last executing test programs:

1.828651034s ago: executing program 1 (id=2731):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)

1.775735249s ago: executing program 1 (id=2734):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x90)

1.719988944s ago: executing program 1 (id=2735):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0xb}, @volatile, @volatile, @volatile={0x2000000, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0xfffffffe}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.719152502s ago: executing program 1 (id=2738):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x4, 0x4)

1.07046851s ago: executing program 2 (id=2760):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x80, &(0x7f0000000100)={0xa, 0x4e22, 0x7fffffff, @mcast2, 0x8000}, 0x1c)
r3 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000040)=@default)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00f8f4089f70006800e9784b114b00000500"/28], 0x1c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

820.423845ms ago: executing program 1 (id=2761):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c)

819.949404ms ago: executing program 1 (id=2762):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x4}, 0x1})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r11, &(0x7f0000000000)="2a000200010078", 0x7)
connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

380.135984ms ago: executing program 0 (id=2769):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, 0x0, 0x0)

379.943422ms ago: executing program 0 (id=2770):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ad915d564c90c20025", 0x9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0)

319.842529ms ago: executing program 0 (id=2771):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @empty, 0x8}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x80108907, 0x0)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

319.546054ms ago: executing program 0 (id=2772):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x8, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x9, 0xff, 0x204, 0x5, 0xb7b, 0x2, 0x2, 0x2}, 0x20)

258.324997ms ago: executing program 0 (id=2773):
socket$tipc(0x1e, 0x5, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x1}}, 0x10)
vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
unshare(0x68040200)
unshare(0x40040100)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002536702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600640006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030f0800"/28], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcd000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x88)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10)

226.449037ms ago: executing program 2 (id=2774):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0x8, 0x4)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27}, 0x6e)
r3 = socket$kcm(0x11, 0x200000000000003, 0x300)
recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/74, 0x4a}], 0x2}, 0x2)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'wg0\x00'})
writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000180)}, {&(0x7f0000000400)="eab6b256ae521bdd81ba8db0057955de30abcd12aaad7e15237365bc43d48288c8a2b12001ad4e9923bf6ce29286bb", 0x2f}, {&(0x7f0000000440)="1003bff665302d0a69718bc482b07340080ee7e0e55af83fe3f02123086db0c724a4a83f4daaaecddee28c64a89ac23d2b77ac2ff845b06f3b1e39e881d5bdacd6ee2d8aae955caf6f6b5cfa7723c3da0ff01a3d457aa531a01cb78d4f94e18cd44d50003e97057f7c68f96d911a0fb61c5125", 0x73}, {&(0x7f00000005c0)="ba22456e9fc833d83c08fe17d8dc091d4ec610aee535e5944495ba90e84199ebe48df5fc9d0fb8ad0bd4df8e8bbf4bef04bb3ea271b82b3c40a5abdcde90374f0ef2304d5633ab1f3ab0f54e0007cd29135a3051645b7861fb6df223dbabad7ffe0655ca5f6f89c4ed04711f8c0dbe35465a4958afafb35f6bdf9b36aec1a672d9b1a98120e72b64814a6be0eda5d039aaefde305b0221cc81ec0ecb82dd6131c88d2f6e9abb5ff211b7974a41e15eb280dbf6230bb626ea8f2dcad08ada531fd8681e7afb6935c495131811407e5bb1652bd88ffd991a3f0d37968e68c78107381b", 0xe2}, {&(0x7f0000000500)="5201a5458d0c41dd0061d1ce34d6bba88cacb0ea57b1abed3cf2e0b81a4194a8b2b68c2076299e34eb519346da8a88de293fe4025294ff169e93e91f1c5ba89385a6cc089f0b0f8ec8a7ea19948b7d47ac4f81c6acd014ba26b952ea976416cd0ca24994f81ef09d39244e885992361e522bfa4b1921f32b7ab0", 0x7a}, {&(0x7f0000000780)="b838ff59f581d32d0d944b75095480ebf0f1a8ec43d575f260489df670157255cae714166c6d998f202086bd38f648564a2abf115e07a2c5838b2bdb6c5af507ad2844defe1a86e8f30cb834365f3749185441edeb49a8c40d469d5dbfe06c0d8cfc9d619456955d40747d08ef77933e25614e7ef1fd67473319bf8e187e71d10d6a15b899dab31d3b5684cef8ae12a28cf10efc0375e54d9bf322c25b5a10b125f8deb0f95d770ffb5aeb3be6a1ae96fdcef8504c79ca4bedd5ce2c31020281f8c47160fffd90d9", 0xc8}, {&(0x7f0000000880)="c534ef988f87b8a30ba96aa71790254dd4424c1bbab1420b9641310e9bf92115f9bdbfd166ff5e845f27b200b14a44e11f1cdf71cec732fe512b67034a31fad03498fefc11769d6de4ee3a178dbef6d5e460ede276e88d01609a4fa95480eb07e8e575d0b1f83ba04053ac13446bffb1bd0c47e979a4a05e6a3098b898148492f8057fb526581283bd3f", 0x8a}, {&(0x7f0000000940)="0cceb865b435658c1478c3cab1d84e19e39a535c93053ab6663cab51c100363193ef35237bc8293dbf46497ae37247d32721be8fc8c36e4f02686d37851ac7c2e8be33e600c03c421027ac6dee142d7c98ddd48174db3507d531ae049b888a42df86343f5bbe09cc11f9372d14e28ce25d2e5429de962ddb11", 0x79}, {&(0x7f00000009c0)="a00c352667aa890bcd6d0afdd9010ba4b0eef7b3596d26aea51081f27559cfb8472c89bf46e75d07d976da12fba8103aec472829507e3033b362b9fc56a65c3d362eba974a4899641db81b58b90a2313b0f7d9229d4cbe7cce7a816ef3303a51e260fb7a693a12c13acf0c35c7c6484389e8a531350938d60c95a07cafc2f389657cb2da8c3ffe422e06476d", 0x8c}, {&(0x7f0000000b00)="783f1328960d5743c1ba3421567ebc64079f26caae618190c371065b049e7a5317be5a8f575219ac6e1ac31f73677e57a7818538ca5e53fd2beabeca1b7746476c520b03bacea0f26a45370a5597511498b697d93ac2363a9462e1e9c2037293435b30e5cbb75d8e24b7effc", 0x6c}], 0xa)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x7ffffffd, 0x25dfdbfb, {0xa}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x640100fd}]}, 0x24}}, 0x20000050)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
unshare(0x22020600)
r6 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x11, "e6673fcf0b051e0000000000000000"}, @window={0x3, 0x3, 0xfe}]}}}}}}}}, 0x0)
write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4)
accept4$ax25(r6, &(0x7f0000000300)={{0x3, @null}, [@remote, @null, @bcast, @null, @rose, @remote, @default, @netrom]}, &(0x7f0000000080)=0x48, 0x80000)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

117.900358ms ago: executing program 0 (id=2775):
socket(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x15e)
shutdown(r0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

60.474158ms ago: executing program 2 (id=2776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038014000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e3100000000000000001400010076657468310000000000000000000000140001006772653000000000000000000000000014000100776c616e3100000000000000000000009400010076657468315f766972745f77696669001400010076657468305f746f5f626f6e6400000008000240000000064c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000000014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000014000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010076657468315f746f5f7465616d000000140001007465616d5f736c6176655f300000000008000140000000200900020073797a30000000001001038008000140000008"], 0x378}}, 0x0)

60.154849ms ago: executing program 2 (id=2777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}]}, 0x38}}, 0x20008800)

314.788µs ago: executing program 2 (id=2778):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000001d711875000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

