last executing test programs:

1.874264082s ago: executing program 1 (id=2308):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000041615689203ac654000900010073797a300000000009000300730010000000000000000000060a01040000000000000014000481100001800b00010065785468647200000900010073797a3000000000140000001100010000000000000000000700000a00"/176], 0xb0}}, 0x4040840)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20)
ppoll(&(0x7f00000000c0)=[{r5, 0x13108}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
listen(r5, 0x8)
socket(0x1e, 0xa, 0x3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/53, 0x35, 0x0, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced\x00', 0x7a05, 0x1700)
write$cgroup_type(r8, &(0x7f00000000c0), 0x9)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000000800018150000", @ANYRES32, @ANYBLOB="000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500"/72], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4, <r9=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6, <r10=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005cde803fe720600ffffffff0000000000000000b9830d007f0000009500"/48], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x1c, &(0x7f00000004c0)=""/28, 0x41100, 0x12, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x2}, 0x10, 0x0, r7, 0x5, &(0x7f0000000940)=[r9, r10, r4, r6, r4, r1, r11, r4], &(0x7f0000000980)=[{0x1, 0x3, 0x9, 0xa}, {0x0, 0x1, 0xf, 0x8}, {0x5, 0x2, 0xd, 0x3}, {0x1, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x40}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100001040000dd00001c91cfa9000004", @ANYRES32=0x0, @ANYBLOB="7b15000000000000200012800b00010067656e657665000010000280060005004e20000004000600"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800)

1.765962249s ago: executing program 1 (id=2310):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080012400000000305001500000000000500010006000000050005000a00000005000400000000000900020073797a300000fff011000300686173683a69702c6d61726b"], 0x60}}, 0x0)

1.765634914s ago: executing program 1 (id=2311):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "125696ba38915415", "96b5d6d916b6d4a8071cd7f47fddad3f", "5ec68ff1", "0dabc9d0505c0578"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

885.665202ms ago: executing program 1 (id=2319):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff80700000001000000000000000800090012000000", 0x24)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20044102)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000340)=""/171, &(0x7f0000000400)=0xab)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000100)=""/51, 0x33}, &(0x7f0000000140), 0x4d}, 0x20)
getpeername(r3, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000000)=0x80)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000240))

885.37924ms ago: executing program 1 (id=2320):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)={0x3a}, 0x8)
sendto$inet6(r6, &(0x7f0000000040)="bb", 0x1, 0x4004881, &(0x7f0000000080)={0xa, 0x0, 0x9, @private0, 0x152a}, 0x1c)
listen(r6, 0x100101)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r5, &(0x7f00000000c0)='K', 0x1, 0x44008011, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
unshare(0x22020400)
unshare(0x40000000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000003c0))
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000a00)=[{0x2, 0x3, {0x2, 0x0, 0x1}, {0x2, 0x0, 0xf7a59104b40dfa67}, 0xfd}, {0x0, 0x0, {0x2, 0xf0}, {0x2, 0x0, 0x2}, 0xff, 0x2}, {0x1, 0x3, {0x2, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xfe}, {0x1, 0x0, {0xe8a0a7dd6c3ddf1, 0x1, 0x7}, {0x2, 0xff}, 0x2, 0xfe}, {0x2, 0x1, {0x1, 0xf, 0x4}, {0x1, 0x1}, 0xff, 0xff}], 0xa0)

384.716015ms ago: executing program 0 (id=2332):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="59cf00000000000000000800000004000180060001"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004080)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000300)="cd33", 0x2)

335.344915ms ago: executing program 0 (id=2334):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr, 0x80, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}], 0x2}, 0x40000001)
r5 = socket$kcm(0x1e, 0x4, 0x0)
close(r4)
r6 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'veth1_virt_wifi\x00', {}, 0xfff})
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000c42980a9506c5a07113ec3fe2e7e767f00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r12, &(0x7f00000001c0), &(0x7f0000000280)=@udp6, 0x11}, 0x20)
sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd6c45fcdbdf25923d110308000300", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbdbdf250f00000005002f000100000005002a0001000000050029000100000008000300", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x24008824)
r13 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r13, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4)
socket(0x10, 0x80003, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

245.510989ms ago: executing program 0 (id=2336):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x0, 0x1, 0x8, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_x_nat_t_type={0x1}]}, 0x28}}, 0x80) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000040c0)='reno\x00', 0x5) (async)
sendto$inet(r0, &(0x7f00000003c0)="4c24231974bf8f4fe4ba856b8ecb9b0edd2d878a5ef511582b1baed6b4b30284574838366c61608e770987eaecce7ad4617ec6d3ed0d7fe5a073410bbced0fd47d208d21c490407dd69d4e3232d7e3e59c6d140e1f9e76866f6c7c7f93d775caa8d4e23860558e74e031e3d05ed4e865e907d0077cfe6ef7129f58f2e79fd13c", 0x80, 0x4004815, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)

245.383866ms ago: executing program 2 (id=2337):
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

245.164439ms ago: executing program 2 (id=2338):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
socket$kcm(0x1e, 0x4, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)

115.660532ms ago: executing program 0 (id=2339):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb800fc00000000000000000000000aaff02000000000000000000000000000189"], 0xfce)

114.253152ms ago: executing program 2 (id=2340):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000007b080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x8871b000)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000100))

65.757818ms ago: executing program 2 (id=2341):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x17, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)

64.402487ms ago: executing program 2 (id=2342):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) (async)
getsockname$packet(r0, 0x0, &(0x7f0000000480)) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4)

62.607034ms ago: executing program 2 (id=2343):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4074, 0xfea, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)

4.128947ms ago: executing program 0 (id=2344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100000000005865000000000000", @ANYRES32=r1, @ANYRES64], 0x1c}}, 0x84)

3.801161ms ago: executing program 1 (id=2345):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async)
write$cgroup_subtree(r0, 0x0, 0x10448) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0xac7f4000)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], <r1=>0x0}, 0x40) (async)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @alu={0x4, 0x0, 0x7, 0x3, 0x8, 0x56, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x0, 0xa, 0x10, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query], &(0x7f0000000280)='GPL\x00', 0x0, 0x85, &(0x7f00000002c0)=""/133, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0xffff8661, 0xff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000440)=[{0x3, 0x2, 0x0, 0x6}, {0x2, 0x1, 0x7, 0xb}, {0x4, 0x5, 0x7, 0xc}, {0x0, 0x1, 0xe, 0x8}, {0x3, 0x2, 0x10}, {0x1, 0x2, 0xa, 0x8}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback=r2, r0, 0x1b, 0x7, 0xffffffffffffffff, @void, @value=r3, @void, @void, r1}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c56100000000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000a40)=0x2, 0x4) (async)
getsockopt$inet6_tcp_int(r4, 0x6, 0x15, 0x0, &(0x7f0000000140))

