last executing test programs:

5.661523569s ago: executing program 2 (id=1177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd5000fdcbdf251f000000080001143100000008000300", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

5.601864587s ago: executing program 2 (id=1178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010029bd7000000000000701"], 0x1c}}, 0x2000c000) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[], 0x10ec}, 0x1, 0x0, 0x0, 0x8042}, 0x2000c000) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='batadv_slave_0\x00', 0x21)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000000)=0x10)

5.600602583s ago: executing program 2 (id=1179):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000200)=0x91f, 0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e21, 0x9, @local, 0x6}}, [0x8, 0xfff, 0x10001, 0x2, 0x9, 0xcc, 0x4, 0x5, 0x80000000, 0xc, 0x1, 0x100000000, 0x5, 0xd56, 0x7fffffff]}, &(0x7f0000000080)=0x100)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x16}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x85}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x69900c20}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x603, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x40000)

5.5421148s ago: executing program 2 (id=1180):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000100007000000000000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0020000000001a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000000004d22b000000ff0100001a000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000000000000000000000000000000fcffffff0a000200700000000000000014000e00e000000200"/188], 0x104}}, 0x0)

5.541960769s ago: executing program 2 (id=1181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2, @ANYBLOB="20080a0000040000"], 0x20}}, 0x4084)

2.573532552s ago: executing program 2 (id=1207):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="11050000a200feffffff05000000"], 0x14}}, 0xa000040)
socket$qrtr(0x2a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000032e8d800007f12f8ff108458688a354c9c582ef915ca"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbdb}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x6f1b, 0x4)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r2, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/27, 0x1b}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000000c40), 0x12)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000180)=0x7, 0x4)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12)
openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000140), 0xffffffffffffff8f)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
socket$rds(0x15, 0x5, 0x0)

1.282144011s ago: executing program 0 (id=1222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @remote}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r7 = accept4(r6, 0x0, 0x0, 0x80800)
sendmmsg$alg(r7, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="919f31e60f56df74b694d3cc94ed8834859e582836", 0x15}, {&(0x7f0000000400)="4c1d5e", 0x3}, {&(0x7f0000000880)="05320bd521013374aee1b80e190737", 0xf}], 0x1}], 0x1, 0x10) (async, rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="360300000000000000000000c538f8dc0000000000", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES16], 0x50) (rerun: 32)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r10=>0x0, 0x68, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0xfffffffb, @private2, 0xee}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @private=0xa0100ff}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x7f}]}, &(0x7f0000000380)=0x10)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000006c0)={r10, 0xaa, "b3c9c7fd7e0fbdb1da31667e01b6d73c3938f9a575b87042ebc372a60e70d27eaf0b87fec29b66bae132cd1e15810a96d9ed7b11586174f625ee17e1f796307c337b011032b6ffa67ae5eaa970cb28947b492ff38d1cf36c9bd4aa43d2e1a01d6c8d8a5814699f7e9ebb2c41c66ade473dd588deb986edc82be8e785b8a2eb811a83a0b5b5fec44edad11959e8c5a14805072abc5fde4b076515ec395744bbc747d7dbd7c0e8c6811139"}, &(0x7f00000004c0)=0xb2)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

1.281879611s ago: executing program 0 (id=1223):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x14008001}, 0x4000)
socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5, 0x0, 0x3f00}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30)

1.190392814s ago: executing program 0 (id=1224):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0xfffffffffffffcfa}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000480a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040)

1.190050889s ago: executing program 0 (id=1225):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x20000400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28, 0x8}}, 0x14}}, 0x40)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000439dc15b0eb6f8820231d24052e7c4dc99a098503dda05ef7bc0e29cf74ab0301761975d4d1218d87652c457a1d1ed3943eaa5eea3665766796ed7a84558718f46a34cdd66022bbc7a584abe8981ba066739e382fa848135fbdcafa47128e1ad4e6bfb2f53cf01ad46ebf7ea0325a0c668aa6faa02d88c5d873be64"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r8}, 0x38)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

892.551755ms ago: executing program 0 (id=1226):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

891.661003ms ago: executing program 0 (id=1227):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140100001e0001012bbd7000fbdbdf2564010102000000000000000000000000000004d50a002b00fc02000000000000000000000000000113b40000ff34000010000a002cbd70002abd7000050000000c001500", @ANYRESOCT=r0], 0x114}, 0x1, 0x0, 0x0, 0x20}, 0x20008000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%-010d \x00'}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2})
write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)='%-010d \x00'}, 0x20)

752.696689ms ago: executing program 1 (id=1228):
socket$packet(0x11, 0xa, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x12a, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "08952e42fbfba4fd8d276c703f2f77b3518d3a0aead1996de88a90690635b8b99c2a4cffc202822ee2128fc173bf71335aa4a458c8cceb1d936973301309b97e182321b1a437f7b7cb6b9a85bcd089f4f40b29ef13760f0e9b200aa2274aacf9666e0668de7b77a5cde2ee16e147ff29333d127693295f06cacd0168e1f91ad3cc4962c715519fd07ac7a11e75fe026cb50107256ca4e3ac92058bdfa658a40dd75eadcad133b2d7f58f56007cfb2d997e78c6b2d5d96ddcf8445dca41e42b5d584a47b59227ead455851200ee13a36077f9ed2157d541f00c00"/230}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x160)

627.010364ms ago: executing program 1 (id=1229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000003d000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

626.666412ms ago: executing program 1 (id=1230):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x14008001}, 0x4000)
socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5, 0x0, 0x4000}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30)

561.796649ms ago: executing program 1 (id=1231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) (async)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES64=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
unshare(0x62040200)
write$tun(0xffffffffffffffff, 0x0, 0x3e) (async)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r6, 0x5452, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x63, 0x0}}, 0x9, 0xeffd, 0xffff, 0x100, 0x2000040, 0x85000040}) (async)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0xf) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async)
ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x49b0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async)
setsockopt(r10, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xa810, r7, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"/441], 0x0, 0x46, 0x0, 0xa}, 0x28) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4070000", @ANYRES16=r12, @ANYBLOB="00012dbd7000fedbdf253900000024005a8014000180050006000200000005000400020000000c00028005000600000000006c025a808c000280230001003012366c1b486c0b16124804021b0c040c0c244816030404160c060960040c00140005000180010006000800090005000f000900050007000100000014000300ce05ff00000001000300040003000300140003000000fbff0600f77c0700400005007f000f00010037041b6c746024306c66120005000400020000000500070000000000800002803c0002003143334b2702451319034000471a0a1e2846282731503f3d11035724511304563b09052c182251552e1a4b244320404021153839533a4f302200010000306c1602160c040612000304601b6c041202006c01050501041b01050900000500040000000000140003000300fdff0300050080000200ff070800100002800b000100040248126c1b1600080102801f000200484f473f032049355723241a070d3b1c4040273f1806293814103a002300010048020530040909600309026c4809246018300601011baa600f0436040c60180005000600000000000e00010002020024036036246c3000002800020021384f090a29294a4012043a3652413d5442463d294b2f301b41300c042b514f212e1b090500070000000000230001001b0112016000020c30186004023060050318303660000f364806600b090b1b003d000200234d48174d22182a2e3f0d041f50560e372d462d5221451803213b405140352e57203019572f4a4015171108481017120c010a54c0281912470000001400030007000600b4c8040007000e0001807f0044000280050006000200000014000300ff0009001d0001040500fd2fd0da060019000100051806126c12160202300924021b601b090b050363000000050004000100000034005a8030000180050004000100000005000400010000001c000100010b24060536480048480c014c166c04026c181616031206bc015a8088000280142035425f2765384d0409000500f8ff08008fd0140003000400ff010f00060005000180000006001d0002004c3145430a4c065004453b072b561b124925442e08460d4c2e0000001400050002007f00030006008eee02000002060014000a00ff03100004007a58010001800900000414000500080005000100d70000008b387000ff0f5800028014000500060005000000d0a600802608f7ff0e000e0001000c4803246c60066048010000140003000200470007000700000000800080060014000500ffffff7f0700761a070009000d00ff0f050006000200000098000180050006000000000013000100093630186c1b1b0b0c480c09600c1c00050007000000000014000500050008008100f60062050200070007000d000100181b05040c37167748000000230002001c08374b0118040947224f434a2254261b14085138282846505044393f09370005000400000000000b0001001206243612186c0014000300100087000000f0ff0700000805000300180000801400030008006100e4f68100f4002a054002010428000080050004000200000014000300ffff060040000500080001000d002103050007000200000054025a803c0003800500040000000000050007000000000014000300ff00860f06000700370002000400ff7f14000300f1fffdff5d0b0800ea000900050000ff200001800e0001003602243612066c03026c00000b0001000224093603050000140000800500040001000000050006000000000048000080410002003338541d001b05042a2711012c424b03224c07205122572751071a3d440e2532010a214638411718171c2f1c405208381b310320022839211436521b53000000e80000804b000200253f164439074d4b548643083d44212813081118513e36143b371a202c320614384135113a0e00305527464b5644502500012d1d3224465720515141042a3a0b3f56204e3f4d24001800010001041b1b030318120b036c3636120c360b0c02240500070002000000140005000000ff7f0101010001000200ffff9b0e4a0002000b1f550b0132311725184552163f4c0715052d49071c530f034505300616360d163b110e07563e3d03022a39354150014b462e523b1e09503d24183f0916333a503e02180c490000050007000000000005000700a618ec304a271ee14f82bd716f248b5401000000050007000200000034000280300002004c1c28270223204d353e50542e1f2747023d4b2101303634180e0c1b193b4c33344441442b2e225118413d437c00018014000300020003000001efe9030020006c00ff07140005000100070093090101db000010f9ff010014000500f8ff0800080000800500000206000400050007000100000005000700040000000500040002000000050001001b00000014000500050000000500810003000008000004000500040001000000dc005a800c0003800500060001000000300001800500040001000000050006000000000005000400000000001400030004006432010002000900ff01d44508000c000380050004000200000090000080240001006b0b60020c090c06246c2d6c18021630016000030c1b16046c0912050a16040c0500070001000000050006000200000024000100011b1b090304021216486016186016602418130b366005180b1b216c6c0201051400050007000300020003000600fdffda00080017000200122f352d203826120a005314"], 0x7c4}, 0x1, 0x0, 0x0, 0x40814}, 0x8000)

413.541µs ago: executing program 1 (id=1232):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x906, 0xffff, 0x80000001})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x80000001}, 0x8)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x8, 0x4c, 0xfffe, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@multicast2, 0x3}]}, @lsrr={0x83, 0xb, 0xcb, [@broadcast, @multicast2]}, @generic={0x94, 0x2}]}}, {{0x10, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20004000)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}}, 0x0)