0s ago: executing program 2 (id=2779):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x200081}, 0x1c)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57701' (ED25519) to the list of known hosts.
syzkaller login: [   48.233084][ T5772] cgroup: Unknown subsys name 'net'
[   48.339827][ T5772] cgroup: Unknown subsys name 'cpuset'
[   48.344748][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.726524][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.429394][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.433209][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.436622][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.440751][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.444478][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.457918][ T5888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.461928][ T5888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.464890][ T5888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.468979][ T5888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.472573][ T5888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.552177][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.555727][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.560511][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.564419][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.568443][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.833103][ T5884] chnl_net:caif_netlink_parms(): no params data found
[   61.929082][ T5890] chnl_net:caif_netlink_parms(): no params data found
[   61.936117][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   61.991246][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.995072][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.000014][ T5884] bridge_slave_0: entered allmulticast mode
[   62.003618][ T5884] bridge_slave_0: entered promiscuous mode
[   62.043413][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.046445][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.049987][ T5884] bridge_slave_1: entered allmulticast mode
[   62.053891][ T5884] bridge_slave_1: entered promiscuous mode
[   62.138133][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.142010][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.145592][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.150627][ T5890] bridge_slave_0: entered allmulticast mode
[   62.154376][ T5890] bridge_slave_0: entered promiscuous mode
[   62.176411][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.180312][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.183370][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.186324][ T5890] bridge_slave_1: entered allmulticast mode
[   62.190278][ T5890] bridge_slave_1: entered promiscuous mode
[   62.193570][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.196044][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.200602][ T5887] bridge_slave_0: entered allmulticast mode
[   62.203914][ T5887] bridge_slave_0: entered promiscuous mode
[   62.243944][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.247143][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.250022][ T5887] bridge_slave_1: entered allmulticast mode
[   62.253668][ T5887] bridge_slave_1: entered promiscuous mode
[   62.272613][ T5884] team0: Port device team_slave_0 added
[   62.295808][ T5884] team0: Port device team_slave_1 added
[   62.300846][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.308018][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.323825][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.341195][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.387225][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.389753][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.399320][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.404852][ T5887] team0: Port device team_slave_0 added
[   62.410028][ T5887] team0: Port device team_slave_1 added
[   62.426439][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.429173][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.437546][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.471263][ T5890] team0: Port device team_slave_0 added
[   62.476768][ T5890] team0: Port device team_slave_1 added
[   62.492420][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.495303][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.506168][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.529553][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.531945][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.540462][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.544781][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.547137][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.555414][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.575908][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.578944][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.589911][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.600861][ T5884] hsr_slave_0: entered promiscuous mode
[   62.604674][ T5884] hsr_slave_1: entered promiscuous mode
[   62.638326][ T5887] hsr_slave_0: entered promiscuous mode
[   62.641739][ T5887] hsr_slave_1: entered promiscuous mode
[   62.644776][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   62.647712][ T5887] Cannot create hsr debugfs directory
[   62.736722][ T5890] hsr_slave_0: entered promiscuous mode
[   62.740487][ T5890] hsr_slave_1: entered promiscuous mode
[   62.743255][ T5890] debugfs: 'hsr0' already exists in 'hsr'
[   62.745523][ T5890] Cannot create hsr debugfs directory
[   63.026990][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.033469][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.038279][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.048171][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.071818][ T5887] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.080445][ T5887] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.086592][ T5887] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.093680][ T5887] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.142331][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.150479][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.155964][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.162066][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.240594][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.254379][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.268284][ T5884] 8021q: adding VLAN 0 to HW filter on device team0
[   63.275289][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[   63.280612][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.286683][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.289039][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.295174][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.297471][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.304977][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.307402][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.319530][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.321830][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.351415][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   63.363909][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.366347][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.384119][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.386573][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.490702][   T55] Bluetooth: hci0: command tx timeout
[   63.492789][ T5888] Bluetooth: hci1: command tx timeout
[   63.509210][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.540367][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.545612][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.570484][ T5890] veth0_vlan: entered promiscuous mode
[   63.583525][ T5890] veth1_vlan: entered promiscuous mode
[   63.620791][ T5887] veth0_vlan: entered promiscuous mode
[   63.631300][ T5884] veth0_vlan: entered promiscuous mode
[   63.643162][ T5887] veth1_vlan: entered promiscuous mode
[   63.647288][ T5888] Bluetooth: hci2: command tx timeout
[   63.649851][ T5890] veth0_macvtap: entered promiscuous mode
[   63.654972][ T5884] veth1_vlan: entered promiscuous mode
[   63.668736][ T5890] veth1_macvtap: entered promiscuous mode
[   63.701948][ T5887] veth0_macvtap: entered promiscuous mode
[   63.705160][ T5884] veth0_macvtap: entered promiscuous mode
[   63.710016][ T5884] veth1_macvtap: entered promiscuous mode
[   63.715376][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.729453][ T5887] veth1_macvtap: entered promiscuous mode
[   63.738389][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.744737][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.755749][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.773727][ T5893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.780448][ T5893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.783937][ T5893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.791570][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.799514][ T5893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.811548][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.815085][ T5893] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.821406][ T5893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.843150][ T5893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.859392][ T5893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.862847][ T5893] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.877966][ T5893] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.897239][ T5893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.904040][ T5893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.965422][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.971458][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.991867][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.994302][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.025109][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.032936][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.039737][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.042899][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.050210][  T273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.052874][  T273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.095980][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.101960][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.108501][ T5890] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.276565][ T5958] netlink: 'syz.1.31': attribute type 9 has an invalid length.
[   64.506519][ T5976] netlink: 248 bytes leftover after parsing attributes in process `syz.0.39'.
[   64.612332][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.679460][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'.
[   64.909424][ T6008] netlink: 60 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.923836][ T6008] netlink: 35 bytes leftover after parsing attributes in process `syz.0.55'.
[   65.143311][ T6028] Zero length message leads to an empty skb
[   65.261833][ T6038] syz.2.69 uses obsolete (PF_INET,SOCK_PACKET)
[   65.305208][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[   65.523005][ T6051] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.569096][   T55] Bluetooth: hci0: command tx timeout
[   65.570990][ T5888] Bluetooth: hci1: command tx timeout
[   65.738288][ T5888] Bluetooth: hci2: command tx timeout
[   65.940771][ T6082] team0: Port device vxlan0 added