0s ago: executing program 0 (id=2346):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x4, 0x61, 0x17, 0x6c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b34d2ffddefd03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c15de8905e518e8c72584d2007c26fcbf6f548de70f8b", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
r2 = socket(0x10, 0x2, 0x0)
sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$kcm(0x21, 0x2, 0x2) (async)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
socket$pppoe(0x18, 0x1, 0x0) (async)
r5 = socket$pppoe(0x18, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/55, 0x37}, {0x0, 0x38}], 0x2}}], 0x2, 0x10002, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000)=<r9=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000bc0)={{r4}, r9, 0x4, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x7ff, 0x6, {0xc, 0x4, 0x8, 0x800, 0x10001}, [0x7, 0x6]}}, @subvolid=0x4})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003000)={0x0, "18a4a2733595919fddc273f0c22769a6"}) (async)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003000)={<r10=>0x0, "18a4a2733595919fddc273f0c22769a6"})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000004000)={{r0}, r9, 0x0, @unused=[0xa1e, 0xa0, 0x9, 0x1], @devid=r10})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40)
r11 = socket$isdn(0x22, 0x3, 0x60844eeddeb1247f)
ioctl$IMCTRLREQ(r11, 0x80044945, &(0x7f00000002c0)={0x800, 0x3ff, 0x4, 0xe})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35240' (ED25519) to the list of known hosts.
syzkaller login: [   47.798833][ T5802] cgroup: Unknown subsys name 'net'
[   47.946458][ T5802] cgroup: Unknown subsys name 'cpuset'
[   47.950875][ T5802] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.430649][ T5802] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.547596][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.550593][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.554481][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.558620][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.562152][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.627844][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.631113][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.653500][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.656584][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.659226][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.662693][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.666021][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.669347][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.672301][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.676311][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.791324][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   53.914468][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.916862][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.919308][ T5840] bridge_slave_0: entered allmulticast mode
[   53.922104][ T5840] bridge_slave_0: entered promiscuous mode
[   53.929578][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.931972][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.934546][ T5840] bridge_slave_1: entered allmulticast mode
[   53.937213][ T5840] bridge_slave_1: entered promiscuous mode
[   53.948557][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   53.973687][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.001544][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.027734][ T5840] team0: Port device team_slave_0 added
[   54.034864][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.040316][ T5840] team0: Port device team_slave_1 added
[   54.105349][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.108285][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.118849][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.137228][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.140391][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.143583][ T5846] bridge_slave_0: entered allmulticast mode
[   54.147863][ T5846] bridge_slave_0: entered promiscuous mode
[   54.158023][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.160660][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.170405][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.178560][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.181551][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.187373][ T5846] bridge_slave_1: entered allmulticast mode
[   54.191318][ T5846] bridge_slave_1: entered promiscuous mode
[   54.240232][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.275869][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.287600][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.290427][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.292791][ T5845] bridge_slave_0: entered allmulticast mode
[   54.295988][ T5845] bridge_slave_0: entered promiscuous mode
[   54.312003][ T5840] hsr_slave_0: entered promiscuous mode
[   54.315005][ T5840] hsr_slave_1: entered promiscuous mode
[   54.317462][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.320216][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.323233][ T5845] bridge_slave_1: entered allmulticast mode
[   54.327067][ T5845] bridge_slave_1: entered promiscuous mode
[   54.348772][ T5846] team0: Port device team_slave_0 added
[   54.366235][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.370848][ T5846] team0: Port device team_slave_1 added
[   54.376306][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.430742][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.433037][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.441924][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.447111][ T5845] team0: Port device team_slave_0 added
[   54.449664][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.451885][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.462358][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.475552][ T5845] team0: Port device team_slave_1 added
[   54.530963][ T5846] hsr_slave_0: entered promiscuous mode
[   54.534039][ T5846] hsr_slave_1: entered promiscuous mode
[   54.536864][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   54.539207][ T5846] Cannot create hsr debugfs directory
[   54.555002][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.557794][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.567627][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.572489][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.574920][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.583182][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.678235][ T5845] hsr_slave_0: entered promiscuous mode
[   54.680691][ T5845] hsr_slave_1: entered promiscuous mode
[   54.683065][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   54.685326][ T5845] Cannot create hsr debugfs directory
[   54.727539][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.742486][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.762898][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.784379][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.888143][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.897075][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.906368][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.918254][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.971341][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.976484][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.988884][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.993704][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.012021][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.040283][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   55.050637][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.053063][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.075865][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.078144][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.101308][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.115816][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.135689][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   55.147761][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.150203][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.158472][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.164636][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.167753][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.189514][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.200082][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.202958][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.220296][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.223665][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.258621][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.262425][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.299050][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.359270][ T5840] veth0_vlan: entered promiscuous mode
[   55.389965][ T5840] veth1_vlan: entered promiscuous mode
[   55.428105][ T5840] veth0_macvtap: entered promiscuous mode
[   55.435546][ T5840] veth1_macvtap: entered promiscuous mode
[   55.444857][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.474685][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.487319][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.494916][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.508089][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.513877][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.527408][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.531046][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.574520][ T5232] Bluetooth: hci0: command tx timeout
[   55.621545][ T5845] veth0_vlan: entered promiscuous mode
[   55.629756][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.631966][ T5845] veth1_vlan: entered promiscuous mode
[   55.632981][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.691805][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.697020][ T5845] veth0_macvtap: entered promiscuous mode
[   55.701427][ T5846] veth0_vlan: entered promiscuous mode
[   55.704604][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.712960][ T5845] veth1_macvtap: entered promiscuous mode
[   55.732245][ T5846] veth1_vlan: entered promiscuous mode
[   55.741635][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.744972][ T5232] Bluetooth: hci2: command tx timeout
[   55.745417][ T5841] Bluetooth: hci1: command tx timeout
[   55.750327][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.767739][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.776962][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.789482][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.794304][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.797762][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.850142][ T5908] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.852527][ T5846] veth0_macvtap: entered promiscuous mode
[   55.865155][ T5846] veth1_macvtap: entered promiscuous mode
[   55.870194][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.873099][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.912048][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.934950][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.939395][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.942204][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.951213][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.963922][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.977121][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.995273][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.075364][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.081373][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.118698][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.122702][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.144864][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.150757][ T5919] netlink: 'syz.0.7': attribute type 11 has an invalid length.
[   56.191578][ T5921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.306831][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'.
[   56.385696][ T5937] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   56.388424][ T5937] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.406451][ T5937] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   56.422748][ T5937] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14'.
[   56.628532][ T5952] netlink: 'syz.0.19': attribute type 2 has an invalid length.
[   56.742869][ T5959] Bluetooth: MGMT ver 1.23
[   56.785495][ T5964] netlink: 'syz.2.22': attribute type 3 has an invalid length.
[   56.788563][ T5963] netlink: 'syz.2.22': attribute type 3 has an invalid length.
[   56.871871][ T5969] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.922960][ T5971] netlink: 19 bytes leftover after parsing attributes in process `syz.2.25'.
[   56.971959][ T5973] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET)
[   56.979393][ T5973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'.
[   57.107876][ T5976] sctp: [Deprecated]: syz.2.27 (pid 5976) Use of int in max_burst socket option.
[   57.107876][ T5976] Use struct sctp_assoc_value instead
[   57.193909][ T5985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.288998][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'.
[   57.298464][ T5990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.30'.
[   57.380716][ T5999] netlink: 'syz.2.32': attribute type 21 has an invalid length.
[   57.630269][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   57.654071][ T5841] Bluetooth: hci0: command tx timeout
[   57.698660][ T6013] Illegal XDP return value 4294967289 on prog  (id 10) dev N/A, expect packet loss!
[   57.813954][ T5841] Bluetooth: hci1: command tx timeout
[   57.814092][ T5232] Bluetooth: hci2: command tx timeout
[   58.421112][ T6023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.472272][ T6025] netlink: 'syz.1.42': attribute type 49 has an invalid length.
[   58.665566][ T6038] vxcan2: entered promiscuous mode
[   58.763574][ T6042] netlink: 172 bytes leftover after parsing attributes in process `syz.1.47'.
[   59.282537][ T6053] tipc: Started in network mode
[   59.285128][ T6053] tipc: Node identity 12d1ea3a01ba, cluster identity 4711
[   59.287641][ T6053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.290528][ T6053] syzkaller0: entered promiscuous mode
[   59.292503][ T6053] syzkaller0: entered allmulticast mode
[   59.298145][ T6053] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   59.310965][ T6053] tipc: Resetting bearer <eth:syzkaller0>
[   59.315861][ T6052] tipc: Resetting bearer <eth:syzkaller0>
[   59.321882][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[   59.424703][   T52] wlan1: Trigger new scan to find an IBSS to join
[   59.568233][ T6076] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   59.571749][ T6076] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   59.577031][ T6076] Zero length message leads to an empty skb
[   59.710972][ T6090] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   59.736893][ T5232] Bluetooth: hci0: command tx timeout
[   59.894545][ T5232] Bluetooth: hci2: command tx timeout
[   59.904003][ T5232] Bluetooth: hci1: command tx timeout
