last executing test programs:

970.749682ms ago: executing program 2 (id=2330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="1400000010000100000000000000000000000014000000080a0500000000000000000001000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000005c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r7, 0x0, 0x814)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r8, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}}, 0x20}}, 0x0)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

258.898462ms ago: executing program 1 (id=2343):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49041983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x0, 0x0, 0x0, 0x4}})

258.541053ms ago: executing program 1 (id=2344):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'pim6reg\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00d23957a8", "d4397f9ade4adc0000555b9e87c4e38013f2074288b3d00df857bc4ff900", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", '\x00', 0xfffffffc}})
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, r2, 0x3979f33375c83fa1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f00000011c0)=ANY=[@ANYRES16=r4], 0x78}}], 0x2, 0x4040005)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)

251.913888ms ago: executing program 0 (id=2345):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

190.975582ms ago: executing program 0 (id=2346):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000002574e0ffffffffff85000000c700000018110000bc0a3052ea3a8d3b5b535a54ceae9492d1a17c5ba707a199110e3d0038e9c8f53829fe9cad55574deb549514c352b3ecc3c70a43d3cec1d84fa99d1f04f82f32bd62b9114af521dca4d1a359c5cb4ab634df8349b383c3b39199a056cd97dddeadb43f4a2e3bd509333e9eabddbedc23d4ce90e64572", @ANYRES32=r0, @ANYBLOB="000000000000003db4dc4612e85e0143421a6caf903ad152000000000085000000860000008510000000ffffff186b0000070000000000000007000000cf4509c97254ecdaf9145aab320343db3859"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000ac0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0xa, 0x3, 0xfffffffc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b40), &(0x7f0000000080)=[{0x5, 0x4, 0xf, 0x8}, {0x0, 0x1, 0x7, 0x9}], 0x10, 0x1}, 0x94)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x400, @multicast1}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
close(r2)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
socket(0x2a, 0x3, 0xefff)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd700000000000140062b0ba02ee000018006c264fb659b452cff64be03450357e0180140002006e657464657673696d300000000000000500192013000000"], 0x34}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562e117fffffff81000e224e237f000001925aa80020007b0009", 0x29}], 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000006911da000000000007cd8bf4000000009500000c00000000bcf4e4a30e96c21600f4afb6d0954c68c0dec1952d9a030799aef4b1eafe1013bc52ccd2f43ec4e670e61e78bc8db65c0dc1492bcb"], &(0x7f00000000c0)='GPL\x00', 0xa, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, r0, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x1000040}, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071129c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESDEC=r4, @ANYBLOB="4b0391208c71aba7db0cf0d2af6aa7acd9e740806621c23ff97ad01e0bfd7bcd50ca8a5b0ae8bd8f76c9caa9b90b429785e998e6f86983e4f24c6ed4761d76f68c8e6084ed2675cc7698084e0ae9c0f80df5828da1b827d2ae1604ffa46c650e02f7afb809b21691cc19e0232bef46c08f8d49e18c37b008c5455232d7f4bceff591caf87b0a8cc0509b79039dcfc27c2a0c6b9baaba0333330326476105208334e68dc7d460705acc1d14230b9bb1bf5388ed33c995", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={<r8=>0xffffffffffffffff})
bind$xdp(r8, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10)

190.413358ms ago: executing program 0 (id=2347):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
socket$nl_rdma(0x10, 0x3, 0x14)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
syz_emit_ethernet(0x86, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99", "e4d0ce57abcb41f7f5c8ab8f63dd38a1", {"bb3ce5a4bbb68671a2892fa0317a823c", "be9d98ca816f77013a778b6c40b49ea9"}}}}}}}, 0x0)
socket$inet(0x2, 0x80001, 0x84) (async)
r5 = socket$inet(0x2, 0x80001, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r7, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r8, 0x6, 0x19, 0x0, &(0x7f0000000000))
bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000240)="4a53226a74e7eb93b973797323c78624", 0x10)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000280)=0x3, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x0, @multicast1}})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r2, {0x8, 0x2}, {0x10, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r2, {0x8, 0x2}, {0x10, 0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c000200010000001500000008000500", @ANYRES32=0x0, @ANYBLOB="06173647160751e012067d01c5b354b3364b8a07b71cbb9c121a9b8978fec084c9573b2834130e5e132f3e29c984cc2caa094443f117638cba7121a1d6002cb90e7feaf6048fe89db3f6b62a7402"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c000200010000001500000008000500", @ANYRES32=0x0, @ANYBLOB="06173647160751e012067d01c5b354b3364b8a07b71cbb9c121a9b8978fec084c9573b2834130e5e132f3e29c984cc2caa094443f117638cba7121a1d6002cb90e7feaf6048fe89db3f6b62a7402"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r11, 0x104, 0x3, 0x0, &(0x7f0000000140))
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

110.742747ms ago: executing program 1 (id=2348):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x4000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x11}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
socket(0x2a, 0x2, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x100, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x4000000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x11}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x4a}, 0x20) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) (async)

110.515951ms ago: executing program 1 (id=2349):
r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={<r1=>0x0, 0x7}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0x200, 0x7ff, 0x3, 0x2a, 0xfffffffc, 0xf1}, 0x9c)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r1, 0x8}, &(0x7f0000000340)=0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

110.19836ms ago: executing program 2 (id=2350):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
r1 = socket(0x2c, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4008800}, 0x4014) (async)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r4, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x4008800}, 0x4014)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x21)

109.901468ms ago: executing program 0 (id=2351):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x46891, 0x10003}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x6, @multicast}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004014)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006800010003001000e2ffff7f002e5eb0e3b479ff9c00020004000b00"], 0x20}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

51.059832ms ago: executing program 2 (id=2352):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)="13", 0x1}], 0x1}, 0x2000800)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})
socket$inet_icmp(0x2, 0x2, 0x1) (async)
socket$kcm(0x11, 0x2, 0x0) (async)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)="13", 0x1}], 0x1}, 0x2000800) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}}) (async)

50.186025ms ago: executing program 1 (id=2353):
socket$inet_icmp(0x2, 0x2, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38868850417acbce28a587ea5116af47c988d896b734c52cdaf150e1d1e4d105e538d08315c5163f", @ANYRESHEX=r1, @ANYRES16=r2, @ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="a6e755f95abe1dee90285da8066c843af6620d3387567895b4c029147d675647781df0916d70ff6f0f5ff7894ca23f6a76ed934fa076dcd8bf0468d6c9536ff0317a8bd82130b545127cfa8762b7d7867307a41175d20394bdc1eedb4cd0a8a0b5634b4a602bf831ea2fe85e82f9b9037ecbdf61bdc347e074f1f400c9da981d8d9b693559ec1ea46120ea", @ANYBLOB="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", @ANYRES32=r1], 0x21c}, 0x1, 0x0, 0x0, 0x400c005}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000240)="8d077d994889f2dcc9dfc04ce98476a3baaddb6cad1e0929cf56ce473844ce99437d01c686759e72f2", 0x29}, 0x4040005)
write$cgroup_int(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x12)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000005000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80088010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfe00}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c}, 0x40080)
socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@map=r7, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x82, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x0, 0x2d, 0xa2, 0xb, 0x81, 0x84}, 0xe)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0xc, 0x2}]}, 0x34}}, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
write$cgroup_subtree(r9, &(0x7f0000000000), 0xfe3a)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108)

50.036498ms ago: executing program 2 (id=2354):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180080001"], 0x8c}}, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

2.634556ms ago: executing program 2 (id=2355):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a848d979e93ca00000000566139ea00", "34b1f357e82e843c80b2c1e96e0543758441846f7000000000000000d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78", 0x0, 0x200}})

2.114503ms ago: executing program 0 (id=2356):
r0 = socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = socket$kcm(0xa, 0x3, 0x87) (async)
unshare(0x22020600) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xc, 0xfffffffc}, 0x80, 0x0}, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.911949ms ago: executing program 2 (id=2357):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080)="441f0800", 0x4)
getsockopt$inet_opts(r1, 0x0, 0x4, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

1.001017ms ago: executing program 1 (id=2358):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2b, 0x10000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xf}, @TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf0}]}}]}, 0x5c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000042000b0026bd70000040000003000000080002"], 0x3c}, 0x1, 0x0, 0x0, 0x24000091}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001000)={0x0, 0xffffffffffffffff, 0x0, 0x10b, &(0x7f0000001280)='cgroup\x00\xcek\x11\xfch\xd2\xb4\x83<\xb5\xad\xc4\xec?:\xe8U*\xaf\x8c~Sx`AF\xa4~/W\a\xaa\xd1\xdf\xc8\xfa\x15f^\x1f5h-\x04\xdb\xee\x8enW\xda\xe4\x1cI%\"`%\xaec\x0f\xb1\x85\xbd\x06\x1d\xce\x92\xa9\xd9\xb7\x04\xdf\xf8`<\x1a|k\x83h\xa3%\x06\xd4F\xd0\xc3\xee\x81d\xb3\x01\xcf\xcb\xe4a/[K=\xb6\x11t\xc4\x87\xd0\xa9\xd3\x1e\v\xec\xba\xee\x8a{\x98\x05\x94\xf5K\x1c\xbdd\x96\xb1dd!\xd2\x18\xd8f\xb1\xdb\x1b\xc2\xeb\xbdu\xe2\xee\x03,L\x94\xc6\xff\xac\x01&\x12b\n\xa0\x8fCW\x10A-\xfa\xd8F\xd6|\x83\xc8\xa2A\xa0\x84+\xf4\xd0\xa8\x10\x97\xb0\x023N\xb3\xa7j\xa7<\xdb$\x98c\x98(\x1a\xb9Q\xd5h\xa3\x1bj\xdb@\xfe\xd6Y4`\xcd\xf4\xea\xcd\xca=F\xaf\x12zVt:\x1c\x18\xab\x17?l\x19\x92bdtP\xe3`YN\xe0\x9a\x8b\xb6Z}\x1d\x92\x86\x81C\x80n\x89\x16\xcd\xaf}\xeb\xd2\xffb1\xe9'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r7, 0x0, 0xf69}, 0x18)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)})
r10 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000440)={{0x2, 0x4e20, @multicast2}, {0x1, @random="1bcb983f08f3"}, 0x54, {0x2, 0x4e22, @remote}, 'bond0\x00'})
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d690b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x6b}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @dev={0xac, 0x14, 0x14, 0x31}}}}], 0x20}, 0x4000014)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000140)=0x1, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

