parsing attributes in process `syz.1.439'.
[  104.463880][ T7091] netlink: 228 bytes leftover after parsing attributes in process `syz.1.441'.
[  104.552958][ T7093] netlink: 'syz.2.442': attribute type 21 has an invalid length.
[  104.874303][ T7120] netlink: 'syz.0.455': attribute type 30 has an invalid length.
[  105.760966][ T7144] netlink: 6 bytes leftover after parsing attributes in process `syz.0.464'.
[  105.779812][ T7144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.193446][ T7162] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  106.538163][ T7186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.482'.
[  106.547752][ T7188] netlink: 96 bytes leftover after parsing attributes in process `syz.2.484'.
[  106.615564][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'.
[  107.058292][ T7218] tipc: Started in network mode
[  107.071623][ T7218] tipc: Node identity ac14142f, cluster identity 4711
[  107.075055][ T7218] tipc: New replicast peer: 0.0.0.0
[  107.077741][ T7218] tipc: Enabled bearer <udp:syz2>, priority 10
[  107.099614][ T7218] tipc: New replicast peer: 255.255.255.255
[  107.843966][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'.
[  107.952166][ T7250] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.507'.
[  108.078718][  T792] tipc: Node number set to 2886997039
[  108.312329][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'.
[  108.644863][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'.
[  109.886925][ T7302] netlink: 'syz.2.528': attribute type 13 has an invalid length.
[  109.889507][ T7300] geneve2: entered promiscuous mode
[  109.895590][ T7302] netlink: 'syz.2.528': attribute type 17 has an invalid length.
[  110.137286][ T7302] bridge0: left promiscuous mode
[  110.150863][ T7302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.295731][ T7302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.613643][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.536'.
[  110.806151][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[  110.836073][ T7327] veth1_macvtap: left promiscuous mode
[  111.081767][ T7333] netlink: 'syz.1.539': attribute type 2 has an invalid length.
[  111.091449][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.539'.
[  111.285437][ T7347] netlink: 'syz.0.546': attribute type 2 has an invalid length.
[  111.288427][ T7347] netlink: 164 bytes leftover after parsing attributes in process `syz.0.546'.
[  111.395610][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[  111.434519][ T7355] C: renamed from team_slave_0 (while UP)
[  111.444984][ T7355] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  111.448032][ T7355] netlink: 128 bytes leftover after parsing attributes in process `syz.0.550'.
[  111.460693][ T7355] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  111.805668][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.808578][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.897859][ T7378] veth0_to_bond: left allmulticast mode
[  111.935563][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.950370][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.074389][ T7384] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  112.095015][ T5953] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.106080][ T5953] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.115231][ T5953] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.124603][ T5953] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.129425][ T5953] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.133403][ T5953] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.137546][ T5953] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.166862][ T5953] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.232836][ T7397] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  112.612923][ T7421] netlink: 144 bytes leftover after parsing attributes in process `syz.0.581'.
[  112.833805][ T7433] netlink: 'syz.1.587': attribute type 10 has an invalid length.
[  113.065622][ T7443] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.075440][ T7443] bond0: (slave bond2): Enslaving as an active interface with an up link
[  113.164072][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[  113.176006][ T7448] gtp0: entered promiscuous mode
[  113.178521][ T7448] gtp0: entered allmulticast mode
[  113.525846][ T7469] netlink: 'syz.0.604': attribute type 2 has an invalid length.
[  113.538012][ T7469] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[  113.709267][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.715415][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.727381][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.731545][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.786333][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'.
[  113.962165][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[  113.996480][ T7499] batadv0: entered promiscuous mode
[  114.004110][ T7499] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  114.026648][ T7499] batadv0: left promiscuous mode
[  114.165727][ T7511] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.472656][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'.
[  114.838881][ T7555] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  114.988662][ T7509] Bluetooth: hci0: Opcode 0x080f failed: -4
[  116.233531][ T5929] Bluetooth: hci0: command 0x080f tx timeout
[  116.850830][ T7650] __nla_validate_parse: 7 callbacks suppressed
[  116.850850][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'.
[  117.074586][ T7666] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  117.128259][ T7671] bridge_slave_0: left allmulticast mode
[  117.137677][ T7671] bridge_slave_0: left promiscuous mode
[  117.144556][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.155305][ T7671] bridge_slave_1: left allmulticast mode
[  117.157723][ T7671] bridge_slave_1: left promiscuous mode
[  117.162474][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.174546][ T7671] bond0: (slave bond_slave_0): Releasing backup interface
[  117.182495][ T7678] netlink: 'syz.2.685': attribute type 10 has an invalid length.