[   59.986116][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.989176][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.033172][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.039433][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.134968][ T5905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.139032][ T5905] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.147060][ T5905] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.158614][ T5905] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.386642][ T6121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.478476][ T6129] __nla_validate_parse: 1 callbacks suppressed
[   61.478491][ T6129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.496770][ T6129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.525482][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'.
[   61.530717][ T6129] hsr_slave_0: left promiscuous mode
[   61.540348][ T6129] hsr_slave_1: left promiscuous mode
[   61.814059][ T5232] Bluetooth: hci0: command tx timeout
[   61.836681][ T6154] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   61.839315][ T6154] netlink: 180 bytes leftover after parsing attributes in process `syz.1.77'.
[   61.965076][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   61.974080][ T5232] Bluetooth: hci1: command tx timeout
[   61.974188][ T5841] Bluetooth: hci2: command tx timeout
[   62.107237][ T6166] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   62.110572][ T6166] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   62.454112][   T52] wlan1: Trigger new scan to find an IBSS to join
[   62.473220][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'.
[   62.476585][ T6182] bridge_slave_1: left allmulticast mode
[   62.478571][ T6182] bridge_slave_1: left promiscuous mode
[   62.480978][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.488521][ T6182] bridge_slave_0: left allmulticast mode
[   62.490950][ T6182] bridge_slave_0: left promiscuous mode
[   62.493359][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.807199][ T6205] netlink: 'syz.1.90': attribute type 1 has an invalid length.
[   62.867427][ T6207] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   62.882807][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'.
[   63.015530][ T6215] netlink: 'syz.0.92': attribute type 13 has an invalid length.
[   63.015551][ T6214] netlink: 'syz.0.92': attribute type 13 has an invalid length.
[   63.018461][ T6215] netlink: 'syz.0.92': attribute type 17 has an invalid length.
[   63.021799][ T6214] netlink: 'syz.0.92': attribute type 17 has an invalid length.
[   63.062468][ T6215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.074902][ T6214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.868539][ T6248] openvswitch: netlink: IP tunnel dst address not specified
[   64.537330][ T6281] netlink: 'syz.0.111': attribute type 2 has an invalid length.
[   64.540766][ T6282] netlink: 'syz.0.111': attribute type 2 has an invalid length.
[   64.891883][ T6293] netlink: 'syz.2.114': attribute type 39 has an invalid length.
[   65.041981][ T6299] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.116'.
[   65.401095][ T6316] netlink: 36 bytes leftover after parsing attributes in process `syz.0.122'.
[   65.413930][   T27] wlan1: Creating new IBSS network, BSSID 7e:f6:50:0f:02:fc
[   65.451250][ T6320] netlink: 260 bytes leftover after parsing attributes in process `syz.1.123'.
[   65.731079][ T6341] sctp: [Deprecated]: syz.0.131 (pid 6341) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.731079][ T6341] Use struct sctp_sack_info instead
[   65.748562][ T6341] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   65.788159][ T6343] netlink: 'syz.2.132': attribute type 1 has an invalid length.
[   65.846697][ T6345] wg1 speed is unknown, defaulting to 1000
[   65.848983][ T6345] wg1 speed is unknown, defaulting to 1000
[   65.852089][ T6345] wg1 speed is unknown, defaulting to 1000
[   65.857802][ T6345] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   65.866268][ T6345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   65.892140][ T6345] wg1 speed is unknown, defaulting to 1000
[   65.897061][ T6345] wg1 speed is unknown, defaulting to 1000
[   65.903658][ T6345] wg1 speed is unknown, defaulting to 1000
[   66.111357][ T6353] TCP: TCP_TX_DELAY enabled
[   66.260011][ T6368] tc_dump_action: action bad kind
[   66.458874][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[   66.987077][ T6395] netlink: 'syz.2.150': attribute type 5 has an invalid length.
[   67.027133][ T6397] vxcan2: entered promiscuous mode
[   67.102339][ T6400] __nla_validate_parse: 1 callbacks suppressed
[   67.102348][ T6400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'.
[   68.227621][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.2.160'.
[   68.409493][ T6434] wg1 speed is unknown, defaulting to 1000
[   68.814255][ T6442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.185072][ T6454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.736666][ T6458] bond0: (slave bond_slave_0): Releasing backup interface
[   69.742328][ T6458] bond0: (slave bond_slave_1): Releasing backup interface
[   69.751173][ T6458] team0: Port device team_slave_0 removed
[   69.764970][ T6458] team0: Port device team_slave_1 removed
[   69.767824][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.770716][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.778990][ T6458] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.783259][ T6458] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.800498][ T1269] wg1 speed is unknown, defaulting to 1000
[   69.929333][ T6473] wg1 speed is unknown, defaulting to 1000
[   70.220681][ T6488] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   70.225263][ T6488] netlink: 228 bytes leftover after parsing attributes in process `syz.1.182'.
[   70.920859][ T6497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.184'.
[   70.947918][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.953909][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.475534][ T6518] netlink: 2 bytes leftover after parsing attributes in process `syz.2.192'.
[   71.552320][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'.
[   72.095715][ T6537] sock: sock_set_timeout: `syz.2.197' (pid 6537) tries to set negative timeout
[   72.194497][ T6549] lo speed is unknown, defaulting to 1000
[   72.199886][ T6549] lo speed is unknown, defaulting to 1000
[   72.212472][ T6549] lo speed is unknown, defaulting to 1000
[   72.236393][ T6549] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   72.267171][ T6549] lo speed is unknown, defaulting to 1000
[   72.277167][ T6549] lo speed is unknown, defaulting to 1000
[   72.280761][ T6549] lo speed is unknown, defaulting to 1000
[   72.568161][ T6587] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[   72.600845][ T6591] pimreg3: entered allmulticast mode
[   73.102639][ T6624] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.108315][ T6624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.226'.
[   73.115997][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'.
[   73.585608][ T6630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.228'.
[   73.641550][ T6635] IPv4: Oversized IP packet from 127.202.26.0
[   74.055578][ T6651] netlink: 260 bytes leftover after parsing attributes in process `syz.0.235'.
[   74.059833][ T6651] netlink: 260 bytes leftover after parsing attributes in process `syz.0.235'.
[   74.489520][ T6681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.411856][ T6730] dvmrp0: entered allmulticast mode
[   75.429710][ T6732] wg1 speed is unknown, defaulting to 1000
[   75.440670][ T6732] lo speed is unknown, defaulting to 1000
[   75.536089][ T6738] netlink: 'syz.2.262': attribute type 10 has an invalid length.
[   75.554904][ T6738] team0: Device hsr_slave_0 failed to register rx_handler
[   76.055995][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.418458][ T6781] sock: sock_set_timeout: `syz.1.276' (pid 6781) tries to set negative timeout
[   76.572617][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'.
[   76.576798][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'.
[   76.580366][ T6790] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   76.585650][ T6789] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   76.781176][ T6812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.376970][ T6854] 8021q: VLANs not supported on ip6_vti0
[   77.399081][ T6848] wg1 speed is unknown, defaulting to 1000
[   77.402134][ T6848] lo speed is unknown, defaulting to 1000
[   78.184726][ T6878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.113338][ T6908] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20000
[   79.161192][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'.
[   79.302525][ T6921] syzkaller1: entered promiscuous mode
[   79.305976][ T6921] syzkaller1: entered allmulticast mode
[   79.379421][ T6923] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20004
[   79.690011][ T6943] netlink: 'syz.2.328': attribute type 10 has an invalid length.
[   79.842916][ T6959] bond0: Unable to set down delay as MII monitoring is disabled
[   79.886378][ T6962] wg1 speed is unknown, defaulting to 1000
[   79.890213][ T6962] lo speed is unknown, defaulting to 1000
[   79.902530][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.083663][ T6968] wg1 speed is unknown, defaulting to 1000
[   80.089419][ T6968] lo speed is unknown, defaulting to 1000
[   80.089544][ T6970] wg1 speed is unknown, defaulting to 1000
[   80.105616][ T6970] lo speed is unknown, defaulting to 1000
[   80.449548][ T6985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'.
[   80.594032][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.343'.
[   80.743129][ T7014] netlink: 'syz.0.349': attribute type 11 has an invalid length.
[   80.746094][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.349'.
[   80.810760][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'.
[   80.830909][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   80.902795][ T7019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.351'.
[   80.912157][ T7028] netlink: 348 bytes leftover after parsing attributes in process `syz.1.354'.
[   81.093969][ T7040] nbd0: detected capacity change from 0 to 549764202496
[   81.105136][   T56] block nbd0: Receive control failed (result -104)
[   81.180611][   T51] cfg80211: failed to load regulatory.db
[   81.677639][ T7089] wg1 speed is unknown, defaulting to 1000
[   81.680752][ T7089] lo speed is unknown, defaulting to 1000
[   82.151661][ T7125] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   82.155844][ T7125] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   82.373559][ T7140] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   82.378786][ T7140] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   82.718906][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'.
[   82.988727][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.005773][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[   83.405128][ T7186] wg1 speed is unknown, defaulting to 1000
[   83.410059][ T7186] lo speed is unknown, defaulting to 1000
[   84.246116][ T7224] __nla_validate_parse: 4 callbacks suppressed
[   84.246127][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'.
[   84.702363][ T7258] wg1 speed is unknown, defaulting to 1000
[   84.707062][ T7258] lo speed is unknown, defaulting to 1000
[   85.238767][ T7267] netlink: 'syz.2.432': attribute type 23 has an invalid length.
[   85.431998][ T7278] netlink: 'syz.0.437': attribute type 5 has an invalid length.
[   85.436420][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'.
[   86.386183][ T7332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'.
[   86.679497][ T7351] netlink: 'syz.0.462': attribute type 13 has an invalid length.
[   86.721810][ T7351] wg1 speed is unknown, defaulting to 1000
[   86.731166][ T7351] lo speed is unknown, defaulting to 1000
[   86.764634][ T7357] netlink: 'syz.2.466': attribute type 9 has an invalid length.
[   86.775586][ T7357] netlink: 'syz.2.466': attribute type 9 has an invalid length.
[   86.785082][ T7358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.822997][ T7361] netlink: 48 bytes leftover after parsing attributes in process `syz.2.467'.
[   86.854436][ T7351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.189457][ T7395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.474'.
[   87.428865][ T7433] netlink: 48 bytes leftover after parsing attributes in process `syz.2.482'.
[   87.456512][ T7438] netlink: 'syz.2.483': attribute type 9 has an invalid length.
[   87.459709][ T7438] netlink: 'syz.2.483': attribute type 9 has an invalid length.
[   87.591485][ T7454] netlink: 'syz.2.485': attribute type 1 has an invalid length.
[   87.616697][ T7454] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.628528][ T7454] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.631320][ T7454] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   87.636395][ T7454] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   88.003739][ T7485] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   88.007173][ T7485] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   88.689276][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[   88.778300][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'.
[   88.811604][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'.
[   88.818578][ T7568] netlink: 156 bytes leftover after parsing attributes in process `syz.2.506'.
[   88.822308][ T7568] netlink: 'syz.2.506': attribute type 9 has an invalid length.
[   88.825523][ T7568] netlink: 'syz.2.506': attribute type 9 has an invalid length.
[   88.852019][ T7570] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   89.024605][ T5309] wg1 speed is unknown, defaulting to 1000
[   89.025749][ T5905] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.026587][ T5309] syz0: Port: 1 Link DOWN
[   89.034682][ T5905] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.039803][ T5905] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.043616][ T5905] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.316870][ T7602] __nla_validate_parse: 3 callbacks suppressed
[   89.316883][ T7602] netlink: 17 bytes leftover after parsing attributes in process `syz.0.517'.
[   89.480401][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[   89.522241][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'.
[   89.588165][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'.
[   89.633376][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'.
[   89.798487][ T7646] wg1 speed is unknown, defaulting to 1000
[   89.801454][ T7646] lo speed is unknown, defaulting to 1000
[   90.207158][ T7672] sctp: [Deprecated]: syz.1.540 (pid 7672) Use of int in max_burst socket option deprecated.
[   90.207158][ T7672] Use struct sctp_assoc_value instead
[   91.039100][ T7693] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   91.045279][ T7693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.192659][ T7705] siw: device registration error -23
[   91.209305][ T7705] batadv1: entered allmulticast mode
[   91.212719][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv1
[   91.218979][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'.
[   91.372042][ T7724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.439522][ T7728] validate_nla: 4 callbacks suppressed