0s ago: executing program 1 (id=1233):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}]}, 0x48}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf250e00000008000300c673072a2bec33c038b1e22293b6f4628b3458fe10e2b6a17d6c925d0dbeae8cf445d58bdd0bf7d6d1e1a0c5a76b8d2c97a3aa4cb4dd4cd30c88e1fa5c5579f28d08fb4fb986f2e2", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x8050)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x7, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB='1\a\x00\x00\x00\x00\x00\x00\x00\x008'], 0x3c}, 0x1, 0x2}, 0x0)
connect$netlink(r7, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000fd050000000006001500050000000c00168008000600ffffffff17349295b0a2c61b54ae26d7e5ea62ed880c2cb2f3b25a582f0d020d64011e9435b83106c361fccb5c49614e450f0bcb142e1aff90ae68ce95cadec4be50b08e5366ebea34d112d745f6f0c9b4d3d022665c0f63e3de3ab087dab10535902b02143976bdae8900"], 0x30}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="78002f806c0003803c000200010000000c00148008000200030000000c0003800800020003000000300003800600010003000000060003001200ff7f00000c0004000202aaaaaaaaaaaa08000100030000000800040001000000000005007f0000000000000008000100"/124], 0x94}}, 0x44040)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44515' (ED25519) to the list of known hosts.
syzkaller login: [   48.531828][ T5828] cgroup: Unknown subsys name 'net'
[   48.617559][ T5828] cgroup: Unknown subsys name 'cpuset'
[   48.622657][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.940202][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.780404][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.784214][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.786799][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.789430][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.792157][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.801796][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.805839][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.811592][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.815380][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.821037][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.869818][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.873482][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.876178][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.878999][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.882065][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.960162][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   54.049648][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.052735][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.055229][ T5840] bridge_slave_0: entered allmulticast mode
[   54.057980][ T5840] bridge_slave_0: entered promiscuous mode
[   54.077464][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.080005][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.082630][ T5840] bridge_slave_1: entered allmulticast mode
[   54.085806][ T5840] bridge_slave_1: entered promiscuous mode
[   54.117904][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.142268][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.164898][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   54.178321][ T5840] team0: Port device team_slave_0 added
[   54.193214][ T5840] team0: Port device team_slave_1 added
[   54.203763][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   54.239190][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.242244][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.251090][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.267265][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.269696][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.278786][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.311222][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.315783][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.318813][ T5843] bridge_slave_0: entered allmulticast mode
[   54.322360][ T5843] bridge_slave_0: entered promiscuous mode
[   54.326213][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.328752][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.331437][ T5843] bridge_slave_1: entered allmulticast mode
[   54.335092][ T5843] bridge_slave_1: entered promiscuous mode
[   54.392301][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.399684][ T5840] hsr_slave_0: entered promiscuous mode
[   54.403718][ T5840] hsr_slave_1: entered promiscuous mode
[   54.419126][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.423540][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.426515][ T5850] bridge_slave_0: entered allmulticast mode
[   54.430314][ T5850] bridge_slave_0: entered promiscuous mode
[   54.435745][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.439838][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.443242][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.446070][ T5850] bridge_slave_1: entered allmulticast mode
[   54.449109][ T5850] bridge_slave_1: entered promiscuous mode
[   54.506511][ T5843] team0: Port device team_slave_0 added
[   54.536689][ T5843] team0: Port device team_slave_1 added
[   54.541058][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.569038][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.615306][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.618135][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.628984][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.634971][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.637743][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.648161][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.654566][ T5850] team0: Port device team_slave_0 added
[   54.666952][ T5850] team0: Port device team_slave_1 added
[   54.711037][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.715224][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.725724][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.746866][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.749663][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.759871][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.786742][ T5843] hsr_slave_0: entered promiscuous mode
[   54.789658][ T5843] hsr_slave_1: entered promiscuous mode
[   54.792771][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   54.794994][ T5843] Cannot create hsr debugfs directory
[   54.858455][ T5850] hsr_slave_0: entered promiscuous mode
[   54.863412][ T5850] hsr_slave_1: entered promiscuous mode
[   54.866215][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   54.868497][ T5850] Cannot create hsr debugfs directory
[   54.990942][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.018473][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.058463][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.076994][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.163591][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.171052][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.179758][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.187959][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.246275][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.261025][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.274657][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.291173][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.328710][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.359484][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.379990][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   55.391694][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.394776][ T4188] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.406091][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   55.426045][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.429151][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.437529][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.440477][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.447728][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.450578][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.483502][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.533540][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.547418][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   55.554070][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.556589][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.578060][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.580731][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.666576][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.737574][ T5840] veth0_vlan: entered promiscuous mode
[   55.743605][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.755079][ T5840] veth1_vlan: entered promiscuous mode
[   55.786404][ T5843] veth0_vlan: entered promiscuous mode
[   55.791063][ T5843] veth1_vlan: entered promiscuous mode
[   55.805597][ T5840] veth0_macvtap: entered promiscuous mode
[   55.811863][ T5840] veth1_macvtap: entered promiscuous mode
[   55.830831][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.843808][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.849771][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.854830][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.858743][ T5843] veth0_macvtap: entered promiscuous mode
[   55.870079][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.874240][ T5232] Bluetooth: hci0: command tx timeout
[   55.877055][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.882114][ T5232] Bluetooth: hci1: command tx timeout
[   55.895019][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.898100][ T5843] veth1_macvtap: entered promiscuous mode
[   55.932608][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.957416][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.958171][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.960663][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.966276][ T5232] Bluetooth: hci2: command tx timeout
[   55.999075][ T5905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.008574][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.015938][ T5905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.019704][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.039507][ T5905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.043773][ T5905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.066209][ T5850] veth0_vlan: entered promiscuous mode
[   56.089948][ T5850] veth1_vlan: entered promiscuous mode
[   56.127330][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.130466][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.130721][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.199943][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.205257][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.211163][ T5850] veth0_macvtap: entered promiscuous mode
[   56.223277][ T5850] veth1_macvtap: entered promiscuous mode
[   56.245667][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.268265][ T5908] IPVS: length: 150 != 84136430776
[   56.273594][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.303804][ T5905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.336136][ T5905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.350004][ T5905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.367565][ T5914] syz.1.4 uses obsolete (PF_INET,SOCK_PACKET)
[   56.367964][ T5905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.378647][ T5915] trusted_key: syz.0.5 sent an empty control message without MSG_MORE.
[   56.386412][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.412691][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.429471][ T5915] netlink: 'syz.0.5': attribute type 1 has an invalid length.
[   56.432931][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'.
[   56.442785][ T5919] openvswitch: netlink: Key type 30 is not supported
[   56.450327][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.467690][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.495333][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.497937][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.534874][ T5925] tipc: Started in network mode
[   56.536820][ T5925] tipc: Node identity 923fc70d5c8f, cluster identity 4711
[   56.542964][ T5925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.552844][ T5924] syzkaller0: entered promiscuous mode
[   56.554763][ T5924] syzkaller0: entered allmulticast mode
[   56.577504][ T5929] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.583170][ T5927] syzkaller0: entered promiscuous mode
[   56.585147][ T5927] syzkaller0: entered allmulticast mode
[   56.640058][ T5924] tipc: Resetting bearer <eth:syzkaller0>
[   56.780109][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   57.282726][ T5923] tipc: Resetting bearer <eth:syzkaller0>
[   57.293678][ T5923] tipc: Disabling bearer <eth:syzkaller0>
[   57.330664][ T5945] bridge1: entered promiscuous mode
[   57.333543][ T5945] bridge1: entered allmulticast mode
[   57.336840][ T5945] team0: Port device bridge1 added
[   57.348593][ T5945] netlink: 'syz.2.12': attribute type 9 has an invalid length.
[   57.352502][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.359551][ T5945] hsr0: entered promiscuous mode
[   57.362633][ T5945] macvlan2: entered promiscuous mode
[   57.364682][ T5945] macvlan2: entered allmulticast mode
[   57.366871][ T5945] hsr0: entered allmulticast mode
[   57.368521][ T5945] hsr_slave_0: entered allmulticast mode
[   57.370452][ T5945] hsr_slave_1: entered allmulticast mode
[   57.375156][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   57.378582][ T5945] IPv6: NLM_F_REPLACE set, but no existing node found!
[   57.457516][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   57.571238][ T5954] pim6reg: entered allmulticast mode
[   57.578907][ T5957] netlink: 'syz.1.17': attribute type 1 has an invalid length.
[   57.579395][ T5954] pim6reg: left allmulticast mode