0s ago: executing program 0 (id=2359):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "f47943c06ce882c3e931dd61be7051fd00ca44fb7e53dd6200af5f00f8bd57a8", "d4397f9ade4adce05c555b9e87c4e38039149fe43b13f2074288b3d00df8b93f", "afbbecd36a849524fadfca73f5f0e2b4d4c1f5f31e332b5c9bd8a2d138151e1c", "34b1f357f82e843c80b2c1e96e0543758461846ff3e82b681259a831d4e90d2f", "0834919a7b81ea266df3da04025b3a4ee49841983d5b5d67663bc2ff477919ae", "4a2aa7ad70c1edcd00f65b78"}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52355' (ED25519) to the list of known hosts.
syzkaller login: [   41.087632][ T5777] cgroup: Unknown subsys name 'net'
[   41.205994][ T5777] cgroup: Unknown subsys name 'cpuset'
[   41.209908][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.987276][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.717393][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.723612][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.726283][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.733650][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.746083][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.748448][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.749157][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.753104][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.753196][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.758318][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.758350][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.763306][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.763475][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.766042][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.770075][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.907074][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   46.917427][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   46.972576][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   47.019146][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.022069][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.025743][ T5853] bridge_slave_0: entered allmulticast mode
[   47.029075][ T5853] bridge_slave_0: entered promiscuous mode
[   47.048057][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.050631][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.053850][ T5853] bridge_slave_1: entered allmulticast mode
[   47.056943][ T5853] bridge_slave_1: entered promiscuous mode
[   47.066357][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.069181][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.071954][ T5849] bridge_slave_0: entered allmulticast mode
[   47.075451][ T5849] bridge_slave_0: entered promiscuous mode
[   47.084091][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.086335][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.088628][ T5857] bridge_slave_0: entered allmulticast mode
[   47.091355][ T5857] bridge_slave_0: entered promiscuous mode
[   47.098298][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.100590][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.103150][ T5849] bridge_slave_1: entered allmulticast mode
[   47.106024][ T5849] bridge_slave_1: entered promiscuous mode
[   47.114191][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.116492][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.118871][ T5857] bridge_slave_1: entered allmulticast mode
[   47.121927][ T5857] bridge_slave_1: entered promiscuous mode
[   47.127088][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.150782][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.159912][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.165170][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.176321][ T5853] team0: Port device team_slave_0 added
[   47.179385][ T5853] team0: Port device team_slave_1 added
[   47.187551][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.191602][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.215261][ T5857] team0: Port device team_slave_0 added
[   47.217446][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.219662][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.229037][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.239906][ T5857] team0: Port device team_slave_1 added
[   47.243593][ T5849] team0: Port device team_slave_0 added
[   47.245894][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.248155][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.258677][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.269263][ T5849] team0: Port device team_slave_1 added
[   47.289044][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.291718][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.302223][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.323254][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.326208][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.334198][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.348534][ T5853] hsr_slave_0: entered promiscuous mode
[   47.351573][ T5853] hsr_slave_1: entered promiscuous mode
[   47.355835][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.358657][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.368957][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.377068][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.379400][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.388327][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.419707][ T5857] hsr_slave_0: entered promiscuous mode
[   47.422159][ T5857] hsr_slave_1: entered promiscuous mode
[   47.424345][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   47.426319][ T5857] Cannot create hsr debugfs directory
[   47.449157][ T5849] hsr_slave_0: entered promiscuous mode
[   47.452509][ T5849] hsr_slave_1: entered promiscuous mode
[   47.456012][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   47.458316][ T5849] Cannot create hsr debugfs directory
[   47.627304][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.632600][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.638328][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.644630][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.675475][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.684471][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.690686][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.700318][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.711235][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.714235][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.717179][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.720070][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.739538][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.744767][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.750125][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.757100][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.772748][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.775196][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.778272][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.781019][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.810227][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.812653][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.815345][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.817578][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.838279][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.852776][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.856565][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.859343][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.862057][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.865519][   T68] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.868445][   T68] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.878761][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   47.889743][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.892289][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.900902][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.906615][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.908856][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.918872][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   47.928177][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.930584][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.936714][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.939682][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.951903][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.975103][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   47.984902][ T1294] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.987218][ T1294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.995382][ T1294] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.997886][ T1294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.030088][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.043536][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.103113][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.126992][ T5849] veth0_vlan: entered promiscuous mode
[   48.131117][ T5849] veth1_vlan: entered promiscuous mode
[   48.144165][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.155636][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.176424][ T5849] veth0_macvtap: entered promiscuous mode
[   48.179575][ T5853] veth0_vlan: entered promiscuous mode
[   48.182319][ T5849] veth1_macvtap: entered promiscuous mode
[   48.195247][ T5853] veth1_vlan: entered promiscuous mode
[   48.213259][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.219745][ T5857] veth0_vlan: entered promiscuous mode
[   48.223288][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.233032][ T5857] veth1_vlan: entered promiscuous mode
[   48.241264][ T5746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.246430][ T5746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.255153][ T5853] veth0_macvtap: entered promiscuous mode
[   48.264257][ T5746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.267010][ T5746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.275765][ T5853] veth1_macvtap: entered promiscuous mode
[   48.307207][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.307606][ T5857] veth0_macvtap: entered promiscuous mode
[   48.309669][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.319766][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.328822][ T5857] veth1_macvtap: entered promiscuous mode
[   48.336275][ T1294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.336951][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.339324][ T1294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.352380][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.359169][ T5746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.370391][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.379358][ T5746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.382373][ T5746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.389834][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.399450][ T5746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.414571][ T5746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.427185][ T5746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.430602][ T5746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.445522][ T5746] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.448797][ T5917] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   48.474158][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.476814][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.491650][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.498503][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.516564][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.521245][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.526559][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.529823][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.560806][ T5923] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6'.
[   48.588943][ T5927] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   48.804017][   T33] audit: type=1800 audit(1756107348.583:2): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.15" name="memory.events" dev="tmpfs" ino=43 res=0 errno=0
[   48.823559][   T33] audit: type=1804 audit(1756107348.583:3): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.15" name="memory.events" dev="tmpfs" ino=43 res=1 errno=0
[   48.831577][ T5956] netlink: 4116 bytes leftover after parsing attributes in process `syz.2.17'.
[   48.844008][ T5858] Bluetooth: hci2: command tx timeout
[   48.845026][ T5855] Bluetooth: hci0: command tx timeout
[   48.846202][ T5858] Bluetooth: hci1: command tx timeout
[   48.904454][ T5964] netlink: 'syz.1.20': attribute type 3 has an invalid length.
[   48.920486][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   48.920620][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'.
[   48.935410][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   48.935420][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   48.938138][ T5968] netlink: 'syz.0.21': attribute type 15 has an invalid length.
[   48.947825][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.958003][ T5970] netlink: 'syz.0.21': attribute type 15 has an invalid length.
[   48.970344][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'.
[   48.985913][ T5967] Zero length message leads to an empty skb
[   49.051153][ T5987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27'.
[   49.260741][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'.
[   49.264193][ T6007] sctp: [Deprecated]: syz.2.34 (pid 6007) Use of struct sctp_assoc_value in delayed_ack socket option.
[   49.264193][ T6007] Use struct sctp_sack_info instead
[   49.355006][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'.
[   49.412209][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.481542][ T6048] tipc: Started in network mode