[   91.439537][ T7728] netlink: 'syz.0.560': attribute type 9 has an invalid length.
[   91.494992][ T7730] wg1 speed is unknown, defaulting to 1000
[   91.498267][ T7730] lo speed is unknown, defaulting to 1000
[   91.568484][ T7736] !: renamed from dummy0 (while UP)
[   91.662282][ T7740] netlink: 'syz.2.564': attribute type 1 has an invalid length.
[   91.677173][ T7740] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.689015][ T7740] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.691871][ T7740] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.696684][ T7740] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   91.756080][ T7742] veth3: entered promiscuous mode
[   91.830935][ T7747] netlink: 64 bytes leftover after parsing attributes in process `syz.2.566'.
[   92.309838][ T7772] netlink: 'syz.1.574': attribute type 1 has an invalid length.
[   92.331601][ T7772] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.357541][ T7772] veth3: entered promiscuous mode
[   92.393108][ T7774] erspan0: entered allmulticast mode
[   92.492359][ T7780] wg1 speed is unknown, defaulting to 1000
[   92.498834][ T7780] lo speed is unknown, defaulting to 1000
[   92.943622][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'.
[   93.008108][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.588'.
[   93.011550][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.2.588'.
[   94.198361][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.841105][ T7923] __nla_validate_parse: 2 callbacks suppressed
[   94.841260][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'.
[   94.847750][ T7923] tipc: Invalid UDP bearer configuration
[   94.847791][ T7923] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   94.907343][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[   95.391597][ T7951] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20000
[   96.148022][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'.
[   96.184574][ T7993] netlink: 'syz.0.649': attribute type 9 has an invalid length.
[   96.395142][ T8009] netlink: 'syz.2.655': attribute type 23 has an invalid length.
[   96.477632][ T8028] netlink: 'syz.2.661': attribute type 4 has an invalid length.
[   96.482778][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'.
[   96.721736][ T8047] wg1 speed is unknown, defaulting to 1000
[   96.723140][ T8050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.668'.
[   96.728091][ T8047] lo speed is unknown, defaulting to 1000
[   96.785505][ T8053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.816649][ T8055] wg1 speed is unknown, defaulting to 1000
[   96.819384][ T8055] lo speed is unknown, defaulting to 1000
[   96.923608][ T8061] netlink: 'syz.1.671': attribute type 4 has an invalid length.
[   96.927315][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[   96.989087][ T8065] syzkaller0: entered promiscuous mode
[   96.991429][ T8065] syzkaller0: entered allmulticast mode
[   96.995687][ T8064] tipc: Started in network mode
[   96.997810][ T8064] tipc: Node identity f63a6474c946, cluster identity 4711
[   97.000673][ T8064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.018671][ T8066] tipc: Resetting bearer <eth:syzkaller0>
[   97.031537][ T8066] tipc: Disabling bearer <eth:syzkaller0>
[   97.136781][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'.
[   97.442911][ T8099] netlink: 'syz.1.682': attribute type 9 has an invalid length.
[   97.448519][ T8099] netlink: 'syz.1.682': attribute type 9 has an invalid length.
[   97.520158][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[   97.580518][ T8112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.604589][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.688'.
[   97.696047][ T8120] netlink: 'syz.0.691': attribute type 1 has an invalid length.
[   97.698656][ T8120] netlink: 236 bytes leftover after parsing attributes in process `syz.0.691'.
[   97.701683][ T8120] netlink: 'syz.0.691': attribute type 1 has an invalid length.
[   97.931502][ T8146] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[   98.107789][ T8162] wg1 speed is unknown, defaulting to 1000
[   98.110863][ T8162] lo speed is unknown, defaulting to 1000
[   98.290114][ T8180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.898679][ T8202] netlink: 'syz.2.721': attribute type 9 has an invalid length.
[   98.901368][ T8202] netlink: 'syz.2.721': attribute type 9 has an invalid length.
[   98.973474][ T8204] wg1 speed is unknown, defaulting to 1000
[   98.979064][ T8204] lo speed is unknown, defaulting to 1000
[   99.151290][ T8218] wg1 speed is unknown, defaulting to 1000
[   99.155696][ T8218] lo speed is unknown, defaulting to 1000
[   99.342398][ T8236] netlink: 'syz.0.730': attribute type 9 has an invalid length.
[   99.730309][ T8274] wg1 speed is unknown, defaulting to 1000
[   99.734365][ T8274] lo speed is unknown, defaulting to 1000
[  100.456925][ T8296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.459956][ T8296] IPv6: NLM_F_CREATE should be set when creating new route
[  100.463184][ T8296] IPv6: NLM_F_CREATE should be set when creating new route
[  100.466401][ T8296] IPv6: NLM_F_CREATE should be set when creating new route
[  100.481531][ T8296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  100.498000][ T8309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.635875][ T8319] __nla_validate_parse: 8 callbacks suppressed
[  100.635890][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  100.641994][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  101.556785][ T8338] validate_nla: 3 callbacks suppressed
[  101.556795][ T8338] netlink: 'syz.2.768': attribute type 9 has an invalid length.
[  101.561868][ T8338] netlink: 'syz.2.768': attribute type 9 has an invalid length.
[  102.002534][ T8380] netlink: 'syz.1.786': attribute type 9 has an invalid length.
[  102.005142][ T8380] netlink: 'syz.1.786': attribute type 9 has an invalid length.
[  102.031156][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'.
[  102.652743][ T8377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.785'.
[  102.773523][ T8395] netlink: 140 bytes leftover after parsing attributes in process `syz.2.792'.
[  102.812128][ T8403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.794'.
[  102.850510][ T8407] netlink: 'syz.0.796': attribute type 9 has an invalid length.
[  103.500878][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'.
[  103.505761][ T8451] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  103.900403][ T8492] netlink: 'syz.1.817': attribute type 9 has an invalid length.
[  103.903511][ T8492] netlink: 'syz.1.817': attribute type 9 has an invalid length.
[  104.159290][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  104.162294][ T8515] netlink: 'syz.1.825': attribute type 1 has an invalid length.
[  104.165487][ T8515] netlink: 'syz.1.825': attribute type 2 has an invalid length.
[  104.168318][ T8515] netlink: 80 bytes leftover after parsing attributes in process `syz.1.825'.
[  104.173635][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'.
[  104.178564][ T8513] bridge_slave_1: left allmulticast mode
[  104.180547][ T8513] bridge_slave_1: left promiscuous mode
[  104.182672][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.190718][ T8513] bridge_slave_0: left allmulticast mode
[  104.193123][ T8513] bridge_slave_0: left promiscuous mode
[  104.198047][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.290805][ T8510] wg1 speed is unknown, defaulting to 1000
[  104.294929][ T8510] lo speed is unknown, defaulting to 1000
[  104.459038][ T8532] sctp: [Deprecated]: syz.1.829 (pid 8532) Use of int in maxseg socket option.
[  104.459038][ T8532] Use struct sctp_assoc_value instead
[  104.469634][ T8536] netlink: 'syz.2.830': attribute type 4 has an invalid length.
[  104.614650][ T8558] bond0: (slave bond_slave_0): Releasing backup interface
[  104.621254][ T8558] bond0: (slave bond_slave_1): Releasing backup interface
[  104.629711][ T8558] team0: Port device team_slave_0 removed
[  104.637472][ T8558] team0: Port device team_slave_1 removed
[  104.640111][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.642760][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.647476][ T8558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.649985][ T8558] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.657617][ T5309] lo speed is unknown, defaulting to 1000
[  104.991573][ T8589] batadv_slave_1: entered promiscuous mode
[  105.027835][ T8588] batadv_slave_1: left promiscuous mode
[  105.728892][ T8604] __nla_validate_parse: 8 callbacks suppressed
[  105.728902][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'.
[  106.950324][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'.
[  106.953738][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.868'.
[  106.959699][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'.
[  106.963523][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.0.868'.
[  107.498466][ T8718] validate_nla: 2 callbacks suppressed
[  107.498481][ T8718] netlink: 'syz.1.888': attribute type 9 has an invalid length.
[  107.506309][ T8718] netlink: 'syz.1.888': attribute type 9 has an invalid length.
[  107.576787][ T8724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.889'.
[  107.920171][ T8740] wg1 speed is unknown, defaulting to 1000
[  107.924474][ T8740] lo speed is unknown, defaulting to 1000
[  108.502617][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'.
[  108.642104][ T8770] netlink: 168 bytes leftover after parsing attributes in process `syz.2.902'.
[  109.338909][ T8821] netlink: 'syz.0.915': attribute type 282 has an invalid length.
[  109.439062][ T8834] sctp: [Deprecated]: syz.0.920 (pid 8834) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.439062][ T8834] Use struct sctp_sack_info instead
[  109.445788][ T8834] sctp: [Deprecated]: syz.0.920 (pid 8834) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.445788][ T8834] Use struct sctp_sack_info instead
[  109.737007][ T8868] netlink: 'syz.1.934': attribute type 9 has an invalid length.
[  109.740032][ T8868] netlink: 'syz.1.934': attribute type 9 has an invalid length.
[  109.779019][ T8871] netlink: 'syz.2.932': attribute type 13 has an invalid length.
[  109.781722][ T8871] netlink: 'syz.2.932': attribute type 17 has an invalid length.
[  109.787477][ T8872] sctp: [Deprecated]: syz.1.935 (pid 8872) Use of int in maxseg socket option.
[  109.787477][ T8872] Use struct sctp_assoc_value instead
[  109.898793][ T8871] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.905458][ T8871] 8021q: adding VLAN 0 to HW filter on device team0
[  109.917853][ T8871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.981703][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'.
[  109.982889][ T8874] wg1 speed is unknown, defaulting to 1000
[  109.988602][ T8874] lo speed is unknown, defaulting to 1000
[  109.995522][ T8871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.085905][ T8871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.598930][ T8908] netlink: 'syz.1.946': attribute type 9 has an invalid length.
[  110.602453][ T8908] netlink: 'syz.1.946': attribute type 9 has an invalid length.
[  110.789983][ T8923] vlan0: entered promiscuous mode
[  110.908663][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'.
[  110.919545][ T8937] netlink: 'syz.1.954': attribute type 4 has an invalid length.
[  111.127751][ T8959] IPv4: Oversized IP packet from 127.202.26.0
[  111.266715][   T60] block nbd0: Possible stuck request ffff888022658000: control (read@0,4096B). Runtime 30 seconds
[  111.268447][ T8972] geneve2: entered promiscuous mode
[  111.281331][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  111.285387][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  111.291759][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  111.295915][ T5905] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  111.949919][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[  112.646566][ T9066] erspan0: left allmulticast mode
[  112.659218][ T9066] batadv1: left allmulticast mode
[  112.679964][ T9068] validate_nla: 6 callbacks suppressed
[  112.679974][ T9068] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  112.741582][ T9077] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1001'.
[  113.042272][ T9091] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1009'.
[  114.132628][ T9131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'.
[  114.132628][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'.
[  114.143178][ T9126] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1020'.
[  114.462535][ T9158] wg1 speed is unknown, defaulting to 1000
[  114.466372][ T9158] lo speed is unknown, defaulting to 1000
[  114.583722][ T9167] netlink: 'syz.2.1033': attribute type 14 has an invalid length.
[  114.697354][ T9174] ip6gre1: entered allmulticast mode
[  114.776967][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[  114.843058][ T9196] netlink: 'syz.2.1045': attribute type 9 has an invalid length.
[  114.846892][ T9196] netlink: 'syz.2.1045': attribute type 9 has an invalid length.
[  115.216632][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'.
[  115.363015][ T9227] wg1 speed is unknown, defaulting to 1000
[  115.365913][ T9227] lo speed is unknown, defaulting to 1000
[  115.436278][ T9232] wg1 speed is unknown, defaulting to 1000
[  115.439028][ T9232] lo speed is unknown, defaulting to 1000
[  115.518866][ T9236] netlink: 'syz.2.1056': attribute type 1 has an invalid length.
[  115.685427][ T9240] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  115.699765][ T9240] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  115.811176][ T9250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'.
[  115.815654][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1060'.
[  116.854042][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  116.975305][ T9308] netlink: 'syz.1.1081': attribute type 9 has an invalid length.
[  116.977961][ T9308] netlink: 'syz.1.1081': attribute type 9 has an invalid length.
[  117.073402][ T9316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1085'.
[  117.086655][ T9316] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1085'.
[  117.419827][ T9323] netlink: 'syz.1.1087': attribute type 3 has an invalid length.
[  117.423280][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'.
[  117.429274][ T9323] netlink: 'syz.1.1087': attribute type 12 has an invalid length.
[  117.514509][ T9325] tipc: Failed to remove unknown binding: 66,1,1/0:2093601602/2093601604
[  117.593512][ T9327] wg1 speed is unknown, defaulting to 1000
[  117.596861][ T9327] lo speed is unknown, defaulting to 1000
[  117.892966][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1092'.
[  118.232784][ T9350] vxcan2: entered promiscuous mode
[  118.416592][ T9363] netlink: 'syz.1.1099': attribute type 9 has an invalid length.
[  119.411650][ T9404] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1105'.
[  119.415000][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'.
[  119.597704][ T9429] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  120.462811][ T9450] trusted_key: syz.1.1122 sent an empty control message without MSG_MORE.
[  120.504495][ T9454] syz.2.1123: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  120.510809][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.2.1123 Not tainted syzkaller #0 PREEMPT(full) 