[  117.187079][ T7671] bond0: (slave bond_slave_1): Releasing backup interface
[  117.212906][ T7671] team_slave_0: left promiscuous mode
[  117.221784][ T7671] team0: Port device team_slave_0 removed
[  117.226284][ T7671] team_slave_1: left promiscuous mode
[  117.242368][ T7671] team0: Port device team_slave_1 removed
[  117.248100][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.253613][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.261839][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.266130][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.293866][ T7676] netlink: 'syz.0.689': attribute type 22 has an invalid length.
[  117.299238][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  117.301480][ T7678] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  117.313944][ T7678] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.319263][ T7680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.323066][ T7680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.338290][ T7676] netlink: 'syz.0.689': attribute type 22 has an invalid length.
[  117.356310][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.361626][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  117.366226][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.380260][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.395916][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.434229][ T7686] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  117.536631][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'.
[  118.000737][ T7718] Bluetooth: MGMT ver 1.23
[  118.046715][ T7715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.696'.
[  118.063787][ T7715] vlan2: entered promiscuous mode
[  118.066124][ T7715] gretap0: entered promiscuous mode
[  118.371918][ T7739] netlink: 'syz.1.706': attribute type 13 has an invalid length.
[  118.848264][ T5953] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.860680][ T5953] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.870704][ T5953] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.884340][ T5953] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.895915][ T5953] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.914712][ T5953] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.921729][ T5953] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.931325][ T5953] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.945266][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'.
[  118.953984][ T7756] netlink: 'syz.0.711': attribute type 2 has an invalid length.
[  118.957364][ T7756] netlink: 'syz.0.711': attribute type 1 has an invalid length.
[  118.960879][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'.
[  119.124529][ T7764] netlink: 100 bytes leftover after parsing attributes in process `syz.1.714'.
[  119.131990][ T7764] netlink: 100 bytes leftover after parsing attributes in process `syz.1.714'.
[  119.466115][ T7784] netlink: 'syz.0.722': attribute type 3 has an invalid length.
[  120.821457][ T7851] unknown channel width for channel at 909000KHz?
[  121.269083][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  121.343495][ T7889] netlink: 'syz.2.767': attribute type 1 has an invalid length.
[  121.630729][ T7901] dummy0: entered promiscuous mode
[  121.633048][ T7901] macvtap1: entered promiscuous mode
[  121.635078][ T7901] macvtap1: entered allmulticast mode
[  121.636970][ T7901] dummy0: entered allmulticast mode
[  121.655795][ T7901] dummy0: left allmulticast mode
[  121.658382][ T7901] dummy0: left promiscuous mode
[  121.707929][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.713984][ T7903] 8021q: adding VLAN 0 to HW filter on device team0
[  121.722230][ T7903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.983660][ T7922] __nla_validate_parse: 3 callbacks suppressed
[  121.983671][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.784'.
[  122.027875][ T7924] netlink: 'syz.2.783': attribute type 6 has an invalid length.
[  122.048189][ T7924] netlink: 'syz.2.783': attribute type 12 has an invalid length.
[  122.052184][ T7924] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.783'.
[  122.317387][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'.
[  122.323129][ T7945] nbd: couldn't find a device at index 65546
[  123.377803][ T7984] netlink: 'syz.1.810': attribute type 1 has an invalid length.
[  123.380615][ T7984] netlink: 168 bytes leftover after parsing attributes in process `syz.1.810'.
[  123.383822][ T7984] NCSI netlink: No device for ifindex 0
[  123.428136][ T7989] netlink: 'syz.1.812': attribute type 1 has an invalid length.
[  123.432406][ T7989] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.812'.
[  123.530877][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  123.617884][ T8007] openvswitch: netlink: IPv4 tun info is not correct
[  123.641763][ T5953] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.645162][ T5953] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.650876][ T5953] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.653824][ T5953] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.656772][ T5953] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.663627][ T5953] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.667284][ T5953] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  123.679685][ T5953] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.714352][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'.
[  123.720763][ T8000] hsr_slave_0: left promiscuous mode
[  123.724431][ T8000] hsr_slave_1: left promiscuous mode
[  123.791650][ T8019] bond0: (slave erspan0): Opening slave failed
[  124.030619][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[  124.371438][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'.
[  124.408271][ T8070] macsec1: entered promiscuous mode
[  124.410389][ T8070] macsec0: entered promiscuous mode
[  124.412542][ T8070] macsec1: entered allmulticast mode
[  124.414609][ T8070] macsec0: entered allmulticast mode
[  124.416256][ T8070] veth1_macvtap: entered allmulticast mode
[  124.427925][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'.
[  124.448565][ T8072] netlink: 'syz.1.849': attribute type 7 has an invalid length.
[  124.451715][ T8072] netlink: 'syz.1.849': attribute type 8 has an invalid length.
[  124.521882][ T8078] sctp: [Deprecated]: syz.0.851 (pid 8078) Use of int in max_burst socket option.