[   65.943104][ T5716] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   65.946503][ T5716] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   65.953216][ T5716] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   65.960773][ T5716] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   66.043143][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   66.046153][ T6089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   66.059830][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'.
[   66.142192][ T6098] netlink: 'syz.2.91': attribute type 3 has an invalid length.
[   66.197741][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   66.966548][ T6101] netlink: 'syz.2.92': attribute type 1 has an invalid length.
[   67.080639][ T6130] Illegal XDP return value 4294967274 on prog  (id 10) dev N/A, expect packet loss!
[   67.559389][ T6164] veth1_to_batadv: entered promiscuous mode
[   67.578057][   T39] wlan1: Trigger new scan to find an IBSS to join
[   67.652866][ T6177] netlink: 'syz.1.121': attribute type 27 has an invalid length.
[   67.653369][ T5888] Bluetooth: hci1: command tx timeout
[   67.659294][   T55] Bluetooth: hci0: command tx timeout
[   67.754408][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.768940][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.785593][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.807802][ T5888] Bluetooth: hci2: command tx timeout
[   67.815488][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.343294][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   68.428876][ T6210] netlink: 60 bytes leftover after parsing attributes in process `syz.2.135'.
[   68.432776][ T6210] unsupported nlmsg_type 40
[   68.803055][ T6231] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   69.227889][ T6253] netlink: 'syz.2.155': attribute type 13 has an invalid length.
[   69.235730][ T6253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   69.711000][ T6282] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   69.728369][ T5888] Bluetooth: hci1: command tx timeout
[   69.733633][ T5888] Bluetooth: hci0: command tx timeout
[   69.888016][   T55] Bluetooth: hci2: command tx timeout
[   69.985754][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'.
[   69.992743][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.995249][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.282742][ T6295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.290153][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.617791][ T1101] wlan1: Trigger new scan to find an IBSS to join
[   70.852927][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'.
[   70.856811][ T6332] bridge_slave_1: left allmulticast mode
[   70.861469][ T6332] bridge_slave_1: left promiscuous mode
[   70.865539][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.874020][ T6332] bridge_slave_0: left allmulticast mode
[   70.875924][ T6332] bridge_slave_0: left promiscuous mode
[   70.880041][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.982210][ T6338] Bluetooth: MGMT ver 1.23
[   71.107078][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.109920][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.595449][ T6377] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   71.599860][ T6377] netlink: 228 bytes leftover after parsing attributes in process `syz.1.201'.
[   71.693206][ T6383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.797346][ T6416] trusted_key: syz.1.219 sent an empty control message without MSG_MORE.
[   73.191920][ T6445] netlink: 704 bytes leftover after parsing attributes in process `syz.1.234'.
[   73.444889][ T6462] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   73.502312][ T6462] bond1: entered promiscuous mode
[   73.507885][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.512885][ T6466] vcan0: tx drop: invalid da for name 0x0000000000000001
[   73.643287][ T1206] wlan1: Trigger new scan to find an IBSS to join
[   73.690038][ T6467] bond1: (slave bridge1): making interface the new active one
[   73.698259][ T6467] bridge1: entered promiscuous mode
[   73.702243][ T6467] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   73.726338][ T6470] tipc: Started in network mode
[   73.730927][ T6470] tipc: Node identity deb3e09b479a, cluster identity 4711
[   73.734129][ T6470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.737851][ T6470] syzkaller0: entered promiscuous mode
[   73.739629][ T6470] syzkaller0: entered allmulticast mode
[   73.825247][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   73.838709][ T6469] tipc: Resetting bearer <eth:syzkaller0>
[   73.868766][ T6469] tipc: Disabling bearer <eth:syzkaller0>
[   74.310241][ T6490] netlink: 'syz.0.251': attribute type 1 has an invalid length.
[   74.361531][ T6490] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   74.380109][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.384213][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   74.432529][ T6490] veth3: entered promiscuous mode
[   74.437937][ T6490] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   74.460399][ T6490] bridge_slave_0: left allmulticast mode
[   74.462821][ T6490] bridge_slave_0: left promiscuous mode
[   74.465411][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.503975][ T6490] bridge_slave_1: left allmulticast mode
[   74.506392][ T6490] bridge_slave_1: left promiscuous mode
[   74.510166][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.519513][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   74.533352][ T6490] bond0: (slave bond_slave_0): Releasing backup interface
[   74.542071][ T6490] bond0: (slave bond_slave_1): Releasing backup interface
[   74.558345][ T6490] team0: Port device team_slave_0 removed
[   74.565697][ T6490] team0: Port device team_slave_1 removed
[   74.569359][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.572611][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.578773][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.581936][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.595259][ T6490] bond1: (slave ip6gretap1): Removing an active aggregator
[   74.601757][ T6490] bond1: (slave ip6gretap1): Releasing backup interface
[   74.604719][ T6490] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 22:87:eb:15:dd:a0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   74.616275][   T32] wlan1: Creating new IBSS network, BSSID 2a:3d:f4:35:05:37
[   74.630157][ T6490] bond1: (slave veth3): Releasing backup interface
[   75.649233][ T6557] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.455834][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'.
[   76.461115][ T6577] netlink: 52 bytes leftover after parsing attributes in process `syz.1.282'.
[   76.933322][ T6602] macsec2: entered promiscuous mode
[   76.935522][ T6602] macsec2: entered allmulticast mode
[   77.413955][ T6626] team_slave_0: entered promiscuous mode
[   77.417323][ T6626] team_slave_1: entered promiscuous mode
[   77.438600][ T6626] vlan2: entered promiscuous mode
[   77.446705][ T6626] team0: entered promiscuous mode
[   78.108596][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.320'.
[   78.342615][ T6680] netlink: 56 bytes leftover after parsing attributes in process `syz.1.327'.
[   78.345872][ T6680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'.
[   78.810502][ T6714] netlink: 'syz.1.346': attribute type 1 has an invalid length.
[   78.813613][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'.
[   78.982762][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'.
[   80.284427][ T6805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.387'.
[   80.293612][ T6805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.868656][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'.
[   80.872447][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[   80.876190][ T6840] netlink: 'syz.2.403': attribute type 13 has an invalid length.
[   81.832853][ T6918] __nla_validate_parse: 1 callbacks suppressed
[   81.832867][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'.
[   81.873739][ T6920] batadv_slave_1: entered promiscuous mode
[   81.876251][ T6919] batadv_slave_1: left promiscuous mode
[   82.132224][ T6937] veth1_to_bond: entered allmulticast mode
[   82.135638][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'.
[   82.161709][ T6937] bond0: (slave bond_slave_1): Releasing backup interface
[   82.180718][ T6937] veth1_to_bond (unregistering): left allmulticast mode
[   82.283085][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'.
[   82.287992][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.449'.
[   82.617811][ T6967] IPv4: Oversized IP packet from 127.202.26.0
[   82.822801][ T6987] netlink: 'syz.1.467': attribute type 1 has an invalid length.
[   82.966723][ T7000] netlink: 'syz.1.474': attribute type 4 has an invalid length.
[   82.979011][ T7000] netlink: 'syz.1.474': attribute type 4 has an invalid length.
[   83.425359][ T7017] openvswitch: netlink: Flow key attribute not present in set flow.
[   83.655976][ T7027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'.
[   84.294349][   T24] IPVS: starting estimator thread 0...
[   84.373502][ T5716] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.376392][ T5716] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.376973][ T7065] IPVS: using max 77 ests per chain, 184800 per kthread
[   84.379852][ T5716] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.385787][ T5716] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.389975][ T5716] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.393235][ T5716] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.398201][ T5716] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   84.401647][ T5716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.683294][ T7077] syz_tun: entered allmulticast mode
[   84.688439][ T7077] syz_tun: left allmulticast mode
[   84.727852][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.507'.
[   85.162763][ T7105] syz_tun: entered allmulticast mode
[   85.171570][ T7105] dvmrp1: entered allmulticast mode
[   85.184277][ T7104] syz_tun: left allmulticast mode
[   85.196605][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'.
[   85.220996][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'.
[   85.333219][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'.
[   85.401911][ T7121] hsr_slave_1 (unregistering): left promiscuous mode
[   85.445055][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'.
[   85.601099][ T7139] tipc: Started in network mode
[   85.603799][ T7139] tipc: Node identity 6ea45f44977, cluster identity 4711
[   85.607166][ T7139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.612755][ T7139] syzkaller0: entered promiscuous mode
[   85.615287][ T7139] syzkaller0: entered allmulticast mode
[   85.635625][ T7139] tipc: Resetting bearer <eth:syzkaller0>
[   85.642774][ T7138] tipc: Resetting bearer <eth:syzkaller0>
[   85.652767][ T7138] tipc: Disabling bearer <eth:syzkaller0>
[   86.452469][   T10] cfg80211: failed to load regulatory.db
[   86.773155][ T7192] tipc: Started in network mode
[   86.775417][ T7192] tipc: Node identity aabbb4572915, cluster identity 4711
[   86.779022][ T7192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.783042][ T7192] syzkaller0: entered promiscuous mode
[   86.786109][ T7192] syzkaller0: entered allmulticast mode
[   86.804819][ T7192] tipc: Resetting bearer <eth:syzkaller0>
[   86.810257][ T7191] tipc: Resetting bearer <eth:syzkaller0>
[   86.831173][ T7191] tipc: Disabling bearer <eth:syzkaller0>
[   87.071217][ T7213] __nla_validate_parse: 1 callbacks suppressed
[   87.071233][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'.
[   87.386705][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'.
[   87.510533][ T7241] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   87.822915][ T7266] netlink: 'syz.0.595': attribute type 21 has an invalid length.