[   49.490509][ T6048] tipc: Node identity 5a614431de2d, cluster identity 4711
[   49.496114][ T6048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.505899][ T6047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   49.508995][ T6052] syzkaller0: entered promiscuous mode
[   49.512908][ T6052] syzkaller0: entered allmulticast mode
[   49.518589][ T6047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   49.522499][ T6048] tipc: Resetting bearer <eth:syzkaller0>
[   49.534324][ T6051] warning: `syz.1.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.585491][ T6046] tipc: Resetting bearer <eth:syzkaller0>
[   49.589410][ T6046] tipc: Disabling bearer <eth:syzkaller0>
[   49.798381][ T6077] syzkaller1: entered allmulticast mode
[   50.368738][ T6090] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   50.741278][ T6112] netlink: 'syz.1.62': attribute type 1 has an invalid length.
[   50.794036][ T6118] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   50.830823][ T6125] netlink: 'syz.1.67': attribute type 4 has an invalid length.
[   50.918522][ T6135] team0: Device gtp0 is of different type
[   50.921822][ T6137] netlink: 'syz.1.71': attribute type 2 has an invalid length.
[   50.924579][ T5858] Bluetooth: hci0: command tx timeout
[   50.924626][   T54] Bluetooth: hci2: command tx timeout
[   50.937177][   T54] Bluetooth: hci1: command tx timeout
[   51.519978][ T6211] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   51.638141][ T6223] netlink: 'syz.1.94': attribute type 11 has an invalid length.
[   51.990421][ T6257] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   52.011425][ T6257] bond1: entered promiscuous mode
[   52.014156][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.039817][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.043121][ T6257] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   52.048232][ T6257] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   52.056475][ T6257] bond1: (slave vxcan3): making interface the new active one
[   52.059662][ T6257] vxcan3: entered promiscuous mode
[   52.064870][ T6257] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[   52.132945][ T6269] Bluetooth: MGMT ver 1.23
[   52.400562][ T6300] vlan2: entered promiscuous mode
[   52.402913][ T6300] vlan2: entered allmulticast mode
[   52.406296][ T6300] hsr_slave_1: entered allmulticast mode
[   52.578246][ T6317] batadv_slave_1: entered promiscuous mode
[   52.584728][ T6316] batadv_slave_1: left promiscuous mode
[   52.697192][ T6329] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   52.700111][ T6329] openvswitch: netlink: Duplicate key (type 0).
[   52.766520][ T6342] sctp: [Deprecated]: syz.0.135 (pid 6342) Use of int in maxseg socket option.
[   52.766520][ T6342] Use struct sctp_assoc_value instead
[   52.809002][ T6351] veth0_to_bond: entered allmulticast mode
[   52.825415][ T6352] : renamed from bond_slave_0 (while UP)
[   53.004150][   T54] Bluetooth: hci1: command tx timeout
[   53.004353][ T5858] Bluetooth: hci2: command tx timeout
[   53.014421][ T5858] Bluetooth: hci0: command tx timeout
[   53.041869][ T6377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.101860][ T6377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.155665][ T6377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.213887][ T6377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.275070][ T5746] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.283118][ T5746] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.294204][ T5746] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.300707][ T5746] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.645033][ T6407] bridge0: entered promiscuous mode
[   54.197851][ T6422] netlink: 'syz.0.160': attribute type 11 has an invalid length.
[   54.200938][ T6422] __nla_validate_parse: 23 callbacks suppressed
[   54.200947][ T6422] netlink: 244 bytes leftover after parsing attributes in process `syz.0.160'.
[   54.287157][ T6431] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[   54.324372][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.165'.
[   54.327382][ T6436] netlink: 92 bytes leftover after parsing attributes in process `syz.2.165'.
[   54.331207][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'.
[   54.338846][ T6436] sctp: [Deprecated]: syz.2.165 (pid 6436) Use of struct sctp_assoc_value in delayed_ack socket option.
[   54.338846][ T6436] Use struct sctp_sack_info instead
[   54.387013][ T6443] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   54.661411][ T6466] erspan0: mtu less than device minimum
[   54.672217][ T6468] validate_nla: 2 callbacks suppressed
[   54.672248][ T6468] netlink: 'syz.1.176': attribute type 10 has an invalid length.
[   54.682486][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.693363][ T6468] team0: Port device bond0 added
[   54.871092][ T6489] Unsupported ieee802154 address type: 0
[   54.874512][ T6490] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   54.882759][ T6490] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   55.077382][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'.
[   55.083646][ T5858] Bluetooth: hci1: command tx timeout
[   55.097475][ T5858] Bluetooth: hci0: command tx timeout
[   55.097517][   T54] Bluetooth: hci2: command tx timeout
[   55.230796][ T6523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.234727][ T6523] batadv_slave_0: entered promiscuous mode
[   55.237763][ T6523] batadv_slave_0: entered allmulticast mode
[   55.249536][ T6523] netlink: 'syz.2.193': attribute type 8 has an invalid length.
[   55.290757][ T6529] tipc: Started in network mode
[   55.292887][ T6529] tipc: Node identity daed5df1d4cb, cluster identity 4711
[   55.297588][ T6529] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.300810][ T6529] syzkaller0: entered promiscuous mode
[   55.303088][ T6529] syzkaller0: entered allmulticast mode
[   55.309648][ T6529] netlink: 21 bytes leftover after parsing attributes in process `syz.1.196'.
[   55.314968][ T6529] tipc: Resetting bearer <eth:syzkaller0>
[   55.319072][ T6528] tipc: Resetting bearer <eth:syzkaller0>
[   55.322326][ T6528] tipc: Disabling bearer <eth:syzkaller0>
[   55.454990][ T6537] openvswitch: netlink: IPv4 tun info is not correct
[   55.470037][ T6537] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   55.600539][ T6549] team0: Port device bond0 removed
[   55.610489][ T6549] bridge_slave_0: left allmulticast mode
[   55.612684][ T6549] bridge_slave_0: left promiscuous mode
[   55.615473][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.620244][ T6549] bridge_slave_1: left allmulticast mode
[   55.622569][ T6549] bridge_slave_1: left promiscuous mode
[   55.626135][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.632551][ T6549] bond0: (slave 77): Releasing backup interface
[   55.640722][ T6549] bond0: (slave bond_slave_1): Releasing backup interface
[   55.651139][ T6549] team0: Port device team_slave_0 removed
[   55.658233][ T6549] team0: Port device team_slave_1 removed
[   55.661225][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.664273][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.667874][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.670846][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.681231][ T6549] bond1: (slave vxcan3): Releasing backup interface
[   55.684404][ T6549] vxcan3: left promiscuous mode
[   55.690376][ T6550] team0: Mode changed to "broadcast"
[   56.004394][ T6572] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[   56.012468][ T6572] netlink: 'syz.1.211': attribute type 4 has an invalid length.
[   56.015288][ T6572] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.211'.
[   56.018458][ T6572] netlink: 'syz.1.211': attribute type 1 has an invalid length.
[   56.021131][ T6572] netlink: 'syz.1.211': attribute type 4 has an invalid length.
[   56.025424][ T6572] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.211'.
[   56.104935][ T6580] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   56.248984][ T6598] netlink: 'syz.2.221': attribute type 4 has an invalid length.
[   56.252077][ T6598] netlink: 17 bytes leftover after parsing attributes in process `syz.2.221'.
[   56.314726][ T6601] netlink: 'syz.0.222': attribute type 5 has an invalid length.
[   56.317117][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'.
[   56.387446][ T6616] TCP: TCP_TX_DELAY enabled
[   56.494698][ T6629] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.546693][ T6635] netlink: 'syz.2.233': attribute type 11 has an invalid length.
[   56.549390][ T6635] netlink: 'syz.2.233': attribute type 4 has an invalid length.
[   56.680826][ T6697] bridge0: port 3(erspan0) entered blocking state
[   56.682993][ T6697] bridge0: port 3(erspan0) entered disabled state
[   56.687239][ T6697] erspan0: entered allmulticast mode
[   56.689629][ T6697] erspan0: entered promiscuous mode
[   56.691647][ T6697] bridge0: port 3(erspan0) entered blocking state
[   56.693718][ T6697] bridge0: port 3(erspan0) entered forwarding state
[   56.697207][ T6697] erspan0: left allmulticast mode
[   56.698753][ T6697] erspan0: left promiscuous mode
[   56.700471][ T6697] bridge0: port 3(erspan0) entered disabled state
[   57.163528][   T54] Bluetooth: hci0: command tx timeout
[   57.931726][ T6792] gre1: entered allmulticast mode
[   58.688093][ T6850] tipc: Enabled bearer <eth:vlan0>, priority 10
[   58.708359][ T6846] geneve2: entered promiscuous mode
[   58.757894][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.318607][ T6920] tipc: Started in network mode
[   59.320735][ T6920] tipc: Node identity , cluster identity 4711
[   59.322935][ T6920] tipc: Failed to obtain node identity
[   59.325050][ T6920] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.328415][ T6920] syzkaller0: entered promiscuous mode
[   59.330259][ T6920] syzkaller0: entered allmulticast mode
[   59.803588][   T10] tipc: Node number set to 2219590705
[   59.862135][ T6981] lo: entered allmulticast mode
[   59.867138][ T6981] lo: left allmulticast mode
[   59.901104][ T6983] nft_compat: unsupported protocol 0
[   59.958259][ T6992] validate_nla: 8 callbacks suppressed
[   59.958275][ T6992] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   60.007779][ T6992] bond1: (slave bridge1): making interface the new active one
[   60.008024][ T6997] __nla_validate_parse: 10 callbacks suppressed
[   60.008076][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'.
[   60.011312][ T6992] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   60.032798][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.320'.
[   60.067915][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   60.072522][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'.
[   60.078843][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'.
[   60.108401][ T7005] netlink: 192 bytes leftover after parsing attributes in process `syz.0.325'.
[   60.205690][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.329'.
[   60.261799][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.281815][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.285588][ T7028] 8021q: VLANs not supported on vxcan1
[   60.288146][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.301090][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.328138][ T7035] nbd: must specify an index to disconnect
[   60.330619][ T7033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.335'.
[   60.337059][ T7035] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[   60.387827][ T7030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'.
[   60.508518][ T7065] IPVS: length: 201 != 24
[   60.537450][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.342'.
[   60.676182][ T7091] geneve3: entered promiscuous mode
[   71.005232][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.008602][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   81.003320][ T7160] __nla_validate_parse: 5 callbacks suppressed
[   81.003332][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.377'.
[   81.012403][ T7163] openvswitch: netlink: Key type 12298 is out of range max 32
[   81.150689][ T7188] netlink: 92 bytes leftover after parsing attributes in process `syz.0.388'.
[   81.230616][ T7201] netlink: 'syz.2.393': attribute type 1 has an invalid length.
[   81.238751][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'.
[   81.256996][   T24] cfg80211: failed to load regulatory.db
[   81.325846][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'.
[   81.502544][ T7243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.408'.
[   81.530975][ T7243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.724576][ T7277] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   81.752779][ T7282] batman_adv: batadv0: Adding interface: ip6gretap1
[   81.755169][ T7282] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.764074][ T7282] batman_adv: batadv0: Interface activated: ip6gretap1
[   81.767305][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'.
[   81.770877][ T7285] netlink: 'syz.0.421': attribute type 2 has an invalid length.
[   81.775658][ T7285] netlink: 'syz.0.421': attribute type 1 has an invalid length.
[   81.784972][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.423'.
[   81.887021][ T7311] sctp: [Deprecated]: syz.2.431 (pid 7311) Use of int in max_burst socket option.
[   81.887021][ T7311] Use struct sctp_assoc_value instead
[   81.892672][ T7311] sctp: [Deprecated]: syz.2.431 (pid 7311) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.892672][ T7311] Use struct sctp_sack_info instead
[   81.946621][ T7321] veth0: entered promiscuous mode
[   81.949713][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   81.952362][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   81.954980][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   82.008036][ T7324] netlink: 'syz.0.435': attribute type 62 has an invalid length.
