last executing test programs:

49.629152155s ago: executing program 1 (id=1501):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
epoll_create1(0x0)
epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

49.540284752s ago: executing program 2 (id=1503):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a"], 0x1fc}}, 0x0)

49.489756133s ago: executing program 2 (id=1504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a100000000005000100060000000500050000000000050004000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x4000000)

49.432727071s ago: executing program 2 (id=1505):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'vlan0\x00', {0xb951}, 0x8})

48.723312352s ago: executing program 1 (id=1506):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000680), 0x4)

48.653115018s ago: executing program 1 (id=1507):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x31f}, 0x18)
socket$phonet(0x23, 0x2, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000006c0), 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000700)=r2, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x3}, 0xe)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000680), 0x9)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000bbbbbbbbfbbbaaaaaaaaaa3088a84d008100660086dd62639eff001011ff00000000000000000000ffffac1e0001ff0200000000000000000000000000010200000e000000004e204e230008907877a02270ac43d974836997d0c90b559f5b3919220cb15a3ee7f1c4d4692ac1cc217828c35b9e77cf91fffdb27b321c8b12ff67faacd953a14591fb631b4dc55c8df80e9b1d5d164e9141d3b093cd8260eafd261fa9ee112f2653affb22c58733ddd5476e7a"], 0x52)

46.272667821s ago: executing program 2 (id=1508):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x3c}}, 0x80)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10)

46.119605555s ago: executing program 0 (id=1509):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0)

46.056378461s ago: executing program 1 (id=1510):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0)=0x8, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x200048c0, &(0x7f0000000680)={0xa, 0x4e1f, 0x16d, @empty, 0x88}, 0x1c)

45.983234939s ago: executing program 0 (id=1511):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)

45.901655752s ago: executing program 0 (id=1512):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x44}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

45.901437132s ago: executing program 2 (id=1513):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r0, 0x0)

45.778377282s ago: executing program 2 (id=1514):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000080)='8', 0x1)
ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000000))
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

45.778151786s ago: executing program 0 (id=1515):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4)

45.71642211s ago: executing program 1 (id=1516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

45.400396562s ago: executing program 0 (id=1517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d04aabd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000240500001400128009000100626f6e64"], 0x34}}, 0x0)
connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc)

43.55838038s ago: executing program 1 (id=1518):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

39.088554007s ago: executing program 0 (id=1519):
syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0)

28.369059659s ago: executing program 32 (id=1514):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r0, 0x180000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r7, 0x6, 0xd, &(0x7f0000000080)='8', 0x1)
ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000000))
sendmsg$key(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

17.17869095s ago: executing program 33 (id=1519):
syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0)