[   57.820089][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   57.894593][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.898650][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.963515][ T5232] Bluetooth: hci1: command tx timeout
[   57.963654][ T5847] Bluetooth: hci0: command tx timeout
[   57.996325][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.007897][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.031785][ T5847] Bluetooth: hci2: command tx timeout
[   58.082832][ T5905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.085930][ T5905] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.088994][ T5905] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.093575][ T5905] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.141432][ T5969] netlink: 'syz.1.19': attribute type 1 has an invalid length.
[   58.227938][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   58.268441][ T5979] netlink: 'syz.1.22': attribute type 2 has an invalid length.
[   58.330794][ T5982] netlink: 'syz.1.24': attribute type 6 has an invalid length.
[   58.336263][ T5982] netlink: 'syz.1.24': attribute type 6 has an invalid length.
[   58.345511][ T5982] Zero length message leads to an empty skb
[   58.356924][ T5982] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   58.383626][ T5982] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   58.416408][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.464454][ T5990] bridge_slave_0: left allmulticast mode
[   58.466333][ T5990] bridge_slave_0: left promiscuous mode
[   58.468297][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.479642][ T5990] bridge_slave_1: left allmulticast mode
[   58.484108][ T5990] bridge_slave_1: left promiscuous mode
[   58.486431][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.496340][ T5990] bond0: (slave bond_slave_0): Releasing backup interface
[   58.525818][ T5990] bond0: (slave bond_slave_1): Releasing backup interface
[   58.540303][ T5990] team0: Port device team_slave_0 removed
[   58.550753][ T5990] team0: Port device team_slave_1 removed
[   58.558091][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.561004][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.578092][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.581072][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.616802][ T5990] team0: Port device bridge1 removed
[   58.768528][ T6016] netlink: 'syz.2.33': attribute type 1 has an invalid length.
[   58.841790][ T6017] nbd0: detected capacity change from 0 to 63
[   58.848488][ T6026] block nbd0: NBD_DISCONNECT
[   58.856900][ T6026] block nbd0: Disconnected due to user request.
[   58.869630][ T6026] block nbd0: shutting down sockets
[   58.872130][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.877147][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.889637][  T127] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[   58.903886][  T127] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.907121][  T127] Buffer I/O error on dev nbd0, logical block 2, async page read
[   58.910221][  T127] Buffer I/O error on dev nbd0, logical block 3, async page read
[   58.917366][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.924475][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.929944][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.934803][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.937687][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.941043][ T5841] Buffer I/O error on dev nbd0, logical block 2, async page read
[   58.945382][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.948614][ T5841] Buffer I/O error on dev nbd0, logical block 3, async page read
[   58.954484][ T5841] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.958120][ T5841] Buffer I/O error on dev nbd0, logical block 0, async page read
[   58.966485][ T5841] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.969885][ T5841] Buffer I/O error on dev nbd0, logical block 1, async page read
[   58.976326][ T5841] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.979381][ T5841] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   58.994090][ T5841] ldm_validate_partition_table(): Disk read failed.
[   59.005822][ T5841] Dev nbd0: unable to read RDB block 0
[   59.009490][ T5841]  nbd0: unable to read partition table
[   59.033516][ T5841] ldm_validate_partition_table(): Disk read failed.
[   59.037535][ T5841] Dev nbd0: unable to read RDB block 0
[   59.038116][ T6036] tipc: Started in network mode
[   59.040855][ T5841]  nbd0: unable to read partition table
[   59.041374][ T6036] tipc: Node identity 363fd6a78af1, cluster identity 4711
[   59.047751][ T6036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.060121][ T6036] syzkaller0: entered promiscuous mode
[   59.062746][ T6036] syzkaller0: entered allmulticast mode
[   59.077646][ T6036] tipc: Resetting bearer <eth:syzkaller0>
[   59.081138][ T6034] tipc: Resetting bearer <eth:syzkaller0>
[   59.101213][ T6034] tipc: Disabling bearer <eth:syzkaller0>
[   59.319971][ T6045] Bluetooth: MGMT ver 1.23
[   59.493251][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.574630][ T6060] tipc: New replicast peer: 255.255.255.255
[   59.577578][ T6060] tipc: Enabled bearer <udp:s>, priority 10
[   59.584438][ T6060] geneve2: entered promiscuous mode
[   60.031695][ T5847] Bluetooth: hci1: command tx timeout
[   60.031879][ T5232] Bluetooth: hci0: command tx timeout
[   60.111788][ T5232] Bluetooth: hci2: command tx timeout
[   60.692235][    T9] tipc: Node number set to 3167671975
[   62.112146][ T5232] Bluetooth: hci1: command tx timeout
[   62.112181][ T5847] Bluetooth: hci0: command tx timeout
[   62.192160][ T5847] Bluetooth: hci2: command tx timeout
[   62.798969][ T6078] __nla_validate_parse: 7 callbacks suppressed
[   62.798979][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   62.874576][ T6085] netlink: 'syz.0.53': attribute type 83 has an invalid length.
[   62.904314][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'.
[   63.115696][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'.
[   63.208342][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   63.217002][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'.
[   63.259901][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   63.266903][ T6107] macvlan2: entered promiscuous mode
[   63.288151][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'.
[   63.376482][ T6110] netlink: 208 bytes leftover after parsing attributes in process `syz.2.61'.
[   63.380117][ T6110] netlink: 208 bytes leftover after parsing attributes in process `syz.2.61'.
[   63.400508][ T6110] syzkaller1: entered promiscuous mode
[   63.405788][ T6110] syzkaller1: entered allmulticast mode
[   63.562895][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   63.757032][ T5906] IPVS: starting estimator thread 0...
[   63.777499][ T6147] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   63.784434][ T6140] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.864482][ T6146] IPVS: using max 79 ests per chain, 189600 per kthread
[   63.889851][ T6153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.896653][ T6153] syzkaller0: entered promiscuous mode
[   63.898694][ T6153] syzkaller0: entered allmulticast mode
[   63.964115][ T6153] tipc: Resetting bearer <eth:syzkaller0>
[   63.966787][ T6153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.971363][ T6152] tipc: Resetting bearer <eth:syzkaller0>
[   63.992124][ T6152] tipc: Disabling bearer <eth:syzkaller0>
[   64.259585][ T6181] tipc: Started in network mode
[   64.263072][ T6181] tipc: Node identity 2e4f0cecb2b, cluster identity 4711
[   64.267590][ T6181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.271041][ T6181] syzkaller0: entered promiscuous mode
[   64.275407][ T6181] syzkaller0: entered allmulticast mode
[   64.358376][ T6184] tipc: Resetting bearer <eth:syzkaller0>
[   64.376094][ T6184] tipc: Disabling bearer <eth:syzkaller0>
[   64.441184][ T6189] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   64.933180][ T6234] sctp: [Deprecated]: syz.0.100 (pid 6234) Use of int in max_burst socket option deprecated.
[   64.933180][ T6234] Use struct sctp_assoc_value instead
[   65.202739][ T6268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.207896][ T6268] syzkaller0: entered promiscuous mode
[   65.210185][ T6268] syzkaller0: entered allmulticast mode
[   65.226441][ T6268] tipc: Resetting bearer <eth:syzkaller0>
[   65.359325][ T6277] pim6reg: entered allmulticast mode
[   65.362635][ T6277] pim6reg: left allmulticast mode
[   65.601966][ T6284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   65.603661][ T6292] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   65.659267][ T6299] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   65.683744][ T6299] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.831844][ T6337] veth0_to_team: entered promiscuous mode
[   66.911005][ T6342] vlan2: entered promiscuous mode
[   66.914510][ T6342] vlan2: entered allmulticast mode
[   66.916244][ T6342] hsr_slave_1: entered allmulticast mode
[   66.959265][ T6346] netlink: 'syz.0.133': attribute type 15 has an invalid length.
[   67.027285][ T6351] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   67.041020][ T6351] bridge_slave_0: left allmulticast mode
[   67.045027][ T6351] bridge_slave_0: left promiscuous mode
[   67.046915][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.051914][ T6351] bridge_slave_1: left allmulticast mode
[   67.054665][ T6351] bridge_slave_1: left promiscuous mode
[   67.056993][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.065822][ T6351] bond0: (slave bond_slave_0): Releasing backup interface
[   67.072318][ T6351] bond0: (slave bond_slave_1): Releasing backup interface
[   67.080643][ T6351] team0: Port device team_slave_0 removed
[   67.096906][ T6351] team0: Port device team_slave_1 removed
[   67.099892][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.103139][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.114081][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.117255][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.129223][ T6351] bond0: (slave wlan1): Releasing backup interface
[   67.161152][ T6351] netlink: 'syz.0.135': attribute type 10 has an invalid length.
[   67.171922][ T6351] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   67.180965][ T6351] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   67.464545][ T6374] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   67.468024][ T6374] netlink: 'syz.1.142': attribute type 1 has an invalid length.
[   67.498419][ T6374] veth3: entered promiscuous mode
[   67.733710][ T6391] netlink: 'syz.1.147': attribute type 13 has an invalid length.
[   67.736605][ T6389] netlink: 'syz.1.147': attribute type 13 has an invalid length.
[   67.738113][ T6391] netlink: 'syz.1.147': attribute type 17 has an invalid length.
[   67.739223][ T6389] netlink: 'syz.1.147': attribute type 17 has an invalid length.
[   67.867366][   T47] cfg80211: failed to load regulatory.db
[   67.960992][ T6402] __nla_validate_parse: 12 callbacks suppressed
[   67.961002][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'.
[   67.991804][ T6401] nbd1: detected capacity change from 0 to 63
[   67.996204][ T6403] block nbd1: NBD_DISCONNECT
[   68.002128][ T6403] block nbd1: Disconnected due to user request.
[   68.004235][ T6403] block nbd1: shutting down sockets
[   68.013907][   T60] blk_print_req_error: 136 callbacks suppressed
[   68.013919][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[   68.019569][   T60] buffer_io_error: 138 callbacks suppressed
[   68.019575][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[   68.026242][   T60] Buffer I/O error on dev nbd1, logical block 1, async page read
[   68.028947][   T60] Buffer I/O error on dev nbd1, logical block 2, async page read
[   68.031763][   T60] Buffer I/O error on dev nbd1, logical block 3, async page read
[   68.034716][ T6075] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.042259][ T6075] Buffer I/O error on dev nbd1, logical block 0, async page read
[   68.045340][ T6075] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.048717][ T6075] Buffer I/O error on dev nbd1, logical block 1, async page read
[   68.051946][ T6075] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.055025][ T6075] Buffer I/O error on dev nbd1, logical block 2, async page read
[   68.057897][ T6075] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.061310][ T6075] Buffer I/O error on dev nbd1, logical block 3, async page read
[   68.064589][ T6075] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.068261][ T6075] Buffer I/O error on dev nbd1, logical block 0, async page read
[   68.071192][ T6075] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.075132][ T6075] Buffer I/O error on dev nbd1, logical block 1, async page read
[   68.080461][ T6075] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.083846][ T6075] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.086991][ T6075] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   68.092191][ T6075] ldm_validate_partition_table(): Disk read failed.
[   68.095331][ T6075] Dev nbd1: unable to read RDB block 0
[   68.098298][ T6075]  nbd1: unable to read partition table
[   68.105730][ T6075] ldm_validate_partition_table(): Disk read failed.
[   68.111377][ T6075] Dev nbd1: unable to read RDB block 0
[   68.117470][ T6075]  nbd1: unable to read partition table
[   68.127506][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'.
[   68.162925][ T6402] veth0_to_team: left promiscuous mode
[   68.285310][ T6249] tipc: Resetting bearer <eth:syzkaller0>
[   68.294156][ T6249] tipc: Disabling bearer <eth:syzkaller0>
[   68.299363][ T6407] hsr_slave_0: left promiscuous mode
[   68.306426][ T6407] hsr_slave_1: left promiscuous mode