[   87.942257][ T7276] syzkaller1: tun_chr_ioctl cmd 1074025677
[   87.944984][ T7276] syzkaller1: linktype set to 6
[   88.163189][ T7299] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   88.170526][ T7299] macvtap1: entered allmulticast mode
[   88.172347][ T7299] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   88.175984][ T7299] batman_adv: batadv0: Adding interface: macvtap1
[   88.178476][ T7299] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.189130][ T7299] batman_adv: batadv0: Interface activated: macvtap1
[   88.536428][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'.
[   88.541441][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'.
[   88.552083][ T7324] ip6tnl1: entered promiscuous mode
[   88.554449][ T7324] ip6tnl1: entered allmulticast mode
[   88.621007][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[   88.656553][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.622'.
[   88.711658][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'.
[   88.886234][ T7345] netlink: 'syz.0.630': attribute type 1 has an invalid length.
[   89.151069][ T7362] netlink: 'syz.0.637': attribute type 4 has an invalid length.
[   89.160196][ T7362] netlink: 'syz.0.637': attribute type 4 has an invalid length.
[   89.332928][   T24] IPVS: starting estimator thread 0...
[   89.421693][ T7369] IPVS: using max 77 ests per chain, 184800 per kthread
[   89.431568][ T7372] ksmbd: Unknown IPC event: 3, ignore.
[   89.534679][ T7374] netlink: 'syz.2.641': attribute type 15 has an invalid length.
[   89.613996][ T7376] netlink: 'syz.2.642': attribute type 1 has an invalid length.
[   89.618140][ T7376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.642'.
[   89.817010][ T5888] Bluetooth: hci2: command 0x0405 tx timeout
[   90.620642][ T7402] netlink: 'syz.2.653': attribute type 21 has an invalid length.
[   90.705847][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'.
[   90.861979][ T7425] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[   90.865739][ T7424] netlink: 'syz.2.664': attribute type 21 has an invalid length.
[   90.874626][ T7424] netlink: 128 bytes leftover after parsing attributes in process `syz.2.664'.
[   90.884312][ T7425] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.887511][ T7424] netlink: 'syz.2.664': attribute type 5 has an invalid length.
[   90.922745][ T7425] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.925825][ T7425] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   90.931670][ T7425] bond1: (slave vcan1): Error -95 calling set_mac_address
[   90.964602][ T7436] gretap1: entered promiscuous mode
[   90.973912][ T7436] bond1: (slave gretap1): making interface the new active one
[   90.977242][ T7436] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   91.011650][ T7425] macvlan2: entered promiscuous mode
[   91.013606][ T7425] macvlan2: entered allmulticast mode
[   91.018728][ T7425] bond1: entered promiscuous mode
[   91.027806][ T7425] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.034075][ T7425] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   91.051874][ T7425] bond1: left promiscuous mode
[   92.184939][ T7484] __nla_validate_parse: 1 callbacks suppressed
[   92.184955][ T7484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'.
[   92.197298][ T7484] netem: change failed
[   92.262394][ T7488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.265181][ T7488] syzkaller0: entered promiscuous mode
[   92.268537][ T7488] syzkaller0: entered allmulticast mode
[   92.289185][ T7488] tipc: Resetting bearer <eth:syzkaller0>
[   92.293711][ T7487] tipc: Resetting bearer <eth:syzkaller0>
[   92.303688][ T7487] tipc: Disabling bearer <eth:syzkaller0>
[   92.406125][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[   93.334426][ T7532] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   93.381746][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.833934][ T7581] validate_nla: 1 callbacks suppressed
[   93.833945][ T7581] netlink: 'syz.0.731': attribute type 1 has an invalid length.
[   94.216183][ T7624] gretap0: entered promiscuous mode
[   94.225560][ T7624] vlan2: entered promiscuous mode
[   94.616126][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'.
[   94.676034][ T7663] netlink: 52 bytes leftover after parsing attributes in process `syz.1.767'.
[   95.297885][ T7681] batadv_slave_1: entered promiscuous mode
[   95.610283][ T7699] batadv1: entered promiscuous mode
[   95.850415][ T7715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.786'.
[   95.902551][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'.
[   96.105124][ T7727] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   96.286376][ T7733] netlink: 124 bytes leftover after parsing attributes in process `syz.1.794'.
[   96.480939][ T7741] netlink: 'syz.1.798': attribute type 4 has an invalid length.
[   96.496443][ T7741] netlink: 'syz.1.798': attribute type 4 has an invalid length.
[   96.585364][ T7746] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[   96.599689][ T7746] netlink: 228 bytes leftover after parsing attributes in process `syz.1.800'.
[   96.763078][ T7722] delete_channel: no stack
[   96.942495][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'.
[   96.949785][ T7773] netlink: 'syz.1.812': attribute type 16 has an invalid length.
[   96.952397][ T7773] netlink: 'syz.1.812': attribute type 17 has an invalid length.
[   97.017759][ T7776] netlink: 'syz.0.813': attribute type 16 has an invalid length.
[   97.021185][ T7776] netlink: 'syz.0.813': attribute type 17 has an invalid length.
[   97.053676][ T7773] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.090229][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'.
[   97.164341][ T7776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.520703][ T7805] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   97.629600][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'.
[   97.633362][ T7811] netlink: 'syz.0.830': attribute type 7 has an invalid length.
[   97.636392][ T7811] netlink: 'syz.0.830': attribute type 8 has an invalid length.
[   97.640716][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'.
[   98.585025][ T7893] tls_set_device_offload: netdev not found
[   98.735430][ T7916] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   98.749182][ T7916] bond0: (slave bond_slave_0): Releasing backup interface
[   98.753977][ T7916] bond0: (slave bond_slave_1): Releasing backup interface
[   98.763609][ T7916] team_slave_0: left promiscuous mode
[   98.775731][ T7916] team0: Port device team_slave_0 removed
[   98.783531][ T7916] team_slave_1: left promiscuous mode
[   98.793370][ T7916] team0: Port device team_slave_1 removed
[   98.801327][ T7916] bond1: (slave gretap1): Releasing active interface
[   98.812031][ T7920] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   98.818684][ T7920] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.361542][ T7951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.514820][ T7957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.895'.
[   99.705386][ T7965] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   99.753243][ T7971] openvswitch: netlink: Message has 4 unknown bytes.
[   99.756025][ T7971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.165607][ T8009] syzkaller0: entered promiscuous mode
[  100.168211][ T8009] syzkaller0: entered allmulticast mode
[  101.239107][ T8047] nbd: socks must be embedded in a SOCK_ITEM attr
[  101.472660][ T8067] validate_nla: 1 callbacks suppressed
[  101.472680][ T8067] netlink: 'syz.0.947': attribute type 12 has an invalid length.
[  101.489531][ T8067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  101.492804][ T8067] IPv6: NLM_F_CREATE should be set when creating new route
[  101.495956][ T8067] IPv6: NLM_F_CREATE should be set when creating new route
[  101.950418][ T8108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.964917][ T8110] bridge1: entered promiscuous mode
[  101.966682][ T8110] bridge1: entered allmulticast mode
[  102.010216][ T8108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.080769][ T8108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.102984][ T8117] netlink: 184 bytes leftover after parsing attributes in process `syz.1.971'.
[  102.183265][ T8108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.290947][ T5893] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.302068][ T5716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.331057][ T5893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.334820][ T5893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.431689][ T8181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.435657][ T8181] syzkaller0: entered promiscuous mode
[  104.439622][ T8181] syzkaller0: entered allmulticast mode
[  104.444457][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'.
[  104.456573][ T8181] tipc: Resetting bearer <eth:syzkaller0>
[  104.470363][ T8179] tipc: Resetting bearer <eth:syzkaller0>
[  104.481190][ T8179] tipc: Disabling bearer <eth:syzkaller0>
[  104.486315][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'.
[  104.704282][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  104.721894][ T8202] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1012'.
[  104.832245][ T8207] pimreg: entered allmulticast mode
[  104.924933][ T8215] netlink: 'syz.2.1018': attribute type 10 has an invalid length.
[  104.929925][ T8215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'.
[  104.938991][ T8215] team0: Port device geneve0 added
[  105.034540][ T8221] smc: net device bond0 applied user defined pnetid SYZ2
[  105.039817][ T8221] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1021'.
[  105.091533][ T8221] smc: removing net device bond0 with user defined pnetid SYZ2
[  105.094975][ T8221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.099576][ T8221] bond0 (unregistering): Released all slaves
[  105.226793][ T8225] pim6reg1: entered promiscuous mode
[  105.229269][ T8225] pim6reg1: entered allmulticast mode
[  105.346580][ T8226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'.
[  105.375969][ T8226] smc: adding net device bond0 with user defined pnetid SYZ2
[  105.382811][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.387056][ T8226] team0: Port device bond0 added
[  106.158727][ T8255] netlink: 'syz.1.1036': attribute type 29 has an invalid length.
[  107.193140][ T8305] netlink: 'syz.0.1058': attribute type 10 has an invalid length.
[  107.201898][ T8305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'.
[  107.205718][ T8305] dummy0: entered promiscuous mode
[  107.210186][ T8305] dummy0: entered allmulticast mode
[  107.212966][ T8305] bridge0: port 1(dummy0) entered blocking state
[  107.216640][ T8305] bridge0: port 1(dummy0) entered disabled state
[  107.222799][ T8305] bridge0: port 1(dummy0) entered blocking state
[  107.225651][ T8305] bridge0: port 1(dummy0) entered forwarding state
[  107.469471][ T8331] netlink: 'syz.0.1071': attribute type 4 has an invalid length.
[  107.484306][ T8333] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1072'.
[  107.485539][ T8329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1070'.
[  107.540500][ T8335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.544004][ T8335] syzkaller0: entered promiscuous mode
[  107.546225][ T8335] syzkaller0: entered allmulticast mode
[  107.577096][ T8335] tipc: Resetting bearer <eth:syzkaller0>
[  107.600174][ T8334] tipc: Resetting bearer <eth:syzkaller0>
[  107.614029][ T8334] tipc: Disabling bearer <eth:syzkaller0>
[  107.754076][ T8350] tipc: Cannot configure node identity twice