0s ago: executing program 34 (id=1518):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44153' (ED25519) to the list of known hosts.
syzkaller login: [   56.016510][ T5815] cgroup: Unknown subsys name 'net'
[   56.192839][ T5815] cgroup: Unknown subsys name 'cpuset'
[   56.198479][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.743358][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.725367][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.729824][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.733058][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.736415][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.739725][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.803228][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.808956][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.812645][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.816407][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.820438][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.824211][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.827730][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.831360][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.860534][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.864453][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.990964][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   62.148816][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.152806][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.156287][ T5830] bridge_slave_0: entered allmulticast mode
[   62.160440][ T5830] bridge_slave_0: entered promiscuous mode
[   62.165954][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.168881][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.172474][ T5830] bridge_slave_1: entered allmulticast mode
[   62.176342][ T5830] bridge_slave_1: entered promiscuous mode
[   62.217495][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   62.225562][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   62.256047][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.264223][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.307672][ T5830] team0: Port device team_slave_0 added
[   62.336585][ T5830] team0: Port device team_slave_1 added
[   62.390572][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.393467][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.404426][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.411270][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.414158][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.424565][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.496724][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.501119][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.503592][ T5835] bridge_slave_0: entered allmulticast mode
[   62.506313][ T5835] bridge_slave_0: entered promiscuous mode
[   62.510089][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.512594][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.515557][ T5835] bridge_slave_1: entered allmulticast mode
[   62.520401][ T5835] bridge_slave_1: entered promiscuous mode
[   62.536779][ T5830] hsr_slave_0: entered promiscuous mode
[   62.540905][ T5830] hsr_slave_1: entered promiscuous mode
[   62.544147][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.547113][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.551626][ T5837] bridge_slave_0: entered allmulticast mode
[   62.554348][ T5837] bridge_slave_0: entered promiscuous mode
[   62.557365][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.559923][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.562932][ T5837] bridge_slave_1: entered allmulticast mode
[   62.566701][ T5837] bridge_slave_1: entered promiscuous mode
[   62.588542][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.618216][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.643038][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.678691][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.688439][ T5835] team0: Port device team_slave_0 added
[   62.693207][ T5835] team0: Port device team_slave_1 added
[   62.739243][ T5837] team0: Port device team_slave_0 added
[   62.747329][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.750877][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.761468][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.767483][ T5837] team0: Port device team_slave_1 added
[   62.787218][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.790796][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.801792][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.815097][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.817399][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.827347][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.841758][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.844616][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.853242][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.931428][ T5835] hsr_slave_0: entered promiscuous mode
[   62.934876][ T5835] hsr_slave_1: entered promiscuous mode
[   62.937739][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.941729][ T5835] Cannot create hsr debugfs directory
[   62.947045][ T5837] hsr_slave_0: entered promiscuous mode
[   62.950714][ T5837] hsr_slave_1: entered promiscuous mode
[   62.953073][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.955475][ T5837] Cannot create hsr debugfs directory
[   63.087853][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.104619][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.127041][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.132560][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.205074][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.212953][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.218410][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.223658][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.277187][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.283787][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.290723][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.296626][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.340684][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.373307][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   63.383721][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.386291][ T4626] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.397138][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.400243][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.405643][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.429985][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   63.437125][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.450378][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.452751][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.465934][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.468979][ T4626] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.480143][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.496852][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   63.517876][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.520629][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.537160][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.539922][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.627467][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.696074][ T5830] veth0_vlan: entered promiscuous mode
[   63.703039][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.709020][ T5830] veth1_vlan: entered promiscuous mode
[   63.730144][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.750178][ T5841] Bluetooth: hci0: command tx timeout
[   63.767861][ T5830] veth0_macvtap: entered promiscuous mode
[   63.776010][ T5830] veth1_macvtap: entered promiscuous mode