[   82.049027][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.050896][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.052993][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.057096][ T7327] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.068115][ T7327] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.077622][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.079926][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.082129][ T7327] wg1 speed is unknown, defaulting to 1000
[   82.140549][ T7342] tipc: Started in network mode
[   82.142084][ T7342] tipc: Node identity 2, cluster identity 4711
[   82.146680][ T7347] netlink: 'syz.1.444': attribute type 7 has an invalid length.
[   82.149467][ T7342] tipc: Node number set to 2
[   82.151071][ T7342] tipc: Cannot configure node identity twice
[   82.157400][ T7347] : entered promiscuous mode
[   82.472280][ T7408] team_slave_0: entered promiscuous mode
[   82.474143][ T7408] team_slave_1: entered promiscuous mode
[   82.476310][ T7408] macsec1: entered promiscuous mode
[   82.477908][ T7408] team0: entered promiscuous mode
[   82.586953][ T7433] bond2: entered promiscuous mode
[   82.588836][ T7433] bond2: entered allmulticast mode
[   82.590660][ T7433] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.594886][ T7433] netlink: 'syz.1.472': attribute type 1 has an invalid length.
[   83.323556][   T54] Bluetooth: hci2: command tx timeout
[   83.426888][ T7473] vlan2: entered promiscuous mode
[   84.529460][ T7539] wg1 speed is unknown, defaulting to 1000
[   84.532054][ T7538] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   84.535359][ T7538] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   84.567434][ T7541] sctp: [Deprecated]: syz.0.496 (pid 7541) Use of int in max_burst socket option deprecated.
[   84.567434][ T7541] Use struct sctp_assoc_value instead
[   84.728853][ T7575] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.901981][ T7606] tun0: tun_chr_ioctl cmd 1074025675
[   84.904140][ T7606] tun0: persist enabled
[   84.905424][ T7592] nbd0: detected capacity change from 0 to 127
[   84.908246][ T7606] tun0: tun_chr_ioctl cmd 1074025675
[   84.909915][ T7606] tun0: persist disabled
[   84.911697][ T7602] nbd: must specify at least one socket
[   84.924721][   T56] block nbd0: Receive control failed (result -32)
[   85.381747][ T7662] netlink: 'syz.0.535': attribute type 6 has an invalid length.
[   85.388975][ T7662] netlink: 'syz.0.535': attribute type 6 has an invalid length.
[   85.396940][ T7662] netlink: 'syz.0.535': attribute type 6 has an invalid length.
[   85.419251][ T7667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.468550][ T7674] tipc: Failed to remove unknown binding: 66,1,1/2:3445710461/3445710463
[   85.471747][ T7674] tipc: Failed to remove unknown binding: 66,1,1/2:3445710461/3445710463
[   86.184932][ T7746] __nla_validate_parse: 16 callbacks suppressed
[   86.184945][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'.
[   86.769225][ T7751] can: request_module (can-proto-0) failed.
[   87.991336][ T7764] netlink: 48 bytes leftover after parsing attributes in process `syz.1.566'.
[   88.120040][ T7781] wg1 speed is unknown, defaulting to 1000
[   88.198482][ T7795] netlink: 'syz.1.573': attribute type 11 has an invalid length.
[   88.200936][ T7795] validate_nla: 2 callbacks suppressed
[   88.200944][ T7795] netlink: 'syz.1.573': attribute type 4 has an invalid length.
[   88.206395][ T7795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.573'.
[   88.218974][ T7795] sctp: [Deprecated]: syz.1.573 (pid 7795) Use of int in max_burst socket option.
[   88.218974][ T7795] Use struct sctp_assoc_value instead
[   88.422398][ T7826] netlink: 364 bytes leftover after parsing attributes in process `syz.2.585'.
[   88.425708][ T7826] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   88.473746][ T7836] netlink: 'syz.1.588': attribute type 4 has an invalid length.
[   88.757644][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[   88.810502][ T7876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'.
[   88.863183][ T7880] wireguard0: entered promiscuous mode
[   88.866088][ T7880] wireguard0: entered allmulticast mode
[   88.892372][ T7883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.604'.
[   88.942269][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'.
[   89.030866][ T7893] netlink: 27 bytes leftover after parsing attributes in process `syz.2.607'.
[   89.133146][ T7900] netlink: 76 bytes leftover after parsing attributes in process `syz.2.609'.
[   89.577625][ T7954] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   89.623279][ T7965] syzkaller0: entered promiscuous mode
[   89.625149][ T7965] syzkaller0: entered allmulticast mode
[   89.655791][ T7970] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[   89.700053][ T7974] netlink: 'syz.2.633': attribute type 21 has an invalid length.
[   89.752273][ T7980] openvswitch: netlink: Multiple metadata blocks provided
[   90.155976][ T8041] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[   90.160551][ T8037] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[   90.451874][ T8063] wg1 speed is unknown, defaulting to 1000
[   91.926330][ T8093] __nla_validate_parse: 8 callbacks suppressed
[   91.926343][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.667'.
[   91.980897][ T8099] syz.1.670: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   91.989582][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.1.670 Not tainted syzkaller #0 PREEMPT(full) 
[   91.989603][ T8099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.989611][ T8099] Call Trace:
[   91.989655][ T8099]  <TASK>
[   91.989668][ T8099]  dump_stack_lvl+0x189/0x250
[   91.989690][ T8099]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.989705][ T8099]  ? __pfx__printk+0x10/0x10
[   91.989722][ T8099]  ? lock_release+0x4b/0x3e0
[   91.989741][ T8099]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   91.989757][ T8099]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   91.989772][ T8099]  warn_alloc+0x214/0x310
[   91.989792][ T8099]  ? stack_depot_save_flags+0x40/0x860
[   91.989810][ T8099]  ? __pfx_warn_alloc+0x10/0x10
[   91.989829][ T8099]  ? kasan_save_track+0x4f/0x80
[   91.989845][ T8099]  ? xskq_create+0x56/0x170
[   91.989861][ T8099]  ? xsk_init_queue+0xb0/0x110
[   91.989875][ T8099]  ? xsk_setsockopt+0x4dc/0x8d0
[   91.989889][ T8099]  ? do_sock_setsockopt+0x17c/0x1b0
[   91.989901][ T8099]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   91.989912][ T8099]  ? do_syscall_64+0xfa/0x3b0
[   91.989930][ T8099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.989946][ T8099]  __vmalloc_node_range_noprof+0x125/0x12f0
[   91.989973][ T8099]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   91.989991][ T8099]  ? xsk_setsockopt+0x462/0x8d0
[   91.990006][ T8099]  ? __kasan_kmalloc+0x93/0xb0
[   91.990023][ T8099]  vmalloc_user_noprof+0xad/0xf0
[   91.990038][ T8099]  ? xskq_create+0xbf/0x170
[   91.990053][ T8099]  xskq_create+0xbf/0x170
[   91.990069][ T8099]  xsk_init_queue+0xb0/0x110
[   91.990086][ T8099]  xsk_setsockopt+0x4dc/0x8d0
[   91.990102][ T8099]  ? __pfx_xsk_setsockopt+0x10/0x10
[   91.990117][ T8099]  ? __pfx_aa_sk_perm+0x10/0x10
[   91.990134][ T8099]  ? lock_release+0x4b/0x3e0
[   91.990151][ T8099]  ? aa_sock_opt_perm+0xff/0x1b0
[   91.990164][ T8099]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   91.990179][ T8099]  ? __pfx_xsk_setsockopt+0x10/0x10
[   91.990194][ T8099]  do_sock_setsockopt+0x17c/0x1b0
[   91.990208][ T8099]  __x64_sys_setsockopt+0x13f/0x1b0
[   91.990222][ T8099]  do_syscall_64+0xfa/0x3b0
[   91.990241][ T8099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.990253][ T8099]  ? exc_page_fault+0x9f/0xf0
[   91.990270][ T8099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.990283][ T8099] RIP: 0033:0x7fe6b438ebe9
[   91.990296][ T8099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.990307][ T8099] RSP: 002b:00007fe6b5276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   91.990322][ T8099] RAX: ffffffffffffffda RBX: 00007fe6b45b5fa0 RCX: 00007fe6b438ebe9
[   91.990331][ T8099] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   91.990339][ T8099] RBP: 00007fe6b4411e19 R08: 0000000000000004 R09: 0000000000000000
[   91.990347][ T8099] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.990355][ T8099] R13: 00007fe6b45b6038 R14: 00007fe6b45b5fa0 R15: 00007ffc51e4ab78
[   91.990369][ T8099]  </TASK>
[   91.990375][ T8099] Mem-Info:
[   92.117373][ T8099] active_anon:4610 inactive_anon:0 isolated_anon:0
[   92.117373][ T8099]  active_file:1255 inactive_file:38219 isolated_file:0
[   92.117373][ T8099]  unevictable:1768 dirty:106 writeback:0
[   92.117373][ T8099]  slab_reclaimable:9975 slab_unreclaimable:53028
[   92.117373][ T8099]  mapped:18000 shmem:2447 pagetables:983
[   92.117373][ T8099]  sec_pagetables:0 bounce:0
[   92.117373][ T8099]  kernel_misc_reclaimable:0
[   92.117373][ T8099]  free:291714 free_pcp:23932 free_cma:0
[   92.133147][ T8099] Node 0 active_anon:12124kB inactive_anon:0kB active_file:2964kB inactive_file:2824kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34624kB dirty:192kB writeback:0kB shmem:5052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7488kB pagetables:1920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.151283][ T8099] Node 1 active_anon:6044kB inactive_anon:0kB active_file:2056kB inactive_file:150052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37376kB dirty:232kB writeback:0kB shmem:4736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3980kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   92.162010][ T8099] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.171589][ T8099] lowmem_reserve[]: 0 811 811 811 811
[   92.173829][ T8099] Node 0 DMA32 free:385088kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11988kB inactive_anon:0kB active_file:2964kB inactive_file:2824kB unevictable:3536kB writepending:192kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:27444kB local_pcp:9772kB free_cma:0kB
[   92.186721][ T8099] lowmem_reserve[]: 0 0 0 0 0
[   92.189345][ T8099] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   92.211785][ T8099] lowmem_reserve[]: 0 0 854 854 854
[   92.214270][ T8099] Node 1 Normal free:307588kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5976kB inactive_anon:0kB active_file:2056kB inactive_file:150052kB unevictable:3536kB writepending:232kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:69928kB local_pcp:21556kB free_cma:0kB
[   92.226238][ T8099] lowmem_reserve[]: 0 0 0 0 0
[   92.237324][ T8099] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   92.243502][ T8099] Node 0 DMA32: 84*4kB (UME) 102*8kB (UM) 106*16kB (M) 155*32kB (UME) 95*64kB (UME) 40*128kB (UM) 24*256kB (UM) 11*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 83*4096kB (UM) = 385088kB
[   92.250549][ T8099] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   92.260015][ T8099] Node 1 Normal: 1409*4kB (UM) 780*8kB (UME) 311*16kB (UME) 260*32kB (UME) 164*64kB (UE) 56*128kB (UME) 20*256kB (UM) 13*512kB (UME) 11*1024kB (UME) 4*2048kB (UE) 57*4096kB (UM) = 307540kB
[   92.267814][ T8099] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.271251][ T8099] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   92.274914][ T8099] 41921 total pagecache pages
[   92.277516][ T8099] 0 pages in swap cache
[   92.279322][ T8099] Free swap  = 124996kB
[   92.281275][ T8099] Total swap = 124996kB
[   92.283067][ T8099] 786301 pages RAM
[   92.284830][ T8099] 0 pages HighMem/MovableOnly
[   92.286837][ T8099] 241332 pages reserved
[   92.288641][ T8099] 0 pages cma reserved
[   92.337407][ T8132] netlink: 'syz.2.680': attribute type 2 has an invalid length.
[   92.395734][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[   92.399676][ T8138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.418921][ T8144] openvswitch: netlink: Duplicate or invalid key (type 0).
[   92.419346][ T8138] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.421678][ T8144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.462329][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.687'.
[   92.512233][ T8154] netlink: 'syz.2.688': attribute type 9 has an invalid length.
[   92.523714][ T8154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.688'.
[   92.611961][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'.
[   92.616355][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'.
[   92.622109][ T8173] netlink: 'syz.2.695': attribute type 6 has an invalid length.
[   92.622142][ T8174] netlink: 'syz.2.695': attribute type 6 has an invalid length.
[   92.718445][ T8191] syzkaller1: entered promiscuous mode
[   92.720189][ T8191] syzkaller1: entered allmulticast mode
[   92.916224][ T8208] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   92.920099][ T8209] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[   92.930457][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[   93.087725][ T8236] netlink: 'syz.2.715': attribute type 4 has an invalid length.
[   93.109159][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[   93.112409][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[   93.117787][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'.
[   93.351124][ T8283] : renamed from wg2 (while UP)
[   94.364858][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.367430][ T8308] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   94.425797][ T8320] IPVS: set_ctl: invalid protocol: 140 172.20.20.187:0
[   94.515715][ T8330] wg1 speed is unknown, defaulting to 1000
[   94.532162][ T8331] validate_nla: 1 callbacks suppressed
[   94.532173][ T8331] netlink: 'syz.1.743': attribute type 6 has an invalid length.
[   94.544610][   T33] audit: type=1107 audit(1756107394.323:4): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   94.548337][ T8330] syzkaller1: entered promiscuous mode
[   94.580286][ T8330] syzkaller1: entered allmulticast mode
[   94.643365][ T8337] wg1 speed is unknown, defaulting to 1000