[  107.990488][ T8380] team0: Mode changed to "activebackup"
[  108.001899][ T8380] vlan0: entered promiscuous mode
[  108.011362][ T8380] tipc: Enabled bearer <eth:team0>, priority 0
[  108.146137][ T8393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1102'.
[  108.302513][ T8411] tipc: Enabling <ib:lo> not permitted
[  108.304678][ T8411] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  108.353621][ T8418] tipc: Can't bind to reserved service type 2
[  108.976616][ T8501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.008701][ T8501] syzkaller0: entered promiscuous mode
[  109.010491][ T8501] syzkaller0: entered allmulticast mode
[  109.013109][ T8501] tipc: Resetting bearer <eth:syzkaller0>
[  109.027456][ T8499] tipc: Resetting bearer <eth:syzkaller0>
[  109.129483][   T51] tipc: Node number set to 2569658523
[  109.854183][ T8499] tipc: Disabling bearer <eth:syzkaller0>
[  109.943866][ T8521] sock: sock_timestamping_bind_phc: sock not bind to device
[  110.231916][ T8553] netlink: 'syz.2.1176': attribute type 21 has an invalid length.
[  110.380163][ T8570] __nla_validate_parse: 7 callbacks suppressed
[  110.380173][ T8570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1183'.
[  110.975380][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1204'.
[  111.533642][ T8623] netlink: 'syz.2.1207': attribute type 1 has an invalid length.
[  111.538569][ T8623] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1207'.
[  112.090751][ T8652] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  112.104633][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'.
[  112.122501][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1222'.
[  112.226772][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  112.234145][ T8666] openvswitch: netlink: Unknown nsh attribute 0
[  112.236249][ T8666] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.398418][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'.
[  112.411304][ T8689] netlink: 270 bytes leftover after parsing attributes in process `syz.0.1239'.
[  112.735446][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1251'.
[  112.765259][ T8717] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  112.769896][ T8716] IPVS: stopping backup sync thread 8717 ...
[  112.774144][ T8716] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1252'.
[  112.950950][ T8723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.954111][ T8723] syzkaller0: entered promiscuous mode
[  112.956084][ T8723] syzkaller0: entered allmulticast mode
[  112.973065][ T8723] tipc: Resetting bearer <eth:syzkaller0>
[  112.978331][ T8722] tipc: Resetting bearer <eth:syzkaller0>
[  112.989469][ T8722] tipc: Disabling bearer <eth:syzkaller0>
[  113.268440][ T8727] netlink: 'syz.0.1257': attribute type 13 has an invalid length.
[  113.271854][ T8727] netlink: 'syz.0.1257': attribute type 17 has an invalid length.
[  113.282812][ T8727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  113.540623][ T8751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.553433][ T8751] syzkaller0: entered promiscuous mode
[  113.555677][ T8751] syzkaller0: entered allmulticast mode
[  113.608060][ T8751] tipc: Resetting bearer <eth:syzkaller0>
[  113.618142][ T8750] tipc: Resetting bearer <eth:syzkaller0>
[  113.648366][ T8750] tipc: Disabling bearer <eth:syzkaller0>
[  114.077190][  T972] tipc: Node number set to 2209264727
[  114.175030][ T8812] netlink: 'syz.0.1294': attribute type 1 has an invalid length.
[  114.186782][ T8812] netlink: 'syz.0.1294': attribute type 2 has an invalid length.
[  114.354169][ T8824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.372971][ T5946] IPVS: starting estimator thread 0...
[  114.423139][ T8824] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  114.442202][ T8824] tipc: Failed to remove unknown binding: 66,1,1/2569658523:144208827/144208829
[  114.446332][ T8824] tipc: Failed to remove unknown binding: 66,1,1/2569658523:144208827/144208829
[  114.451923][ T8824] tipc: Failed to remove unknown binding: 66,1,1/2569658523:144208827/144208829
[  114.457005][ T8825] IPVS: using max 77 ests per chain, 184800 per kthread
[  114.578625][ T8830] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  115.850175][ T8970] netlink: 'syz.2.1362': attribute type 1 has an invalid length.
[  115.872126][ T8968] netlink: 'syz.0.1363': attribute type 10 has an invalid length.
[  115.875539][ T8968] __nla_validate_parse: 10 callbacks suppressed
[  115.875550][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1363'.
[  115.901908][ T8968] team0: Port device geneve0 added
[  115.910892][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1363'.
[  115.927153][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  115.980917][ T8968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  116.202467][ T8991] team0 (unregistering): Port device geneve0 removed
[  116.344205][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1383'.
[  116.425772][ T9022] veth0_to_team: entered promiscuous mode
[  116.477045][ T9026] netlink: 'syz.0.1390': attribute type 11 has an invalid length.
[  116.572213][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'.
[  116.575068][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1394'.
[  117.128564][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'.
[  117.264684][ T9094] netlink: 'syz.0.1417': attribute type 10 has an invalid length.
[  117.292466][ T9103] syzkaller1: entered promiscuous mode
[  117.294287][ T9103] syzkaller1: entered allmulticast mode
[  117.380377][ T9113] netlink: 'syz.0.1427': attribute type 1 has an invalid length.
[  117.429657][ T9119] netlink: 'syz.1.1430': attribute type 12 has an invalid length.
[  117.454426][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  117.457789][ T9124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'.
[  117.466032][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'.
[  117.466083][ T5911] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.474871][ T5911] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.480177][ T5911] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.484986][ T5911] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.391605][ T9202] validate_nla: 2 callbacks suppressed
[  118.391616][ T9202] netlink: 'syz.0.1467': attribute type 11 has an invalid length.
[  119.137243][ T9267] syzkaller1: entered promiscuous mode
[  119.140950][ T9267] syzkaller1: entered allmulticast mode
[  119.375965][ T9289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.289301][ T9367] netlink: 'syz.1.1546': attribute type 1 has an invalid length.
[  120.784399][ T9383] netlink: 'syz.0.1553': attribute type 10 has an invalid length.
[  121.343246][ T9425] __nla_validate_parse: 10 callbacks suppressed
[  121.343260][ T9425] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1572'.
[  121.358914][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'.
[  121.368309][ T9425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'.
[  121.447972][ T9435] sock: sock_set_timeout: `syz.1.1574' (pid 9435) tries to set negative timeout
[  121.927819][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'.
[  121.934506][ T9469] vlan0: entered promiscuous mode
[  122.765838][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'.
[  122.780078][ T9491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.788972][ T9491] syzkaller0: entered promiscuous mode
[  122.795952][ T9491] syzkaller0: entered allmulticast mode
[  122.822187][ T9491] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1600'.
[  122.832677][ T9491] tipc: Resetting bearer <eth:syzkaller0>
[  122.848458][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[  122.908831][ T9490] tipc: Disabling bearer <eth:syzkaller0>
[  123.062729][ T9504] tipc: Resetting bearer <eth:team0>
[  123.097045][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'.
[  123.256166][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'.
[  123.259419][ T9520] openvswitch: netlink: Flow actions attr not present in new flow.
[  123.354716][ T9534] netlink: 'syz.2.1614': attribute type 10 has an invalid length.
[  123.369317][ T9534] team0: Device dummy0 is up. Set it down before adding it as a team port
[  123.496507][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1623'.
[  123.598876][ T9562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.602206][ T9562] syzkaller0: entered promiscuous mode
[  123.604108][ T9562] syzkaller0: entered allmulticast mode
[  123.618169][ T9562] tipc: Resetting bearer <eth:syzkaller0>
[  123.622413][ T9561] tipc: Resetting bearer <eth:syzkaller0>
[  123.630507][ T9561] tipc: Disabling bearer <eth:syzkaller0>
[  123.938611][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1637'.
[  124.171758][ T9604] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  124.240643][ T9609] tipc: Trying to set illegal importance in message
[  125.241836][ T9639] sock: sock_set_timeout: `syz.2.1657' (pid 9639) tries to set negative timeout
[  125.374127][ T9651] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  125.396067][ T9651] batadv_slave_1: left promiscuous mode
[  125.400385][ T9651] vlan0: left promiscuous mode
[  125.409867][ T9651] gretap1: left promiscuous mode
[  125.412609][ T9651] bridge1: left promiscuous mode
[  125.414676][ T9651] bridge1: left allmulticast mode
[  125.425884][ T5911] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.431671][ T5911] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.435079][ T5911] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.439243][ T5911] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.658133][ T9675] netlink: 'syz.0.1674': attribute type 8 has an invalid length.
[  126.161035][ T9723] netlink: 'syz.1.1697': attribute type 3 has an invalid length.
[  126.419716][ T9750] __nla_validate_parse: 13 callbacks suppressed
[  126.419727][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'.
[  126.434802][ T9750] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.464785][ T9750] bond3: entered promiscuous mode
[  126.467817][ T9750] macvlan2: entered promiscuous mode
[  126.470086][ T9750] macvlan2: entered allmulticast mode
[  126.472389][ T9750] bond3: entered allmulticast mode
[  126.479139][ T9750] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.957087][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1727'.
[  127.034123][ T9793] syzkaller0: entered promiscuous mode
[  127.036021][ T9793] syzkaller0: entered allmulticast mode
[  127.284025][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  127.358444][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'.
[  127.362250][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1735'.
[  128.270320][ T9831] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'.
[  128.486079][ T9843] netlink: 'syz.0.1749': attribute type 2 has an invalid length.
[  128.520475][ T9848] netlink: 'syz.0.1751': attribute type 3 has an invalid length.
[  128.523631][ T9848] netlink: 'syz.0.1751': attribute type 1 has an invalid length.
[  128.526214][ T9848] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1751'.
[  128.757460][ T9877] netlink: 'syz.2.1762': attribute type 10 has an invalid length.
[  128.774328][ T9877] team0: Port device dummy0 added
[  128.953161][ T9877] syz.2.1762 (9877) used greatest stack depth: 19384 bytes left
[  129.019412][ T9888] netlink: 'syz.0.1770': attribute type 4 has an invalid length.
[  129.075823][ T9896] netlink: 'syz.2.1773': attribute type 1 has an invalid length.
[  129.079925][ T9896] NCSI netlink: No device for ifindex 0
[  129.106561][ T9898] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  129.483727][ T9928] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1787'.
[  129.825758][ T9960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1802'.