[   63.783036][ T5835] veth0_vlan: entered promiscuous mode
[   63.787976][ T5835] veth1_vlan: entered promiscuous mode
[   63.816183][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.826192][ T5837] veth0_vlan: entered promiscuous mode
[   63.830131][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.847625][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.853226][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.861209][ T5837] veth1_vlan: entered promiscuous mode
[   63.866336][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.872887][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.886628][ T5835] veth0_macvtap: entered promiscuous mode
[   63.897917][ T5835] veth1_macvtap: entered promiscuous mode
[   63.909579][ T5841] Bluetooth: hci2: command tx timeout
[   63.909734][   T55] Bluetooth: hci1: command tx timeout
[   63.937939][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.946825][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.953623][ T5837] veth0_macvtap: entered promiscuous mode
[   63.967823][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.973178][ T5837] veth1_macvtap: entered promiscuous mode
[   63.984333][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.987851][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.996347][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.002851][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.008481][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.035600][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.049530][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.054434][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.058228][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.082789][ T5698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.086477][ T5698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.120315][ T5698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.126084][ T5698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.131116][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.134533][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.155298][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.166447][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.169477][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.227368][ T4960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.235756][ T4960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.257845][ T4626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.262954][ T4626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.317280][ T5899] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   64.343387][ T5901] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.510269][ T5913] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.516224][ T5913] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.732652][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'.
[   64.736409][ T5924] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   64.791969][ T5924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13'.
[   64.796019][ T5924] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   65.281132][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'.
[   65.401679][ T5942] hsr_slave_1 (unregistering): left promiscuous mode
[   65.411963][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   65.415251][ T5947] netlink: 312 bytes leftover after parsing attributes in process `syz.0.25'.
[   65.419134][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   65.829630][   T55] Bluetooth: hci0: command tx timeout
[   65.990086][   T55] Bluetooth: hci1: command tx timeout
[   65.999511][   T55] Bluetooth: hci2: command tx timeout
[   66.301861][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.47'.
[   66.308745][ T6016] pim6reg: entered allmulticast mode
[   66.322052][ T6016] pim6reg: left allmulticast mode
[   66.427756][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'.
[   66.578517][ T6040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'.
[   66.585205][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'.
[   66.588298][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.601428][ T6042] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   66.604814][ T6042] netlink: 'syz.0.57': attribute type 3 has an invalid length.
[   66.656748][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.898916][ T6091] syzkaller1: entered promiscuous mode
[   67.903921][ T6091] syzkaller1: entered allmulticast mode
[   67.909622][   T55] Bluetooth: hci0: command tx timeout
[   68.074974][   T55] Bluetooth: hci2: command tx timeout
[   68.075010][ T5841] Bluetooth: hci1: command tx timeout
[   68.894041][ T6140] netlink: 'syz.0.99': attribute type 1 has an invalid length.
[   68.898018][ T6140] netlink: 'syz.0.99': attribute type 2 has an invalid length.
[   69.007502][  T789] cfg80211: failed to load regulatory.db
[   69.271837][ T6164] bridge_slave_0: left allmulticast mode
[   69.274288][ T6164] bridge_slave_0: left promiscuous mode
[   69.277803][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.315699][ T6164] bridge_slave_1: left allmulticast mode
[   69.317536][ T6164] bridge_slave_1: left promiscuous mode
[   69.330495][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.355113][ T6164] bond0: (slave bond_slave_0): Releasing backup interface
[   69.371894][ T6164] bond0: (slave bond_slave_1): Releasing backup interface
[   69.386661][ T6164] team0: Port device team_slave_0 removed
[   69.391980][ T6164] team0: Port device team_slave_1 removed
[   69.394205][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.396924][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.405722][ T6164] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.408642][ T6164] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.640819][ T6189] syz.2.122 uses obsolete (PF_INET,SOCK_PACKET)
[   69.656693][ T6189] syzkaller1: entered promiscuous mode
[   69.658754][ T6189] syzkaller1: entered allmulticast mode
[   69.668648][ T6189] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   69.926877][ T6202] xt_SECMARK: invalid mode: 0
[   69.990298][ T5841] Bluetooth: hci0: command tx timeout
[   70.149487][ T5841] Bluetooth: hci2: command tx timeout
[   70.159445][ T5841] Bluetooth: hci1: command tx timeout
[   70.432146][ T6237] veth0: entered promiscuous mode
[   70.443009][ T6237] __nla_validate_parse: 5 callbacks suppressed
[   70.443023][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'.
[   70.518348][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'.
[   71.274574][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.279808][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.423690][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[   71.505856][ T6268] lo speed is unknown, defaulting to 1000
[   71.507777][ T6268] lo speed is unknown, defaulting to 1000
[   71.512112][ T6268] lo speed is unknown, defaulting to 1000
[   71.519624][ T6268] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.528959][ T6268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   71.541775][ T6270] Zero length message leads to an empty skb
[   71.550309][ T6268] lo speed is unknown, defaulting to 1000
[   71.554216][ T6268] lo speed is unknown, defaulting to 1000
[   71.557802][ T6268] lo speed is unknown, defaulting to 1000
[   71.705025][ T5893] IPVS: starting estimator thread 0...
[   71.800865][ T6281] IPVS: using max 80 ests per chain, 192000 per kthread
[   72.230617][   T55] Bluetooth: hci2: command tx timeout
[   72.282027][ T6337] nbd: must specify at least one socket
[   72.417695][ T6353] IPv6: addrconf: prefix option has invalid lifetime
[   72.982580][ T6401] netlink: 'syz.2.206': attribute type 10 has an invalid length.
[   73.023211][ T6401] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.044980][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.578649][ T6401] syz.2.206 (6401) used greatest stack depth: 20632 bytes left