[  120.510825][ T9454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.510832][ T9454] Call Trace:
[  120.510838][ T9454]  <TASK>
[  120.510843][ T9454]  dump_stack_lvl+0x189/0x250
[  120.510864][ T9454]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.510878][ T9454]  ? __pfx__printk+0x10/0x10
[  120.510895][ T9454]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.510909][ T9454]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  120.510924][ T9454]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  120.510939][ T9454]  warn_alloc+0x214/0x310
[  120.510957][ T9454]  ? stack_depot_save_flags+0x40/0x860
[  120.510974][ T9454]  ? __pfx_warn_alloc+0x10/0x10
[  120.510993][ T9454]  ? kasan_save_track+0x4f/0x80
[  120.511007][ T9454]  ? xskq_create+0x56/0x170
[  120.511022][ T9454]  ? xsk_init_queue+0xb0/0x110
[  120.511034][ T9454]  ? xsk_setsockopt+0x4dc/0x8d0
[  120.511047][ T9454]  ? do_sock_setsockopt+0x17c/0x1b0
[  120.511057][ T9454]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  120.511067][ T9454]  ? do_syscall_64+0xfa/0x3b0
[  120.511111][ T9454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.511129][ T9454]  __vmalloc_node_range_noprof+0x125/0x12f0
[  120.511168][ T9454]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  120.511185][ T9454]  ? xskq_create+0x56/0x170
[  120.511202][ T9454]  ? __kasan_kmalloc+0x93/0xb0
[  120.511221][ T9454]  vmalloc_user_noprof+0xad/0xf0
[  120.511237][ T9454]  ? xskq_create+0xbf/0x170
[  120.511254][ T9454]  xskq_create+0xbf/0x170
[  120.511270][ T9454]  xsk_init_queue+0xb0/0x110
[  120.511287][ T9454]  xsk_setsockopt+0x4dc/0x8d0
[  120.511302][ T9454]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.511316][ T9454]  ? __pfx_aa_sk_perm+0x10/0x10
[  120.511333][ T9454]  ? aa_sock_opt_perm+0xff/0x1b0
[  120.511346][ T9454]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  120.511363][ T9454]  ? __pfx_xsk_setsockopt+0x10/0x10
[  120.511379][ T9454]  do_sock_setsockopt+0x17c/0x1b0
[  120.511393][ T9454]  __x64_sys_setsockopt+0x13f/0x1b0
[  120.511408][ T9454]  do_syscall_64+0xfa/0x3b0
[  120.511423][ T9454]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.511437][ T9454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.511447][ T9454]  ? exc_page_fault+0x9f/0xf0
[  120.511486][ T9454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.511498][ T9454] RIP: 0033:0x7f316bb8ebe9
[  120.511509][ T9454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.511518][ T9454] RSP: 002b:00007f3169df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  120.511531][ T9454] RAX: ffffffffffffffda RBX: 00007f316bdb5fa0 RCX: 00007f316bb8ebe9
[  120.511540][ T9454] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  120.511546][ T9454] RBP: 00007f316bc11e19 R08: 0000000000000004 R09: 0000000000000000
[  120.511554][ T9454] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.511561][ T9454] R13: 00007f316bdb6038 R14: 00007f316bdb5fa0 R15: 00007fffd48d74b8
[  120.511581][ T9454]  </TASK>
[  120.511742][ T9454] Mem-Info:
[  120.640134][ T9454] active_anon:6168 inactive_anon:0 isolated_anon:0
[  120.640134][ T9454]  active_file:1465 inactive_file:38236 isolated_file:0
[  120.640134][ T9454]  unevictable:1768 dirty:92 writeback:0
[  120.640134][ T9454]  slab_reclaimable:9703 slab_unreclaimable:91447
[  120.640134][ T9454]  mapped:18332 shmem:2444 pagetables:983
[  120.640134][ T9454]  sec_pagetables:0 bounce:0
[  120.640134][ T9454]  kernel_misc_reclaimable:0
[  120.640134][ T9454]  free:263196 free_pcp:16724 free_cma:0
[  120.658111][ T9454] Node 0 active_anon:16492kB inactive_anon:0kB active_file:3140kB inactive_file:22700kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38104kB dirty:296kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8152kB pagetables:2476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.670733][ T9454] Node 1 active_anon:8180kB inactive_anon:0kB active_file:2720kB inactive_file:130244kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35224kB dirty:72kB writeback:0kB shmem:5052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3536kB pagetables:1456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  120.683579][ T9454] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.695395][ T9454] lowmem_reserve[]: 0 811 811 811 811
[  120.697708][ T9454] Node 0 DMA32 free:376352kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16492kB inactive_anon:0kB active_file:3140kB inactive_file:22700kB unevictable:3536kB writepending:296kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:38328kB local_pcp:20264kB free_cma:0kB
[  120.710681][ T9454] lowmem_reserve[]: 0 0 0 0 0
[  120.712771][ T9454] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  120.724346][ T9454] lowmem_reserve[]: 0 0 854 854 854
[  120.726018][ T9454] Node 1 Normal free:202456kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8180kB inactive_anon:0kB active_file:2720kB inactive_file:130244kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:28868kB local_pcp:7660kB free_cma:0kB
[  120.738450][ T9454] lowmem_reserve[]: 0 0 0 0 0
[  120.740487][ T9454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  120.745460][ T9454] Node 0 DMA32: 252*4kB (ME) 90*8kB (UME) 406*16kB (UME) 174*32kB (UM) 147*64kB (UME) 83*128kB (UME) 12*256kB (UME) 3*512kB (M) 2*1024kB (UE) 4*2048kB (UM) 80*4096kB (UM) = 376352kB
[  120.751622][ T9454] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  120.758304][ T9454] Node 1 Normal: 162*4kB (U) 294*8kB (UME) 290*16kB (UME) 294*32kB (UME) 193*64kB (UME) 66*128kB (UM) 35*256kB (UME) 14*512kB (UME) 9*1024kB (UM) 6*2048kB (UME) 31*4096kB (M) = 202456kB
[  120.765924][ T9454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.769621][ T9454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  120.772857][ T9454] 42145 total pagecache pages
[  120.774508][ T9454] 0 pages in swap cache
[  120.776024][ T9454] Free swap  = 124996kB
[  120.777543][ T9454] Total swap = 124996kB
[  120.779066][ T9454] 786301 pages RAM
[  120.780654][ T9454] 0 pages HighMem/MovableOnly
[  120.782493][ T9454] 241331 pages reserved
[  120.783952][ T9454] 0 pages cma reserved
[  121.124327][ T9491] wg1 speed is unknown, defaulting to 1000
[  121.128316][ T9491] lo speed is unknown, defaulting to 1000
[  121.239358][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1137'.
[  121.686391][ T9551] netlink: 'syz.2.1157': attribute type 13 has an invalid length.
[  121.689128][ T9551] netlink: 'syz.2.1157': attribute type 17 has an invalid length.
[  121.709473][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.712387][ T9551] 8021q: adding VLAN 0 to HW filter on device team0
[  121.716836][ T9551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.742173][ T9548] wg1 speed is unknown, defaulting to 1000
[  121.745377][ T9548] lo speed is unknown, defaulting to 1000
[  121.803006][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.859455][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.617820][ T9588] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  122.623478][ T9588] netlink: 'syz.2.1168': attribute type 83 has an invalid length.
[  122.630574][ T9589] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  122.632423][ T9588] netlink: 'syz.2.1168': attribute type 83 has an invalid length.
[  122.654889][ T9591] geneve2: entered promiscuous mode
[  122.658421][ T5905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.666154][ T5905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.669964][ T5905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.674512][ T5905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.915799][ T9607] wg1 speed is unknown, defaulting to 1000
[  122.918758][ T9607] lo speed is unknown, defaulting to 1000
[  123.002397][ T9610] netlink: 'syz.2.1176': attribute type 9 has an invalid length.
[  123.006334][ T9610] netlink: 'syz.2.1176': attribute type 9 has an invalid length.
[  123.051520][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'.
[  123.055222][ T9612] netlink: 'syz.2.1177': attribute type 12 has an invalid length.
[  123.069766][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  123.073562][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'.
[  123.077497][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  123.081417][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  123.091529][ T9612] netlink: 'syz.2.1177': attribute type 12 has an invalid length.
[  123.098773][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  123.172235][ T9620] netlink: 'syz.0.1178': attribute type 13 has an invalid length.
[  123.180680][ T9620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.229711][ T9620] wg1 speed is unknown, defaulting to 1000
[  123.233678][ T9620] lo speed is unknown, defaulting to 1000
[  123.265896][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'.
[  123.273543][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.341671][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.381421][ T9632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1184'.
[  123.388238][ T9632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1184'.
[  123.394551][ T9632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1184'.
[  123.401918][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1185'.
[  124.139961][ T9675] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  124.145643][ T9675] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  124.397218][ T9693] wg1 speed is unknown, defaulting to 1000
[  124.400489][ T9693] lo speed is unknown, defaulting to 1000
[  124.929531][ T9697] validate_nla: 2 callbacks suppressed
[  124.929545][ T9697] netlink: 'syz.1.1208': attribute type 9 has an invalid length.
[  125.028128][ T9703] siw: device registration error -23
[  125.190555][ T9715] netlink: 'syz.2.1216': attribute type 9 has an invalid length.
[  125.195685][ T9715] netlink: 'syz.2.1216': attribute type 9 has an invalid length.
[  126.032780][ T9764] tipc: Started in network mode
[  126.052510][ T9764] tipc: Node identity 02c70173dc9e, cluster identity 4711
[  126.056932][ T9764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.059883][ T9764] syzkaller0: entered promiscuous mode
[  126.061908][ T9764] syzkaller0: entered allmulticast mode
[  126.078269][ T9764] tipc: Resetting bearer <eth:syzkaller0>
[  126.085960][ T9763] tipc: Resetting bearer <eth:syzkaller0>
[  126.097090][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1234'.
[  126.102362][ T9763] tipc: Disabling bearer <eth:syzkaller0>
[  126.163625][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1235'.
[  126.259002][ T9782] netlink: 'syz.0.1238': attribute type 9 has an invalid length.
[  126.362614][ T9795] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  126.576489][ T9807] netlink: 'syz.2.1245': attribute type 1 has an invalid length.
[  126.580013][ T9807] netlink: 'syz.2.1245': attribute type 3 has an invalid length.
[  126.583449][ T9807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1245'.
[  126.753660][ T9810] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  127.261219][ T9818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.639146][ T9843] syzkaller1: entered promiscuous mode
[  127.641514][ T9843] syzkaller1: entered allmulticast mode
[  128.154359][ T9871] netlink: 'syz.2.1267': attribute type 9 has an invalid length.
[  128.161093][ T9871] netlink: 'syz.2.1267': attribute type 9 has an invalid length.
[  128.229405][ T9877] wg1 speed is unknown, defaulting to 1000
[  128.232954][ T9877] lo speed is unknown, defaulting to 1000
[  128.385082][ T9887] __nla_validate_parse: 5 callbacks suppressed
[  128.385092][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  128.560946][ T9899] netlink: 'syz.1.1278': attribute type 2 has an invalid length.
[  128.628836][ T5841] Bluetooth: hci2: link tx timeout
[  128.631054][ T5841] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.781463][ T9919] netlink: 'syz.0.1285': attribute type 9 has an invalid length.
[  129.648616][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.652464][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.671175][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.674286][ T9942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1294'.
[  129.675642][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.682073][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.691071][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  129.700659][ T8466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.703469][ T8466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.784469][ T9950] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1295'.
[  129.788746][ T9946] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1295'.
[  130.695614][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  131.078675][ T9982] validate_nla: 1 callbacks suppressed
[  131.078688][ T9982] netlink: 'syz.1.1306': attribute type 3 has an invalid length.
[  131.332820][T10004] tc_dump_action: action bad kind
[  131.337626][T10004] tc_dump_action: action bad kind
[  131.340278][T10004] tc_dump_action: action bad kind
[  131.343364][T10004] tc_dump_action: action bad kind
[  131.346670][T10004] tc_dump_action: action bad kind
[  131.350770][T10004] tc_dump_action: action bad kind
[  131.354748][T10004] tc_dump_action: action bad kind
[  131.361971][T10007] syzkaller1: entered promiscuous mode
[  131.366005][T10007] syzkaller1: entered allmulticast mode
[  131.375518][T10007] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  131.377544][T10004] tc_dump_action: action bad kind
[  131.678758][T10029] wg1 speed is unknown, defaulting to 1000
[  131.682682][T10029] lo speed is unknown, defaulting to 1000
[  131.699775][T10035] rdma_rxe: rxe_newlink: failed to add syz_tun
[  131.850178][T10047] netlink: 'syz.1.1328': attribute type 9 has an invalid length.
[  132.103319][T10059] wg1 speed is unknown, defaulting to 1000
[  132.108087][T10059] lo speed is unknown, defaulting to 1000
[  132.147271][ T5891] IPVS: starting estimator thread 0...
[  132.180129][T10059] ieee802154 phy0 wpan0: encryption failed: -22
[  132.237512][T10062] IPVS: using max 46 ests per chain, 110400 per kthread
[  132.340009][T10073] wg1 speed is unknown, defaulting to 1000
[  132.342801][T10073] lo speed is unknown, defaulting to 1000
[  132.388906][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.392645][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.429941][ T5871] IPVS: stop unused estimator thread 0...
[  133.151771][T10113] netlink: 'syz.1.1350': attribute type 9 has an invalid length.
[  133.240401][T10117] syzkaller1: entered promiscuous mode
[  133.260736][T10117] syzkaller1: entered allmulticast mode
[  133.312496][T10123] vxcan2: entered promiscuous mode
[  133.523418][T10155] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  133.690998][T10172] __nla_validate_parse: 10 callbacks suppressed
[  133.691029][T10172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1370'.
[  133.986651][T10198] pim6reg1: entered promiscuous mode
[  133.989082][T10198] pim6reg1: entered allmulticast mode
[  134.136848][T10204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1381'.
[  134.152685][T10203] geneve2: entered promiscuous mode
[  134.156728][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  134.161158][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  134.173001][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  134.176464][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  134.450812][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1384'.