[  129.951991][ T9968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1806'.
[  130.430626][T10005] netlink: 'syz.1.1821': attribute type 7 has an invalid length.
[  130.433800][T10005] netlink: 'syz.1.1821': attribute type 8 has an invalid length.
[  131.512137][T10056] __nla_validate_parse: 9 callbacks suppressed
[  131.512151][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'.
[  131.622672][T10065] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1849'.
[  131.836721][T10090] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  131.840532][T10088] validate_nla: 1 callbacks suppressed
[  131.840541][T10088] netlink: 'syz.2.1861': attribute type 1 has an invalid length.
[  131.854595][T10087] bond3: left promiscuous mode
[  131.857861][T10087] macvlan2: left promiscuous mode
[  131.860031][T10087] macvlan2: left allmulticast mode
[  131.879382][T10088] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.900110][T10088] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.903089][T10088] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.910625][T10088] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  131.928043][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  131.963137][T10094] veth3: entered promiscuous mode
[  131.971259][T10094] bond4: (slave veth3): Enslaving as an active interface with a down link
[  132.020138][T10088] erspan0: entered allmulticast mode
[  132.033492][T10088] bond4: (slave erspan0): making interface the new active one
[  132.038103][T10088] bond4: (slave erspan0): Enslaving as an active interface with an up link
[  132.418369][T10134] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  132.531564][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.534170][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.800717][T10179] syzkaller1: entered promiscuous mode
[  132.802587][T10179] syzkaller1: entered allmulticast mode
[  133.005592][T10197] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1904'.
[  133.122686][T10214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.125266][T10214] syzkaller0: entered promiscuous mode
[  133.127505][T10214] syzkaller0: entered allmulticast mode
[  133.136205][T10216] openvswitch: netlink: IP tunnel dst address not specified
[  133.141618][T10214] tipc: Resetting bearer <eth:syzkaller0>
[  133.145926][T10213] tipc: Resetting bearer <eth:syzkaller0>
[  133.156744][T10213] tipc: Disabling bearer <eth:syzkaller0>
[  133.195199][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1916'.
[  133.313252][T10228] netlink: 'syz.1.1920': attribute type 30 has an invalid length.
[  133.349371][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'.
[  133.399162][T10234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'.
[  133.608364][T10258] syz_tun: entered promiscuous mode
[  133.611093][T10258] batadv_slave_0: entered promiscuous mode
[  133.613810][T10258] hsr1: entered allmulticast mode
[  133.615600][T10258] syz_tun: entered allmulticast mode
[  133.617758][T10258] batadv_slave_0: entered allmulticast mode
[  134.449211][T10285] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1946'.
[  134.554757][T10299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.760505][T10316] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  134.854973][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1964'.
[  134.886218][T10328] nbd: socks must be embedded in a SOCK_ITEM attr
[  134.892840][T10298] block nbd64: NBD_DISCONNECT
[  134.995678][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'.
[  135.628749][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  135.670317][T10407] Bluetooth: MGMT ver 1.23
[  135.870107][T10424] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  135.985051][T10435] netlink: 'syz.0.2012': attribute type 4 has an invalid length.
[  136.008635][T10435] netlink: 'syz.0.2012': attribute type 4 has an invalid length.
[  136.260198][T10452] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  136.675322][T10464] __nla_validate_parse: 4 callbacks suppressed
[  136.675341][T10464] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2026'.
[  136.692505][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'.
[  136.702489][T10464] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  136.706451][T10464] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  136.844431][T10472] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2029'.
[  136.875497][   T33] audit: type=1800 audit(1754907257.856:2): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2030" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3705 res=0 errno=0
[  136.923512][T10478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2032'.
[  136.926475][T10478] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2032'.
[  137.311959][T10515] netlink: 'syz.1.2049': attribute type 2 has an invalid length.
[  137.359018][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2052'.
[  137.451932][T10529] netlink: 'syz.2.2056': attribute type 10 has an invalid length.
[  137.563904][T10541] netlink: 'syz.1.2062': attribute type 28 has an invalid length.
[  137.584614][T10543] bridge0: port 3(veth0_to_bridge) entered blocking state
[  137.588703][T10543] bridge0: port 3(veth0_to_bridge) entered disabled state
[  137.591804][T10543] veth0_to_bridge: entered allmulticast mode
[  137.595689][T10543] veth0_to_bridge: entered promiscuous mode
[  137.606041][T10543] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  137.613142][T10543] bridge0: port 3(veth0_to_bridge) entered blocking state
[  137.616294][T10543] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  137.810027][T10565] lo: entered allmulticast mode
[  137.812388][T10565] lo: left allmulticast mode
[  137.947960][T10581] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2082'.
[  138.164502][ T5716] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  138.301691][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'.
[  138.325501][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2093'.
[  138.556901][T10623] sctp: [Deprecated]: syz.0.2100 (pid 10623) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.556901][T10623] Use struct sctp_sack_info instead
[  138.575755][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2101'.
[  138.625011][T10631] gretap0: entered promiscuous mode
[  138.628766][T10631] gretap0: left promiscuous mode
[  139.081465][T10658] netlink: 'syz.2.2117': attribute type 2 has an invalid length.
[  139.503852][T10690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  140.405693][T10705] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  140.528645][ T1206] wlan1: Trigger new scan to find an IBSS to join
[  140.645441][T10728] netlink: 'syz.2.2144': attribute type 64 has an invalid length.
[  140.882096][T10745] netlink: 'syz.0.2155': attribute type 10 has an invalid length.
[  140.890490][T10745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.894813][T10745] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  140.908761][T10745] netlink: 'syz.0.2155': attribute type 10 has an invalid length.
[  140.911439][T10745] batadv0: entered promiscuous mode
[  140.913309][T10745] batadv0: entered allmulticast mode
[  140.916386][T10745] bond0: (slave batadv0): Releasing backup interface
[  140.922514][T10745] bridge0: port 2(batadv0) entered blocking state
[  140.927724][T10745] bridge0: port 2(batadv0) entered disabled state
[  140.979026][ T5716] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  140.982218][ T5716] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  141.213340][T10758] syzkaller0: entered promiscuous mode
[  141.215280][T10758] syzkaller0: entered allmulticast mode
[  142.603885][T10807] netlink: 'syz.0.2182': attribute type 13 has an invalid length.
[  142.607344][T10807] __nla_validate_parse: 7 callbacks suppressed
[  142.607356][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2182'.
[  142.613268][T10807] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  142.743048][T10815] netlink: 'syz.2.2186': attribute type 10 has an invalid length.
[  142.978294][T10828] tipc: Resetting bearer <ib:ip6gre0>
[  142.995991][T10828] bridge0: port 1(dummy0) entered disabled state
[  143.064243][T10828] veth0_to_team: left promiscuous mode
[  143.124969][T10828] veth3: left promiscuous mode
[  143.127272][T10828] macsec2: left promiscuous mode
[  143.129402][T10828] macsec2: left allmulticast mode
[  143.132095][T10828] batman_adv: batadv0: Interface deactivated: macvtap1
[  143.135407][T10828] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  143.138995][T10828] macvtap1: left allmulticast mode
[  143.143980][T10828] ip6tnl1: left promiscuous mode
[  143.146130][T10828] ip6tnl1: left allmulticast mode
[  143.160453][ T5893] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.164137][ T5893] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.167876][ T5893] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.172112][ T5893] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.232697][T10841] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2197'.
[  143.260831][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'.
[  143.264408][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'.
[  143.269710][T10844] netlink: 'syz.0.2198': attribute type 18 has an invalid length.
[  143.849740][T10891] netlink: 'syz.0.2219': attribute type 1 has an invalid length.
[  143.853131][T10891] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2219'.
[  143.893988][T10895] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2221'.
[  143.990862][T10902] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2225'.
[  144.006019][T10902] batadv1: entered promiscuous mode
[  144.009566][T10902] batadv1: entered allmulticast mode
[  144.303899][T10929] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2237'.
[  144.479270][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2243'.
[  144.552687][T10941] netlink: 'syz.0.2243': attribute type 10 has an invalid length.
[  144.558762][T10941] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.733790][T10960] netlink: 'syz.0.2248': attribute type 1 has an invalid length.
[  144.760508][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2249'.
[  144.794625][T10964] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  144.806032][T10964] dummy0: left allmulticast mode
[  144.809631][T10964] dummy0: left promiscuous mode
[  144.811525][T10964] bridge0: port 1(dummy0) entered disabled state
[  144.816718][T10964] batadv0: left allmulticast mode
[  144.819843][T10964] batadv0: left promiscuous mode
[  144.822408][T10964] bridge0: port 2(batadv0) entered disabled state
[  144.834766][T10964] bond0: (slave wlan1): Releasing backup interface
[  144.858653][T10964] batman_adv: batadv0: Removing interface: macvtap1
[  144.882576][T10964] netlink: 'syz.0.2250': attribute type 10 has an invalid length.
[  144.886055][T10964] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  144.893980][T10964] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.910338][T10964] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.914618][T10964] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.047166][T10986] dvmrp0: entered allmulticast mode
[  145.208736][T11002] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  145.216284][T11002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  146.029583][T11034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.318526][T11061] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  146.322263][T11061] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  146.416336][T11067] syzkaller0: entered promiscuous mode
[  146.418289][T11067] syzkaller0: entered allmulticast mode