[   73.796618][ T6475] tipc: Started in network mode
[   73.798585][ T6475] tipc: Node identity 7, cluster identity 4711
[   73.809296][ T6475] tipc: Node number set to 7
[   73.861275][ T6483] netlink: 72 bytes leftover after parsing attributes in process `syz.2.242'.
[   73.917072][ T6487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.920126][ T6487] syzkaller0: entered promiscuous mode
[   73.922181][ T6487] syzkaller0: entered allmulticast mode
[   73.956883][ T6487] tipc: Resetting bearer <eth:syzkaller0>
[   73.965590][ T6486] tipc: Resetting bearer <eth:syzkaller0>
[   73.982096][ T6486] tipc: Disabling bearer <eth:syzkaller0>
[   74.319396][ T6529] tipc: Started in network mode
[   74.321656][ T6529] tipc: Node identity 168bf7bbf3fc, cluster identity 4711
[   74.324848][ T6529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.328211][ T6529] syzkaller0: entered promiscuous mode
[   74.338023][ T6529] syzkaller0: entered allmulticast mode
[   74.358226][ T6529] tipc: Resetting bearer <eth:syzkaller0>
[   74.363672][ T6527] tipc: Resetting bearer <eth:syzkaller0>
[   74.372757][ T6527] tipc: Disabling bearer <eth:syzkaller0>
[   74.966411][ T6578] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[   75.097941][ T6584] lo speed is unknown, defaulting to 1000
[   75.286382][ T6599] netlink: 336 bytes leftover after parsing attributes in process `syz.2.297'.
[   75.337877][ T6601] tap0: tun_chr_ioctl cmd 1074025677
[   75.340592][ T6601] tap0: linktype set to 802
[   77.156709][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[   77.610714][ T6698] netlink: 80 bytes leftover after parsing attributes in process `syz.1.338'.
[   77.651112][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[   77.993363][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'.
[   78.431927][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'.
[   78.805456][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'.
[   79.282048][ T6785] Driver unsupported XDP return value 0 on prog  (id 71) dev N/A, expect packet loss!
[   79.365819][ T6787] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   79.777818][ T6813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'.
[   80.001053][ T6837] netlink: 'syz.0.401': attribute type 15 has an invalid length.
[   80.023381][ T6837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'.
[   80.773203][ T6862] bond0: entered promiscuous mode
[   80.775369][ T6862] bond_slave_0: entered promiscuous mode
[   80.777887][ T6862] bond_slave_1: entered promiscuous mode
[   80.796547][ T6862] batadv0: entered promiscuous mode
[   80.804646][ T6862] hsr1: entered allmulticast mode
[   80.806886][ T6862] bond0: entered allmulticast mode
[   80.809028][ T6862] bond_slave_0: entered allmulticast mode
[   80.820197][ T6862] bond_slave_1: entered allmulticast mode
[   80.828992][ T6862] batadv0: entered allmulticast mode
[   80.832029][ T6862] 8021q: adding VLAN 0 to HW filter on device hsr1
[   80.841264][ T6862] bond0: left promiscuous mode
[   80.843527][ T6862] bond_slave_0: left promiscuous mode
[   80.846059][ T6862] bond_slave_1: left promiscuous mode
[   80.860571][ T6862] batadv0: left promiscuous mode
[   81.544117][ T6913] tipc: Started in network mode
[   81.546191][ T6913] tipc: Node identity 6e4bfc8cf376, cluster identity 4711
[   81.548969][ T6913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.561159][ T6913] syzkaller0: entered promiscuous mode
[   81.562937][ T6913] syzkaller0: entered allmulticast mode
[   81.596065][ T6913] tipc: Resetting bearer <eth:syzkaller0>
[   81.612302][ T6912] tipc: Resetting bearer <eth:syzkaller0>
[   81.625418][ T6912] tipc: Disabling bearer <eth:syzkaller0>
[   81.866728][ T6947] netlink: 'syz.0.452': attribute type 1 has an invalid length.
[   81.987787][ T6956] lo speed is unknown, defaulting to 1000
[   82.036314][ T6961] lo speed is unknown, defaulting to 1000
[   82.292273][ T6983] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   82.335141][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.358230][ T6983] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.360902][ T6983] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   82.366389][ T6983] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   82.408461][ T6985] veth1: entered promiscuous mode
[   82.415378][ T6985] bond1: (slave veth1): Enslaving as an active interface with a down link
[   82.420912][ T6983] erspan0: entered allmulticast mode
[   82.474634][ T6983] netlink: 'syz.2.466': attribute type 11 has an invalid length.
[   82.568442][ T6991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.593849][ T6991] syzkaller0: entered promiscuous mode
[   82.595913][ T6991] syzkaller0: entered allmulticast mode
[   82.598315][ T6991] tipc: Resetting bearer <eth:syzkaller0>
[   82.617753][ T6990] tipc: Resetting bearer <eth:syzkaller0>
[   83.438048][ T6990] tipc: Disabling bearer <eth:syzkaller0>
[   83.452820][ T7012] syzkaller1: entered promiscuous mode
[   83.457202][ T7012] syzkaller1: entered allmulticast mode
[   83.485272][ T7017] netlink: 56 bytes leftover after parsing attributes in process `syz.1.479'.
[   83.667829][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'.
[   83.903416][ T7050] netlink: 208 bytes leftover after parsing attributes in process `syz.0.495'.
[   83.942412][ T7054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.448082][ T7129] netlink: 'syz.1.531': attribute type 10 has an invalid length.
[   85.453105][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.531'.
[   85.462296][ T7129] batadv0: entered promiscuous mode
[   85.473070][ T7129] bridge0: port 3(batadv0) entered blocking state
[   85.475933][ T7129] bridge0: port 3(batadv0) entered disabled state
[   85.481766][ T7129] bridge0: port 3(batadv0) entered blocking state
[   85.484666][ T7129] bridge0: port 3(batadv0) entered forwarding state
[   85.558202][ T7135] syz_tun: entered allmulticast mode
[   85.583935][ T7134] syz_tun: left allmulticast mode
[   85.665316][ T7141] lo speed is unknown, defaulting to 1000
[   85.769557][ T5698] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   85.772839][ T5698] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   85.814231][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[   86.853464][ T7162] netlink: 'syz.1.547': attribute type 12 has an invalid length.
[   86.856417][ T7162] netlink: 'syz.1.547': attribute type 29 has an invalid length.
[   86.858890][ T7162] netlink: 148 bytes leftover after parsing attributes in process `syz.1.547'.
[   86.867515][ T7160] netlink: 68 bytes leftover after parsing attributes in process `syz.0.545'.
[   88.232745][ T7218] netlink: 248 bytes leftover after parsing attributes in process `syz.1.572'.
[   88.311809][ T7224] xfrm0: entered promiscuous mode
[   88.314026][ T7224] xfrm0: entered allmulticast mode
[   88.351026][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'.
[   88.495814][ T7239] netlink: 26 bytes leftover after parsing attributes in process `syz.0.583'.
[   88.525006][ T7243] netlink: 'syz.0.586': attribute type 10 has an invalid length.
[   88.535917][ T7243] 8021q: adding VLAN 0 to HW filter on device team0
[   88.540447][ T7243] bond0: (slave team0): Enslaving as an active interface with an up link
[   88.606089][ T7247] netlink: 248 bytes leftover after parsing attributes in process `syz.2.587'.
[   88.610107][ T7247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.587'.
[   88.618933][ T7247] lo speed is unknown, defaulting to 1000
[   88.623764][ T7247] lo speed is unknown, defaulting to 1000
[   88.627117][ T7247] lo speed is unknown, defaulting to 1000
[   88.681248][ T7254] erspan0: left allmulticast mode
[   88.761662][ T7254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.898680][ T7247] infiniband syz0: set active
[   88.901166][ T7247] infiniband syz0: added lo
[   88.909655][ T5893] lo speed is unknown, defaulting to 1000