[   94.697223][   T10] IPVS: starting estimator thread 0...
[   94.702924][ T8337] netlink: 'syz.1.748': attribute type 13 has an invalid length.
[   94.705564][ T8337] netlink: 'syz.1.748': attribute type 17 has an invalid length.
[   94.711504][ T8337] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   94.754962][ T8353] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20001
[   94.785478][ T8343] IPVS: using max 53 ests per chain, 127200 per kthread
[   94.962375][ T8381] netlink: 'syz.2.763': attribute type 142 has an invalid length.
[   94.995989][ T8384] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   94.999543][   T12] IPVS: stop unused estimator thread 0...
[   95.001607][ T8384] netlink: 'syz.1.764': attribute type 9 has an invalid length.
[   95.111970][ T8395] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   95.306900][ T8425] netlink: 'syz.2.779': attribute type 1 has an invalid length.
[   95.451050][ T8462] wg1 speed is unknown, defaulting to 1000
[   96.384856][ T8508] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003
[   96.386919][ T8509] netlink: 'syz.2.804': attribute type 3 has an invalid length.
[   96.566748][ T8531] team0: Unable to change to the same mode the team is in
[   96.621187][ T8545] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   96.796927][ T8576] netlink: 'syz.0.828': attribute type 83 has an invalid length.
[   97.381523][ T8623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.422500][ T8627] bridge_slave_0: left allmulticast mode
[   97.426421][ T8627] bridge_slave_0: left promiscuous mode
[   97.428379][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.432342][ T8627] bridge_slave_1: left allmulticast mode
[   97.435086][ T8627] bridge_slave_1: left promiscuous mode
[   97.437148][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.441513][ T8627] bond0: (slave bond_slave_0): Releasing backup interface
[   97.449455][ T8627] bond0: (slave bond_slave_1): Releasing backup interface
[   97.455404][ T8627] team_slave_0: left promiscuous mode
[   97.461129][ T8627] team0: Port device team_slave_0 removed
[   97.466873][ T8627] team_slave_1: left promiscuous mode
[   97.474060][ T8627] team0: Port device team_slave_1 removed
[   97.477318][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.480203][ T8627] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.484793][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.487587][ T8627] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.497521][ T8627] bond1: (slave bridge1): Releasing active interface
[   97.502353][   T51] wg1 speed is unknown, defaulting to 1000
[   97.542911][ T8636] __nla_validate_parse: 19 callbacks suppressed
[   97.542928][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[   97.596026][ T8638] netlink: 'syz.1.845': attribute type 2 has an invalid length.
[   97.620527][ T8627] netlink: 'syz.0.841': attribute type 10 has an invalid length.
[   97.635947][ T8627] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.665725][ T8627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.669465][ T8627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.681009][ T8644] tc_dump_action: action bad kind
[   97.801044][ T8660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.807263][   T33] audit: type=1800 audit(1756107397.593:5): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.853" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1701 res=0 errno=0
[   97.821039][ T8660] tipc: Resetting bearer <eth:syzkaller0>
[   97.827149][ T8659] tipc: Disabling bearer <eth:syzkaller0>
[   97.883260][ T8668] IPv6: Can't replace route, no match found
[   97.911061][ T8672] netem: incorrect gi model size
[   97.912744][ T8672] netem: change failed
[   98.037732][ T8684] netlink: 80 bytes leftover after parsing attributes in process `syz.2.862'.
[   98.271928][ T8726] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   98.282793][ T8727] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   98.441951][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'.
[   99.232846][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'.
[   99.246046][ T8764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.248962][ T8764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.254851][ T8764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.278459][ T8780] IPVS: set_ctl: invalid protocol: 172 172.20.20.170:20000
[   99.573649][ T8820] validate_nla: 1 callbacks suppressed
[   99.573657][ T8819] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[   99.573664][ T8820] netlink: 'syz.0.904': attribute type 1 has an invalid length.
[   99.737246][ T8845] netlink: 'syz.0.912': attribute type 1 has an invalid length.
[   99.899145][ T8873] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[   99.902202][ T8873] netlink: 208 bytes leftover after parsing attributes in process `syz.1.922'.
[   99.927951][ T8873] netlink: 'syz.1.922': attribute type 1 has an invalid length.
[   99.930997][ T8873] netlink: 'syz.1.922': attribute type 2 has an invalid length.
[   99.952703][ T8878] netlink: 'syz.0.923': attribute type 1 has an invalid length.
[   99.955794][ T8878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.923'.
[  100.035705][ T8895] netlink: 'syz.0.929': attribute type 32 has an invalid length.
[  100.076581][ T8900] netlink: 'syz.1.931': attribute type 1 has an invalid length.
[  100.080216][ T8900] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.931'.
[  100.134567][ T8910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  100.332216][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.946'.
[  100.664019][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  100.706395][ T8982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.709680][ T8982] syzkaller0: entered promiscuous mode
[  100.711909][ T8982] syzkaller0: entered allmulticast mode
[  100.725092][ T8982] tipc: Resetting bearer <eth:syzkaller0>
[  100.740493][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[  100.744807][ T8981] tipc: Disabling bearer <eth:syzkaller0>
[  101.017822][ T9019] netlink: 'syz.1.976': attribute type 9 has an invalid length.
[  101.407757][ T9075] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002
[  101.410100][ T9075] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002
[  101.588143][ T9110] vlan6: entered promiscuous mode
[  101.591192][ T9110] macvtap0: entered promiscuous mode
[  101.942414][ T9160] syzkaller1: entered promiscuous mode
[  101.944704][ T9160] syzkaller1: entered allmulticast mode
[  102.355420][ T9207] ieee802154 phy0 wpan0: encryption failed: -90
[  102.435070][ T9214] batadv1: entered promiscuous mode
[  102.437776][ T9214] batadv1: entered allmulticast mode
[  102.550019][   T33] audit: type=1804 audit(1756107402.333:6): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1042" name="/newroot/306/memory.events" dev="tmpfs" ino=1571 res=1 errno=0
[  102.557053][   T33] audit: type=1800 audit(1756107402.333:7): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1042" name="memory.events" dev="tmpfs" ino=1571 res=0 errno=0
[  102.591476][ T9224] __nla_validate_parse: 15 callbacks suppressed
[  102.591492][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  102.599885][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'.
[  102.652708][ T9228] wg1 speed is unknown, defaulting to 1000
[  103.195434][ T9262] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1058'.
[  103.644298][ T9314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1075'.
[  103.682099][ T9314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1075'.
[  103.703068][ T9327] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.741882][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'.
[  103.752091][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'.
[  103.826399][ T9352] bridge_slave_0: entered promiscuous mode
[  103.853168][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1092'.
[  103.889849][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1095'.
[  103.928134][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1096'.
[  104.454194][ T9428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.456626][ T9428] syzkaller0: entered promiscuous mode
[  104.458549][ T9428] syzkaller0: entered allmulticast mode
[  104.467369][ T9428] tipc: Resetting bearer <eth:syzkaller0>
[  104.491807][ T9429] bond4: entered promiscuous mode
[  104.493779][ T9429] 8021q: adding VLAN 0 to HW filter on device bond4
[  104.497622][ T9424] tipc: Resetting bearer <eth:syzkaller0>
[  104.502145][ T9424] tipc: Disabling bearer <eth:syzkaller0>
[  104.519049][ T9429] bond4: (slave bridge5): making interface the new active one
[  104.522277][ T9429] bridge5: entered promiscuous mode
[  104.524842][ T9429] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  104.551728][ T9429] openvswitch: netlink: Key 6 has unexpected len 333 expected 2
[  104.686015][ T7140] IPVS: starting estimator thread 0...
[  104.783897][ T9446] IPVS: using max 92 ests per chain, 220800 per kthread
[  104.814228][    T9] wg1 speed is unknown, defaulting to 1000
[  104.816553][    T9] syz0: Port: 1 Link DOWN
[  104.820919][ T9439] syz.0.1119 (9439) used greatest stack depth: 20112 bytes left
[  104.821048][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.827400][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.830269][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.835485][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.917474][ T9459] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  104.922424][ T9459] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  104.926854][ T9459] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  105.178890][ T9481] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003
[  105.263949][ T9480] nbd1: detected capacity change from 0 to 127
[  105.267956][ T9482] block nbd1: Receive control failed (result -32)
[  105.268277][   T55] block nbd1: Receive control failed (result -32)
[  105.299403][ T9485] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.795285][ T9504] netlink: 'syz.0.1136': attribute type 11 has an invalid length.
[  106.944356][ T9559] validate_nla: 14 callbacks suppressed
[  106.944368][ T9559] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  106.948754][ T9559] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  106.975028][ T9562] netlink: 'syz.2.1151': attribute type 6 has an invalid length.
[  106.977936][ T9562] netlink: 'syz.2.1151': attribute type 6 has an invalid length.
[  107.062978][ T9584] bridge0: port 1(batadv1) entered blocking state
[  107.066747][ T9584] bridge0: port 1(batadv1) entered disabled state
[  107.068803][ T9584] batadv1: entered allmulticast mode
[  107.071101][ T9584] batadv1: entered promiscuous mode
[  107.247754][ T9601] veth5: entered promiscuous mode
[  107.280714][ T9603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.372883][ T9612] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  107.373343][ T9613] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  107.375594][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.382338][ T9613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.573684][   T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  107.576613][   T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  107.581799][ T9624] sctp: [Deprecated]: syz.0.1173 (pid 9624) Use of int in maxseg socket option.
[  107.581799][ T9624] Use struct sctp_assoc_value instead
[  107.708002][ T9639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.710594][ T9642] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  107.781683][ T9650] __nla_validate_parse: 11 callbacks suppressed
[  107.781694][ T9650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1181'.
[  107.828225][ T9656] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1184'.
[  107.831227][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'.
[  107.836056][ T9656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.854894][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1186'.
[  107.933956][ T9672] ieee802154 phy0 wpan0: encryption failed: -22
[  108.004401][ T9682] dvmrp0: entered allmulticast mode
[  108.159965][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'.
[  108.321328][ T9719] netlink: 'syz.0.1205': attribute type 1 has an invalid length.
[  108.324573][ T9719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1205'.
[  108.484589][ T9759] netlink: 'syz.1.1218': attribute type 21 has an invalid length.
[  108.487949][ T9759] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.491333][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.510249][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'.
[  108.606976][ T9776] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  108.608671][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'.
[  108.727588][ T9788] netem: incorrect ge model size
[  108.729569][ T9788] netem: change failed
[  108.880263][ T9800] tipc: Enabled bearer <udp:syz2>, priority 10
[  109.003631][ T5858] Bluetooth: hci2: command 0x0405 tx timeout
[  109.485657][ T9858] team0: entered promiscuous mode
[  109.487688][ T9858] team_slave_0: entered promiscuous mode
[  109.490297][ T9860] netlink: 'syz.0.1249': attribute type 4 has an invalid length.
[  109.490408][ T9858] team_slave_1: entered promiscuous mode
[  109.843280][ T9892] sit0: entered promiscuous mode
[  109.882116][ T9894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.888158][ T9894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.380615][ T9903] macsec1: entered promiscuous mode
[  110.382405][ T9903] macsec1: entered allmulticast mode