[  146.421024][T11067] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  146.657271][T11075] syzkaller1: entered promiscuous mode
[  146.659159][T11075] syzkaller1: entered allmulticast mode
[  146.840287][T11082] tun0: tun_chr_ioctl cmd 1074025675
[  146.842545][T11082] tun0: persist enabled
[  146.844519][T11082] tun0: tun_chr_ioctl cmd 1074025675
[  146.846687][T11082] tun0: persist disabled
[  147.141377][   T33] audit: type=1800 audit(1754907268.126:3): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2310" name="cgroup.controllers" dev="tmpfs" ino=3504 res=0 errno=0
[  147.320159][T11109] : entered promiscuous mode
[  147.567060][ T1101] wlan1: Trigger new scan to find an IBSS to join
[  147.720361][T11138] __nla_validate_parse: 2 callbacks suppressed
[  147.720373][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'.
[  147.980850][T11168] syzkaller0: entered promiscuous mode
[  147.983045][T11168] syzkaller0: entered allmulticast mode
[  148.868887][T11175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2345'.
[  148.871829][T11175] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2345'.
[  148.874976][T11175] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2345'.
[  148.929940][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2347'.
[  148.936777][T11179] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2347'.
[  148.945270][T11179] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2347'.
[  149.035561][T11193] netlink: 'syz.2.2354': attribute type 1 has an invalid length.
[  149.046762][T11193] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2354'.
[  149.051437][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'.
[  149.111268][T11199] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2356'.
[  149.265359][T11207] syzkaller0: entered promiscuous mode
[  149.268646][T11207] syzkaller0: entered allmulticast mode
[  150.366670][T11247] netlink: 'syz.0.2380': attribute type 2 has an invalid length.
[  150.370126][T11247] netlink: 'syz.0.2380': attribute type 2 has an invalid length.
[  150.607868][ T1101] wlan1: Trigger new scan to find an IBSS to join
[  150.873005][T11297] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  150.961523][T11306] rdma_op ffff888118a181f0 conn xmit_rdma 0000000000000000
[  151.473273][T11361] bridge0: port 4(netdevsim2) entered blocking state
[  151.476156][T11361] bridge0: port 4(netdevsim2) entered disabled state
[  151.494339][T11361] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  151.499416][T11361] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  151.506284][T11361] bridge0: port 4(netdevsim2) entered blocking state
[  151.509862][T11361] bridge0: port 4(netdevsim2) entered forwarding state
[  151.752452][T11383] netlink: 'syz.2.2442': attribute type 7 has an invalid length.
[  151.755358][T11383] netlink: 'syz.2.2442': attribute type 3 has an invalid length.
[  152.183910][T11397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.186644][T11397] syzkaller0: entered promiscuous mode
[  152.190588][T11397] syzkaller0: entered allmulticast mode
[  152.205786][T11397] tipc: Resetting bearer <eth:syzkaller0>
[  152.212596][T11396] tipc: Resetting bearer <eth:syzkaller0>
[  152.224708][T11396] tipc: Disabling bearer <eth:syzkaller0>
[  152.769515][T11420] __nla_validate_parse: 8 callbacks suppressed
[  152.769534][T11420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2458'.
[  152.785479][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.791916][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.796201][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.800295][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.810592][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'.
[  152.927043][ T5888] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  152.941640][ T5888] Bluetooth: hci2: command 0x0405 tx timeout
[  153.466138][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.473396][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.476105][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.482026][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.567200][   T39] wlan1: Trigger new scan to find an IBSS to join
[  153.598942][T11470] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  153.601802][T11470] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  153.655792][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'.
[  153.832119][T11506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.834675][T11506] syzkaller0: entered promiscuous mode
[  153.836516][T11506] syzkaller0: entered allmulticast mode
[  153.855618][T11506] tipc: Resetting bearer <eth:syzkaller0>
[  153.860812][T11505] tipc: Resetting bearer <eth:syzkaller0>
[  153.871242][T11511] netlink: 'syz.0.2497': attribute type 13 has an invalid length.
[  153.871380][T11505] tipc: Disabling bearer <eth:syzkaller0>
[  153.874059][T11511] netlink: 'syz.0.2497': attribute type 17 has an invalid length.
[  153.951586][T11511] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.071690][T11511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.125754][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'.
[  154.162692][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.220037][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.563639][T11547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'.
[  155.135082][T11511] syz.0.2497 (11511) used greatest stack depth: 19008 bytes left
[  155.538107][T11573] netlink: 'syz.0.2525': attribute type 1 has an invalid length.
[  155.561942][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'.
[  155.565583][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'.
[  155.670471][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'.
[  155.756390][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2535'.
[  155.961477][T11610] Bluetooth: hci0: Opcode 0x080f failed: -22
[  156.164457][T11629] netlink: 'syz.1.2551': attribute type 1 has an invalid length.
[  156.212910][T11629] bond4: entered promiscuous mode
[  156.215082][T11629] bond4: entered allmulticast mode
[  156.218114][T11629] 8021q: adding VLAN 0 to HW filter on device bond4
[  156.234322][T11629] bridge2: entered promiscuous mode
[  156.236657][T11629] bridge2: entered allmulticast mode
[  156.239782][T11629] bond4: (slave bridge2): Enslaving as a backup interface with an up link
[  156.382399][T11646] syzkaller1: entered promiscuous mode
[  156.384712][T11646] syzkaller1: entered allmulticast mode
[  156.560080][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2568'.
[  156.675348][T11670] netlink: 'syz.1.2570': attribute type 2 has an invalid length.
[  156.889812][T11684] netlink: zone id is out of range
[  156.894402][T11684] netlink: zone id is out of range
[  156.901019][T11684] netlink: zone id is out of range
[  156.904500][T11684] netlink: zone id is out of range
[  156.911995][T11684] netlink: zone id is out of range
[  156.917232][T11684] netlink: zone id is out of range
[  156.919512][T11684] netlink: zone id is out of range
[  156.922371][T11684] netlink: zone id is out of range
[  156.924825][T11686] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  156.929192][T11684] netlink: zone id is out of range
[  156.932798][T11686] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  156.996296][T11688] netlink: 'syz.2.2578': attribute type 4 has an invalid length.
[  157.967098][   T55] Bluetooth: hci0: command tx timeout
[  158.154761][T11739] __nla_validate_parse: 3 callbacks suppressed
[  158.154778][T11739] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2601'.
[  158.241951][T11743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2603'.
[  158.388251][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2610'.
[  158.515726][T11770] netlink: 410 bytes leftover after parsing attributes in process `syz.0.2617'.
[  158.645687][T11789] tipc: Enabling of bearer <ib:ip6gre0> rejected, already enabled
[  158.798511][T11810] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  158.959631][T11827] sctp: [Deprecated]: syz.1.2643 (pid 11827) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.959631][T11827] Use struct sctp_sack_info instead
[  159.073884][T11840] IPv6: NLM_F_REPLACE set, but no existing node found!
[  159.283095][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2656'.
[  159.698690][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'.
[  159.702725][T11876] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2667'.
[  159.821413][T11887] syzkaller1: entered promiscuous mode
[  159.823260][T11887] syzkaller1: entered allmulticast mode
[  159.879023][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'.
[  160.068881][T11918] net_ratelimit: 169 callbacks suppressed
[  160.068892][T11918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.321323][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'.
[  160.335275][T11958] openvswitch: netlink: Missing key (keys=40, expected=100)
[  160.818882][T11983] sit2: entered promiscuous mode
[  160.847092][ T5888] Bluetooth: hci0: command tx timeout
[  160.847170][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  161.102284][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'.
[  161.200876][T12020] 0: renamed from hsr0 (while UP)
[  161.202745][T12021] netlink: 'syz.0.2732': attribute type 1 has an invalid length.
[  161.209495][T12020] 0: entered allmulticast mode
[  161.211700][T12020] hsr_slave_0: entered allmulticast mode
[  161.214492][T12020] hsr_slave_1: entered allmulticast mode
[  161.218665][T12020] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  161.478348][T12055] netlink: 'syz.0.2748': attribute type 1 has an invalid length.
[  162.088450][T12083] netlink: 'syz.2.2760': attribute type 16 has an invalid length.
[  162.091025][T12083] netlink: 'syz.2.2760': attribute type 17 has an invalid length.
[  162.104176][T12083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.792940][T12111] netlink: 'syz.0.2773': attribute type 21 has an invalid length.
[  162.818570][T12111] netlink: 'syz.0.2773': attribute type 6 has an invalid length.
[  163.029169][T12089] ==================================================================
[  163.031791][T12089] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  163.034421][T12089] Read of size 1 at addr ffff88811327fc32 by task syz.1.2762/12089
[  163.037730][T12089] 
[  163.038570][T12089] CPU: 1 UID: 0 PID: 12089 Comm: syz.1.2762 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  163.038592][T12089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.038598][T12089] Call Trace:
[  163.038603][T12089]  <TASK>
[  163.038606][T12089]  dump_stack_lvl+0x189/0x250
[  163.038620][T12089]  ? __virt_addr_valid+0x1c8/0x5c0
[  163.038632][T12089]  ? rcu_is_watching+0x15/0xb0
[  163.038641][T12089]  ? __kasan_check_byte+0x12/0x40
[  163.038652][T12089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.038659][T12089]  ? rcu_is_watching+0x15/0xb0
[  163.038666][T12089]  ? lock_release+0x4b/0x3e0
[  163.038678][T12089]  ? __virt_addr_valid+0x1c8/0x5c0
[  163.038687][T12089]  ? __virt_addr_valid+0x4a5/0x5c0
[  163.038698][T12089]  print_report+0xca/0x240
[  163.038706][T12089]  ? rose_transmit_link+0x5c3/0x740
[  163.038718][T12089]  kasan_report+0x118/0x150
[  163.038728][T12089]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  163.038738][T12089]  ? rose_transmit_link+0x5c3/0x740
[  163.038749][T12089]  rose_transmit_link+0x5c3/0x740
[  163.038759][T12089]  ? skb_put+0x11b/0x210
[  163.038775][T12089]  rose_write_internal+0x11dc/0x1ac0
[  163.038785][T12089]  ? __pfx_rose_write_internal+0x10/0x10
[  163.038792][T12089]  ? __timer_delete+0x5d/0x390
[  163.038801][T12089]  rose_release+0x24e/0x520
[  163.038812][T12089]  sock_close+0xc3/0x240