[   68.337953][ T5870] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.342272][ T5870] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.346014][ T5870] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.361221][ T5870] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.372239][ T6412] syzkaller0: entered promiscuous mode
[   68.374058][ T6412] syzkaller0: entered allmulticast mode
[   68.419460][ T6416] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   68.543535][ T6430] nbd: must specify at least one socket
[   68.548746][ T6430] netlink: 324 bytes leftover after parsing attributes in process `syz.2.152'.
[   68.552608][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'.
[   68.556303][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'.
[   68.737313][ T6402] syz.0.148 (6402) used greatest stack depth: 19648 bytes left
[   68.740283][ T6443] sctp: [Deprecated]: syz.1.156 (pid 6443) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.740283][ T6443] Use struct sctp_sack_info instead
[   68.803307][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[   68.807164][ T6447] netlink: 'syz.2.157': attribute type 2 has an invalid length.
[   68.847214][ T6449] netlink: 'syz.2.158': attribute type 4 has an invalid length.
[   68.863074][ T6449] netlink: 'syz.2.158': attribute type 4 has an invalid length.
[   68.907484][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.159'.
[   68.911189][ T6451] netlink: 260 bytes leftover after parsing attributes in process `syz.1.159'.
[   68.952536][ T6460] tipc: New replicast peer: 255.255.255.255
[   68.955580][ T6460] tipc: Enabled bearer <udp:syz2>, priority 10
[   68.965058][ T6460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.967892][ T6460] syzkaller0: entered promiscuous mode
[   68.970125][ T6460] syzkaller0: entered allmulticast mode
[   68.975134][ T6460] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   68.988546][ T6460] tipc: Resetting bearer <eth:syzkaller0>
[   69.001146][ T6459] tipc: Resetting bearer <eth:syzkaller0>
[   69.015021][ T6459] tipc: Disabling bearer <eth:syzkaller0>
[   69.106605][ T6472] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.165'.
[   69.157789][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'.
[   69.320511][ T5890] IPVS: starting estimator thread 0...
[   69.365705][ T6493] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.427565][ T6489] IPVS: using max 78 ests per chain, 187200 per kthread
[   69.457687][ T6498] syzkaller0: entered promiscuous mode
[   69.460617][ T6498] syzkaller0: entered allmulticast mode
[   70.579713][ T6531] sit0: entered promiscuous mode
[   70.582183][ T6531] netlink: 'syz.0.185': attribute type 1 has an invalid length.
[   70.780919][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.790967][ T6542] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[   70.795996][ T6542] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[   70.994605][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.996992][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.453553][ T6603] netlink: 'syz.0.204': attribute type 5 has an invalid length.
[   71.674493][ T6639] netlink: zone id is out of range
[   71.676792][ T6639] netlink: zone id is out of range
[   71.678985][ T6639] netlink: zone id is out of range
[   71.681233][ T6639] netlink: zone id is out of range
[   71.685870][ T6639] netlink: zone id is out of range
[   71.688146][ T6639] netlink: zone id is out of range
[   71.690767][ T6639] netlink: zone id is out of range
[   71.693860][ T6639] netlink: zone id is out of range
[   71.696104][ T6639] netlink: zone id is out of range
[   71.700402][ T6639] netlink: zone id is out of range
[   71.771654][ T6650] bond0: (slave wlan1): Releasing backup interface
[   72.097466][ T6683] netlink: 'syz.0.228': attribute type 10 has an invalid length.
[   72.104433][ T6683] 8021q: adding VLAN 0 to HW filter on device team0
[   72.108583][ T6683] bond0: (slave team0): Enslaving as an active interface with an up link
[   72.162853][ T6690] Illegal XDP return value 4294967262 on prog  (id 67) dev N/A, expect packet loss!
[   75.269912][ T6709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.272727][ T6709] syzkaller0: entered promiscuous mode
[   75.274650][ T6709] syzkaller0: entered allmulticast mode
[   75.291360][ T6709] tipc: Resetting bearer <eth:syzkaller0>
[   75.298668][ T6709] __nla_validate_parse: 13 callbacks suppressed
[   75.298677][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.236'.
[   75.305807][ T6708] tipc: Resetting bearer <eth:syzkaller0>
[   75.319337][ T6708] tipc: Disabling bearer <eth:syzkaller0>
[   75.336321][ T6713] bond0: (slave team0): Releasing backup interface
[   75.486218][ T6736] netlink: 'syz.2.242': attribute type 13 has an invalid length.
[   75.490192][ T6736] netlink: 'syz.2.242': attribute type 17 has an invalid length.
[   75.530685][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'.
[   75.534223][ T6738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.538275][ T6738] syzkaller0: entered promiscuous mode
[   75.540324][ T6738] syzkaller0: entered allmulticast mode
[   75.543895][ T6734] netlink: 'syz.0.244': attribute type 10 has an invalid length.
[   75.549450][ T6738] tipc: Resetting bearer <eth:syzkaller0>
[   75.555481][ T6734] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   75.560163][ T6737] tipc: Resetting bearer <eth:syzkaller0>
[   75.568737][ T6737] tipc: Disabling bearer <eth:syzkaller0>
[   75.585517][ T6727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.642954][ T6727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.698221][ T6736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.710634][ T6747] netlink: 72 bytes leftover after parsing attributes in process `syz.0.249'.
[   75.766676][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'.
[   75.809648][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.814891][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.829594][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.981020][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   75.989421][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   75.993481][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   75.996990][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   76.000417][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   76.004039][ T6765] netlink: 52 bytes leftover after parsing attributes in process `syz.1.257'.
[   76.223383][ T6727] syz.2.242 (6727) used greatest stack depth: 18008 bytes left
[   76.471244][ T6798] netlink: 'syz.0.268': attribute type 4 has an invalid length.
[   76.567748][ T6804] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   76.633604][ T6809] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   76.638615][ T6809] netlink: 'syz.1.272': attribute type 1 has an invalid length.
[   76.740338][ T6806] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   76.825514][ T6826] bridge_slave_0: left allmulticast mode
[   76.827912][ T6826] bridge_slave_0: left promiscuous mode
[   76.830133][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.835795][ T6826] bridge_slave_1: left allmulticast mode
[   76.838095][ T6826] bridge_slave_1: left promiscuous mode
[   76.840610][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.847216][ T6826] bond0: (slave bond_slave_0): Releasing backup interface
[   76.852858][ T6826] bond0: (slave bond_slave_1): Releasing backup interface
[   76.858619][ T6826] team0: Port device team_slave_0 removed
[   76.864216][ T6826] team0: Port device team_slave_1 removed
[   76.867073][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.870902][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.983348][ T6838] IPVS: Error connecting to the multicast addr
[   76.989282][ T6838] netlink: 'syz.1.280': attribute type 16 has an invalid length.
[   76.995398][ T6838] netlink: 'syz.1.280': attribute type 17 has an invalid length.
[   77.096961][ T6842] netlink: 'syz.0.282': attribute type 39 has an invalid length.
[   77.481085][ T6858] netlink: 'syz.2.286': attribute type 21 has an invalid length.
[   77.610078][ T6868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.614038][ T6868] syzkaller0: entered promiscuous mode
[   77.615955][ T6868] syzkaller0: entered allmulticast mode
[   77.625501][ T6868] tipc: Resetting bearer <eth:syzkaller0>
[   77.629812][ T6867] tipc: Resetting bearer <eth:syzkaller0>
[   77.636791][ T6867] tipc: Disabling bearer <eth:syzkaller0>
[   77.926617][ T6881] veth0_to_bond: entered allmulticast mode
[   78.251028][ T6901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.256146][ T6899] syzkaller0: entered promiscuous mode
[   78.258978][ T6899] syzkaller0: entered allmulticast mode
[   78.272324][ T5232] Bluetooth: hci2: command 0x0405 tx timeout
[   78.277805][ T6900] tipc: Resetting bearer <eth:syzkaller0>
[   78.287996][ T6900] tipc: Disabling bearer <eth:syzkaller0>
[   78.552416][ T6916] IPVS: length: 157 != 8
[   78.709186][ T6927] team0: Port device dummy0 added
[   78.734859][ T6927] team0: Port device dummy0 removed
[   79.066596][ T6945] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   79.074031][ T6945] CPU: 0 UID: 0 PID: 6945 Comm: syz.0.311 Not tainted syzkaller #0 PREEMPT(full) 
[   79.074049][ T6945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.074057][ T6945] Call Trace:
[   79.074063][ T6945]  <TASK>
[   79.074069][ T6945]  dump_stack_lvl+0x189/0x250
[   79.074093][ T6945]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.074109][ T6945]  ? __pfx__printk+0x10/0x10
[   79.074132][ T6945]  ? kernfs_path_from_node+0x2f/0x290
[   79.074147][ T6945]  ? kernfs_path_from_node+0x250/0x290
[   79.074159][ T6945]  ? kernfs_path_from_node+0x2f/0x290
[   79.074175][ T6945]  sysfs_warn_dup+0x8e/0xa0
[   79.074189][ T6945]  sysfs_do_create_link_sd+0xc0/0x110
[   79.074206][ T6945]  device_add_class_symlinks+0x1cf/0x240
[   79.074222][ T6945]  device_add+0x475/0xb50
[   79.074246][ T6945]  wiphy_register+0x1ba6/0x28d0
[   79.074279][ T6945]  ? __pfx_wiphy_register+0x10/0x10
[   79.074296][ T6945]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   79.074317][ T6945]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   79.074362][ T6945]  ieee80211_register_hw+0x3425/0x4080
[   79.074389][ T6945]  ? ieee80211_register_hw+0x1461/0x4080
[   79.074406][ T6945]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   79.074421][ T6945]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.074441][ T6945]  ? __hrtimer_setup+0x187/0x210
[   79.074452][ T6945]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   79.074472][ T6945]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   79.074509][ T6945]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   79.074523][ T6945]  ? trace_kmalloc+0x1f/0xd0
[   79.074538][ T6945]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   79.074554][ T6945]  ? kstrndup+0xbf/0x160
[   79.074575][ T6945]  hwsim_new_radio_nl+0xea4/0x1b10
[   79.074593][ T6945]  ? __pfx___nla_validate_parse+0x10/0x10
[   79.074623][ T6945]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.074648][ T6945]  ? __nla_parse+0x40/0x60
[   79.074697][ T6945]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   79.074717][ T6945]  genl_family_rcv_msg_doit+0x215/0x300
[   79.074737][ T6945]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   79.074761][ T6945]  ? bpf_lsm_capable+0x9/0x20
[   79.074775][ T6945]  ? security_capable+0x7e/0x2e0
[   79.074798][ T6945]  genl_rcv_msg+0x60e/0x790
[   79.074817][ T6945]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.074829][ T6945]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   79.074856][ T6945]  netlink_rcv_skb+0x208/0x470
[   79.074872][ T6945]  ? __lock_acquire+0xab9/0xd20
[   79.074890][ T6945]  ? __pfx_genl_rcv_msg+0x10/0x10
[   79.074905][ T6945]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   79.074938][ T6945]  ? down_read+0x1ad/0x2e0
[   79.074958][ T6945]  genl_rcv+0x28/0x40
[   79.074970][ T6945]  netlink_unicast+0x82f/0x9e0
[   79.074993][ T6945]  ? __pfx_netlink_unicast+0x10/0x10
[   79.075010][ T6945]  ? netlink_sendmsg+0x642/0xb30
[   79.075026][ T6945]  ? skb_put+0x11b/0x210
[   79.075041][ T6945]  netlink_sendmsg+0x805/0xb30
[   79.075065][ T6945]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.075086][ T6945]  ? aa_sock_msg_perm+0xf1/0x1d0
[   79.075106][ T6945]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   79.075119][ T6945]  ? __pfx_netlink_sendmsg+0x10/0x10
[   79.075138][ T6945]  __sock_sendmsg+0x21c/0x270
[   79.075157][ T6945]  ____sys_sendmsg+0x505/0x830
[   79.075175][ T6945]  ? __pfx_____sys_sendmsg+0x10/0x10
[   79.075196][ T6945]  ? import_iovec+0x74/0xa0
[   79.075213][ T6945]  ___sys_sendmsg+0x21f/0x2a0
[   79.075236][ T6945]  ? __pfx____sys_sendmsg+0x10/0x10
[   79.075280][ T6945]  ? __fget_files+0x2a/0x420
[   79.075298][ T6945]  ? __fget_files+0x3a0/0x420
[   79.075326][ T6945]  __x64_sys_sendmsg+0x19b/0x260
[   79.075342][ T6945]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   79.075364][ T6945]  ? rcu_is_watching+0x15/0xb0
[   79.075381][ T6945]  ? do_syscall_64+0xbe/0x3b0
[   79.075402][ T6945]  do_syscall_64+0xfa/0x3b0
[   79.075418][ T6945]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.075435][ T6945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.075448][ T6945]  ? exc_page_fault+0x9f/0xf0
[   79.075466][ T6945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.075478][ T6945] RIP: 0033:0x7f501498ebe9
[   79.075490][ T6945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   79.075501][ T6945] RSP: 002b:00007f501579f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   79.075516][ T6945] RAX: ffffffffffffffda RBX: 00007f5014bb5fa0 RCX: 00007f501498ebe9
[   79.075525][ T6945] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[   79.075533][ T6945] RBP: 00007f5014a11e19 R08: 0000000000000000 R09: 0000000000000000
[   79.075541][ T6945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.075549][ T6945] R13: 00007f5014bb6038 R14: 00007f5014bb5fa0 R15: 00007fff0da7d828
[   79.075572][ T6945]  </TASK>
[   79.321975][ T5847] Bluetooth: hci0: command tx timeout