[  110.531043][ T9913] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.535011][ T9913] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.571591][ T9913] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.579862][ T9913] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.625790][ T9913] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.628684][ T9913] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.667785][ T9913] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.671211][ T9913] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.719367][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.722554][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.733567][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.736493][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.739745][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.742770][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.749492][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.752682][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.645144][ T9968] pimreg: entered allmulticast mode
[  111.647860][ T9968] pimreg: left allmulticast mode
[  111.765317][ T9980] wg1 speed is unknown, defaulting to 1000
[  112.032257][T10029] tc_dump_action: action bad kind
[  112.152140][T10052] geneve2: left promiscuous mode
[  112.156725][T10052] geneve3: left promiscuous mode
[  112.158734][T10052] vlan2: left promiscuous mode
[  112.160741][T10052] veth5: left promiscuous mode
[  112.257405][T10063] atomic_op ffff8880334c0198 conn xmit_atomic 0000000000000000
[  112.398271][T10091] ieee802154 phy0 wpan0: encryption failed: -90
[  112.400787][T10091] validate_nla: 5 callbacks suppressed
[  112.400795][T10091] netlink: 'syz.0.1322': attribute type 13 has an invalid length.
[  112.889639][T10150] __nla_validate_parse: 213 callbacks suppressed
[  112.889654][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1341'.
[  112.895533][T10150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1341'.
[  112.987642][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1342'.
[  112.990783][T10153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1342'.
[  113.681079][T10169] wg1 speed is unknown, defaulting to 1000
[  113.747268][T10173] bond0: (slave wlan1): Releasing backup interface
[  113.751323][T10173] batadv1: left allmulticast mode
[  113.755672][T10173] batadv1: left promiscuous mode
[  113.758140][T10173] bridge0: port 1(batadv1) entered disabled state
[  113.996407][T10203] bond4: (slave bridge5): Releasing backup interface
[  113.998906][T10203] bridge5: left promiscuous mode
[  114.008133][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'.
[  114.012151][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  114.107771][T10203] vlan0: entered promiscuous mode
[  114.111951][T10203] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  114.132429][T10225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1363'.
[  114.158606][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'.
[  114.299752][T10246] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1369'.
[  114.402897][T10256] wg1 speed is unknown, defaulting to 1000
[  114.530347][T10273] Bluetooth: MGMT ver 1.23
[  114.599068][   T33] audit: type=1800 audit(1756107414.383:8): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1380" name="memory.events" dev="tmpfs" ino=2261 res=0 errno=0
[  114.612593][   T33] audit: type=1804 audit(1756107414.383:9): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1380" name="memory.events" dev="tmpfs" ino=2261 res=1 errno=0
[  114.666373][T10290] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  114.746071][T10294] bond0: (slave gretap0): Opening slave failed
[  115.810698][T10337] netlink: 'syz.0.1398': attribute type 1 has an invalid length.
[  115.815099][T10337] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1398'.
[  115.850588][T10337] wg1 speed is unknown, defaulting to 1000
[  115.876955][T10341] netlink: 'syz.2.1399': attribute type 1 has an invalid length.
[  115.880308][T10341] netlink: 'syz.2.1399': attribute type 1 has an invalid length.
[  116.022409][T10337] netlink: 'syz.0.1398': attribute type 13 has an invalid length.
[  116.170262][T10368] veth0_to_bond: left allmulticast mode
[  116.233792][T10368] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.496140][T10389] netlink: 'syz.2.1412': attribute type 21 has an invalid length.
[  116.499144][T10389] netlink: 'syz.2.1412': attribute type 22 has an invalid length.
[  116.501917][T10389] netlink: 'syz.2.1412': attribute type 23 has an invalid length.
[  116.897639][T10408] bond0: entered promiscuous mode
[  116.901216][T10408] bond0: left promiscuous mode
[  117.620480][T10480] syzkaller0: entered promiscuous mode
[  117.622992][T10480] syzkaller0: entered allmulticast mode
[  117.693060][T10489] netlink: 'syz.0.1450': attribute type 29 has an invalid length.
[  117.697651][T10490] netlink: 'syz.0.1450': attribute type 29 has an invalid length.
[  117.874208][T10510] can: request_module (can-proto-4) failed.
[  117.902585][T10520] __nla_validate_parse: 11 callbacks suppressed
[  117.902597][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1462'.
[  117.907786][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1462'.
[  118.022090][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1468'.
[  118.141560][ T5882] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  118.200169][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'.
[  119.270068][T10607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  119.296150][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'.
[  119.385498][T10619] tipc: Enabling of bearer <et:g> rejected, media not registered
[  119.467953][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'.
[  119.468737][T10634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.476069][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.536273][T10642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1497'.
[  119.540377][T10642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1497'.
[  119.546246][T10642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1497'.
[  119.551126][T10642] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1497'.
[  119.565186][T10644] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  119.641894][T10652] netlink: 'syz.1.1502': attribute type 6 has an invalid length.
[  119.646175][T10652] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.070140][T10711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.075123][T10711] tipc: Resetting bearer <eth:syzkaller0>
[  120.078955][T10710] tipc: Disabling bearer <eth:syzkaller0>
[  120.136459][T10718] netlink: 'syz.1.1523': attribute type 1 has an invalid length.
[  120.513768][T10732] nbd2: detected capacity change from 0 to 549764202496
[  120.578799][T10739] batadv1: entered promiscuous mode
[  121.057037][T10756] dvmrp1: tun_chr_ioctl cmd 1074025677
[  121.060011][T10756] dvmrp1: linktype set to 773
[  121.064283][T10756] dvmrp1: tun_chr_ioctl cmd 1074025673
[  121.067370][T10757] dvmrp1: tun_chr_ioctl cmd 1074025677
[  121.069804][T10757] dvmrp1: linktype set to 773
[  121.257952][   T56] block nbd2: Receive control failed (result -32)
[  121.436234][T10791] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.704863][T10816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.229868][T10865] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  122.265226][T10873] pimreg: entered allmulticast mode
[  122.401444][T10892] netlink: 'syz.2.1573': attribute type 303 has an invalid length.
[  122.525971][T10901] 8021q: adding VLAN 0 to HW filter on device bond4
[  122.528786][T10901] bridge0: port 3(bond4) entered blocking state
[  122.531003][T10901] bridge0: port 3(bond4) entered disabled state
[  122.534083][T10901] bond4: entered allmulticast mode
[  122.538220][T10901] bond4: entered promiscuous mode
[  122.540610][T10901] bridge0: port 3(bond4) entered blocking state
[  122.543139][T10901] bridge0: port 3(bond4) entered forwarding state
[  122.761055][T10928] openvswitch: netlink: IP tunnel TTL not specified.
[  122.926809][   T68] bridge0: port 3(bond4) entered disabled state
[  122.955692][T10959] sctp: [Deprecated]: syz.0.1593 (pid 10959) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.955692][T10959] Use struct sctp_sack_info instead
[  122.996826][T10965] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.000519][T10965] syzkaller0: entered promiscuous mode
[  123.002666][T10965] syzkaller0: entered allmulticast mode
[  123.070825][T10979] __nla_validate_parse: 17 callbacks suppressed
[  123.070837][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1599'.
[  123.102385][T10981] pim6reg1: entered promiscuous mode
[  123.105157][T10981] pim6reg1: entered allmulticast mode
[  123.285925][T10989] wg1 speed is unknown, defaulting to 1000
[  123.307376][T10992] netlink: 'syz.0.1605': attribute type 1 has an invalid length.
[  123.329607][T10992] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1605'.
[  123.495309][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  123.598418][T11024] vlan2: entered promiscuous mode
[  123.600459][T11024] macvtap0: entered promiscuous mode
[  123.696332][T11038] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1618'.
[  123.700895][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'.
[  123.704930][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'.
[  123.747935][T11041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1620'.
[  123.789603][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1622'.
[  123.792712][T11051] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  123.798872][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1622'.
[  123.802215][T11051] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  123.848415][T11058] syzkaller1: entered promiscuous mode
[  123.850752][T11058] syzkaller1: entered allmulticast mode
[  123.985287][T11071] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1631'.
[  124.638759][T11107] wg1 speed is unknown, defaulting to 1000
[  124.936489][T11130] netlink: 'syz.0.1651': attribute type 10 has an invalid length.
[  124.952034][T11130] geneve0: entered promiscuous mode
[  124.956389][T11130] team0: Port device geneve0 added
[  124.959127][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.962664][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.972421][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.976566][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.132959][T11141] wg1 speed is unknown, defaulting to 1000
[  125.191919][T11141] netlink: 'syz.0.1653': attribute type 1 has an invalid length.
[  125.537270][T11173] delete_channel: no stack
[  125.609236][T11175] delete_channel: no stack
[  125.921338][T11200] ip6tnl2: entered promiscuous mode
[  126.104407][T11203] nbd: must specify at least one socket
[  126.236702][T11216] netlink: 'syz.1.1673': attribute type 2 has an invalid length.
[  126.240899][T11216] : entered promiscuous mode
[  127.316412][T11257] syzkaller0: left promiscuous mode
[  127.318624][T11257] syzkaller0: left allmulticast mode
[  127.622617][T11272] netlink: 'syz.2.1691': attribute type 83 has an invalid length.
[  128.018156][T11301] netlink: 'syz.2.1697': attribute type 10 has an invalid length.
[  128.025433][T11301] dummy0: entered promiscuous mode
[  128.028194][T11301] team0: Port device dummy0 added
[  128.113175][T11303] __nla_validate_parse: 12 callbacks suppressed
[  128.113191][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'.
[  128.319488][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'.
[  128.391368][T11338] batadv_slave_0: entered promiscuous mode
[  128.393313][T11338] batadv_slave_0: entered allmulticast mode
[  128.398664][T11338] netlink: 'syz.1.1714': attribute type 8 has an invalid length.
[  128.430874][T11342] netlink: 'syz.0.1715': attribute type 1 has an invalid length.
[  128.432871][T11347] dummy0: left promiscuous mode
[  128.434814][T11342] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1715'.
[  128.443979][T11347] team0: Port device dummy0 removed
[  128.475492][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1718'.
[  128.568119][T11369] atomic_op ffff888110e5a198 conn xmit_atomic 0000000000000000
[  128.583448][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1728'.
[  128.624424][T11386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1727'.
[  128.627695][T11386] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  128.630424][T11386] netlink: 'syz.2.1727': attribute type 2 has an invalid length.
[  128.632897][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1727'.
[  128.681598][T11396] netlink: 'syz.2.1734': attribute type 1 has an invalid length.
[  128.712127][T11400] netlink: 'syz.0.1737': attribute type 4 has an invalid length.
[  128.732122][T11405] sctp: [Deprecated]: syz.1.1738 (pid 11405) Use of int in maxseg socket option.
[  128.732122][T11405] Use struct sctp_assoc_value instead
[  128.785755][T11422] netlink: 'syz.0.1742': attribute type 29 has an invalid length.
[  129.030037][T11449] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1753'.
[  129.033245][T11449] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1753'.
[  129.108200][T11451] netlink: 'syz.2.1754': attribute type 1 has an invalid length.
[  129.111276][T11451] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1754'.
[  129.117546][T11451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.753151][   T33] audit: type=1800 audit(1756107429.533:10): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1777" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3108 res=0 errno=0
[  129.964977][T11528] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  129.967439][T11528] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  129.973347][T11526] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20003
[  130.050289][T11547] IPVS: length: 141 != 8
[  130.081860][T11552] tipc: Can't bind to reserved service type 2
[  130.131055][T11561] wg1 speed is unknown, defaulting to 1000
[  130.167734][T11563] wg1 speed is unknown, defaulting to 1000
[  131.224828][T11651] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  131.598907][T11708] wg1 speed is unknown, defaulting to 1000
[  131.640700][    T9] IPVS: starting estimator thread 0...