[  124.521882][ T8078] Use struct sctp_assoc_value instead
[  124.534017][ T8077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.537946][ T8077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.741313][ T8141] syzkaller0: entered promiscuous mode
[  125.743816][ T8141] syzkaller0: entered allmulticast mode
[  126.209919][ T8163] syzkaller1: entered promiscuous mode
[  126.212342][ T8163] syzkaller1: entered allmulticast mode
[  126.324892][ T8165] netlink: 'syz.0.880': attribute type 6 has an invalid length.
[  127.016641][ T8207] __nla_validate_parse: 5 callbacks suppressed
[  127.016653][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  127.023833][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  127.065588][ T8211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'.
[  127.068370][ T8211] netlink: 'syz.1.905': attribute type 7 has an invalid length.
[  127.071607][ T8211] netlink: 'syz.1.905': attribute type 8 has an invalid length.
[  127.074629][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'.
[  127.620649][ T8244] netlink: 'syz.1.913': attribute type 12 has an invalid length.
[  127.623720][ T8244] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.913'.
[  128.003027][ T8270] netlink: 'syz.1.924': attribute type 10 has an invalid length.
[  128.010977][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.924'.
[  128.021882][ T8270] batman_adv: batadv0: Adding interface: virt_wifi0
[  128.024448][ T8270] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.035297][ T8270] batman_adv: batadv0: Interface activated: virt_wifi0
[  128.293299][ T8275] netlink: 'syz.1.925': attribute type 4 has an invalid length.
[  128.296601][ T8275] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.925'.
[  128.550457][ T8292] netlink: zone id is out of range
[  128.553212][ T8292] netlink: zone id is out of range
[  128.557383][ T8292] netlink: zone id is out of range
[  128.587150][ T8292] netlink: set zone limit has 4 unknown bytes
[  128.597533][ T8292] netlink: del zone limit has 4 unknown bytes
[  129.216708][ T8332] syzkaller1: entered promiscuous mode
[  129.219226][ T8332] syzkaller1: entered allmulticast mode
[  129.524192][ T8346] netlink: 'syz.1.958': attribute type 58 has an invalid length.
[  129.526906][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.958'.
[  129.619946][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[  130.031830][ T8374] syz_tun: entered allmulticast mode
[  130.049428][ T8374] dvmrp8: entered allmulticast mode
[  130.116666][ T8379] netlink: 'syz.2.972': attribute type 23 has an invalid length.
[  130.471314][ T5926] Bluetooth: hci2: command 0x0405 tx timeout
[  130.626501][ T8406] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  130.635446][ T8406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.876416][ T8416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'.
[  131.324237][ T8438] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  131.385790][ T8438] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.395567][ T8438] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  131.406847][ T5875] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  131.415663][ T5875] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2
[  131.425677][ T5875] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22
[  131.442149][ T8445] netlink: 'syz.2.994': attribute type 14 has an invalid length.
[  131.457003][ T8445] gretap1: entered promiscuous mode
[  131.475776][ T8445] bond1: (slave gretap1): making interface the new active one
[  131.484774][ T8445] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  131.510763][ T8438] macvlan3: entered promiscuous mode
[  131.513012][ T8438] macvlan3: entered allmulticast mode
[  131.517044][ T8438] bond1: entered promiscuous mode
[  131.520058][ T8438] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  131.543968][ T8438] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  131.563643][ T8438] bond1: left promiscuous mode
[  131.648195][ T8438] syz.2.994 (8438) used greatest stack depth: 19736 bytes left
[  132.766904][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.774086][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.782781][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.787207][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.803621][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.808064][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.816103][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.826900][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.835868][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  132.839549][ T8522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'.
[  133.793938][ T8561] bond0: entered promiscuous mode
[  133.796075][ T8561] bond2: entered promiscuous mode
[  133.801579][ T8561] bond0: left promiscuous mode
[  133.803637][ T8561] bond2: left promiscuous mode
[  134.369604][ T8596] trusted_key: syz.1.1061 sent an empty control message without MSG_MORE.
[  134.860204][ T8622] pim6reg1: entered promiscuous mode
[  134.868983][ T8622] pim6reg1: entered allmulticast mode
[  135.065348][ T8626] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  135.069357][ T8626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.285030][ T8638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.292614][ T8638] syzkaller0: entered promiscuous mode
[  135.294862][ T8638] syzkaller0: entered allmulticast mode
[  135.312919][ T8638] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  135.322259][ T8638] tipc: Resetting bearer <eth:syzkaller0>
[  135.328290][ T8636] tipc: Resetting bearer <eth:syzkaller0>
[  135.345854][ T8636] tipc: Disabling bearer <eth:syzkaller0>
[  135.461646][ T8649] netlink: 'syz.1.1085': attribute type 3 has an invalid length.