[   79.638767][ T6974] net_ratelimit: 15 callbacks suppressed
[   79.638782][ T6974] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   79.739982][ T6982] geneve2: entered promiscuous mode
[   79.743332][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.747088][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.751217][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.759388][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.902564][ T6999] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   79.908624][ T6999] bond0: (slave wlan1): Releasing backup interface
[   80.013913][ T6999] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   80.019080][ T6999] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.041445][ T6999] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.044636][ T6999] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.315006][ T7012] syzkaller0: entered promiscuous mode
[   80.316857][ T7012] syzkaller0: entered allmulticast mode
[   80.624816][ T7016] __nla_validate_parse: 52 callbacks suppressed
[   80.624831][ T7016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'.
[   81.097398][ T7026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'.
[   81.161949][ T7028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.198173][ T7028] syzkaller0: entered promiscuous mode
[   81.200021][ T7028] syzkaller0: entered allmulticast mode
[   81.202571][ T7028] tipc: Resetting bearer <eth:syzkaller0>
[   81.210323][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.339'.
[   81.215062][ T7027] tipc: Resetting bearer <eth:syzkaller0>
[   82.210347][ T7027] tipc: Disabling bearer <eth:syzkaller0>
[   83.305558][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'.
[   83.372949][ T7104] validate_nla: 6 callbacks suppressed
[   83.372960][ T7104] netlink: 'syz.2.358': attribute type 6 has an invalid length.
[   83.382217][ T7104] netlink: 'syz.2.358': attribute type 6 has an invalid length.
[   83.394679][ T7108] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[   83.394703][ T7104] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   83.397534][ T7108] netlink: 'syz.0.359': attribute type 11 has an invalid length.
[   83.409186][ T7108] netlink: 220 bytes leftover after parsing attributes in process `syz.0.359'.
[   83.418743][ T7104] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   83.608985][ T7123] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.643402][ T7127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.647032][ T7127] syzkaller0: entered promiscuous mode
[   83.649413][ T7127] syzkaller0: entered allmulticast mode
[   83.663745][ T7127] tipc: Resetting bearer <eth:syzkaller0>
[   83.673946][ T7125] tipc: Resetting bearer <eth:syzkaller0>
[   83.683933][ T7125] tipc: Disabling bearer <eth:syzkaller0>
[   83.878598][ T7137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.887521][ T7137] tipc: Resetting bearer <eth:syzkaller0>
[   83.894959][ T7136] tipc: Disabling bearer <eth:syzkaller0>
[   84.136397][ T7150] macvlan0: entered allmulticast mode
[   84.139093][ T7150] veth1_vlan: entered allmulticast mode
[   84.300003][ T7167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[   84.442399][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'.
[   84.527133][ T7182] team0: Failed to send options change via netlink (err -105)
[   84.532406][ T7182] team0: Mode changed to "activebackup"
[   84.545463][ T7194] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   84.557823][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.2.389'.
[   84.616937][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.390'.
[   84.644087][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'.
[   84.719591][ T7210] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   85.009034][ T7227] sit0: left promiscuous mode
[   85.030698][ T7227] geneve2: left promiscuous mode
[   85.041380][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.048328][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.056662][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.065192][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.153143][ T7242] openvswitch: netlink: Actions may not be safe on all matching packets
[   85.164421][ T7242] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   85.167566][ T7242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.435007][ T7262] tun0: tun_chr_ioctl cmd 2147767520
[   85.867538][ T7279] __nla_validate_parse: 4 callbacks suppressed
[   85.867554][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'.
[   85.986534][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   86.054961][ T7291] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   86.118147][ T7295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.424'.
[   86.214857][ T7302] netlink: 'syz.1.426': attribute type 13 has an invalid length.
[   86.217509][ T7302] netlink: 'syz.1.426': attribute type 17 has an invalid length.
[   86.251428][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.255673][ T7302] 8021q: adding VLAN 0 to HW filter on device team0
[   86.260834][ T7302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.572745][ T7321] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.581018][ T7323] nbd: must specify at least one socket
[   86.585926][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.432'.
[   86.798150][ T7332] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.435'.
[   86.865489][ T7337] netlink: 256 bytes leftover after parsing attributes in process `syz.0.437'.
[   86.869751][ T7337] netlink: 48 bytes leftover after parsing attributes in process `syz.0.437'.
[   86.891310][ T7337] vlan2: entered allmulticast mode
[   86.894159][ T7337] bond0: entered allmulticast mode
[   86.896148][ T7337] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   86.912851][ T7337] lo speed is unknown, defaulting to 1000
[   86.916922][ T7337] lo speed is unknown, defaulting to 1000
[   86.920385][ T7337] lo speed is unknown, defaulting to 1000
[   86.952189][   T33] audit: type=1107 audit(1755564815.572:2): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='D`v.O-|'
[   87.029714][ T7350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.442'.
[   87.040186][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.046480][ T7348] 8021q: adding VLAN 0 to HW filter on device team0
[   87.058018][ T7348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.083628][ T7353] syzkaller0: entered promiscuous mode
[   87.093686][ T7353] syzkaller0: entered allmulticast mode
[   87.136670][ T7355] netlink: 48 bytes leftover after parsing attributes in process `syz.1.444'.
[   87.239187][   T24] lo speed is unknown, defaulting to 1000
[   87.241328][   T24] syz0: Port: 1 Link ACTIVE
[   87.243775][ T7337] infiniband syz0: set active
[   87.246398][ T7337] infiniband syz0: added lo
[   87.329794][ T7360] netlink: 'syz.2.445': attribute type 21 has an invalid length.
[   87.343276][ T7360] ip_vti0: Master is either lo or non-ether device
[   87.374752][ T7337] RDS/IB: syz0: added
[   87.376759][ T7337] smc: adding ib device syz0 with port count 1
[   87.379244][ T7337] smc:    ib device syz0 port 1 has pnetid 
[   87.423828][    T9] lo speed is unknown, defaulting to 1000
[   87.433050][ T7337] lo speed is unknown, defaulting to 1000
[   87.505484][ T7367] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[   87.610645][ T7373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.626459][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.450'.
[   87.640533][ T7337] lo speed is unknown, defaulting to 1000
[   87.645509][ T7373] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   87.838947][ T7337] lo speed is unknown, defaulting to 1000
[   87.977314][ T7384] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   87.981128][ T7384] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   88.062628][ T7395] !: renamed from dummy0
[   88.190646][ T7413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   88.232674][ T7416] batman_adv: batadv0: Adding interface: ip6gretap1
[   88.236128][ T7416] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.245904][ T7416] batman_adv: batadv0: Interface activated: ip6gretap1
[   88.509098][ T7436] validate_nla: 1 callbacks suppressed
[   88.509109][ T7436] netlink: 'syz.2.470': attribute type 3 has an invalid length.
[   88.558119][ T7440] v: renamed from ip6_vti0 (while UP)
[   88.580713][ T7440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.636228][ T7440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.686797][ T7440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.757782][ T7440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.870067][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.878478][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.886956][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.895792][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.144184][ T7461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.150288][ T5890] lo speed is unknown, defaulting to 1000
[   89.152857][ T5890] syz0: Port: 1 Link DOWN
[   89.155435][ T5890] lo speed is unknown, defaulting to 1000
[   89.219199][ T7465] bond0: (slave wlan1): Releasing backup interface
[   89.224179][ T7465] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   89.227468][ T7465] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   89.230056][ T7465] batman_adv: batadv0: Removing interface: ip6gretap1
[   89.694313][ T7479] vlan2: left allmulticast mode
[   89.696048][ T7479] bond0: left allmulticast mode
[   91.018508][ T7560] __nla_validate_parse: 74 callbacks suppressed
[   91.018521][ T7560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'.
[   91.264759][ T7576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'.
[   91.330150][ T7583] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   91.440455][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.522'.
[   91.594813][ T7597] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.521'.
[   91.634639][ T7602] veth7: entered promiscuous mode
[   91.684058][ T7603] veth9: entered promiscuous mode
[   91.694377][ T7602] netlink: 'syz.1.526': attribute type 10 has an invalid length.
[   91.698627][ T7602] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.263740][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.535'.
[   92.346986][ T7649] xt_policy: too many policy elements
[   92.667401][ T7674] netlink: 830 bytes leftover after parsing attributes in process `syz.1.551'.
[   92.713978][ T7676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'.
[   93.477989][ T7721] netlink: 732 bytes leftover after parsing attributes in process `syz.2.567'.
[   93.481407][ T7721] netlink: 732 bytes leftover after parsing attributes in process `syz.2.567'.
[   93.775028][ T7727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'.
[   93.778488][ T7727] netlink: 'syz.1.569': attribute type 10 has an invalid length.
[   93.787902][ T7727] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   93.800104][ T7727] bond0: (slave bridge0): Releasing backup interface
[   94.386982][ T7761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.393406][ T7760] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.398553][ T7761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.878909][ T7784] x9: renamed from bridge_slave_0
[   95.116281][ T7795] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   95.245021][ T7803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.276468][ T7808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.279220][ T7808] syzkaller0: entered promiscuous mode
[   95.281091][ T7808] syzkaller0: entered allmulticast mode
[   95.295286][ T7808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.322285][ T7808] tipc: Resetting bearer <eth:syzkaller0>
[   95.325638][ T7807] tipc: Resetting bearer <eth:syzkaller0>
[   95.340264][ T7807] tipc: Disabling bearer <eth:syzkaller0>
[   95.360588][ T7802] tipc: Resetting bearer <eth:syzkaller0>
[   95.377209][ T7802] tipc: Disabling bearer <eth:syzkaller0>
[   95.471705][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[   95.484165][ T7828] syzkaller1: entered promiscuous mode
[   95.485973][ T7828] syzkaller1: entered allmulticast mode
[   95.551888][ T7833] blkio.reset_stats is deprecated
[   95.724234][ T7856] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.820419][ T7867] lo speed is unknown, defaulting to 1000
[   95.913280][ T7874] tipc: New replicast peer: 255.255.255.255
[   95.916583][ T7874] tipc: Enabled bearer <udp:s>, priority 10
[   95.924967][ T7874] vlan0: entered promiscuous mode
[   96.194293][ T7887] netlink: 'syz.1.625': attribute type 1 has an invalid length.
[   96.218265][ T7890] __nla_validate_parse: 7 callbacks suppressed
[   96.218284][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'.
[   96.225792][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.626'.
[   96.252954][ T7887] bond2: (slave veth11): Enslaving as an active interface with a down link
[   96.267000][ T7887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'.
[   96.271274][ T7887] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.372661][ T7901] netlink: 56 bytes leftover after parsing attributes in process `syz.1.630'.
[   96.454219][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'.
[   96.629522][ T7919] lo speed is unknown, defaulting to 1000
[   96.676665][ T7929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.638'.
[   96.680280][ T7929] unsupported nlmsg_type 40
[   96.705690][ T7920] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   96.778020][ T7937] tun0: tun_chr_ioctl cmd 2147767520
[   97.041960][ T5906] tipc: Node number set to 3467691789
[   97.068822][ T7952] netlink: 'syz.2.645': attribute type 13 has an invalid length.
[   97.073009][ T7952] netlink: 'syz.2.645': attribute type 17 has an invalid length.
[   97.087536][ T7952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.137585][ T7952] lo speed is unknown, defaulting to 1000