[  131.646569][T11708] syz.2.1831 uses old SIOCAX25GETINFO
[  131.725069][T11713] IPVS: using max 92 ests per chain, 220800 per kthread
[  131.767095][T11732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.769624][T11732] syzkaller0: entered promiscuous mode
[  131.771634][T11732] syzkaller0: entered allmulticast mode
[  131.781259][T11732] tipc: Resetting bearer <eth:syzkaller0>
[  131.785023][T11731] tipc: Resetting bearer <eth:syzkaller0>
[  131.787813][T11731] tipc: Disabling bearer <eth:syzkaller0>
[  131.875561][   T13] IPVS: stop unused estimator thread 0...
[  132.446509][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.856432][T11794] vlan4: entered promiscuous mode
[  132.858181][T11794] vlan4: entered allmulticast mode
[  132.860084][T11794] hsr_slave_1: entered allmulticast mode
[  133.014293][T11804] 8021q: adding VLAN 0 to HW filter on device bond6
[  133.018693][T11804] bond0: (slave bond6): Enslaving as an active interface with an up link
[  133.103717][   T51] IPVS: starting estimator thread 0...
[  133.109028][T11819] nbd: nbd2 already in use
[  133.111005][T11819] block nbd2: NBD_DISCONNECT
[  133.112662][T11819] block nbd2: Send disconnect failed -32
[  133.114685][T11819] block nbd2: shutting down sockets
[  133.215104][T11822] IPVS: using max 53 ests per chain, 127200 per kthread
[  133.271792][T11854] __nla_validate_parse: 15 callbacks suppressed
[  133.271802][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'.
[  133.496657][T11889] raw_sendmsg: syz.2.1890 forgot to set AF_INET. Fix it!
[  133.558551][T11894] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1891'.
[  133.566970][T11894] ip6erspan0: entered allmulticast mode
[  134.295063][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'.
[  134.436547][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1899'.
[  134.790054][T11949] validate_nla: 7 callbacks suppressed
[  134.790065][T11949] netlink: 'syz.2.1909': attribute type 2 has an invalid length.
[  134.797783][T11949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1909'.
[  134.831956][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'.
[  135.130363][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a371000: rx timeout, send abort
[  135.246203][T11956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'.
[  135.437421][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1921'.
[  135.441590][T11976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.490099][T11976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.533968][T11976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.566549][T11976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.603121][ T5882] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.609776][ T5882] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.615936][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.622495][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.630544][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881112a2c00: rx timeout, send abort
[  135.633525][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802a371000: abort rx timeout. Force session deactivation
[  135.844980][T12046] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  136.038844][T12060] syzkaller0: entered promiscuous mode
[  136.040977][T12060] syzkaller0: entered allmulticast mode
[  136.133547][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881112a2c00: abort rx timeout. Force session deactivation
[  136.892866][T12087] netlink: 'syz.0.1956': attribute type 13 has an invalid length.
[  136.896760][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.899326][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'.
[  136.902200][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.905848][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1956'.
[  136.909112][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.912177][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.915357][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.918413][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.921422][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  136.924764][T12087] netlink: 'syz.0.1956': attribute type 1 has an invalid length.
[  138.499225][T12192] sctp: [Deprecated]: syz.0.1994 (pid 12192) Use of int in max_burst socket option.
[  138.499225][T12192] Use struct sctp_assoc_value instead
[  138.505459][T12192] sctp: [Deprecated]: syz.0.1994 (pid 12192) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.505459][T12192] Use struct sctp_sack_info instead
[  138.556897][T12196] __nla_validate_parse: 100 callbacks suppressed
[  138.556913][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  138.578613][T12204] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1997'.
[  138.582325][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'.
[  138.586100][T12204] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  138.670354][T12214] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1999'.
[  138.674723][T12214] 0: renamed from hsr0
[  138.677866][T12214] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  138.681726][T12214] 0: entered allmulticast mode
[  138.683948][T12214] hsr_slave_0: entered allmulticast mode
[  138.687205][T12214] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  138.894781][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'.
[  138.897786][T12228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2006'.
[  138.988190][T12232] dummy0: entered promiscuous mode
[  138.990988][T12232] team0: Failed to send options change via netlink (err -105)
[  138.994308][T12232] team0: Port device dummy0 added
[  140.130557][T12310] syzkaller1: entered promiscuous mode
[  140.132555][T12310] syzkaller1: entered allmulticast mode
[  140.136672][T12314] netlink: 566 bytes leftover after parsing attributes in process `syz.2.2033'.
[  140.154997][T12315] delete_channel: no stack
[  140.261818][T12337] validate_nla: 94 callbacks suppressed
[  140.261830][T12337] netlink: 'syz.2.2041': attribute type 5 has an invalid length.
[  140.300927][T12346] netlink: 'syz.0.2043': attribute type 83 has an invalid length.
[  140.337637][T12346] netlink: 'syz.0.2043': attribute type 2 has an invalid length.
[  140.421237][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2049'.
[  140.597807][T12384] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.068911][T12396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'.
[  141.072125][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'.
[  141.100282][T12398] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  141.419074][T12436] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  141.550450][T12455] bond0: entered promiscuous mode
[  141.552526][T12455] bond6: entered promiscuous mode
[  141.556386][T12455] batadv0: entered promiscuous mode
[  141.559038][T12455] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  141.563086][T12455] hsr1: entered allmulticast mode
[  141.565209][T12455] bond0: entered allmulticast mode
[  141.567157][T12455] bond6: entered allmulticast mode
[  141.569136][T12455] batadv0: entered allmulticast mode
[  141.571476][T12455] 8021q: adding VLAN 0 to HW filter on device hsr1
[  141.576791][T12455] bond0: left promiscuous mode
[  141.578746][T12455] bond6: left promiscuous mode
[  141.583825][T12455] batadv0: left promiscuous mode
[  141.731779][T12466] gtp1: entered promiscuous mode
[  141.738182][T12469] netlink: 'syz.1.2081': attribute type 1 has an invalid length.
[  141.738791][T12466] gtp1: entered allmulticast mode
[  141.741501][T12469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.887239][   T56] block nbd2: Receive control failed (result -32)
[  141.965266][T12509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.967937][T12509] syzkaller0: entered promiscuous mode
[  141.975765][T12509] syzkaller0: entered allmulticast mode
[  141.980605][T12509] sch_fq: defrate 257 ignored.
[  141.986027][T12509] tipc: Resetting bearer <eth:syzkaller0>
[  141.988983][T12508] tipc: Resetting bearer <eth:syzkaller0>
[  141.992780][T12508] tipc: Disabling bearer <eth:syzkaller0>
[  142.047404][T12516] netlink: 'syz.2.2098': attribute type 4 has an invalid length.
[  142.089667][T12523] syzkaller1: entered promiscuous mode
[  142.098211][T12523] syzkaller1: entered allmulticast mode
[  142.838740][T12569] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  143.276126][T12611] netlink: 'syz.1.2124': attribute type 21 has an invalid length.
[  143.431749][T12615] openvswitch: netlink: Unknown key attributes 2
[  143.879836][T12622] syzkaller0: tun_chr_ioctl cmd 1074025677
[  143.882425][T12622] syzkaller0: linktype set to 1
[  143.922598][T12626] __nla_validate_parse: 8 callbacks suppressed
[  143.922614][T12626] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2129'.
[  144.480850][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'.
[  144.588822][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'.
[  144.603061][T12703] vlan6: entered allmulticast mode
[  144.606348][T12703] bridge0: entered allmulticast mode
[  144.648044][T12703] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  144.853609][   T54] Bluetooth: hci0: command tx timeout
[  144.913979][T12720] syzkaller0: entered promiscuous mode
[  144.916245][T12720] syzkaller0: entered allmulticast mode
[  145.005399][T12725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2159'.
[  145.007969][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'.
[  145.011303][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2160'.
[  145.272153][T12747] bond0: (slave gretap0): Opening slave failed
[  145.285074][T12749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.360767][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2174'.
[  145.376759][T12771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2175'.
[  145.458518][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  145.527353][T12792] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2181'.
[  145.586183][T12806] netlink: 'syz.2.2185': attribute type 1 has an invalid length.
[  145.609076][T12813] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  145.779770][T12841] gtp2: entered promiscuous mode
[  145.818073][T12844] wg1 speed is unknown, defaulting to 1000
[  145.824414][T12845] wg1 speed is unknown, defaulting to 1000
[  146.486744][T12877] netlink: 'syz.1.2205': attribute type 7 has an invalid length.
[  146.489850][T12877] netlink: 'syz.1.2205': attribute type 8 has an invalid length.
[  146.564585][T12887] tap0: tun_chr_ioctl cmd 1074025677
[  146.566483][T12887] tap0: linktype set to 780
[  146.641291][T12895] netlink: 'syz.1.2210': attribute type 7 has an invalid length.
[  146.646106][T12895] netlink: 'syz.1.2210': attribute type 8 has an invalid length.
[  146.655943][T12900] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  146.660380][T12900] syzkaller0: entered promiscuous mode
[  146.664520][T12900] syzkaller0: entered allmulticast mode
[  147.859241][T13001] netlink: 'syz.2.2241': attribute type 18 has an invalid length.
[  147.884056][T13001] netlink: 'syz.2.2241': attribute type 18 has an invalid length.
[  148.038955][T13028] netlink: 'syz.1.2250': attribute type 10 has an invalid length.
[  148.197786][T13059] netlink: 'syz.2.2259': attribute type 3 has an invalid length.
[  148.201631][T13059] netlink: 'syz.2.2259': attribute type 3 has an invalid length.
[  148.323932][T13077] 8021q: adding VLAN 0 to HW filter on device bond6
[  148.327529][T13077] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  148.331302][T13077] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  148.608871][T13102] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  148.613744][T13097] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  148.619712][T13102] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  148.620273][T13097] ieee802154 phy0 wpan0: encryption failed: -90
[  148.622677][T13102] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  149.846933][T13179] netlink: 'syz.1.2295': attribute type 11 has an invalid length.
[  149.858702][T13179] netlink: 'syz.1.2295': attribute type 11 has an invalid length.
[  149.861096][T13179] __nla_validate_parse: 29 callbacks suppressed
[  149.861105][T13179] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2295'.
[  150.156516][T13187] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  150.159804][T13187] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  150.650317][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2299'.
[  150.722602][T13201] bridge0: port 4(erspan0) entered blocking state
[  150.725544][T13201] bridge0: port 4(erspan0) entered disabled state
[  150.727872][T13201] erspan0: entered allmulticast mode
[  150.734176][T13201] erspan0: entered promiscuous mode
[  150.741961][T13201] bridge0: port 4(erspan0) entered blocking state
[  150.744397][T13201] bridge0: port 4(erspan0) entered forwarding state
[  150.800104][T13213] erspan0: left allmulticast mode
[  150.802193][T13213] erspan0: left promiscuous mode
[  150.807532][T13213] bridge0: port 4(erspan0) entered disabled state
[  150.808028][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2305'.
[  150.854536][T13218] syzkaller1: entered promiscuous mode
[  150.856900][T13218] syzkaller1: entered allmulticast mode
[  150.995083][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'.
[  151.033698][T13245] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2317'.
[  151.049807][T13248] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2315'.
[  151.068340][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'.
[  151.076356][T13250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2318'.
[  151.084460][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2318'.
[  151.089925][T13253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2319'.
[  151.465779][T13279] validate_nla: 5 callbacks suppressed
[  151.465789][T13279] netlink: 'syz.2.2324': attribute type 3 has an invalid length.