[   88.945062][ T7247] RDS/IB: syz0: added
[   88.947304][ T7247] smc: adding ib device syz0 with port count 1
[   88.950654][ T7247] smc:    ib device syz0 port 1 has pnetid 
[   88.955095][ T7247] lo speed is unknown, defaulting to 1000
[   89.093187][ T5893] lo speed is unknown, defaulting to 1000
[   89.168754][ T7247] lo speed is unknown, defaulting to 1000
[   89.310566][ T7247] lo speed is unknown, defaulting to 1000
[   89.435079][ T7247] syz.2.587 (7247) used greatest stack depth: 20064 bytes left
[   89.537873][ T5847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.549537][ T5847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.560361][ T5847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.564246][ T5847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.866675][ T7353] netlink: 'syz.2.637': attribute type 9 has an invalid length.
[   89.877340][ T7353] netlink: 'syz.2.637': attribute type 7 has an invalid length.
[   89.886124][ T7353] netlink: 'syz.2.637': attribute type 8 has an invalid length.
[   89.895092][ T7355] netlink: 14 bytes leftover after parsing attributes in process `syz.0.638'.
[   90.021390][ T7355] bond0 (unregistering): (slave team0): Releasing backup interface
[   90.034385][ T7355] bond0 (unregistering): Released all slaves
[   90.195431][ T7372] sctp: [Deprecated]: syz.2.645 (pid 7372) Use of struct sctp_assoc_value in delayed_ack socket option.
[   90.195431][ T7372] Use struct sctp_sack_info instead
[   90.552902][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'.
[   90.663616][ T7428] netlink: 'syz.1.668': attribute type 1 has an invalid length.
[   90.666112][ T7428] netlink: 224 bytes leftover after parsing attributes in process `syz.1.668'.
[   90.868031][ T7458] Bluetooth: MGMT ver 1.23
[   90.874032][ T7450] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   90.993339][ T7475] netlink: 'syz.1.685': attribute type 13 has an invalid length.
[   90.996056][ T7475] netlink: 'syz.1.685': attribute type 17 has an invalid length.
[   91.086158][ T7475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.093253][  T789] lo speed is unknown, defaulting to 1000
[   91.103284][ T7463] lo speed is unknown, defaulting to 1000
[   91.106223][ T7463] lo speed is unknown, defaulting to 1000
[   91.171433][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.187852][ T7491] netlink: 27 bytes leftover after parsing attributes in process `syz.0.695'.
[   91.232752][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.301505][ T7475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.747740][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[   91.906354][ T7568] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.005214][ T7576] netlink: 'syz.1.733': attribute type 12 has an invalid length.
[   92.008581][ T7576] netlink: 'syz.1.733': attribute type 29 has an invalid length.
[   92.014434][ T7576] netlink: 148 bytes leftover after parsing attributes in process `syz.1.733'.
[   92.059687][ T7578] netlink: 'syz.0.735': attribute type 1 has an invalid length.
[   92.062842][ T7578] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.735'.
[   92.343844][ T7608] netlink: 'syz.0.746': attribute type 21 has an invalid length.
[   92.349366][ T7608] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[   92.951653][   T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   92.972119][ T7659] ieee802154 phy0 wpan0: encryption failed: -22
[   92.996364][ T7661] netlink: 'syz.0.770': attribute type 9 has an invalid length.
[   93.002193][ T7661] netlink: 'syz.0.770': attribute type 6 has an invalid length.
[   94.188337][ T7694] lo: entered allmulticast mode
[   94.191235][ T7697] lo: left allmulticast mode
[   94.474600][ T7728] __nla_validate_parse: 3 callbacks suppressed
[   94.474610][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[   94.489744][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.
[   95.707000][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[   95.716129][ T7773] bridge_slave_1: left allmulticast mode
[   95.718216][ T7773] bridge_slave_1: left promiscuous mode
[   95.720888][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.725839][ T7773] bridge_slave_0: left allmulticast mode
[   95.727796][ T7773] bridge_slave_0: left promiscuous mode
[   95.733301][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.926439][ T7800] netlink: 'syz.2.831': attribute type 3 has an invalid length.
[   96.133720][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'.
[   96.249541][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'.
[   96.263615][ T7839] veth1_macvtap: left promiscuous mode
[   96.300594][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'.
[   96.303630][ T7848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.852'.
[   97.588730][ T7902] netlink: 'syz.1.876': attribute type 10 has an invalid length.
[   97.592454][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.876'.
[   97.601946][ T7902] team0: Port device geneve0 added
[   98.161069][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'.
[   98.447436][ T7976] lo speed is unknown, defaulting to 1000
[   98.457375][ T7976] lo speed is unknown, defaulting to 1000
[   98.570777][ T7990] netlink: 'syz.0.915': attribute type 1 has an invalid length.
[   98.581147][ T7992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.916'.
[   99.342419][ T8049] gretap0: entered promiscuous mode
[   99.344393][ T8049] vlan2: entered promiscuous mode
[   99.612702][ T8078] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   99.619842][ T8078] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.391077][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'.
[  100.644560][ T8148] netlink: 104 bytes leftover after parsing attributes in process `syz.1.987'.
[  101.045243][ T8164] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  101.048563][ T8164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  101.304285][ T8181] lo speed is unknown, defaulting to 1000
[  101.307398][ T8181] lo speed is unknown, defaulting to 1000
[  101.560000][ T8180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.589651][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  103.086818][ T8227] : renamed from pim6reg1
[  103.185269][ T8231] netlink: 'syz.2.1022': attribute type 10 has an invalid length.
[  103.194681][ T8233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1021'.
[  103.201984][ T8231] batman_adv: batadv0: Adding interface: team0
[  103.204509][ T8231] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.213292][ T8231] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  103.225240][ T8231] netlink: 'syz.2.1022': attribute type 10 has an invalid length.
[  103.228613][ T8231] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1022'.
[  103.242828][ T8231] team0: entered promiscuous mode
[  103.245937][ T8231] team_slave_0: entered promiscuous mode
[  103.247881][ T8231] team_slave_1: entered promiscuous mode
[  103.253829][ T8231] 8021q: adding VLAN 0 to HW filter on device team0
[  103.256279][ T8231] batman_adv: batadv0: Interface activated: team0
[  103.258462][ T8231] batman_adv: batadv0: Interface deactivated: team0
[  103.261161][ T8231] batman_adv: batadv0: Removing interface: team0
[  103.369628][ T8242] team0: left promiscuous mode
[  103.371242][ T8242] team_slave_0: left promiscuous mode
[  103.375198][ T8242] team_slave_1: left promiscuous mode
[  103.376719][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'.
[  103.384432][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'.
[  103.448430][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.457019][ T8242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.526791][ T8242] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  103.542364][ T8242] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  103.554048][ T8242] veth1: left promiscuous mode