[  134.615671][T10217] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  134.619758][T10217] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  134.683299][T10221] netlink: 'syz.1.1387': attribute type 2 has an invalid length.
[  134.687228][T10221] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1387'.
[  134.731256][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'.
[  135.472705][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1396'.
[  136.082633][T10287] wg1 speed is unknown, defaulting to 1000
[  136.086128][T10287] lo speed is unknown, defaulting to 1000
[  136.318968][T10291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1411'.
[  136.504100][T10293] netlink: 'syz.1.1412': attribute type 9 has an invalid length.
[  136.506785][T10293] netlink: 'syz.1.1412': attribute type 9 has an invalid length.
[  136.752180][T10314] netlink: 'syz.1.1419': attribute type 9 has an invalid length.
[  136.756334][T10314] netlink: 'syz.1.1419': attribute type 9 has an invalid length.
[  136.930614][T10330] wg1 speed is unknown, defaulting to 1000
[  136.936977][T10330] lo speed is unknown, defaulting to 1000
[  137.168034][T10349] netlink: 'syz.1.1429': attribute type 13 has an invalid length.
[  137.318858][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'.
[  137.341212][T10358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1434'.
[  137.489501][T10371] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  137.494723][T10371] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  138.172416][T10382] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1440'.
[  138.836529][T10428] netlink: 'syz.1.1456': attribute type 9 has an invalid length.
[  138.839714][T10428] netlink: 'syz.1.1456': attribute type 9 has an invalid length.
[  139.064414][T10440] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  139.128400][T10441] __nla_validate_parse: 2 callbacks suppressed
[  139.128413][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'.
[  139.329778][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'.
[  139.458512][T10449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1462'.
[  139.470475][T10455] netlink: 'syz.0.1464': attribute type 9 has an invalid length.
[  139.658190][T10474] wg1 speed is unknown, defaulting to 1000
[  139.661847][T10474] lo speed is unknown, defaulting to 1000
[  139.883003][T10487] wg1 speed is unknown, defaulting to 1000
[  139.886840][T10487] lo speed is unknown, defaulting to 1000
[  139.927927][T10488] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1474'.
[  140.025106][T10495] netlink: 'syz.2.1477': attribute type 9 has an invalid length.
[  140.028362][T10495] netlink: 'syz.2.1477': attribute type 9 has an invalid length.
[  141.095801][T10555] wg1 speed is unknown, defaulting to 1000
[  141.098646][T10555] lo speed is unknown, defaulting to 1000
[  141.343331][   T60] block nbd0: Possible stuck request ffff888022658000: control (read@0,4096B). Runtime 60 seconds
[  141.436137][T10584] IPv4: Oversized IP packet from 127.202.26.0
[  141.442933][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1505'.
[  141.606042][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1512'.
[  141.671714][ T5846] cgroup: fork rejected by pids controller in /syz2
[  141.884888][T10615] 8021q: adding VLAN 0 to HW filter on device bond1
[  141.893420][T10615] bond0: (slave bond1): Enslaving as an active interface with an up link
[  141.906295][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'.
[  141.910405][T10615] veth1_macvtap: left promiscuous mode
[  141.966568][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1516'.
[  141.974029][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.990150][T10617] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.993405][T10617] bond0: (slave bond2): Enslaving as an active interface with an up link
[  142.040356][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.043338][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.048516][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.053419][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.058135][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.089412][T10620] wg1 speed is unknown, defaulting to 1000
[  142.092828][T10620] lo speed is unknown, defaulting to 1000
[  142.227125][T10620] chnl_net:caif_netlink_parms(): no params data found
[  142.292833][T10620] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.296135][T10620] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.298947][T10620] bridge_slave_0: entered allmulticast mode
[  142.302435][T10620] bridge_slave_0: entered promiscuous mode
[  142.307470][T10620] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.310226][T10620] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.313029][T10620] bridge_slave_1: entered allmulticast mode
[  142.316649][T10620] bridge_slave_1: entered promiscuous mode
[  142.342881][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.348827][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.375802][ T3826] wlan1: Trigger new scan to find an IBSS to join
[  142.386450][T10620] team0: Port device team_slave_0 added
[  142.390700][T10620] team0: Port device team_slave_1 added
[  142.415378][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.417767][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.431504][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.441879][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.448869][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.460157][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.504294][T10620] hsr_slave_0: entered promiscuous mode
[  142.507148][T10620] hsr_slave_1: entered promiscuous mode
[  142.596235][T10620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.600168][T10620] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  142.668588][T10645] validate_nla: 9 callbacks suppressed
[  142.668600][T10645] netlink: 'syz.1.1522': attribute type 9 has an invalid length.
[  142.673749][T10645] netlink: 'syz.1.1522': attribute type 9 has an invalid length.
[  142.680939][T10620] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  142.688674][T10620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.693237][T10620] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  142.770195][T10620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.775319][T10620] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  142.834837][T10620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.838605][T10620] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  142.970193][T10620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  142.975744][T10620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  142.980688][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  142.987213][T10620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  142.995183][T10620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  143.001036][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'.
[  143.102270][T10620] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.127119][T10620] 8021q: adding VLAN 0 to HW filter on device team0
[  143.147685][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.150649][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.166491][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.169229][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.275297][T10678] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20000
[  143.320778][T10682] netlink: 'syz.0.1532': attribute type 9 has an invalid length.
[  143.369524][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.415820][T10620] veth0_vlan: entered promiscuous mode
[  143.422243][T10620] veth1_vlan: entered promiscuous mode
[  143.457316][T10620] veth0_macvtap: entered promiscuous mode
[  143.463046][T10620] veth1_macvtap: entered promiscuous mode
[  143.480909][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.492594][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.503734][ T5905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.509858][ T5905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.518353][ T5905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.522336][ T5905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.597534][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.600862][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.642493][ T8468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.646698][ T8468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.734361][T10701] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  143.737063][T10701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.741582][T10701] sock: sock_set_timeout: `syz.0.1538' (pid 10701) tries to set negative timeout
[  143.751712][T10709] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000
[  143.847471][T10717] 8021q: VLANs not supported on ip_vti0
[  144.135106][ T5232] Bluetooth: hci2: command tx timeout
[  144.981185][T10764] __nla_validate_parse: 5 callbacks suppressed
[  144.981195][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'.
[  144.999442][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  145.003188][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  145.026848][T10770] wg1 speed is unknown, defaulting to 1000
[  145.030148][T10770] lo speed is unknown, defaulting to 1000
[  145.259017][T10789] netlink: 'syz.2.1567': attribute type 13 has an invalid length.
[  145.267701][T10789] netlink: 'syz.2.1567': attribute type 17 has an invalid length.
[  145.302002][T10789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  145.307771][T10798] netem: incorrect gi model size
[  145.309623][T10798] netem: change failed
[  145.331686][T10789] wg1 speed is unknown, defaulting to 1000
[  145.337103][T10789] lo speed is unknown, defaulting to 1000
[  145.390799][T10789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.414876][   T52] wlan1: Trigger new scan to find an IBSS to join
[  145.449808][T10812] IPVS: length: 81 != 24
[  145.450022][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.451329][T10812] IPVS: length: 81 != 24
[  145.458285][T10812] IPVS: length: 81 != 24
[  145.460535][T10812] IPVS: length: 81 != 24
[  145.462000][T10812] IPVS: length: 81 != 24
[  145.463436][T10812] IPVS: length: 81 != 24
[  145.465682][T10812] IPVS: length: 81 != 24
[  145.467204][T10812] IPVS: length: 81 != 24
[  145.468625][T10812] IPVS: length: 81 != 24
[  145.470043][T10812] IPVS: length: 81 != 24
[  145.471454][T10812] IPVS: length: 81 != 24
[  145.472866][T10812] IPVS: length: 81 != 24
[  145.476439][T10812] IPVS: length: 81 != 24
[  145.477904][T10812] IPVS: length: 81 != 24
[  145.479271][T10812] IPVS: length: 81 != 24
[  145.480676][T10812] IPVS: length: 81 != 24
[  145.482092][T10812] IPVS: length: 81 != 24
[  145.483501][T10812] IPVS: length: 81 != 24
[  145.485697][T10812] IPVS: length: 81 != 24
[  145.487122][T10812] IPVS: length: 81 != 24
[  145.488573][T10812] IPVS: length: 81 != 24
[  145.489999][T10812] IPVS: length: 81 != 24
[  145.491420][T10812] IPVS: length: 81 != 24
[  145.492839][T10812] IPVS: length: 81 != 24
[  145.497643][T10812] IPVS: length: 81 != 24
[  145.499237][T10812] IPVS: length: 81 != 24
[  145.500605][T10812] IPVS: length: 81 != 24
[  145.848409][T10847] wg1 speed is unknown, defaulting to 1000
[  145.851071][T10847] lo speed is unknown, defaulting to 1000
[  146.214405][ T5232] Bluetooth: hci2: command tx timeout
[  146.602299][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.991243][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'.
[  147.041247][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'.
[  147.118489][T10886] vxcan0: entered promiscuous mode
[  147.255283][T10893] IPVS: length: 4096 != 8
[  147.401361][T10906] wg1 speed is unknown, defaulting to 1000
[  147.404766][T10906] lo speed is unknown, defaulting to 1000
[  147.475150][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'.
[  147.590642][T10927] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1617'.
[  147.596784][T10927] openvswitch: netlink: Flow key attr not present in new flow.
[  147.606837][T10927] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  148.157954][T10974] siw: device registration error -23
[  148.168145][T10974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1631'.
[  148.294210][ T5232] Bluetooth: hci2: command tx timeout
[  148.350206][T10988] wg1 speed is unknown, defaulting to 1000
[  148.352838][T10988] lo speed is unknown, defaulting to 1000
[  148.374918][ T8466] wlan1: Trigger new scan to find an IBSS to join
[  148.426464][T10994] netlink: 'syz.2.1638': attribute type 4 has an invalid length.
[  148.435218][T10994] netlink: 'syz.2.1638': attribute type 4 has an invalid length.
[  148.603128][T11003] wg1 speed is unknown, defaulting to 1000
[  148.606479][T11003] lo speed is unknown, defaulting to 1000
[  148.655042][T11009] wg1 speed is unknown, defaulting to 1000
[  148.657838][T11009] lo speed is unknown, defaulting to 1000
[  149.016624][T11038] wg1 speed is unknown, defaulting to 1000
[  149.020372][T11038] lo speed is unknown, defaulting to 1000
[  149.055568][T11041] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  149.059639][T11041] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  149.268113][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'.
[  149.295994][   T52] wlan1: Creating new IBSS network, BSSID fa:0d:d1:ba:41:f7
[  149.438650][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1662'.
[  149.512896][T11074] wg1 speed is unknown, defaulting to 1000
[  149.516939][T11074] lo speed is unknown, defaulting to 1000
[  150.056084][T11103] netlink: 'syz.0.1673': attribute type 1 has an invalid length.
[  150.058603][T11103] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1673'.
[  150.374620][ T5232] Bluetooth: hci2: command tx timeout
[  150.679128][T11142] sctp: [Deprecated]: syz.2.1685 (pid 11142) Use of int in max_burst socket option.
[  150.679128][T11142] Use struct sctp_assoc_value instead
[  150.792838][T11147] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1689'.
[  151.592747][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1694'.
[  151.623319][T11147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.630483][T11154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.636717][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'.
[  151.640231][T11165] chnl_net:caif_netlink_parms(): no params data found
[  151.727057][T11172] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20003
[  151.892287][T11187] 8021q: adding VLAN 0 to HW filter on device bond2
[  151.896970][T11187] bridge0: port 3(bond2) entered blocking state
[  151.899012][T11187] bridge0: port 3(bond2) entered disabled state
[  151.901091][T11187] bond2: entered allmulticast mode
[  151.904290][T11187] bond2: entered promiscuous mode
[  154.664879][ T5292] udevd[5292]: worker [5853] /devices/virtual/block/nbd0 is taking a long time
[  154.925270][T11199] netlink: 'syz.1.1709': attribute type 9 has an invalid length.
[  154.927759][T11199] netlink: 'syz.1.1709': attribute type 9 has an invalid length.
[  154.980208][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  154.997315][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.001116][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.015264][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.024616][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.047029][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.065991][T11205] __nla_validate_parse: 3 callbacks suppressed