[   97.185813][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.249086][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.345586][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'.
[   97.362919][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'.
[   97.416788][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'.
[   97.424970][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'.
[   98.002005][ T7990] bridge0: entered allmulticast mode
[   98.155236][ T8001] netlink: 'syz.1.660': attribute type 2 has an invalid length.
[   98.398960][ T8016] netlink: 'syz.0.667': attribute type 1 has an invalid length.
[   98.418630][ T8016] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   98.435077][ T8021] netlink: 'syz.2.669': attribute type 21 has an invalid length.
[   98.761295][ T8044] delete_channel: no stack
[   98.963884][ T8052] syz_tun: entered allmulticast mode
[   98.979144][ T8052] dvmrp1: entered allmulticast mode
[   99.559183][ T8070] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   99.745116][ T8050] syz_tun: left allmulticast mode
[   99.779718][ T8075] sctp: [Deprecated]: syz.0.687 (pid 8075) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.779718][ T8075] Use struct sctp_sack_info instead
[   99.791142][ T8075] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   99.797129][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.0.687 Not tainted syzkaller #0 PREEMPT(full) 
[   99.797141][ T8075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   99.797146][ T8075] Call Trace:
[   99.797149][ T8075]  <TASK>
[   99.797153][ T8075]  dump_stack_lvl+0x189/0x250
[   99.797169][ T8075]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.797178][ T8075]  ? __pfx__printk+0x10/0x10
[   99.797193][ T8075]  ? kernfs_path_from_node+0x2f/0x290
[   99.797202][ T8075]  ? kernfs_path_from_node+0x250/0x290
[   99.797209][ T8075]  ? kernfs_path_from_node+0x2f/0x290
[   99.797220][ T8075]  sysfs_warn_dup+0x8e/0xa0
[   99.797228][ T8075]  sysfs_do_create_link_sd+0xc0/0x110
[   99.797237][ T8075]  device_add_class_symlinks+0x1cf/0x240
[   99.797247][ T8075]  device_add+0x475/0xb50
[   99.797256][ T8075]  wiphy_register+0x1ba6/0x28d0
[   99.797273][ T8075]  ? __pfx_wiphy_register+0x10/0x10
[   99.797283][ T8075]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   99.797294][ T8075]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   99.797308][ T8075]  ieee80211_register_hw+0x3425/0x4080
[   99.797324][ T8075]  ? ieee80211_register_hw+0x1461/0x4080
[   99.797336][ T8075]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   99.797345][ T8075]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   99.797359][ T8075]  ? __hrtimer_setup+0x187/0x210
[   99.797366][ T8075]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   99.797377][ T8075]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   99.797398][ T8075]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   99.797407][ T8075]  ? trace_kmalloc+0x1f/0xd0
[   99.797415][ T8075]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   99.797425][ T8075]  ? kstrndup+0xbf/0x160
[   99.797465][ T8075]  hwsim_new_radio_nl+0xea4/0x1b10
[   99.797479][ T8075]  ? __pfx___nla_validate_parse+0x10/0x10
[   99.797497][ T8075]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   99.797512][ T8075]  ? __nla_parse+0x40/0x60
[   99.797525][ T8075]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   99.797538][ T8075]  genl_family_rcv_msg_doit+0x215/0x300
[   99.797549][ T8075]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   99.797563][ T8075]  ? bpf_lsm_capable+0x9/0x20
[   99.797572][ T8075]  ? security_capable+0x7e/0x2e0
[   99.797587][ T8075]  genl_rcv_msg+0x60e/0x790
[   99.797598][ T8075]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.797606][ T8075]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   99.797622][ T8075]  netlink_rcv_skb+0x208/0x470
[   99.797632][ T8075]  ? __lock_acquire+0xab9/0xd20
[   99.797643][ T8075]  ? __pfx_genl_rcv_msg+0x10/0x10
[   99.797651][ T8075]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   99.797670][ T8075]  ? down_read+0x1ad/0x2e0
[   99.797681][ T8075]  genl_rcv+0x28/0x40
[   99.797688][ T8075]  netlink_unicast+0x82f/0x9e0
[   99.797701][ T8075]  ? __pfx_netlink_unicast+0x10/0x10
[   99.797711][ T8075]  ? netlink_sendmsg+0x642/0xb30
[   99.797719][ T8075]  ? skb_put+0x11b/0x210
[   99.797728][ T8075]  netlink_sendmsg+0x805/0xb30
[   99.797742][ T8075]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.797754][ T8075]  ? aa_sock_msg_perm+0xf1/0x1d0
[   99.797766][ T8075]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   99.797773][ T8075]  ? __pfx_netlink_sendmsg+0x10/0x10
[   99.797784][ T8075]  __sock_sendmsg+0x21c/0x270
[   99.797795][ T8075]  ____sys_sendmsg+0x505/0x830
[   99.797805][ T8075]  ? __pfx_____sys_sendmsg+0x10/0x10
[   99.797816][ T8075]  ? import_iovec+0x74/0xa0
[   99.797826][ T8075]  ___sys_sendmsg+0x21f/0x2a0
[   99.797834][ T8075]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.797857][ T8075]  ? __fget_files+0x2a/0x420
[   99.797869][ T8075]  ? __fget_files+0x3a0/0x420
[   99.797885][ T8075]  __x64_sys_sendmsg+0x19b/0x260
[   99.797893][ T8075]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   99.797909][ T8075]  ? do_syscall_64+0xbe/0x3b0
[   99.797921][ T8075]  do_syscall_64+0xfa/0x3b0
[   99.797930][ T8075]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.797939][ T8075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.797946][ T8075]  ? exc_page_fault+0x9f/0xf0
[   99.797974][ T8075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.797982][ T8075] RIP: 0033:0x7f501498ebe9
[   99.797989][ T8075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.797996][ T8075] RSP: 002b:00007f501579f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   99.798005][ T8075] RAX: ffffffffffffffda RBX: 00007f5014bb5fa0 RCX: 00007f501498ebe9
[   99.798011][ T8075] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000c
[   99.798016][ T8075] RBP: 00007f5014a11e19 R08: 0000000000000000 R09: 0000000000000000
[   99.798021][ T8075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.798031][ T8075] R13: 00007f5014bb6038 R14: 00007f5014bb5fa0 R15: 00007fff0da7d828
[   99.798044][ T8075]  </TASK>
[   99.998607][ T8077] macvlan0: entered allmulticast mode
[  100.000907][ T8077] veth1_vlan: entered allmulticast mode
[  100.204902][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.208478][ T8089] 8021q: adding VLAN 0 to HW filter on device team0
[  100.214929][ T8089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.220102][   T24] lo speed is unknown, defaulting to 1000
[  100.226412][   T24] syz0: Port: 1 Link ACTIVE
[  100.230410][   T24] lo speed is unknown, defaulting to 1000
[  100.548222][ T8107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.551350][ T8107] syzkaller0: entered promiscuous mode
[  100.554107][ T8107] syzkaller0: entered allmulticast mode
[  100.610810][ T8112] netlink: 'syz.0.703': attribute type 11 has an invalid length.
[  100.682981][ T8106] tipc: Resetting bearer <eth:syzkaller0>
[  100.696809][ T8106] tipc: Disabling bearer <eth:syzkaller0>
[  101.040606][ T8150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.046242][ T8150] syzkaller0: entered promiscuous mode
[  101.048645][ T8150] syzkaller0: entered allmulticast mode
[  101.065944][ T8150] tipc: Resetting bearer <eth:syzkaller0>
[  101.117599][ T8149] tipc: Resetting bearer <eth:syzkaller0>
[  101.127972][ T8149] tipc: Disabling bearer <eth:syzkaller0>
[  101.304527][ T8163] __nla_validate_parse: 10 callbacks suppressed
[  101.304540][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.720'.
[  101.323217][ T8163] netlink: 60 bytes leftover after parsing attributes in process `syz.1.720'.
[  101.326190][ T8163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.364349][ T5890] IPVS: starting estimator thread 0...
[  104.451883][ T8175] IPVS: using max 50 ests per chain, 120000 per kthread
[  104.634073][ T8201] netlink: 'syz.1.733': attribute type 13 has an invalid length.
[  104.636754][ T8201] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.733'.
[  104.680761][ T8207] netlink: 156 bytes leftover after parsing attributes in process `syz.1.735'.
[  104.685753][ T8207] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  104.693063][ T8205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.736'.
[  104.705610][ T8205] syzkaller0: entered promiscuous mode
[  104.707997][ T8205] syzkaller0: entered allmulticast mode
[  104.987906][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'.
[  104.998319][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'.
[  105.006996][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'.
[  105.347211][ T8247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.350822][ T8247] syzkaller0: entered promiscuous mode
[  105.353765][ T8247] syzkaller0: entered allmulticast mode
[  105.360994][ T8247] tipc: Resetting bearer <eth:syzkaller0>
[  105.367838][ T8246] tipc: Resetting bearer <eth:syzkaller0>
[  105.379483][ T8246] tipc: Disabling bearer <eth:syzkaller0>
[  105.498859][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.750'.
[  105.537123][ T8253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.751'.
[  105.865500][ T8271] batman_adv: batadv0: Adding interface: dummy0
[  105.868217][ T8271] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.880781][ T8271] batman_adv: batadv0: Interface activated: dummy0
[  105.892242][ T8271] batadv0: mtu less than device minimum
[  105.894813][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.898798][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.902777][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.906624][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.910581][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.914755][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.919196][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.924123][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  105.929128][ T8271] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  106.087877][ T8278] netlink: 'syz.0.761': attribute type 1 has an invalid length.
[  106.091323][ T8278] netlink: 'syz.0.761': attribute type 1 has an invalid length.
[  106.095517][ T8278] netlink: 'syz.0.761': attribute type 2 has an invalid length.
[  106.325778][ T8298] lo speed is unknown, defaulting to 1000
[  106.385066][ T8305] netlink: 'syz.0.770': attribute type 1 has an invalid length.
[  106.388627][ T8305] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  106.395008][ T8305] __nla_validate_parse: 9 callbacks suppressed
[  106.395019][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'.
[  106.652995][ T8320] bridge0: port 1(macsec1) entered blocking state
[  106.655993][ T8320] bridge0: port 1(macsec1) entered disabled state
[  106.658876][ T8320] macsec1: entered allmulticast mode
[  106.667333][ T8320] macsec1: left allmulticast mode
[  106.958839][  T435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.962415][  T435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.030419][ T8337] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  107.038823][ T8340] batman_adv: batadv0: Interface deactivated: dummy0
[  107.042133][ T8340] batman_adv: batadv0: Removing interface: dummy0
[  107.047499][ T8340] bond0: (slave wlan1): Releasing backup interface
[  107.057471][ T8340] bond2: (slave veth11): Releasing active interface
[  107.072597][ T8337] netlink: 'syz.1.778': attribute type 10 has an invalid length.
[  107.075641][ T8337] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  107.081052][ T8337] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  107.092956][ T8337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.097178][ T8337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.454485][ T8348] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[  107.458141][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'.
[  107.462149][ T8348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.781'.
[  107.470495][ T8348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  107.474933][ T8348] gretap1: entered promiscuous mode
[  107.689446][ T8364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.787'.
[  107.696514][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'.
[  107.704120][ T8364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.787'.
[  107.707828][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'.
[  107.820570][ T8372] netlink: 'syz.0.789': attribute type 13 has an invalid length.
[  107.824140][ T8372] netlink: 'syz.0.789': attribute type 17 has an invalid length.
[  107.846332][ T8372] lo speed is unknown, defaulting to 1000
[  107.889034][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.945059][ T8376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.303324][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'.
[  108.346356][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'.
[  108.355469][ T8405] bond0: (slave rose0): Enslaving as an active interface with an up link
[  108.539243][ T8418] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  108.687467][ T8425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.802'.
[  108.725039][ T8425] bond4: entered promiscuous mode
[  108.726981][ T8425] bond4: entered allmulticast mode
[  108.729189][ T8425] 8021q: adding VLAN 0 to HW filter on device bond4
[  109.258211][ T8431] tun0: tun_chr_ioctl cmd 1074025675
[  109.260381][ T8431] tun0: persist enabled
[  109.278329][ T8431] tun0: tun_chr_ioctl cmd 1074025675
[  109.280457][ T8431] tun0: persist enabled
[  109.373600][ T8441] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  109.376246][ T8441] team0: Device ipvlan2 is already an upper device of the team interface
[  109.744617][ T8472] netlink: 'syz.2.819': attribute type 29 has an invalid length.
[  109.842433][ T8479] veth0_to_team: entered promiscuous mode
[  109.844365][ T8479] veth0_to_team: entered allmulticast mode
[  110.634598][ T8527] nbd: must specify a device to reconfigure