[  103.562022][ T5893] lo speed is unknown, defaulting to 1000
[  103.565139][ T5893] syz0: Port: 1 Link DOWN
[  103.574653][ T5698] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.579717][ T5893] lo speed is unknown, defaulting to 1000
[  103.589421][ T5698] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.593160][ T5698] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.599728][ T5698] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.808981][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'.
[  103.998833][ T8294] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1051'.
[  104.173121][ T8325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  104.408940][ T8354] netlink: 'syz.0.1080': attribute type 10 has an invalid length.
[  104.431793][ T8354] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1080'.
[  104.441219][ T8354] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1080'.
[  104.446146][ T8354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.452781][ T8354] netlink: 'syz.0.1080': attribute type 12 has an invalid length.
[  104.749370][ T8378] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  105.556255][ T8443] __nla_validate_parse: 3 callbacks suppressed
[  105.556269][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'.
[  105.602222][ T8445] netlink: 'syz.0.1124': attribute type 11 has an invalid length.
[  105.625942][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1124'.
[  105.919520][ T8458] block nbd0: server does not support multiple connections per device.
[  105.928444][ T8458] block nbd0: shutting down sockets
[  105.983604][ T8464] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  106.284557][ T8486] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  106.325897][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'.
[  106.386577][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1146'.
[  106.391568][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1147'.
[  106.435131][ T8498] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1149'.
[  106.499257][ T5698] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.016183][ T8553] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  107.060797][ T8556] lo speed is unknown, defaulting to 1000
[  107.064969][ T8556] lo speed is unknown, defaulting to 1000
[  107.837303][ T8585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1184'.
[  108.309724][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  108.537296][ T8633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.539941][ T8633] syzkaller0: entered promiscuous mode
[  108.542035][ T8633] syzkaller0: entered allmulticast mode
[  108.560484][ T8633] tipc: Resetting bearer <eth:syzkaller0>
[  108.563498][ T8632] tipc: Resetting bearer <eth:syzkaller0>
[  108.570671][ T8632] tipc: Disabling bearer <eth:syzkaller0>
[  108.987137][ T8658] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.226906][ T8676] netlink: 'syz.1.1225': attribute type 1 has an invalid length.
[  109.230342][ T8676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1225'.
[  109.354415][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'.
[  109.738918][ T8732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1251'.
[  109.748316][ T8729] lo speed is unknown, defaulting to 1000
[  109.753184][ T8729] lo speed is unknown, defaulting to 1000
[  110.638677][ T8782] netlink: 'syz.2.1273': attribute type 1 has an invalid length.
[  110.643890][ T8782] __nla_validate_parse: 6 callbacks suppressed
[  110.643902][ T8782] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1273'.
[  110.771221][ T8792] xt_CT: No such helper "snmp"
[  110.806648][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'.
[  110.825317][ T8782] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  110.918498][ T8802] lo speed is unknown, defaulting to 1000
[  110.922391][ T8802] lo speed is unknown, defaulting to 1000
[  110.967459][ T8808] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1283'.
[  111.281100][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'.
[  111.463496][ T8832] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.467850][ T8832] 8021q: adding VLAN 0 to HW filter on device team0
[  111.476210][ T8832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.490495][  T789] lo speed is unknown, defaulting to 1000
[  111.496886][  T789] syz0: Port: 1 Link ACTIVE
[  111.506887][  T789] lo speed is unknown, defaulting to 1000
[  111.550703][ T8841] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1298'.
[  111.654084][ T8847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1301'.
[  111.694579][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'.
[  111.960198][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'.
[  112.290925][ T8900] netlink: 'syz.2.1327': attribute type 1 has an invalid length.
[  112.371640][ T5893] IPVS: starting estimator thread 0...
[  112.459331][ T8907] IPVS: using max 57 ests per chain, 136800 per kthread
[  112.535355][ T8921] vlan2: entered promiscuous mode
[  112.537465][ T8921] team0: entered promiscuous mode
[  112.539940][ T8921] team_slave_0: entered promiscuous mode
[  112.542652][ T8921] team_slave_1: entered promiscuous mode
[  112.665431][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'.
[  112.897365][ T8943] tap0: tun_chr_ioctl cmd 35108
[  113.660439][ T8967] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1356'.
[  115.382588][ T9032] netlink: 'syz.2.1383': attribute type 13 has an invalid length.
[  115.385695][ T9032] netlink: 'syz.2.1383': attribute type 17 has an invalid length.
[  115.559036][ T9032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.609983][ T9043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.636763][ T9032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.692533][ T9047] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  115.804994][ T9052] bridge0: port 3(batadv0) entered disabled state
[  115.822527][ T9052] bridge_slave_0: left allmulticast mode
[  115.827815][ T9052] bridge_slave_0: left promiscuous mode
[  115.836859][ T9052] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.851157][ T9052] bridge_slave_1: left allmulticast mode
[  115.853196][ T9052] bridge_slave_1: left promiscuous mode
[  115.855540][ T9052] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.885967][ T9052] bond0: (slave bond_slave_0): Releasing backup interface
[  115.890447][ T9052] bond_slave_0: left allmulticast mode
[  115.901545][ T9052] bond0: (slave bond_slave_1): Releasing backup interface
[  115.908860][ T9052] bond_slave_1: left allmulticast mode
[  115.922541][ T9052] team0: Port device team_slave_0 removed
[  115.943911][ T9052] team0: Port device team_slave_1 removed
[  115.947276][ T9052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.951196][ T9052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.003979][ T9052] team0: Port device geneve0 removed
[  116.034782][ T9054] bridge0: entered promiscuous mode
[  116.224306][ T9071] lo speed is unknown, defaulting to 1000
[  116.227157][ T9071] lo speed is unknown, defaulting to 1000
[  116.299367][ T9074] __nla_validate_parse: 1 callbacks suppressed
[  116.299378][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1401'.
[  116.325703][ T9074] syz_tun: entered promiscuous mode
[  116.330128][ T9074] macvtap1: entered promiscuous mode
[  116.334408][ T9074] macvtap1: entered allmulticast mode
[  116.338887][ T9074] syz_tun: entered allmulticast mode
[  116.359438][ T9074] syz_tun: left allmulticast mode
[  116.361544][ T9074] syz_tun: left promiscuous mode
[  118.224849][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1421'.
[  118.251311][ T9124] vlan2: entered promiscuous mode
[  118.446842][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  118.460490][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'.
[  118.469456][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  118.475854][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'.