[  155.066001][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.073009][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.078620][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.081551][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.089287][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.092141][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.098955][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.101751][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.112051][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.116573][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1710'.
[  155.356128][   T24] lo speed is unknown, defaulting to 1000
[  155.358500][   T24] syz1: Port: 1 Link DOWN
[  155.371198][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.375608][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  155.378962][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.381920][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  155.402946][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.409306][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  155.412944][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.418467][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  155.545257][T11242] netlink: 'syz.0.1720': attribute type 9 has an invalid length.
[  155.651865][T11254] netlink: 'syz.2.1725': attribute type 1 has an invalid length.
[  155.654319][T11255] netlink: 'syz.2.1725': attribute type 1 has an invalid length.
[  155.724732][T11261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.728333][T11263] syzkaller0: entered promiscuous mode
[  155.731302][T11263] syzkaller0: entered allmulticast mode
[  155.758386][T11263] tipc: Resetting bearer <eth:syzkaller0>
[  155.769906][T11263] tipc: Disabling bearer <eth:syzkaller0>
[  155.945646][T11269] netlink: 'syz.2.1728': attribute type 9 has an invalid length.
[  156.028728][T11276] siw: device registration error -23
[  156.596952][T11317] wg1 speed is unknown, defaulting to 1000
[  156.599593][T11317] lo speed is unknown, defaulting to 1000
[  156.768345][T11326] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  156.802395][T11329] netlink: 'syz.0.1750': attribute type 9 has an invalid length.
[  157.177139][T11338] batadv_slave_0: entered promiscuous mode
[  157.192555][T11341] batadv_slave_0: left promiscuous mode
[  157.792561][T11367] vxcan0: entered promiscuous mode
[  158.097423][T11385] netlink: 'syz.0.1767': attribute type 9 has an invalid length.
[  158.270475][T11401] netlink: 'syz.0.1775': attribute type 1 has an invalid length.
[  158.276192][T11403] netlink: 'syz.1.1776': attribute type 9 has an invalid length.
[  158.302609][T11401] 8021q: adding VLAN 0 to HW filter on device bond3
[  158.404177][   T33] audit: type=1800 audit(1755791709.009:2): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1782" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=2780 res=0 errno=0
[  159.876820][T11480] IPVS: length: 148 != 24
[  159.939297][T11485] validate_nla: 3 callbacks suppressed
[  159.939310][T11485] netlink: 'syz.2.1811': attribute type 9 has an invalid length.
[  160.155069][T11496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.237506][T11504] __nla_validate_parse: 132 callbacks suppressed
[  160.237515][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'.
[  160.446831][T11524] netlink: 'syz.2.1824': attribute type 13 has an invalid length.
[  160.519714][T11524] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.523331][T11524] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.551191][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  160.556581][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  160.559915][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  160.590380][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.598175][T11524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.676342][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.680532][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.688014][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.695694][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.405533][T11575] netlink: 'syz.0.1840': attribute type 1 has an invalid length.
[  161.423437][T11575] 8021q: adding VLAN 0 to HW filter on device bond4
[  161.448843][T11575] 8021q: adding VLAN 0 to HW filter on device bond4
[  161.452153][T11575] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  161.457839][T11575] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  161.484968][T11576] wg1 speed is unknown, defaulting to 1000
[  161.488618][T11576] lo speed is unknown, defaulting to 1000
[  161.846082][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1848'.
[  162.141060][T11616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1851'.
[  162.208873][T11617] bridge_slave_0: left allmulticast mode
[  162.211052][T11617] bridge_slave_0: left promiscuous mode
[  162.213089][T11617] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.217431][T11617] bridge_slave_1: left allmulticast mode
[  162.219654][T11617] bridge_slave_1: left promiscuous mode
[  162.221933][T11617] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.228410][T11617] bond0: (slave bond_slave_0): Releasing backup interface
[  162.232252][T11617] bond0: (slave bond_slave_1): Releasing backup interface
[  162.237643][T11617] team0: Port device team_slave_0 removed
[  162.241168][T11617] team0: Port device team_slave_1 removed
[  162.243260][T11617] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.246575][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.303703][T11618] netlink: 'syz.2.1851': attribute type 10 has an invalid length.
[  162.310011][T11618] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  162.589555][T11621] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1853'.
[  162.810956][T11633] netlink: 'syz.0.1856': attribute type 1 has an invalid length.
[  162.818017][T11633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1856'.
[  162.821832][T11633] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1856'.
[  162.827014][T11633] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1856'.
[  163.184092][T11647] tun0: tun_chr_ioctl cmd 2147767520
[  163.187515][T11647] netlink: 'syz.2.1860': attribute type 2 has an invalid length.
[  163.190915][T11647] netlink: 'syz.2.1860': attribute type 1 has an invalid length.
[  163.500612][T11662] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  163.805175][   T51] IPVS: starting estimator thread 0...
[  163.822523][T11699] net veth1_virt_wifi : renamed from virt_wifi0
[  163.867524][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.894201][T11700] IPVS: using max 77 ests per chain, 184800 per kthread
[  163.970165][T11731] netlink: 'syz.2.1885': attribute type 1 has an invalid length.
[  164.400093][T11753] wg1 speed is unknown, defaulting to 1000
[  164.405392][T11753] lo speed is unknown, defaulting to 1000
[  164.607586][T11758] delete_channel: no stack
[  164.930061][T11768] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  165.643553][T11838] __nla_validate_parse: 7 callbacks suppressed
[  165.643563][T11838] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1922'.
[  165.725897][T11843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.826525][T11874] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1936'.
[  166.879154][T11882] netlink: 'syz.1.1940': attribute type 10 has an invalid length.
[  166.889616][T11882] team0: Port device hsr_slave_0 added
[  167.094205][T11898] vxcan2: entered promiscuous mode
[  167.135214][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1945'.
[  167.389776][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1955'.
[  167.482783][T11926] geneve3: entered promiscuous mode
[  167.486970][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  167.491753][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  167.506430][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  167.509296][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  167.751244][T11946] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  168.429294][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1980'.
[  168.463198][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'.
[  168.467525][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1980'.
[  168.473714][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'.
[  168.591875][T12000] wg1 speed is unknown, defaulting to 1000
[  168.595590][T12000] lo speed is unknown, defaulting to 1000
[  168.736012][T12010] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1986'.
[  168.953264][T12017] vxcan0: entered promiscuous mode
[  169.062607][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'.
[  169.482895][T12044] netlink: 'syz.1.1998': attribute type 13 has an invalid length.
[  169.491190][T12044] netlink: 'syz.1.1998': attribute type 17 has an invalid length.
[  169.558238][T12044] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.562767][T12044] 8021q: adding VLAN 0 to HW filter on device team0
[  169.570008][T12044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.549978][ T5871] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  170.553701][T12062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  170.554548][T12066] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  170.620618][T12075] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  170.678505][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2006'.
[  170.786901][T12078] vxcan4: entered promiscuous mode
[  170.803556][T12083] netlink: 'syz.0.2009': attribute type 13 has an invalid length.
[  170.813007][T12083] netlink: 'syz.0.2009': attribute type 17 has an invalid length.
[  170.818685][T12078] vxcan4: entered promiscuous mode
[  170.839272][T12083] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.842277][T12083] 8021q: adding VLAN 0 to HW filter on device team0
[  170.847039][T12083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.852019][ T5309] lo speed is unknown, defaulting to 1000
[  170.854207][ T5309] syz1: Port: 1 Link ACTIVE
[  170.887067][T12083] wg1 speed is unknown, defaulting to 1000
[  170.890166][T12083] lo speed is unknown, defaulting to 1000
[  170.955988][T12083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.011122][T12083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.297770][T12106] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  171.302248][T12106] bond0 (unregistering): Released all slaves
[  171.361071][T12117] syzkaller1: entered promiscuous mode
[  171.363054][T12117] syzkaller1: entered allmulticast mode
[  171.417381][   T60] block nbd0: Possible stuck request ffff888022658000: control (read@0,4096B). Runtime 90 seconds
[  171.507380][T12128] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  171.605953][T12138] netlink: 'syz.0.2026': attribute type 1 has an invalid length.
[  171.648984][T12138] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  171.652737][T12138] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  171.662479][T12138] bond5: (slave vti0): making interface the new active one
[  171.666758][T12138] bond5: (slave vti0): Enslaving as an active interface with an up link
[  171.726766][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  172.701189][T12193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2044'.
[  172.956171][T12211] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  172.960666][T12211] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  172.964581][T12211] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  173.045079][T12221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'.
[  173.355495][T12244] netlink: 'syz.2.2059': attribute type 1 has an invalid length.
[  173.368468][T12244] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  173.630103][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'.
[  173.807961][T12280] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  174.065695][T12297] netlink: 'syz.2.2077': attribute type 13 has an invalid length.
[  174.069172][T12297] netlink: 'syz.2.2077': attribute type 17 has an invalid length.
[  174.108205][T12292] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  174.111414][T12293] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  174.125059][T12297] 8021q: adding VLAN 0 to HW filter on device team0
[  174.133350][T12297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.147601][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.153083][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.156847][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.534121][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  174.866550][ T5309] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.014234][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.119237][T12322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2086'.
[  175.123363][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'.
[  175.195948][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'.
[  175.199880][T12330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2088'.
[  175.203591][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'.
[  175.210451][T12330] netlink: 'syz.1.2088': attribute type 6 has an invalid length.
[  175.359453][T12332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.370482][T12332] siw: device registration error -23
[  175.699929][T12338] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  175.705681][T12338] netlink: 'syz.0.2091': attribute type 4 has an invalid length.
[  175.709027][T12338] __nla_validate_parse: 2 callbacks suppressed
[  175.709038][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'.
[  177.028141][T12393] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  177.030561][T12393] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  177.070072][T12393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2109'.
[  177.084259][T12393] netlink: 'syz.0.2109': attribute type 10 has an invalid length.
[  177.087872][T12393] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  177.109431][T12393] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  177.114013][T12393] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  177.138891][T12401] netlink: 'syz.1.2113': attribute type 83 has an invalid length.
[  178.136325][T12438] wg1 speed is unknown, defaulting to 1000
[  178.140798][T12438] lo speed is unknown, defaulting to 1000
[  178.295188][T12444] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2124'.
[  178.311004][T12444] netlink: 'syz.1.2124': attribute type 153 has an invalid length.
[  178.332866][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'.
[  178.373987][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.390415][T12453] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  178.542910][T12459] wg1 speed is unknown, defaulting to 1000
[  178.547197][T12459] lo speed is unknown, defaulting to 1000
[  178.583238][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  178.656833][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'.
[  178.746184][T12472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2133'.
[  178.772660][T12469] wg1 speed is unknown, defaulting to 1000
[  178.780224][T12469] lo speed is unknown, defaulting to 1000