[  163.038821][T12089]  ? __pfx_sock_close+0x10/0x10
[  163.038827][T12089]  __fput+0x44c/0xa70
[  163.038837][T12089]  task_work_run+0x1d4/0x260
[  163.038850][T12089]  ? __pfx_task_work_run+0x10/0x10
[  163.038859][T12089]  ? task_work_add+0x377/0x420
[  163.038868][T12089]  ? __pfx_task_work_add+0x10/0x10
[  163.038877][T12089]  get_signal+0x11ed/0x1340
[  163.038886][T12089]  arch_do_signal_or_restart+0x9a/0x750
[  163.038898][T12089]  ? __pfx___sys_connect+0x10/0x10
[  163.038907][T12089]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  163.038919][T12089]  ? exit_to_user_mode_loop+0x40/0x110
[  163.038929][T12089]  exit_to_user_mode_loop+0x75/0x110
[  163.038939][T12089]  do_syscall_64+0x2bd/0x3b0
[  163.038949][T12089]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.038957][T12089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.038964][T12089]  ? exc_page_fault+0x9f/0xf0
[  163.038972][T12089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.038979][T12089] RIP: 0033:0x7fa254b8ebe9
[  163.038986][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.038993][T12089] RSP: 002b:00007fa25597b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  163.039003][T12089] RAX: fffffffffffffe00 RBX: 00007fa254db5fa0 RCX: 00007fa254b8ebe9
[  163.039008][T12089] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[  163.039013][T12089] RBP: 00007fa254c11e19 R08: 0000000000000000 R09: 0000000000000000
[  163.039017][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.039022][T12089] R13: 00007fa254db6038 R14: 00007fa254db5fa0 R15: 00007ffdd5efe5f8
[  163.039030][T12089]  </TASK>
[  163.039033][T12089] 
[  163.136649][T12089] Allocated by task 12089:
[  163.138115][T12089]  kasan_save_track+0x3e/0x80
[  163.139712][T12089]  __kasan_kmalloc+0x93/0xb0
[  163.141277][T12089]  __kmalloc_cache_noprof+0x230/0x3d0
[  163.143014][T12089]  rose_add_node+0x23a/0xde0
[  163.144500][T12089]  rose_rt_ioctl+0xa48/0xfb0
[  163.145977][T12089]  rose_ioctl+0x3ce/0x8b0
[  163.147410][T12089]  sock_do_ioctl+0xdc/0x300
[  163.148914][T12089]  sock_ioctl+0x576/0x790
[  163.150342][T12089]  __se_sys_ioctl+0xfc/0x170
[  163.151850][T12089]  do_syscall_64+0xfa/0x3b0
[  163.153348][T12089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.155279][T12089] 
[  163.156048][T12089] Freed by task 12114:
[  163.157415][T12089]  kasan_save_track+0x3e/0x80
[  163.158970][T12089]  kasan_save_free_info+0x46/0x50
[  163.160604][T12089]  __kasan_slab_free+0x5b/0x80
[  163.162164][T12089]  kfree+0x18e/0x440
[  163.163440][T12089]  rose_rt_device_down+0x473/0x4c0
[  163.165088][T12089]  rose_device_event+0x603/0x6a0
[  163.166613][T12089]  notifier_call_chain+0x1b6/0x3e0
[  163.168286][T12089]  __dev_notify_flags+0x18d/0x2e0
[  163.169911][T12089]  netif_change_flags+0xe8/0x1a0
[  163.171536][T12089]  dev_change_flags+0x130/0x260
[  163.173107][T12089]  dev_ioctl+0x7b4/0x1150
[  163.174542][T12089]  sock_do_ioctl+0x22c/0x300
[  163.176061][T12089]  sock_ioctl+0x576/0x790
[  163.177483][T12089]  __se_sys_ioctl+0xfc/0x170
[  163.178944][T12089]  do_syscall_64+0xfa/0x3b0
[  163.180416][T12089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.182375][T12089] 
[  163.183185][T12089] The buggy address belongs to the object at ffff88811327fc00
[  163.183185][T12089]  which belongs to the cache kmalloc-512 of size 512
[  163.187653][T12089] The buggy address is located 50 bytes inside of
[  163.187653][T12089]  freed 512-byte region [ffff88811327fc00, ffff88811327fe00)
[  163.191996][T12089] 
[  163.192766][T12089] The buggy address belongs to the physical page:
[  163.194840][T12089] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11327c
[  163.197700][T12089] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  163.200405][T12089] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  163.202859][T12089] page_type: f5(slab)
[  163.204170][T12089] raw: 057ff00000000040 ffff88801a441c80 ffffea0004234900 dead000000000002
[  163.206834][T12089] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  163.209489][T12089] head: 057ff00000000040 ffff88801a441c80 ffffea0004234900 dead000000000002
[  163.212538][T12089] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  163.215505][T12089] head: 057ff00000000002 ffffea00044c9f01 00000000ffffffff 00000000ffffffff
[  163.218255][T12089] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  163.220903][T12089] page dumped because: kasan: bad access detected
[  163.222912][T12089] page_owner tracks the page as allocated
[  163.224721][T12089] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 27, tgid 27 (kworker/u10:0), ts 63615554411, free_ts 61685554948
[  163.231453][T12089]  post_alloc_hook+0x240/0x2a0
[  163.233017][T12089]  get_page_from_freelist+0x21e4/0x22c0
[  163.234818][T12089]  __alloc_frozen_pages_noprof+0x181/0x370
[  163.236728][T12089]  alloc_pages_mpol+0x232/0x4a0
[  163.238317][T12089]  allocate_slab+0x8a/0x370
[  163.239823][T12089]  ___slab_alloc+0xbeb/0x1410
[  163.241358][T12089]  __kmalloc_noprof+0x305/0x4f0
[  163.242939][T12089]  fib6_info_alloc+0x30/0xf0
[  163.244459][T12089]  ip6_route_info_create+0x142/0x860
[  163.246181][T12089]  ip6_route_add+0x49/0x1b0
[  163.247697][T12089]  addrconf_add_dev+0x24f/0x340
[  163.249299][T12089]  addrconf_init_auto_addrs+0x57c/0xa30
[  163.251087][T12089]  addrconf_notify+0xacc/0x1010
[  163.252714][T12089]  notifier_call_chain+0x1b6/0x3e0
[  163.254380][T12089]  netif_state_change+0x284/0x3a0
[  163.256010][T12089]  linkwatch_do_dev+0x117/0x170
[  163.257548][T12089] page last free pid 5887 tgid 5887 stack trace:
[  163.259532][T12089]  __free_frozen_pages+0xbc4/0xd30
[  163.261168][T12089]  __slab_free+0x303/0x3c0
[  163.262661][T12089]  qlist_free_all+0x97/0x140
[  163.264182][T12089]  kasan_quarantine_reduce+0x148/0x160
[  163.265959][T12089]  __kasan_slab_alloc+0x22/0x80
[  163.267546][T12089]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  163.269246][T12089]  sk_prot_alloc+0x57/0x220
[  163.270704][T12089]  sk_alloc+0x3a/0x370
[  163.272049][T12089]  inet6_create+0x7f0/0x1260
[  163.273581][T12089]  __sock_create+0x4b3/0x9f0
[  163.275096][T12089]  udp_sock_create6+0xcb/0x690
[  163.276648][T12089]  rxrpc_lookup_local+0xc92/0x1410
[  163.278305][T12089]  rxrpc_bind+0x198/0x460
[  163.279710][T12089]  kernel_bind+0x114/0x180
[  163.281168][T12089]  afs_open_socket+0x208/0x3a0
[  163.282780][T12089]  afs_net_init+0x67d/0x880
[  163.284272][T12089] 
[  163.285063][T12089] Memory state around the buggy address:
[  163.286889][T12089]  ffff88811327fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  163.289345][T12089]  ffff88811327fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  163.291937][T12089] >ffff88811327fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.294539][T12089]                                      ^
[  163.296396][T12089]  ffff88811327fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.298998][T12089]  ffff88811327fd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.301547][T12089] ==================================================================
[  163.315664][T12089] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.317998][T12089] CPU: 1 UID: 0 PID: 12089 Comm: syz.1.2762 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  163.321736][T12089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.324942][T12089] Call Trace:
[  163.326064][T12089]  <TASK>
[  163.327050][T12089]  dump_stack_lvl+0x99/0x250
[  163.328550][T12089]  ? __asan_memcpy+0x40/0x70
[  163.330033][T12089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.331702][T12089]  ? __pfx__printk+0x10/0x10
[  163.333253][T12089]  vpanic+0x281/0x750
[  163.334586][T12089]  ? __pfx_print_hex_dump+0x10/0x10
[  163.336300][T12089]  ? __pfx_vpanic+0x10/0x10
[  163.337795][T12089]  ? preempt_schedule_common+0x83/0xd0
[  163.339594][T12089]  ? preempt_schedule+0xae/0xc0
[  163.341171][T12089]  panic+0xb9/0xc0
[  163.342354][T12089]  ? __pfx_panic+0x10/0x10
[  163.343831][T12089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.345895][T12089]  ? rose_transmit_link+0x5c3/0x740
[  163.347597][T12089]  check_panic_on_warn+0x89/0xb0
[  163.349236][T12089]  ? rose_transmit_link+0x5c3/0x740
[  163.350946][T12089]  end_report+0x78/0x160
[  163.352355][T12089]  kasan_report+0x129/0x150
[  163.353864][T12089]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  163.355821][T12089]  ? rose_transmit_link+0x5c3/0x740
[  163.357489][T12089]  rose_transmit_link+0x5c3/0x740
[  163.359076][T12089]  ? skb_put+0x11b/0x210
[  163.360461][T12089]  rose_write_internal+0x11dc/0x1ac0
[  163.362214][T12089]  ? __pfx_rose_write_internal+0x10/0x10
[  163.364091][T12089]  ? __timer_delete+0x5d/0x390
[  163.365673][T12089]  rose_release+0x24e/0x520
[  163.367141][T12089]  sock_close+0xc3/0x240
[  163.368588][T12089]  ? __pfx_sock_close+0x10/0x10
[  163.370280][T12089]  __fput+0x44c/0xa70
[  163.371590][T12089]  task_work_run+0x1d4/0x260
[  163.373150][T12089]  ? __pfx_task_work_run+0x10/0x10
[  163.375224][T12089]  ? task_work_add+0x377/0x420
[  163.377195][T12089]  ? __pfx_task_work_add+0x10/0x10
[  163.379292][T12089]  get_signal+0x11ed/0x1340
[  163.380927][T12089]  arch_do_signal_or_restart+0x9a/0x750
[  163.382788][T12089]  ? __pfx___sys_connect+0x10/0x10
[  163.384485][T12089]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  163.386427][T12089]  ? exit_to_user_mode_loop+0x40/0x110
[  163.388140][T12089]  exit_to_user_mode_loop+0x75/0x110
[  163.389886][T12089]  do_syscall_64+0x2bd/0x3b0
[  163.391414][T12089]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.393091][T12089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.395030][T12089]  ? exc_page_fault+0x9f/0xf0
[  163.396589][T12089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.398554][T12089] RIP: 0033:0x7fa254b8ebe9
[  163.400032][T12089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.406192][T12089] RSP: 002b:00007fa25597b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  163.408908][T12089] RAX: fffffffffffffe00 RBX: 00007fa254db5fa0 RCX: 00007fa254b8ebe9
[  163.411485][T12089] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[  163.414070][T12089] RBP: 00007fa254c11e19 R08: 0000000000000000 R09: 0000000000000000
[  163.416664][T12089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.419253][T12089] R13: 00007fa254db6038 R14: 00007fa254db5fa0 R15: 00007ffdd5efe5f8
[  163.421713][T12089]  </TASK>
[  163.423581][T12089] Kernel Offset: disabled
[  163.425317][T12089] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:14:44  Registers:
info registers vcpu 0

CPU#0
RAX=e766890fd4753300 RBX=ffffffff81968308 RCX=e766890fd4753300 RDX=0000000000000001
RSI=ffffffff8d9b4d4b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34d21ff8 CR3=000000011e418000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00007fef8f187498 ffffffff8133c57e XMM03=00007fef8f1874a8 00007fef8f1874a0
XMM04=00007fef8fced100 00007fef8f187460 XMM05=00007fef8f187478 00007fef8f1874c0
XMM06=00007fef8f1874b8 00007fef8f1874b0 XMM07=00007fef8f1874a8 00007fef8f1874a0
XMM08=0000000000000000 00007fef8f012ee7 XMM09=0000000000000000 00007fef8f012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000164f RDI=0000000000001650 RBP=00000000000003f8 RSP=ffffc90002a2f210
R8 =ffff888020268237 R9 =1ffff1100404d046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4915 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa25597b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fadd194ffc8 CR3=000000003baa0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fef8f012e53
XMM06=0000000000000000 00007fef8f012e4d XMM07=0000000000000000 00007fef8f012e61
XMM08=0000000000000000 00007fef8f012ee7 XMM09=0000000000000000 00007fef8f012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