[  135.478760][ T8649] netlink: 'syz.1.1085': attribute type 3 has an invalid length.
[  136.815685][ T8751] netlink: 'syz.0.1132': attribute type 11 has an invalid length.
[  136.821574][ T8751] netlink: 'syz.0.1132': attribute type 11 has an invalid length.
[  137.821795][ T8810] __nla_validate_parse: 31 callbacks suppressed
[  137.821812][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  137.838214][ T8810] veth1_macvtap: left allmulticast mode
[  137.849238][ T8810] veth1_macvtap: left promiscuous mode
[  137.871892][ T8810] macsec0 (unregistering): left allmulticast mode
[  137.874193][ T8810] macsec0 (unregistering): left promiscuous mode
[  138.285929][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1176'.
[  138.289996][ T8847] bond0: ARP target 170.170.170.170 is already present
[  138.293108][ T8847] bond0: option arp_ip_target: invalid value (2863311530)
[  138.503355][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1184'.
[  138.524426][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'.
[  138.677237][ T8880] tipc: Started in network mode
[  138.680234][ T8880] tipc: Node identity a25fe69fe542, cluster identity 4711
[  138.682952][ T8880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.685620][ T8880] syzkaller0: entered promiscuous mode
[  138.700178][ T8880] syzkaller0: entered allmulticast mode
[  138.736430][ T8880] tipc: Resetting bearer <eth:syzkaller0>
[  138.741904][ T8879] tipc: Resetting bearer <eth:syzkaller0>
[  138.759040][ T8879] tipc: Disabling bearer <eth:syzkaller0>
[  138.962472][ T8886] syzkaller1: entered promiscuous mode
[  138.964901][ T8886] syzkaller1: entered allmulticast mode
[  139.478947][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'.
[  140.714089][ T8964] netlink: 'syz.2.1224': attribute type 8 has an invalid length.
[  140.812060][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'.
[  140.916627][ T8984] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.920205][ T8984] syzkaller0: entered promiscuous mode
[  140.922639][ T8984] syzkaller0: entered allmulticast mode
[  140.939827][ T8984] tipc: Resetting bearer <eth:syzkaller0>
[  140.944314][ T8983] tipc: Resetting bearer <eth:syzkaller0>
[  140.956039][ T8983] tipc: Disabling bearer <eth:syzkaller0>
[  141.015353][ T8988] pim6reg1: entered promiscuous mode
[  141.017133][ T8988] pim6reg1: entered allmulticast mode
[  141.702493][ T9045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.102833][ T9079] tipc: Enabling of bearer <et:g> rejected, media not registered
[  142.181462][ T9085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1275'.
[  142.425680][ T9105] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.1286'.
[  142.792027][ T9128] can: request_module (can-proto-0) failed.
[  143.307262][ T9149] netlink: 'syz.1.1305': attribute type 12 has an invalid length.
[  143.485238][ T5919] IPVS: starting estimator thread 0...
[  143.487606][ T9150] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  143.587474][ T9158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.592607][ T9158] syzkaller0: entered promiscuous mode
[  143.595046][ T9156] IPVS: using max 62 ests per chain, 148800 per kthread
[  143.599722][ T9158] syzkaller0: entered allmulticast mode
[  143.714324][ T9158] tipc: Resetting bearer <eth:syzkaller0>
[  143.720545][ T9157] tipc: Resetting bearer <eth:syzkaller0>
[  143.746789][ T9157] tipc: Disabling bearer <eth:syzkaller0>
[  143.817752][   T33] audit: type=1107 audit(1758372868.211:2): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  143.862398][ T9170] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1310'.
[  143.866392][ T9170] .70: renamed from hsr0 (while UP)
[  143.888832][ T9170] .70: entered allmulticast mode
[  143.892386][ T9170] hsr_slave_0: entered allmulticast mode
[  143.894195][ T9170] hsr_slave_1: entered allmulticast mode
[  143.896417][ T9170] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  143.932538][ T9175] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  143.964379][ T9175] bond4: entered promiscuous mode
[  143.966506][ T9175] bond4: entered allmulticast mode
[  143.969114][ T9175] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.111175][ T9193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  144.131616][ T9194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.605729][  T792] IPVS: starting estimator thread 0...