[  110.958696][ T8533] lo speed is unknown, defaulting to 1000
[  111.115828][ T8544] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  111.289042][ T8559] netlink: 'syz.0.852': attribute type 3 has an invalid length.
[  111.303485][ T8559] pim6reg1: entered promiscuous mode
[  111.305350][ T8559] pim6reg1: entered allmulticast mode
[  111.478408][ T8564] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  111.493259][ T8564] bond2: entered promiscuous mode
[  111.495309][ T8564] bond2: entered allmulticast mode
[  111.497676][ T8564] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.585928][ T8575] __nla_validate_parse: 9 callbacks suppressed
[  111.585942][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  111.593556][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[  111.597193][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'.
[  112.427384][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'.
[  112.462997][ T8648] netlink: 'syz.0.879': attribute type 13 has an invalid length.
[  112.466135][ T8648] netlink: 'syz.0.879': attribute type 17 has an invalid length.
[  112.487915][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'.
[  112.497467][ T8643] net_ratelimit: 50 callbacks suppressed
[  112.497480][ T8643] openvswitch: netlink: Flow key attr not present in new flow.
[  112.540095][ T8658] lo speed is unknown, defaulting to 1000
[  112.554462][ T8643] IPv6: Can't replace route, no match found
[  112.573292][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'.
[  112.593306][ T8648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.613568][ T8648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.810707][ T8673] netlink: 72 bytes leftover after parsing attributes in process `syz.1.886'.
[  112.893848][ T8675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.887'.
[  112.897200][ T8675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.887'.
[  112.901153][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.887'.
[  113.040342][ T8687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.350252][ T8705] netlink: 'syz.0.898': attribute type 83 has an invalid length.
[  113.544149][ T8714] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  113.557646][ T8714] syzkaller0: entered promiscuous mode
[  113.559935][ T8714] syzkaller0: entered allmulticast mode
[  114.543873][ T8719] veth1_vlan: left allmulticast mode
[  114.643285][ T8731] netlink: 'syz.2.905': attribute type 30 has an invalid length.
[  114.657408][ T5905] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  114.660659][ T8731] netlink: 'syz.2.905': attribute type 30 has an invalid length.
[  114.661086][ T5905] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  114.675950][ T5905] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  114.691717][ T5905] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  114.835643][ T8744] tipc: Bearer <eth:gre0>: already 2 bearers with priority 10
[  114.839337][ T8744] tipc: Bearer <eth:gre0>: trying with adjusted priority
[  114.843633][ T8744] tipc: Enabled bearer <eth:gre0>, priority 9
[  114.848270][ T8743] x9: renamed from bridge_slave_0
[  114.911342][ T8754] netlink: 'syz.2.911': attribute type 5 has an invalid length.
[  114.920113][ T8753] syzkaller0: Caught tx_queue_len zero misconfig
[  114.966784][ T8754] geneve3: entered promiscuous mode
[  114.968837][ T8754] geneve3: entered allmulticast mode
[  114.973243][ T5870] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  114.982250][ T5870] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  114.985430][ T5870] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  114.989607][ T5870] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  115.129468][ T8775] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  115.174872][ T8782] netlink: 'syz.1.923': attribute type 10 has an invalid length.
[  115.178324][ T8782] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  115.189023][ T8775] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  115.639447][ T8826] netlink: 'syz.1.936': attribute type 2 has an invalid length.
[  115.699043][ T8826] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.709395][ T8826] 8021q: adding VLAN 0 to HW filter on device team0
[  115.726363][ T8826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.758672][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  115.776051][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  115.824317][ T8832] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  115.827003][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.868160][ T8832] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[  115.906221][ T8832] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.411585][ T8885] syzkaller1: entered allmulticast mode
[  116.675425][ T8900] : renamed from batadv_slave_1
[  116.682806][ T8900] netlink: 'syz.1.962': attribute type 1 has an invalid length.
[  116.897988][ T8905] veth0_to_bond: left allmulticast mode
[  116.903370][ T8905] vlan0: left promiscuous mode
[  116.905878][ T8905] macvlan0: left allmulticast mode
[  116.909703][ T8905] veth3: left promiscuous mode
[  116.914016][ T8905] veth7: left promiscuous mode
[  116.916493][ T8905] veth9: left promiscuous mode
[  116.919142][ T8905] bridge0: left allmulticast mode
[  116.962583][ T8905] __nla_validate_parse: 16 callbacks suppressed
[  116.962595][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'.
[  116.980322][ T8905] hsr_slave_0: left promiscuous mode
[  117.051903][ T8909] sctp: [Deprecated]: syz.0.965 (pid 8909) Use of int in max_burst socket option deprecated.
[  117.051903][ T8909] Use struct sctp_assoc_value instead
[  117.110517][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'.
[  117.177044][ T8914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.967'.
[  117.509826][ T8933] netlink: 256 bytes leftover after parsing attributes in process `syz.2.971'.
[  117.555961][ T8933] lo speed is unknown, defaulting to 1000
[  117.768009][ T8943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.770966][ T8943] syzkaller0: entered promiscuous mode
[  117.776373][ T8943] syzkaller0: entered allmulticast mode
[  117.808250][ T8943] tipc: Resetting bearer <eth:syzkaller0>
[  117.810504][ T8943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.813477][ T8943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  117.828029][ T8942] tipc: Resetting bearer <eth:syzkaller0>
[  117.838610][ T8942] tipc: Disabling bearer <eth:syzkaller0>
[  118.247916][ T8956] netlink: 'syz.1.978': attribute type 1 has an invalid length.
[  118.251064][ T8956] netlink: 'syz.1.978': attribute type 1 has an invalid length.
[  118.254858][ T8956] netlink: 224 bytes leftover after parsing attributes in process `syz.1.978'.
[  118.285772][ T8958] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.289896][ T8958] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.295093][ T8958] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  118.329649][ T8958] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.334040][ T8958] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.338068][ T8958] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  118.402729][ T8958] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.406965][ T8958] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.411128][ T8958] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  118.496769][ T8958] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  118.500996][ T8958] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.505727][ T8958] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  118.579056][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.582943][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  118.586518][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  118.601850][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.605463][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  118.608912][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  118.620562][ T5905] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.624395][ T5905] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  118.627869][ T5905] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  118.641220][ T5905] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.644867][ T5905] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  118.648412][ T5905] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  118.785103][ T8971] netlink: 'syz.0.984': attribute type 5 has an invalid length.
[  118.884097][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.988'.
[  119.129572][ T9010] veth0_to_team: entered promiscuous mode
[  119.135662][ T9010] veth0_to_team: entered allmulticast mode
[  119.250366][ T9019] : entered promiscuous mode
[  119.410070][ T9032] netlink: 'syz.1.1003': attribute type 3 has an invalid length.
[  119.413752][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'.
[  120.555420][ T9132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1009'.
[  120.762622][ T9147] veth0_to_team: left promiscuous mode
[  120.765028][ T9147] veth0_to_team: left allmulticast mode
[  120.774197][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'.
[  120.811338][ T9152] rdma_rxe: rxe_newlink: failed to add lo
[  120.814460][ T9152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1015'.
[  120.900191][ T9159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.903310][ T9159] syzkaller0: entered promiscuous mode
[  120.905382][ T9159] syzkaller0: entered allmulticast mode
[  120.918147][ T9159] tipc: Resetting bearer <eth:syzkaller0>
[  120.924730][ T9158] tipc: Resetting bearer <eth:syzkaller0>
[  120.934909][ T9158] tipc: Disabling bearer <eth:syzkaller0>
[  121.529827][ T9194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.550339][ T9193] tipc: Disabling bearer <eth:syzkaller0>
[  121.595846][ T9199] netlink: 'syz.2.1030': attribute type 1 has an invalid length.
[  121.627141][ T9199] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.646345][ T9199] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.648759][ T9199] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  121.653270][ T9199] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  121.698693][ T9203] veth5: entered promiscuous mode
[  121.705577][ T9203] bond6: (slave veth5): Enslaving as an active interface with a down link
[  121.710953][ T9203] erspan0: entered allmulticast mode
[  121.717306][ T9203] bond6: (slave erspan0): making interface the new active one
[  121.720607][ T9203] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  121.732771][ T9204] syzkaller0: entered allmulticast mode
[  121.743436][ T9204] syzkaller0 (unregistering): left allmulticast mode
[  121.874121][ T9209] netlink: 'syz.2.1033': attribute type 15 has an invalid length.
[  121.877494][ T9209] netlink: 'syz.2.1033': attribute type 18 has an invalid length.
[  121.996683][ T9218] syzkaller1: entered promiscuous mode
[  121.998554][ T9218] syzkaller1: entered allmulticast mode
[  122.473873][ T9237] lo speed is unknown, defaulting to 1000
[  123.770331][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  123.794671][ T9264] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.798283][ T9264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.805618][ T9264] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.884013][ T9264] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.888037][ T9264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.889502][ T9279] __nla_validate_parse: 3 callbacks suppressed
[  123.889513][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'.
[  123.896395][ T9264] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.928615][ T9279] netlink: 'syz.1.1055': attribute type 1 has an invalid length.
[  123.964729][ T9264] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  123.968896][ T9264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  123.974156][ T9264] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  123.992931][ T9285] veth1_to_bridge: entered promiscuous mode
[  123.995799][ T9285] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  123.998701][ T9285] hsr0: entered promiscuous mode
[  124.007360][ T9285] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  124.026891][ T9264] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.030567][ T9264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  124.039938][ T9264] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  124.193872][ T5870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.196622][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  124.199272][ T5870] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  124.239133][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.243242][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  124.245916][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  124.248705][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.254405][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  124.257629][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  124.274523][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.277288][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  124.280847][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  124.319789][ T9308] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1067'.
[  124.336351][ T9308] lo speed is unknown, defaulting to 1000
[  124.552753][ T9325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.647002][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'.
[  124.771148][ T9340] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1081'.
[  124.785367][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'.
[  125.616550][ T9358] bond0: (slave ip_vti0): Error: Device type is different from other slaves
[  127.677289][ T9396] vlan3: entered allmulticast mode
[  127.679478][ T9396] dummy0: entered allmulticast mode
[  127.773299][ T9399] pim6reg1: entered promiscuous mode
[  127.775673][ T9399] pim6reg1: entered allmulticast mode