[  118.861919][ T9148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.870043][ T9148] syzkaller0: entered promiscuous mode
[  118.874628][ T9148] syzkaller0: entered allmulticast mode
[  118.947302][ T9148] tipc: Resetting bearer <eth:syzkaller0>
[  118.970892][ T9147] tipc: Resetting bearer <eth:syzkaller0>
[  119.497622][ T9147] tipc: Disabling bearer <eth:syzkaller0>
[  119.648330][ T9161] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1438'.
[  119.896390][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'.
[  120.276901][ T9181] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  120.783246][ T9203] vlan2: entered promiscuous mode
[  120.785072][ T9203] bridge0: entered promiscuous mode
[  120.786829][ T9203] vlan2: entered allmulticast mode
[  120.788677][ T9203] bridge0: entered allmulticast mode
[  121.036379][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'.
[  121.042143][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'.
[  121.051876][ T9205] ip6tnl1: entered promiscuous mode
[  121.054319][ T9205] ip6tnl1: entered allmulticast mode
[  121.844646][ T9229] netlink: 'syz.0.1470': attribute type 1 has an invalid length.
[  121.926035][ T9229] bond0 (unregistering): Released all slaves
[  122.127699][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'.
[  122.377529][ T9256] netlink: 'syz.0.1480': attribute type 4 has an invalid length.
[  122.390165][ T9256] netlink: 'syz.0.1480': attribute type 4 has an invalid length.
[  123.195015][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1494'.
[  123.199054][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1494'.
[  123.206466][ T9287] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1494'.
[  123.314154][ T9291] ip6gretap1: entered promiscuous mode
[  124.264803][ T9296] syzkaller0: entered promiscuous mode
[  124.267279][ T9296] syzkaller0: entered allmulticast mode
[  125.549211][    C0] sched: DL replenish lagged too much
[  128.896510][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'.
[  130.015785][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'.
[  133.002545][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.300544][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  206.573675][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  245.349967][    C0] ==================================================================
[  245.352795][    C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  245.355790][    C0] Read of size 2 at addr ffff888038b5f42a by task kworker/u9:3/85
[  245.359632][    C0] 
[  245.360528][    C0] CPU: 0 UID: 0 PID: 85 Comm: kworker/u9:3 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2-dirty #0 PREEMPT(full) 
[  245.360539][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.360544][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  245.360557][    C0] Call Trace:
[  245.360562][    C0]  <IRQ>
[  245.360566][    C0]  dump_stack_lvl+0x189/0x250
[  245.360577][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.360586][    C0]  ? __kasan_check_byte+0x12/0x40
[  245.360619][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.360626][    C0]  ? rcu_is_watching+0x15/0xb0
[  245.360633][    C0]  ? lock_release+0x4b/0x3e0
[  245.360640][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  245.360649][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  245.360657][    C0]  print_report+0xca/0x230
[  245.360663][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.360672][    C0]  kasan_report+0x118/0x150
[  245.360681][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.360691][    C0]  rose_timer_expiry+0x471/0x4b0
[  245.360700][    C0]  call_timer_fn+0x17e/0x5f0
[  245.360707][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.360715][    C0]  ? call_timer_fn+0xbe/0x5f0
[  245.360721][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  245.360729][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.360738][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.360747][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.360756][    C0]  __run_timer_base+0x61a/0x860
[  245.360768][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  245.360779][    C0]  run_timer_softirq+0xb7/0x180
[  245.360789][    C0]  handle_softirqs+0x286/0x870
[  245.360797][    C0]  ? do_softirq+0xec/0x180
[  245.360804][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  245.360812][    C0]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  245.360820][    C0]  do_softirq+0xec/0x180
[  245.360830][    C0]  </IRQ>
[  245.360834][    C0]  <TASK>
[  245.360838][    C0]  ? __pfx_do_softirq+0x10/0x10
[  245.360848][    C0]  ? devlink_trap_report+0x216/0x6a0
[  245.360861][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  245.360867][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  245.360874][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  245.360881][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  245.360890][    C0]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  245.360897][    C0]  nsim_dev_trap_report_work+0x7c7/0xb80
[  245.360907][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  245.360919][    C0]  process_scheduled_works+0xae1/0x17b0
[  245.360937][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  245.360952][    C0]  worker_thread+0x8a0/0xda0
[  245.360961][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.360970][    C0]  ? __kthread_parkme+0x7b/0x200
[  245.360979][    C0]  kthread+0x711/0x8a0
[  245.360987][    C0]  ? __pfx_worker_thread+0x10/0x10
[  245.360994][    C0]  ? __pfx_kthread+0x10/0x10
[  245.361002][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.361010][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.361018][    C0]  ? __pfx_kthread+0x10/0x10
[  245.361028][    C0]  ret_from_fork+0x3fc/0x770
[  245.361039][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  245.361051][    C0]  ? __switch_to_asm+0x39/0x70
[  245.361063][    C0]  ? __switch_to_asm+0x33/0x70
[  245.361074][    C0]  ? __pfx_kthread+0x10/0x10
[  245.361083][    C0]  ret_from_fork_asm+0x1a/0x30
[  245.361093][    C0]  </TASK>
[  245.361096][    C0] 
[  245.477065][    C0] Allocated by task 5907:
[  245.478477][    C0]  kasan_save_track+0x3e/0x80
[  245.479993][    C0]  __kasan_kmalloc+0x93/0xb0
[  245.481464][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  245.483234][    C0]  rose_add_node+0x23a/0xde0
[  245.484950][    C0]  rose_rt_ioctl+0xa48/0xfb0
[  245.486495][    C0]  rose_ioctl+0x3ce/0x8b0
[  245.488114][    C0]  sock_do_ioctl+0xdc/0x300
[  245.489937][    C0]  sock_ioctl+0x576/0x790
[  245.491643][    C0]  __se_sys_ioctl+0xfc/0x170
[  245.493528][    C0]  do_syscall_64+0xfa/0x3b0
[  245.495324][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.497370][    C0] 
[  245.498187][    C0] Freed by task 8980:
[  245.499631][    C0]  kasan_save_track+0x3e/0x80
[  245.501156][    C0]  kasan_save_free_info+0x46/0x50
[  245.502887][    C0]  __kasan_slab_free+0x62/0x70
[  245.505017][    C0]  kfree+0x18e/0x440
[  245.506770][    C0]  rose_rt_device_down+0x473/0x4c0
[  245.509057][    C0]  rose_device_event+0x603/0x6a0
[  245.511201][    C0]  notifier_call_chain+0x1b6/0x3e0
[  245.513448][    C0]  __dev_notify_flags+0x18d/0x2e0
[  245.515698][    C0]  netif_change_flags+0xe8/0x1a0
[  245.517935][    C0]  dev_change_flags+0x130/0x260
[  245.520006][    C0]  dev_ioctl+0x7b4/0x1150
[  245.521550][    C0]  sock_do_ioctl+0x22c/0x300
[  245.523312][    C0]  sock_ioctl+0x576/0x790
[  245.525152][    C0]  __se_sys_ioctl+0xfc/0x170
[  245.526772][    C0]  do_syscall_64+0xfa/0x3b0
[  245.528425][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.530960][    C0] 
[  245.532032][    C0] The buggy address belongs to the object at ffff888038b5f400
[  245.532032][    C0]  which belongs to the cache kmalloc-512 of size 512
[  245.537277][    C0] The buggy address is located 42 bytes inside of