[  144.616134][ T9207] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  144.688604][ T9208] IPVS: using max 62 ests per chain, 148800 per kthread
[  144.991621][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.002876][ T9217] syzkaller0: entered promiscuous mode
[  145.007476][ T9217] syzkaller0: entered allmulticast mode
[  145.065118][ T9222] syzkaller0: entered promiscuous mode
[  145.066844][ T9222] syzkaller0: entered allmulticast mode
[  145.078203][ T9222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.083444][ T9217] tipc: Resetting bearer <eth:syzkaller0>
[  145.086627][ T9221] tipc: Resetting bearer <eth:syzkaller0>
[  146.334040][ T9221] tipc: Disabling bearer <eth:syzkaller0>
[  146.341389][ T9216] tipc: Resetting bearer <eth:syzkaller0>
[  146.352729][ T9216] tipc: Disabling bearer <eth:syzkaller0>
[  146.455971][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.458132][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.466398][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.474183][ T9244] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  146.488944][ T9244] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  146.519933][ T9249] wg1 speed is unknown, defaulting to 1000
[  146.534931][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.556093][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.576262][ T9244] wg1 speed is unknown, defaulting to 1000
[  146.695412][ T9265] netlink: 'syz.1.1350': attribute type 15 has an invalid length.
[  146.700826][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  146.706692][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1351'.
[  146.727133][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'.
[  146.730471][ T9269] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1352'.
[  147.474760][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  147.478430][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  147.495794][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'.
[  147.508402][ T5696] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  147.515328][ T5696] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  147.520315][ T5696] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  147.523658][ T5696] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  147.536658][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  147.737339][ T9335] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  147.742400][ T9335] netlink: 'syz.2.1383': attribute type 2 has an invalid length.
[  147.746889][ T9335] netlink: 'syz.2.1383': attribute type 1 has an invalid length.
[  147.752034][ T9335] netlink: 'syz.2.1383': attribute type 2 has an invalid length.
[  147.817684][ T9342] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1386'.
[  147.947685][ T9352] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  147.957491][ T9352] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1391'.
[  148.144329][ T9374] tipc: Can't bind to reserved service type 1
[  148.146999][ T9374] netlink: 'syz.2.1402': attribute type 39 has an invalid length.
[  148.200806][ T9376] netlink: 'syz.2.1402': attribute type 5 has an invalid length.
[  148.214018][ T9376] vlan2: entered allmulticast mode
[  148.216080][ T9376] bridge_slave_0: entered allmulticast mode
[  148.736051][ T9409] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.840317][ T9417] syzkaller1: entered promiscuous mode
[  148.842346][ T9417] syzkaller1: entered allmulticast mode
[  149.251135][ T9437] __nla_validate_parse: 4 callbacks suppressed
[  149.251152][ T9437] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1430'.
[  149.288655][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'.
[  149.545304][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'.
[  149.645612][ T9461] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'.
[  150.078194][ T9480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.191167][ T9488] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1453'.
[  150.236264][ T9491] netlink: 'syz.2.1454': attribute type 11 has an invalid length.
[  150.240183][ T9491] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1454'.
[  150.321438][ T9497] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  150.328033][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  150.375585][ T9502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  150.460568][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1459'.
[  151.541380][ T9508] wg1 speed is unknown, defaulting to 1000
[  152.123286][ T9564] netlink: 'syz.1.1482': attribute type 1 has an invalid length.
[  152.126392][ T9564] netlink: 'syz.1.1482': attribute type 1 has an invalid length.
[  152.289377][ T9581] netlink: zone id is out of range
[  152.421371][ T9592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'.
[  152.424879][ T9592] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1496'.
[  152.482266][ T9600] sctp: [Deprecated]: syz.1.1498 (pid 9600) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.482266][ T9600] Use struct sctp_sack_info instead
[  152.689821][ T9616] syz_tun: entered promiscuous mode
[  152.943377][ T9632] bridge_slave_0: left allmulticast mode
[  152.945503][ T9632] bridge_slave_0: left promiscuous mode
[  152.947935][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.954598][ T9632] bridge_slave_1: left allmulticast mode
[  152.956653][ T9632] bridge_slave_1: left promiscuous mode
[  152.959631][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.964955][ T9632] bond0: (slave bond_slave_0): Releasing backup interface
[  152.969539][ T9632] bond0: (slave bond_slave_1): Releasing backup interface
[  152.974022][ T9632] team0: Port device C removed
[  152.977555][ T9632] team0: Port device team_slave_1 removed
[  152.980956][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.984799][ T9632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.989247][ T9632] bond1: (slave bridge1): Releasing backup interface
[  153.003310][ T9632] team0: Mode changed to "activebackup"
[  153.315352][ T9647] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  153.585013][ T9665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.906803][ T9723] __nla_validate_parse: 4 callbacks suppressed
[  154.906815][ T9723] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.1548'.
[  155.283931][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'.
[  155.298668][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'.
[  155.302351][ T9740] netlink: 'syz.2.1557': attribute type 12 has an invalid length.
[  156.397019][ T9765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'.
[  156.404910][ T9765] bridge0: entered allmulticast mode
[  156.410519][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  156.427521][ T9765] bridge0 (unregistering): left allmulticast mode
[  156.438009][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'.
[  156.474214][ T9686] Set syz1 is full, maxelem 65536 reached
[  156.579166][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1574'.