[  128.124769][ T9417] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1105'.
[  128.129445][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1105'.
[  128.199889][ T9421] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1107'.
[  129.178004][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1108'.
[  129.242883][ T9435] netlink: 'syz.0.1110': attribute type 1 has an invalid length.
[  129.259940][ T9437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1111'.
[  129.352585][ T9441] lo speed is unknown, defaulting to 1000
[  129.363904][ T9445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.378260][ T9445] tipc: Resetting bearer <eth:syzkaller0>
[  129.397115][ T9446] block nbd2: NBD_DISCONNECT
[  129.611793][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1114'.
[  129.893540][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'.
[  129.947443][ T9472] syzkaller1: entered promiscuous mode
[  129.950007][ T9472] syzkaller1: entered allmulticast mode
[  129.959908][ T9472] tun0: tun_chr_ioctl cmd 1074025675
[  129.965819][ T9472] tun0: persist enabled
[  129.975036][ T9473] tun0: tun_chr_ioctl cmd 1074025675
[  129.978597][ T9473] tun0: persist enabled
[  129.984031][ T9472] tun0: tun_chr_ioctl cmd 1074025675
[  129.991666][ T9472] tun0: persist disabled
[  130.099185][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1119'.
[  130.187368][ T9488] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1121'.
[  130.404384][ T9503] wlan0: entered promiscuous mode
[  130.437969][ T9503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1126'.
[  130.438751][ T9506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'.
[  130.444184][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[  130.493533][ T5890] tipc: Node number set to 2633960684
[  130.558818][ T9508] lo speed is unknown, defaulting to 1000
[  130.881910][ T9525] block nbd0: server does not support multiple connections per device.
[  130.887082][ T9525] block nbd0: shutting down sockets
[  130.931098][ T9529] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.939719][ T9529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  130.945653][ T9529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  130.959168][ T9531] bond0: (slave wlan1): Releasing backup interface
[  131.026763][ T9529] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.030882][ T9529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  131.047708][ T9529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.085911][ T9538] geneve3: entered promiscuous mode
[  131.101037][ T5870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.106201][ T5870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.112541][ T9529] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.115968][ T9529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  131.119744][ T9529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.128686][ T5870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.132527][ T5870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.146413][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'.
[  131.170089][ T9529] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.186219][ T9529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  131.190317][ T9529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  131.300275][ T5905] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.304786][ T5905] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  131.308459][ T5905] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  131.323646][ T5870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.328929][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  131.332700][ T5870] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  131.354367][ T5870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.358702][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  131.362184][ T5870] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  131.379612][ T5870] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.383032][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  131.386207][ T5870] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  131.455638][ T9563] geneve1: entered promiscuous mode
[  131.748750][ T9585] tipc: Enabling <ib:lo> not permitted
[  131.750551][ T9588] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  131.751767][ T9585] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  131.915752][ T9598] lo speed is unknown, defaulting to 1000
[  132.037558][ T9611] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  132.046764][ T9611] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  132.436816][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.477187][ T9643] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  132.586681][ T9651] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  132.845765][ T9677] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  133.271018][ T9698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.542313][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.548266][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.554998][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.558882][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.565519][ T9715] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20001
[  133.570525][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.087311][ T9717] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  134.285564][ T9746] lo speed is unknown, defaulting to 1000
[  134.424523][ T9747] __nla_validate_parse: 15 callbacks suppressed
[  134.424538][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1201'.
[  134.430120][ T9747] ip6gretap0: entered promiscuous mode
[  134.433568][ T9747] ip6gretap0: entered allmulticast mode
[  134.451176][ T9751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1202'.
[  134.536602][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'.
[  134.554147][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  134.560004][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'.
[  134.645672][ T9761] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  134.649061][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1205'.
[  135.896268][ T9779] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  136.776946][ T9795] bond1: (slave ip6gretap2): Releasing backup interface
[  136.789062][ T9795] netlink: 'syz.0.1217': attribute type 10 has an invalid length.
[  136.795318][ T9795] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  136.804066][ T9795] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.975009][ T9805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.978006][ T9805] tipc: Resetting bearer <eth:syzkaller0>
[  136.980567][ T9805] syzkaller0: left promiscuous mode
[  137.109438][ T9814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  137.114459][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1225'.
[  137.411247][ T9822] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1227'.
[  137.418377][ T9822] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1227'.
[  137.731447][ T9832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'.
[  137.744715][ T9833] lo speed is unknown, defaulting to 1000
[  138.245438][ T9822] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  138.248119][ T9822] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  138.262280][ T9822] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  138.266308][ T9822] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  138.278776][ T9822] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  138.285029][ T9822] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  138.299996][ T9822] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  138.304935][ T9822] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  138.309268][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.0.1227 Not tainted syzkaller #0 PREEMPT(full) 
[  138.313044][ T9822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.317262][ T9822] RIP: 0010:klist_remove+0x14a/0x340
[  138.319478][ T9822] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 ac b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca ac b3 f6 49 8b 44 24 58 48 89 44 24 08
[  138.327427][ T9822] RSP: 0018:ffffc9000293f820 EFLAGS: 00010202
[  138.329965][ T9822] RAX: 000000000000000b RBX: ffff888107b40000 RCX: 0000000000000000
[  138.333226][ T9822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  138.336485][ T9822] RBP: ffffc9000293f908 R08: ffffffff8f89f683 R09: 1ffffffff1f13ed0
[  138.339775][ T9822] R10: dffffc0000000000 R11: fffffbfff1f13ed1 R12: 0000000000000000
[  138.343035][ T9822] R13: 1ffff11005ff5a8c R14: ffff88802ffad460 R15: dffffc0000000000
[  138.346364][ T9822] FS:  00007f501579f6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  138.349954][ T9822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.352687][ T9822] CR2: 000055c9c61c81e0 CR3: 0000000108e94000 CR4: 00000000000006f0
[  138.355996][ T9822] Call Trace:
[  138.357156][ T9822]  <TASK>
[  138.358137][ T9822]  ? __pfx_klist_remove+0x10/0x10
[  138.359741][ T9822]  ? __pfx_kobject_move+0x10/0x10
[  138.361368][ T9822]  ? get_device_parent+0x366/0x3a0
[  138.363049][ T9822]  device_move+0x193/0x700
[  138.364542][ T9822]  hci_conn_del_sysfs+0xb8/0x170
[  138.366160][ T9822]  hci_conn_del+0x949/0xcf0
[  138.367647][ T9822]  hci_conn_hash_flush+0x191/0x230
[  138.369312][ T9822]  hci_dev_close_sync+0xaef/0x1330
[  138.370956][ T9822]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  138.372778][ T9822]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  138.374690][ T9822]  hci_dev_do_close+0x2f/0x90
[  138.376242][ T9822]  hci_rfkill_set_block+0x21d/0x2e0
[  138.377910][ T9822]  ? __pfx_hci_rfkill_set_block+0x10/0x10
[  138.379754][ T9822]  rfkill_set_block+0x1d2/0x440
[  138.381341][ T9822]  rfkill_fop_write+0x44b/0x570
[  138.382935][ T9822]  ? __pfx_rfkill_fop_write+0x10/0x10
[  138.384665][ T9822]  ? __pfx_security_file_permission+0x10/0x10
[  138.386635][ T9822]  ? rw_verify_area+0x255/0x4d0
[  138.388225][ T9822]  ? __lock_acquire+0xab9/0xd20
[  138.389762][ T9822]  ? __pfx_rfkill_fop_write+0x10/0x10
[  138.391432][ T9822]  vfs_write+0x27e/0xb30
[  138.392791][ T9822]  ? __pfx_vfs_write+0x10/0x10
[  138.394342][ T9822]  ? __fget_files+0x2a/0x420
[  138.395819][ T9822]  ? __fget_files+0x2a/0x420
[  138.397340][ T9822]  ? __fget_files+0x3a0/0x420
[  138.399006][ T9822]  ? __fget_files+0x2a/0x420
[  138.400533][ T9822]  ksys_write+0x145/0x250
[  138.402033][ T9822]  ? __pfx_ksys_write+0x10/0x10
[  138.403997][ T9822]  ? rcu_is_watching+0x15/0xb0
[  138.405859][ T9822]  ? do_syscall_64+0xbe/0x3b0
[  138.407572][ T9822]  do_syscall_64+0xfa/0x3b0
[  138.409069][ T9822]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.410740][ T9822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.412665][ T9822]  ? exc_page_fault+0x9f/0xf0
[  138.414205][ T9822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.416312][ T9822] RIP: 0033:0x7f501498ebe9
[  138.418073][ T9822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.424807][ T9822] RSP: 002b:00007f501579f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  138.427851][ T9822] RAX: ffffffffffffffda RBX: 00007f5014bb5fa0 RCX: 00007f501498ebe9
[  138.430388][ T9822] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008
[  138.432996][ T9822] RBP: 00007f5014a11e19 R08: 0000000000000000 R09: 0000000000000000
[  138.435811][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.438405][ T9822] R13: 00007f5014bb6038 R14: 00007f5014bb5fa0 R15: 00007fff0da7d828
[  138.440928][ T9822]  </TASK>
[  138.441942][ T9822] Modules linked in:
[  138.443755][ T9822] ---[ end trace 0000000000000000 ]---
[  138.446553][ T9822] RIP: 0010:klist_remove+0x14a/0x340
[  138.448296][ T9822] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 ac b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca ac b3 f6 49 8b 44 24 58 48 89 44 24 08
[  138.454831][ T9822] RSP: 0018:ffffc9000293f820 EFLAGS: 00010202
[  138.456778][ T9822] RAX: 000000000000000b RBX: ffff888107b40000 RCX: 0000000000000000
[  138.459411][ T9822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  138.463475][ T9822] RBP: ffffc9000293f908 R08: ffffffff8f89f683 R09: 1ffffffff1f13ed0
[  138.466182][ T9822] R10: dffffc0000000000 R11: fffffbfff1f13ed1 R12: 0000000000000000
[  138.468812][ T9822] R13: 1ffff11005ff5a8c R14: ffff88802ffad460 R15: dffffc0000000000
[  138.471547][ T9822] FS:  00007f501579f6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  138.475691][ T9822] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  138.478392][ T9822] CR2: 000055c9c61c81e0 CR3: 0000000108e94000 CR4: 00000000000006f0
[  138.481752][ T9822] Kernel panic - not syncing: Fatal exception
[  138.484979][ T9822] Kernel Offset: disabled
[  138.486788][ T9822] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:54:27  Registers:
info registers vcpu 0

CPU#0
RAX=90f1445b7e3ccb00 RBX=ffffffff819683a8 RCX=90f1445b7e3ccb00 RDX=0000000000000001
RSI=ffffffff8be332e0 RDI=ffffffff819683a8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37c30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcf9770b08 CR3=0000000025ca2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f11e3812e53
XMM06=0000000000000000 00007f11e3812e4d XMM07=0000000000000000 00007f11e3812e61
XMM08=0000000000000000 00007f11e3812ee7 XMM09=0000000000000000 00007f11e3812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000a518 RDI=000000000000a519 RBP=00000000000003f8 RSP=ffffc9000293f050
R8 =ffff8881080a8237 R9 =1ffff11021015046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af991a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f501579f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c9c61c81e0 CR3=0000000108e94000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=000000000000018f 000000000000102d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffff0000 XMM09=00000000000001e1 000000000000302d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