[  245.537277][    C0]  freed 512-byte region [ffff888038b5f400, ffff888038b5f600)
[  245.542323][    C0] 
[  245.543410][    C0] The buggy address belongs to the physical page:
[  245.546170][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888038b5f400 pfn:0x38b5c
[  245.549918][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  245.552959][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  245.555887][    C0] page_type: f5(slab)
[  245.557399][    C0] raw: 00fff00000000240 ffff88801a441c80 ffffea0000a0c110 ffffea0000e61610
[  245.560813][    C0] raw: ffff888038b5f400 000000000010000e 00000000f5000000 0000000000000000
[  245.564126][    C0] head: 00fff00000000240 ffff88801a441c80 ffffea0000a0c110 ffffea0000e61610
[  245.567744][    C0] head: ffff888038b5f400 000000000010000e 00000000f5000000 0000000000000000
[  245.570676][    C0] head: 00fff00000000002 ffffea0000e2d701 00000000ffffffff 00000000ffffffff
[  245.573722][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  245.576941][    C0] page dumped because: kasan: bad access detected
[  245.579149][    C0] page_owner tracks the page as allocated
[  245.580972][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 62125856141, free_ts 0
[  245.587950][    C0]  post_alloc_hook+0x240/0x2a0
[  245.590101][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  245.591982][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  245.594276][    C0]  alloc_pages_mpol+0x232/0x4a0
[  245.596134][    C0]  allocate_slab+0x8a/0x3b0
[  245.597852][    C0]  ___slab_alloc+0xbfc/0x1480
[  245.599557][    C0]  __kmalloc_cache_noprof+0x296/0x3d0
[  245.601494][    C0]  __ipv6_dev_mc_inc+0x44f/0xa50
[  245.603613][    C0]  ipv6_add_dev+0xe54/0x1370
[  245.605352][    C0]  addrconf_notify+0x794/0x1010
[  245.607143][    C0]  notifier_call_chain+0x1b6/0x3e0
[  245.608935][    C0]  register_netdevice+0x1608/0x1ae0
[  245.610806][    C0]  veth_newlink+0x5cc/0xa50
[  245.612440][    C0]  rtnl_newlink_create+0x310/0xb00
[  245.614311][    C0]  rtnl_newlink+0x16d6/0x1c70
[  245.615812][    C0]  rtnetlink_rcv_msg+0x7cf/0xb70
[  245.617532][    C0] page_owner free stack trace missing
[  245.619962][    C0] 
[  245.621098][    C0] Memory state around the buggy address:
[  245.623425][    C0]  ffff888038b5f300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.626280][    C0]  ffff888038b5f380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.628968][    C0] >ffff888038b5f400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.631868][    C0]                                   ^
[  245.633820][    C0]  ffff888038b5f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.636359][    C0]  ffff888038b5f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.639322][    C0] ==================================================================
[  245.642410][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  245.644803][    C0] CPU: 0 UID: 0 PID: 85 Comm: kworker/u9:3 Not tainted 6.16.0-rc6-syzkaller-01577-gdd500e4aecf2-dirty #0 PREEMPT(full) 
[  245.648823][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.652252][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  245.654981][    C0] Call Trace:
[  245.656120][    C0]  <IRQ>
[  245.657051][    C0]  dump_stack_lvl+0x99/0x250
[  245.658842][    C0]  ? __asan_memcpy+0x40/0x70
[  245.660788][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.662508][    C0]  ? __pfx__printk+0x10/0x10
[  245.664228][    C0]  panic+0x2db/0x790
[  245.665658][    C0]  ? __pfx_panic+0x10/0x10
[  245.667135][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  245.669056][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  245.670940][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.672965][    C0]  ? print_memory_metadata+0x314/0x400
[  245.674689][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.676412][    C0]  check_panic_on_warn+0x89/0xb0
[  245.677993][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.680181][    C0]  end_report+0x78/0x160
[  245.681816][    C0]  kasan_report+0x129/0x150
[  245.683409][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  245.685260][    C0]  rose_timer_expiry+0x471/0x4b0
[  245.686911][    C0]  call_timer_fn+0x17e/0x5f0
[  245.688512][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.690321][    C0]  ? call_timer_fn+0xbe/0x5f0
[  245.691839][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  245.693563][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.695218][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.697219][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.699568][    C0]  __run_timer_base+0x61a/0x860
[  245.701707][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  245.703916][    C0]  run_timer_softirq+0xb7/0x180
[  245.705914][    C0]  handle_softirqs+0x286/0x870
[  245.707777][    C0]  ? do_softirq+0xec/0x180
[  245.709249][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  245.711176][    C0]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  245.713320][    C0]  do_softirq+0xec/0x180
[  245.714749][    C0]  </IRQ>
[  245.715729][    C0]  <TASK>
[  245.716828][    C0]  ? __pfx_do_softirq+0x10/0x10
[  245.718792][    C0]  ? devlink_trap_report+0x216/0x6a0
[  245.720938][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  245.722929][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  245.724617][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  245.726455][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  245.728358][    C0]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[  245.730765][    C0]  nsim_dev_trap_report_work+0x7c7/0xb80
[  245.733110][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  245.735258][    C0]  process_scheduled_works+0xae1/0x17b0
[  245.737181][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  245.739551][    C0]  worker_thread+0x8a0/0xda0
[  245.741512][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.744225][    C0]  ? __kthread_parkme+0x7b/0x200
[  245.745961][    C0]  kthread+0x711/0x8a0
[  245.747376][    C0]  ? __pfx_worker_thread+0x10/0x10
[  245.749220][    C0]  ? __pfx_kthread+0x10/0x10
[  245.750861][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.752572][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.754287][    C0]  ? __pfx_kthread+0x10/0x10
[  245.755843][    C0]  ret_from_fork+0x3fc/0x770
[  245.757488][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  245.759695][    C0]  ? __switch_to_asm+0x39/0x70
[  245.761762][    C0]  ? __switch_to_asm+0x33/0x70
[  245.763611][    C0]  ? __pfx_kthread+0x10/0x10
[  245.765334][    C0]  ret_from_fork_asm+0x1a/0x30
[  245.767147][    C0]  </TASK>
[  245.768997][    C0] Kernel Offset: disabled
[  245.770576][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:29:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007510
R8 =ffff8881069d8237 R9 =1ffff11020d3b046 R10=dffffc0000000000 R11=ffffffff85463620
R12=dffffc0000000000 R13=ffffffff99afe8ab R14=ffffffff99e034c0 R15=0000000000000000
RIP=ffffffff8546369c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000006000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000af RBX=ffffffff8e13f0e0 RCX=ffffffff934952f0 RDX=0000000000000004
RSI=0000000000000007 RDI=ffff888021060000 RBP=0000000000000000 RSP=ffffc900001dfb28
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc900001dfd78 R11=ffffffff81ad0050
R12=0000000000000002 R13=0000000000000004 R14=0000000000000000 R15=ffff888021060af0
RIP=ffffffff819e4176 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1176bb5f40 CR3=000000010f37c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f4a20386d00
XMM02=0000000500000007 ffffffff00000001 XMM03=ffffffff89768edb ffffffff89768d46
XMM04=0000000000000000 0000000000000011 XMM05=0000000000000000 000000000001df8a
XMM06=ffffffff89768398 ffffffff00000007 XMM07=ffffffff00000000 ffffffff8a2b2139
XMM08=ffffffff8a2b1814 ffffffff00000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