[  156.584651][ T9776] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1574'.
[  157.117707][ T9815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.121584][ T9815] syzkaller0: entered promiscuous mode
[  157.123632][ T9815] syzkaller0: entered allmulticast mode
[  157.145514][ T9815] tipc: Resetting bearer <eth:syzkaller0>
[  157.151623][ T9814] tipc: Resetting bearer <eth:syzkaller0>
[  157.163895][ T9814] tipc: Disabling bearer <eth:syzkaller0>
[  157.360050][ T9821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.370257][ T9821] syzkaller0: entered promiscuous mode
[  157.373200][ T9821] syzkaller0: entered allmulticast mode
[  157.397819][ T9821] tipc: Resetting bearer <eth:syzkaller0>
[  157.403226][ T9820] tipc: Resetting bearer <eth:syzkaller0>
[  157.416863][ T9820] tipc: Disabling bearer <eth:syzkaller0>
[  157.547881][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'.
[  157.595600][ T9831] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  158.066235][ T9878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'.
[  158.244083][ T9889] wg1 speed is unknown, defaulting to 1000
[  158.315003][ T9898] pim6reg1: entered promiscuous mode
[  158.316877][ T9898] pim6reg1: entered allmulticast mode
[  160.169282][ T9984] block nbd0: server does not support multiple connections per device.
[  160.175291][ T9984] block nbd0: shutting down sockets
[  160.230071][ T9992] __nla_validate_parse: 7 callbacks suppressed
[  160.230086][ T9992] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1673'.
[  160.271467][ T9989] wg1 speed is unknown, defaulting to 1000
[  160.399081][T10000] syzkaller1: entered promiscuous mode
[  160.401466][T10000] syzkaller1: entered allmulticast mode
[  160.823699][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'.
[  160.827008][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'.
[  160.831189][T10021] netlink: 'syz.2.1683': attribute type 1 has an invalid length.
[  160.834409][T10021] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1683'.
[  160.858869][T10021] nbd: socks must be embedded in a SOCK_ITEM attr
[  160.864236][T10021] block nbd0: shutting down sockets
[  161.003406][ T5929] Bluetooth: hci2: link tx timeout
[  161.005717][ T5929] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.026494][T10034] tipc: Enabling of bearer <eth:macvtap0> rejected, failed to enable media
[  161.073845][ T5926] Bluetooth: hci2: link tx timeout
[  161.075906][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.099547][ T5926] Bluetooth: hci2: link tx timeout
[  161.102596][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.189455][ T5926] Bluetooth: hci2: link tx timeout
[  161.191473][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.019621][ T5926] Bluetooth: hci2: link tx timeout
[  162.021696][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.199941][T10084] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1703'.
[  162.203737][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1703'.
[  162.229998][ T5926] Bluetooth: hci2: link tx timeout
[  162.232007][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.237168][ T5926] Bluetooth: hci2: link tx timeout
[  162.239004][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.553252][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'.
[  162.732574][ T5926] Bluetooth: hci2: link tx timeout
[  162.734671][ T5926] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.933776][T10113] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1715'.
[  163.028879][ T5926] Bluetooth: hci2: command 0x0405 tx timeout
[  163.033339][ T5926] Bluetooth: hci2: link tx timeout
[  163.077121][T10116] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  164.048839][T10151] netlink: 'syz.0.1725': attribute type 12 has an invalid length.
[  164.482512][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'.
[  165.042219][T10057] Set syz1 is full, maxelem 65536 reached
[  165.164235][T10210] !: renamed from dummy0 (while UP)
[  165.395741][T10210] wg1 speed is unknown, defaulting to 1000
[  165.956827][T10243] netlink: 'syz.0.1745': attribute type 1 has an invalid length.
[  166.143330][T10260] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1747'.
[  166.162376][T10254] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1747'.
[  166.440106][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  166.595012][T10302] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  166.921537][T10327] netlink: 'syz.0.1764': attribute type 10 has an invalid length.
[  166.926020][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1764'.
[  166.930953][T10327] batadv0: entered promiscuous mode
[  166.933255][T10327] batadv0: entered allmulticast mode
[  166.936209][T10327] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  167.082121][T10333] netlink: 'syz.2.1763': attribute type 16 has an invalid length.
[  167.085082][T10333] netlink: 'syz.2.1763': attribute type 17 has an invalid length.
[  167.236602][T10333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.641768][T10353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.159278][T10384] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  168.289131][T10390] netlink: 'syz.0.1788': attribute type 1 has an invalid length.
[  168.593278][T10407] netlink: 'syz.0.1796': attribute type 1 has an invalid length.
[  168.596421][T10407] netlink: 'syz.0.1796': attribute type 3 has an invalid length.
[  168.600248][T10407] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1796'.
[  168.662944][T10409] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1797'.