[  152.220009][ T9451] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
Connection to localhost closed by remote host.
[  152.641717][T13380] netlink: 'syz.2.2363': attribute type 4 has an invalid length.
[  161.185195][    C0] ==================================================================
[  161.188489][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  161.191586][    C0] Write of size 8 at addr ffff8881127b96b0 by task swapper/0/0
[  161.195466][    C0] 
[  161.196462][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  161.196507][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.196519][    C0] Call Trace:
[  161.196527][    C0]  <IRQ>
[  161.196535][    C0]  dump_stack_lvl+0x189/0x250
[  161.196558][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  161.196576][    C0]  ? rcu_is_watching+0x15/0xb0
[  161.196592][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.196609][    C0]  ? rcu_is_watching+0x15/0xb0
[  161.196622][    C0]  ? lock_release+0x4b/0x3e0
[  161.196643][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  161.196660][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  161.196679][    C0]  print_report+0xca/0x240
[  161.196693][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  161.196714][    C0]  kasan_report+0x118/0x150
[  161.196735][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  161.196759][    C0]  __xfrm_state_delete+0x696/0xca0
[  161.196783][    C0]  xfrm_timer_handler+0x18f/0xa00
[  161.196807][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.196827][    C0]  ? rcu_is_watching+0x15/0xb0
[  161.196842][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.196859][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.196877][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.196896][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.196915][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  161.196935][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  161.196949][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  161.196967][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  161.196983][    C0]  handle_softirqs+0x286/0x870
[  161.196998][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  161.197012][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  161.197026][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  161.197045][    C0]  __irq_exit_rcu+0xca/0x1f0
[  161.197057][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  161.197073][    C0]  irq_exit_rcu+0x9/0x30
[  161.197084][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  161.197103][    C0]  </IRQ>
[  161.197108][    C0]  <TASK>
[  161.197114][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  161.197131][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  161.197149][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  161.197162][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  161.197176][    C0] RAX: 09bc6820a6ab3c00 RBX: ffffffff819683b8 RCX: 09bc6820a6ab3c00
[  161.197187][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  161.197198][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  161.197208][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  161.197218][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  161.197229][    C0]  ? do_idle+0x1e8/0x510
[  161.197243][    C0]  ? do_idle+0x1e8/0x510
[  161.197258][    C0]  default_idle+0x13/0x20
[  161.197270][    C0]  default_idle_call+0x74/0xb0
[  161.197283][    C0]  do_idle+0x1e8/0x510
[  161.197298][    C0]  ? __pfx_do_idle+0x10/0x10
[  161.197315][    C0]  ? do_idle+0xc/0x510
[  161.197329][    C0]  cpu_startup_entry+0x44/0x60
[  161.197343][    C0]  rest_init+0x2de/0x300
[  161.197357][    C0]  start_kernel+0x3a9/0x410
[  161.197375][    C0]  x86_64_start_reservations+0x24/0x30
[  161.197395][    C0]  x86_64_start_kernel+0x143/0x1c0
[  161.197414][    C0]  common_startup_64+0x13e/0x147
[  161.197471][    C0]  </TASK>
[  161.197484][    C0] 
[  161.332092][    C0] Allocated by task 11483:
[  161.333637][    C0]  kasan_save_track+0x3e/0x80
[  161.335070][    C0]  __kasan_slab_alloc+0x6c/0x80
[  161.336829][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  161.338700][    C0]  xfrm_state_alloc+0x24/0x2f0
[  161.340338][    C0]  __find_acq_core+0x8a7/0x1c00
[  161.341950][    C0]  xfrm_find_acq+0x78/0xa0
[  161.343366][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  161.344940][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.346585][    C0]  netlink_rcv_skb+0x208/0x470
[  161.348175][    C0]  xfrm_netlink_rcv+0x79/0x90
[  161.349905][    C0]  netlink_unicast+0x82f/0x9e0
[  161.351557][    C0]  netlink_sendmsg+0x805/0xb30
[  161.353096][    C0]  __sock_sendmsg+0x21c/0x270
[  161.354576][    C0]  ____sys_sendmsg+0x505/0x830
[  161.356290][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  161.358267][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  161.360320][    C0]  do_syscall_64+0xfa/0x3b0
[  161.362222][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.364710][    C0] 
[  161.365550][    C0] Freed by task 24:
[  161.366803][    C0]  kasan_save_track+0x3e/0x80
[  161.368389][    C0]  kasan_save_free_info+0x46/0x50
[  161.370167][    C0]  __kasan_slab_free+0x5b/0x80
[  161.372029][    C0]  kmem_cache_free+0x18f/0x400
[  161.373743][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  161.375747][    C0]  process_scheduled_works+0xae1/0x17b0
[  161.377799][    C0]  worker_thread+0x8a0/0xda0
[  161.379476][    C0]  kthread+0x711/0x8a0
[  161.380934][    C0]  ret_from_fork+0x3fc/0x770
[  161.382594][    C0]  ret_from_fork_asm+0x1a/0x30
[  161.384279][    C0] 
[  161.385053][    C0] The buggy address belongs to the object at ffff8881127b9680
[  161.385053][    C0]  which belongs to the cache xfrm_state of size 928
[  161.389808][    C0] The buggy address is located 48 bytes inside of
[  161.389808][    C0]  freed 928-byte region [ffff8881127b9680, ffff8881127b9a20)
[  161.394679][    C0] 
[  161.395478][    C0] The buggy address belongs to the physical page:
[  161.397599][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881127b8480 pfn:0x1127b8
[  161.400739][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  161.403856][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  161.406240][    C0] page_type: f5(slab)
[  161.407548][    C0] raw: 057ff00000000040 ffff88801b7b3c80 dead000000000122 0000000000000000
[  161.410544][    C0] raw: ffff8881127b8480 00000000800e000a 00000000f5000000 0000000000000000
[  161.413260][    C0] head: 057ff00000000040 ffff88801b7b3c80 dead000000000122 0000000000000000
[  161.416172][    C0] head: ffff8881127b8480 00000000800e000a 00000000f5000000 0000000000000000
[  161.419743][    C0] head: 057ff00000000002 ffffea000449ee01 00000000ffffffff 00000000ffffffff
[  161.423222][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  161.426357][    C0] page dumped because: kasan: bad access detected
[  161.428809][    C0] page_owner tracks the page as allocated
[  161.431050][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6223, tgid 6221 (syz.1.94), ts 51631840630, free_ts 51433602555
[  161.438121][    C0]  post_alloc_hook+0x240/0x2a0
[  161.440144][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  161.442276][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  161.444575][    C0]  alloc_pages_mpol+0x232/0x4a0
[  161.446558][    C0]  allocate_slab+0x8a/0x370
[  161.448129][    C0]  ___slab_alloc+0xbeb/0x1410
[  161.449640][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  161.451539][    C0]  xfrm_state_alloc+0x24/0x2f0
[  161.453191][    C0]  xfrm_add_acquire+0xf7/0xb20
[  161.454639][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.456124][    C0]  netlink_rcv_skb+0x208/0x470
[  161.457571][    C0]  xfrm_netlink_rcv+0x79/0x90
[  161.459273][    C0]  netlink_unicast+0x82f/0x9e0
[  161.460752][    C0]  netlink_sendmsg+0x805/0xb30
[  161.462222][    C0]  __sock_sendmsg+0x21c/0x270
[  161.463685][    C0]  ____sys_sendmsg+0x505/0x830
[  161.465139][    C0] page last free pid 5295 tgid 5295 stack trace:
[  161.467091][    C0]  __free_frozen_pages+0xbc4/0xd30
[  161.468743][    C0]  __slab_free+0x303/0x3c0
[  161.470368][    C0]  qlist_free_all+0x97/0x140
[  161.471923][    C0]  kasan_quarantine_reduce+0x148/0x160
[  161.473904][    C0]  __kasan_slab_alloc+0x22/0x80
[  161.475640][    C0]  __kmalloc_noprof+0x224/0x4f0
[  161.477215][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  161.479047][    C0]  tomoyo_path_perm+0x213/0x4b0
[  161.480850][    C0]  security_inode_getattr+0x12f/0x330
[  161.482645][    C0]  vfs_fstatat+0xb1/0x170
[  161.483989][    C0]  __x64_sys_newfstatat+0x116/0x190
[  161.485580][    C0]  do_syscall_64+0xfa/0x3b0
[  161.487049][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.488916][    C0] 
[  161.489670][    C0] Memory state around the buggy address:
[  161.491405][    C0]  ffff8881127b9580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  161.493903][    C0]  ffff8881127b9600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  161.496398][    C0] >ffff8881127b9680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.499189][    C0]                                      ^
[  161.500875][    C0]  ffff8881127b9700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.503332][    C0]  ffff8881127b9780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.505812][    C0] ==================================================================
[  161.508777][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  161.511058][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  161.513718][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.517077][    C0] Call Trace:
[  161.518395][    C0]  <IRQ>
[  161.519459][    C0]  dump_stack_lvl+0x99/0x250
[  161.521233][    C0]  ? __asan_memcpy+0x40/0x70
[  161.523017][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.524654][    C0]  ? __pfx__printk+0x10/0x10
[  161.526351][    C0]  vpanic+0x281/0x750
[  161.527753][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  161.529459][    C0]  ? __pfx_vpanic+0x10/0x10
[  161.531099][    C0]  panic+0xb9/0xc0
[  161.532468][    C0]  ? __pfx_panic+0x10/0x10
[  161.534211][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  161.536090][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.538497][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  161.540529][    C0]  check_panic_on_warn+0x89/0xb0
[  161.542079][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  161.544091][    C0]  end_report+0x78/0x160
[  161.545551][    C0]  kasan_report+0x129/0x150
[  161.547115][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  161.548833][    C0]  __xfrm_state_delete+0x696/0xca0
[  161.550523][    C0]  xfrm_timer_handler+0x18f/0xa00
[  161.552128][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.553941][    C0]  ? rcu_is_watching+0x15/0xb0
[  161.555403][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.557204][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  161.559074][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.560818][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  161.562720][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  161.564270][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  161.566046][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  161.567934][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  161.569751][    C0]  handle_softirqs+0x286/0x870
[  161.571317][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  161.572974][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  161.574744][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  161.576571][    C0]  __irq_exit_rcu+0xca/0x1f0
[  161.578020][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  161.579679][    C0]  irq_exit_rcu+0x9/0x30
[  161.581073][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  161.583020][    C0]  </IRQ>
[  161.584079][    C0]  <TASK>
[  161.585108][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  161.587131][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  161.589039][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 b6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  161.595129][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  161.597160][    C0] RAX: 09bc6820a6ab3c00 RBX: ffffffff819683b8 RCX: 09bc6820a6ab3c00
[  161.599708][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  161.602227][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  161.604745][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  161.607202][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  161.609701][    C0]  ? do_idle+0x1e8/0x510
[  161.611057][    C0]  ? do_idle+0x1e8/0x510
[  161.612467][    C0]  default_idle+0x13/0x20
[  161.613908][    C0]  default_idle_call+0x74/0xb0
[  161.615550][    C0]  do_idle+0x1e8/0x510
[  161.616918][    C0]  ? __pfx_do_idle+0x10/0x10
[  161.618545][    C0]  ? do_idle+0xc/0x510
[  161.620028][    C0]  cpu_startup_entry+0x44/0x60
[  161.621598][    C0]  rest_init+0x2de/0x300
[  161.623001][    C0]  start_kernel+0x3a9/0x410
[  161.624423][    C0]  x86_64_start_reservations+0x24/0x30
[  161.626041][    C0]  x86_64_start_kernel+0x143/0x1c0
[  161.627624][    C0]  common_startup_64+0x13e/0x147
[  161.629165][    C0]  </TASK>
[  161.630778][    C0] Kernel Offset: disabled
[  161.632216][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:37:41  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888106bb8237 R9 =1ffff11020d77046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8fd R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fec576484a0 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=d7409805e4eaf800 RBX=ffffffff819683b8 RCX=d7409805e4eaf800 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d69e42f150 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000005 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000041 000000002f6d616c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=772f74656e2f386d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