[  178.963521][T12487] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  178.979429][T12487] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  179.022163][T12493] syzkaller1: entered promiscuous mode
[  179.025570][T12493] syzkaller1: entered allmulticast mode
[  179.149386][T12509] wg1 speed is unknown, defaulting to 1000
[  179.152444][T12509] lo speed is unknown, defaulting to 1000
[  179.202585][T12512] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20003
[  179.569034][T12550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2157'.
[  179.676012][T12555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2159'.
[  179.679732][T12555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2159'.
[  180.534163][ T5232] Bluetooth: hci1: command 0x0406 tx timeout
[  180.775106][T12597] wg1 speed is unknown, defaulting to 1000
[  180.779743][T12597] lo speed is unknown, defaulting to 1000
[  180.860632][T12597] netlink: 'syz.1.2171': attribute type 1 has an invalid length.
[  180.867034][T12597] __nla_validate_parse: 2 callbacks suppressed
[  180.867047][T12597] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2171'.
[  180.873426][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'.
[  181.307257][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2181'.
[  181.382160][T12632] wg1 speed is unknown, defaulting to 1000
[  181.385204][T12632] lo speed is unknown, defaulting to 1000
[  181.654816][ T1088] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  181.880249][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'.
[  181.892330][T12651] netlink: 'syz.2.2187': attribute type 13 has an invalid length.
[  181.934073][T11222] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.955185][T12653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.960330][T12653] syzkaller0: entered promiscuous mode
[  181.962287][T12653] syzkaller0: entered allmulticast mode
[  181.970324][T12653] tipc: Resetting bearer <eth:syzkaller0>
[  182.025126][T12656] netlink: 'syz.1.2189': attribute type 11 has an invalid length.
[  182.028257][T12656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2189'.
[  182.291171][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2195'.
[  182.295933][T12671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'.
[  182.534199][ T5906] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.749882][T12652] tipc: Resetting bearer <eth:syzkaller0>
[  182.759360][T12652] tipc: Disabling bearer <eth:syzkaller0>
[  182.957212][T12686] netlink: 'syz.1.2201': attribute type 13 has an invalid length.
[  182.959920][T12686] netlink: 'syz.1.2201': attribute type 17 has an invalid length.
[  182.966200][T12686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  182.988829][T12686] wg1 speed is unknown, defaulting to 1000
[  182.991395][T12686] lo speed is unknown, defaulting to 1000
[  183.040935][T12686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.096034][T12686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.087556][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'.
[  184.091408][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'.
[  184.098587][T12707] netlink: 'syz.2.2206': attribute type 13 has an invalid length.
[  184.368913][T12731] netlink: 'syz.0.2214': attribute type 1 has an invalid length.
[  184.372398][T12731] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2214'.
[  184.620447][T12738] wg1 speed is unknown, defaulting to 1000
[  184.624836][T12738] lo speed is unknown, defaulting to 1000
[  184.625177][T12737] wg1 speed is unknown, defaulting to 1000
[  184.637625][T12737] lo speed is unknown, defaulting to 1000
[  185.683388][T12776] IPv4: Oversized IP packet from 127.202.26.0
[  185.812471][T12784] netlink: 'syz.1.2231': attribute type 4 has an invalid length.
[  185.921460][T12788] __nla_validate_parse: 2 callbacks suppressed
[  185.921474][T12788] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2233'.
[  186.017616][T12791] netlink: 'syz.1.2234': attribute type 13 has an invalid length.
[  186.020202][T12791] netlink: 'syz.1.2234': attribute type 17 has an invalid length.
[  186.031216][T12791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.052919][T12791] wg1 speed is unknown, defaulting to 1000
[  186.056087][T12791] lo speed is unknown, defaulting to 1000
[  186.090039][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.149493][T12791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.460058][T12818] ieee802154 phy0 wpan0: encryption failed: -22
[  186.783331][T12828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2244'.
[  186.787211][T12828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2244'.
[  186.790932][T12828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2244'.
[  186.794853][T12828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2244'.
[  187.413898][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  187.429035][T12854] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309
[  187.432308][T12854] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  187.439384][T12854] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  187.979395][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'.
[  188.085385][T12885] wg1 speed is unknown, defaulting to 1000
[  188.090372][T12885] lo speed is unknown, defaulting to 1000
[  188.888416][T12936] wg1 speed is unknown, defaulting to 1000
[  188.891443][T12936] lo speed is unknown, defaulting to 1000
[  188.934206][   T33] audit: type=1800 audit(1755791739.539:3): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2278" name="memory.events" dev="tmpfs" ino=3482 res=0 errno=0
[  189.211511][T12965] IPVS: set_ctl: invalid protocol: 135 172.20.20.58:20003
[  189.282419][T12972] wg1 speed is unknown, defaulting to 1000
[  189.285456][T12972] lo speed is unknown, defaulting to 1000
[  189.530201][T12990] wg1 speed is unknown, defaulting to 1000
[  189.534374][T12990] lo speed is unknown, defaulting to 1000
[  189.650946][T13001] netlink: 'syz.2.2299': attribute type 13 has an invalid length.
[  189.653519][T13001] netlink: 'syz.2.2299': attribute type 17 has an invalid length.
[  189.660334][T11222] lo speed is unknown, defaulting to 1000
[  189.662445][T11222] syz1: Port: 1 Link DOWN
[  189.665457][T13001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.702189][T13001] wg1 speed is unknown, defaulting to 1000
[  189.704646][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  189.708436][T13001] lo speed is unknown, defaulting to 1000
[  189.758310][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.790145][T13005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2300'.
[  189.817851][T13001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.614467][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  190.810031][T13029] netlink: 'syz.0.2309': attribute type 13 has an invalid length.
[  190.880770][T13041] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2312'.
[  191.746804][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'.
[  191.828379][T13069] wg1 speed is unknown, defaulting to 1000
[  191.832589][T13069] lo speed is unknown, defaulting to 1000
[  192.088919][T13086] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  192.320062][T13107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2334'.
[  192.402410][T13117] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  192.520040][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'.
[  192.523041][T13126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2341'.
[  192.628171][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.636346][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.640161][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.643721][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.649289][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.654137][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  192.671528][T13136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.681463][T13131] wg1 speed is unknown, defaulting to 1000
[  192.685078][T13131] lo speed is unknown, defaulting to 1000
[  192.760443][T13147] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  192.765300][T13147] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  192.769746][T13147] CPU: 0 UID: 0 PID: 13147 Comm: syz.0.2348 Not tainted syzkaller #0 PREEMPT(full) 
[  192.773642][T13147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.777958][T13147] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  192.780604][T13147] Code: 18 00 74 08 4c 89 ef e8 3d 31 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 30 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 31 02 f8 4d 89 2e 41 80 3c 1f 00
[  192.788834][T13147] RSP: 0018:ffffc90008047130 EFLAGS: 00010246
[  192.791458][T13147] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  192.794880][T13147] RDX: ffffc90003892000 RSI: 0000000000000aaf RDI: 0000000000000ab0
[  192.798297][T13147] RBP: ffff88811f46a8b0 R08: ffff8881055bd640 R09: 0000000000000002
[  192.801660][T13147] R10: 000000000000000a R11: 0000000000000002 R12: ffff88811f4684a8
[  192.804983][T13147] R13: ffff88811f46a8a8 R14: 0000000000000000 R15: 1ffff11023e8d096
[  192.808396][T13147] FS:  00007f3f3a1a96c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  192.812192][T13147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.815084][T13147] CR2: 0000555555c6c808 CR3: 000000012456c000 CR4: 00000000000006f0
[  192.818180][T13147] Call Trace:
[  192.819413][T13147]  <TASK>
[  192.820463][T13147]  xfrm_state_add+0x564/0xc40
[  192.822210][T13147]  xfrm_add_sa+0x35a1/0x4070
[  192.823916][T13147]  ? __pfx_xfrm_add_sa+0x10/0x10
[  192.825860][T13147]  ? apparmor_capable+0x137/0x1b0
[  192.827710][T13147]  ? __nla_parse+0x40/0x60
[  192.829293][T13147]  xfrm_user_rcv_msg+0x7a3/0xab0
[  192.831122][T13147]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  192.833260][T13147]  ? __pfx___mutex_trylock_common+0x10/0x10
[  192.835460][T13147]  ? rcu_is_watching+0x15/0xb0
[  192.837238][T13147]  ? trace_contention_end+0x39/0x120
[  192.839153][T13147]  ? __mutex_lock+0x335/0x1360
[  192.840799][T13147]  netlink_rcv_skb+0x208/0x470
[  192.842612][T13147]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  192.844565][T13147]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  192.846554][T13147]  ? netlink_deliver_tap+0x2e/0x1b0
[  192.848407][T13147]  ? netlink_deliver_tap+0x2e/0x1b0
[  192.850323][T13147]  xfrm_netlink_rcv+0x79/0x90
[  192.852093][T13147]  netlink_unicast+0x82f/0x9e0
[  192.853872][T13147]  ? __pfx_netlink_unicast+0x10/0x10
[  192.855876][T13147]  ? netlink_sendmsg+0x642/0xb30
[  192.857730][T13147]  ? skb_put+0x11b/0x210
[  192.859251][T13147]  netlink_sendmsg+0x805/0xb30
[  192.860930][T13147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.862910][T13147]  ? aa_sock_msg_perm+0xf1/0x1d0
[  192.864660][T13147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  192.866643][T13147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  192.868538][T13147]  __sock_sendmsg+0x21c/0x270
[  192.870246][T13147]  ____sys_sendmsg+0x505/0x830
[  192.871969][T13147]  ? __pfx_____sys_sendmsg+0x10/0x10
[  192.873904][T13147]  ? import_iovec+0x74/0xa0
[  192.875561][T13147]  ___sys_sendmsg+0x21f/0x2a0
[  192.877369][T13147]  ? __pfx____sys_sendmsg+0x10/0x10
[  192.879268][T13147]  ? __fget_files+0x2a/0x420
[  192.880861][T13147]  ? __fget_files+0x3a0/0x420
[  192.882508][T13147]  __x64_sys_sendmsg+0x19b/0x260
[  192.884307][T13147]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  192.886396][T13147]  ? rcu_is_watching+0x15/0xb0
[  192.888178][T13147]  ? do_syscall_64+0xbe/0x3b0
[  192.889886][T13147]  do_syscall_64+0xfa/0x3b0
[  192.891486][T13147]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.893457][T13147]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.895583][T13147]  ? exc_page_fault+0x9f/0xf0
[  192.897332][T13147]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.899387][T13147] RIP: 0033:0x7f3f3938ebe9
[  192.900940][T13147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.907728][T13147] RSP: 002b:00007f3f3a1a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  192.910714][T13147] RAX: ffffffffffffffda RBX: 00007f3f395b5fa0 RCX: 00007f3f3938ebe9
[  192.913833][T13147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  192.916970][T13147] RBP: 00007f3f39411e19 R08: 0000000000000000 R09: 0000000000000000
[  192.919663][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.922352][T13147] R13: 00007f3f395b6038 R14: 00007f3f395b5fa0 R15: 00007ffc324dd418
[  192.924977][T13147]  </TASK>
[  192.926005][T13147] Modules linked in:
[  192.927538][T13147] ---[ end trace 0000000000000000 ]---
[  192.929443][T13147] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  192.931457][T13147] Code: 18 00 74 08 4c 89 ef e8 3d 31 02 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 3a 30 02 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 11 31 02 f8 4d 89 2e 41 80 3c 1f 00
[  192.938008][T13147] RSP: 0018:ffffc90008047130 EFLAGS: 00010246
[  192.940044][T13147] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  192.942724][T13147] RDX: ffffc90003892000 RSI: 0000000000000aaf RDI: 0000000000000ab0
[  192.945428][T13147] RBP: ffff88811f46a8b0 R08: ffff8881055bd640 R09: 0000000000000002
[  192.948279][T13147] R10: 000000000000000a R11: 0000000000000002 R12: ffff88811f4684a8
[  192.950895][T13147] R13: ffff88811f46a8a8 R14: 0000000000000000 R15: 1ffff11023e8d096
[  192.953520][T13147] FS:  00007f3f3a1a96c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  192.956522][T13147] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  192.958852][T13147] CR2: 0000555555c6c808 CR3: 000000012456c000 CR4: 00000000000006f0
[  192.961576][T13147] Kernel panic - not syncing: Fatal exception in interrupt
[  192.964649][T13147] Kernel Offset: disabled
[  192.966107][T13147] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:55:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001664 RDI=0000000000001665 RBP=00000000000003f8 RSP=ffffc90008046970
R8 =ffff888021ad8237 R9 =1ffff1100435b046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af9901 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f3a1a96c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555555c6c808 CR3=000000012456c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1869812e53
XMM06=0000000000000000 00007f1869812e4d XMM07=0000000000000000 00007f1869812e61
XMM08=0000000000000000 00007f1869812ee7 XMM09=0000000000000000 00007f1869812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff89a1fa66 RBX=1ffff92000fa4ed4 RCX=0000000000000004 RDX=ffffc90007d27820
RSI=ffffc90007d27940 RDI=ffff88812c098e00 RBP=ffffc90007d277a8 RSP=ffffc90007d27658
R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000000 R11=ffffffff89a1b330
R12=dffffc0000000000 R13=ffffc90007d27940 R14=ffff88812c098e00 R15=ffffc90007d27820
RIP=ffffffff89a207a0 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9b2e1d06c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b2d374c40 CR3=00000000288f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffff000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f9b2e0ed100 00007f9b2d587460 XMM05=00007f9b2d587478 00007f9b2d5874c0
XMM06=00007f9b2d5874b8 00007f9b2d5874b0 XMM07=00007f9b2d5874a8 00007f9b2d5874a0
XMM08=0000000000000000 00007f9b2d412ee7 XMM09=0000000000000000 00007f9b2d412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