[  168.681393][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'.
[  168.789609][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'.
[  168.793267][T10419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1802'.
[  169.299168][T10451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  169.525321][T10468] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1826'.
[  169.922051][T10505] wg1 speed is unknown, defaulting to 1000
[  170.034292][T10513] netlink: 'syz.0.1843': attribute type 5 has an invalid length.
[  170.062071][T10515] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  171.230540][T10568] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  171.233572][T10568] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  171.265089][T10592] __nla_validate_parse: 4 callbacks suppressed
[  171.265104][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'.
[  171.425960][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1881'.
[  171.429363][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1881'.
[  171.432482][T10600] netlink: 'syz.2.1881': attribute type 4 has an invalid length.
[  171.455680][T10600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1881'.
[  171.707373][T10612] tap0: tun_chr_ioctl cmd 1074025677
[  171.710728][T10612] tap0: linktype set to 776
[  172.075508][T10631] team0: Mode changed to "loadbalance"
[  172.265860][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'.
[  172.355773][T10653] syzkaller1: entered promiscuous mode
[  172.358055][T10653] syzkaller1: entered allmulticast mode
[  172.642389][ T5932] syz_tun (unregistering): left allmulticast mode
[  172.665033][T10674] syz_tun: entered allmulticast mode
[  172.674146][T10673] dvmrp8: entered allmulticast mode
[  172.770861][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.835242][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.915923][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.000921][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.273588][   T13] dvmrp0 (unregistering): left allmulticast mode
[  173.477424][   T13] bond0 (unregistering): Released all slaves
[  173.569991][   T13] bond1 (unregistering): Released all slaves
[  173.580858][T10664] syz_tun: left allmulticast mode
[  173.583126][T10664] dvmrp8: left allmulticast mode
[  173.643638][   T13] tipc: Left network mode
[  173.669664][   T13] IPVS: stopping backup sync thread 7162 ...
[  174.046079][ T5929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  174.059214][ T5929] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  174.062209][ T5929] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  174.071455][ T5929] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  174.075219][ T5929] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  174.428037][T10692] wg1 speed is unknown, defaulting to 1000
[  174.581560][T10692] chnl_net:caif_netlink_parms(): no params data found
[  174.752778][T10692] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.755668][T10692] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.768707][T10692] bridge_slave_0: entered allmulticast mode
[  174.772667][T10692] bridge_slave_0: entered promiscuous mode
[  174.781223][T10692] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.784291][T10692] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.787009][T10692] bridge_slave_1: entered allmulticast mode
[  174.793615][T10692] bridge_slave_1: entered promiscuous mode
[  174.827394][   T13] IPVS: stop unused estimator thread 0...
[  174.873777][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.884270][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.892113][   T13] ------------[ cut here ]------------
[  174.894232][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  174.897825][   T13] Modules linked in:
[  174.899182][ T5929] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.900136][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  174.905065][ T5929] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.906796][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.914273][   T13] Workqueue: netns cleanup_net
[  174.915882][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  174.917556][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb 78 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49 33 e1 f7 e8 14 06 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 06 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  174.920433][ T5929] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.924274][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  174.928162][ T5929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.929446][   T13] RAX: ffffffff8a22b8ec RBX: ffff8880240c8000 RCX: ffff88801c6f8000
[  174.934622][   T13] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffff88801c6f8000
[  174.937629][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6
[  174.940868][   T13] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d80
[  174.943879][   T13] R13: 1ffff92000020f40 R14: ffff8880240c9480 R15: dffffc0000000000
[  174.946795][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  174.950204][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  174.952640][   T13] CR2: 0000001b2f51eff8 CR3: 000000010ee8c000 CR4: 00000000000006f0
[  174.954700][ T5929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.955695][   T13] Call Trace:
[  174.960536][   T13]  <TASK>
[  174.961727][   T13]  xfrm_net_exit+0x2d/0x70
[  174.963476][   T13]  ops_undo_list+0x49a/0x990
[  174.965278][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  174.967244][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  174.969314][   T13]  cleanup_net+0x4c5/0x800
[  174.971059][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  174.972975][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.974975][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  174.977224][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  174.979937][   T13]  process_scheduled_works+0xae1/0x17b0
[  174.982068][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  174.984340][   T13]  worker_thread+0x8a0/0xda0
[  174.986087][   T13]  kthread+0x711/0x8a0
[  174.987674][   T13]  ? __pfx_worker_thread+0x10/0x10
[  174.989870][   T13]  ? __pfx_kthread+0x10/0x10
[  174.991665][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  174.993674][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.995467][T10709] wg1 speed is unknown, defaulting to 1000
[  174.995683][   T13]  ? __pfx_kthread+0x10/0x10
[  174.999845][   T13]  ret_from_fork+0x439/0x7d0
[  175.001648][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  175.003589][   T13]  ? __switch_to_asm+0x39/0x70
[  175.005466][   T13]  ? __switch_to_asm+0x33/0x70
[  175.007255][   T13]  ? __pfx_kthread+0x10/0x10
[  175.009085][   T13]  ret_from_fork_asm+0x1a/0x30
[  175.010978][   T13]  </TASK>
[  175.012205][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  175.014924][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  175.018104][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.021955][   T13] Workqueue: netns cleanup_net
[  175.023779][   T13] Call Trace:
[  175.024976][   T13]  <TASK>
[  175.026001][   T13]  dump_stack_lvl+0x99/0x250
[  175.027820][   T13]  ? __asan_memcpy+0x40/0x70
[  175.029558][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.031469][   T13]  ? __pfx__printk+0x10/0x10
[  175.033118][   T13]  vpanic+0x281/0x750
[  175.034597][   T13]  ? __pfx__printk+0x10/0x10
[  175.036015][   T13]  ? __pfx_vpanic+0x10/0x10
[  175.037595][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  175.039509][   T13]  panic+0xb9/0xc0
[  175.040883][   T13]  ? __pfx_panic+0x10/0x10
[  175.042551][   T13]  __warn+0x31b/0x4b0
[  175.044040][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  175.045942][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  175.047846][   T13]  report_bug+0x2be/0x4f0
[  175.049506][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  175.051413][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  175.053268][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  175.055159][   T13]  handle_bug+0x84/0x160
[  175.056820][   T13]  exc_invalid_op+0x1a/0x50
[  175.058577][   T13]  asm_exc_invalid_op+0x1a/0x20
[  175.060408][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  175.062520][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cb 78 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49 33 e1 f7 e8 14 06 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 06 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  175.069730][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  175.072018][   T13] RAX: ffffffff8a22b8ec RBX: ffff8880240c8000 RCX: ffff88801c6f8000
[  175.075010][   T13] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffff88801c6f8000
[  175.078003][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6
[  175.081036][   T13] R10: dffffc0000000000 R11: fffffbfff1f474c7 R12: ffffffff8f632d80
[  175.084081][   T13] R13: 1ffff92000020f40 R14: ffff8880240c9480 R15: dffffc0000000000
[  175.086937][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  175.088463][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  175.090135][   T13]  xfrm_net_exit+0x2d/0x70
[  175.091854][   T13]  ops_undo_list+0x49a/0x990
[  175.093610][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  175.095609][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  175.097579][   T13]  cleanup_net+0x4c5/0x800
[  175.099308][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  175.101212][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.103232][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  175.105413][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  175.107599][   T13]  process_scheduled_works+0xae1/0x17b0
[  175.109713][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  175.111941][   T13]  worker_thread+0x8a0/0xda0
[  175.113738][   T13]  kthread+0x711/0x8a0
[  175.115295][   T13]  ? __pfx_worker_thread+0x10/0x10
[  175.117225][   T13]  ? __pfx_kthread+0x10/0x10
[  175.119009][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  175.121004][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.123004][   T13]  ? __pfx_kthread+0x10/0x10
[  175.124794][   T13]  ret_from_fork+0x439/0x7d0
[  175.126565][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  175.128458][   T13]  ? __switch_to_asm+0x39/0x70
[  175.130278][   T13]  ? __switch_to_asm+0x33/0x70
[  175.132153][   T13]  ? __pfx_kthread+0x10/0x10
[  175.133942][   T13]  ret_from_fork_asm+0x1a/0x30
[  175.135790][   T13]  </TASK>
[  175.137723][   T13] Kernel Offset: disabled
[  175.139370][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:54:59  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003c25 RDI=0000000000003c26 RBP=00000000000003f8 RSP=ffffc9000393f0b0
R8 =ffff888106908237 R9 =1ffff11020d21046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008dd R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc6a51f6d00 CR3=00000000283e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc6a69a7498 00007fc6a69a7470 XMM03=00007fc6a69a74a8 00007fc6a69a74a0
XMM04=00007fc6a750d100 00007fc6a69a7460 XMM05=00007fc6a69a7478 00007fc6a69a74c0
XMM06=00007fc6a69a74b8 00007fc6a69a74b0 XMM07=00007fc6a69a74a8 00007fc6a69a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a03655 RBX=ffffffff81a03614 RCX=ffff88801c6f8000 RDX=0000000000000000
RSI=ffffffff8dba91a8 RDI=ffffffff8be33c00 RBP=ffffc90000107550 RSP=ffffc90000107438
R8 =ffffc900001071c0 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dded0
R12=dffffc0000000000 R13=1ffff92000020e8c R14=0000000000000200 R15=0000000000000050
RIP=ffffffff81bfbf11 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f51eff8 CR3=000000010ee8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ff00000000000000 000000000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
