last executing test programs:

2.025426339s ago: executing program 1 (id=2063):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4)
unshare(0x24060400)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000001000000000000"], 0x18}, 0xc800)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10}, 0x50)
socket$pptp(0x18, 0x1, 0x2)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050800"})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="16", 0x1}], 0x1}}], 0x2, 0xc8040)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x6)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000480)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@delchain={0x5ec, 0x65, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x1, 0xb}, {0xffff, 0xa}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xfd}}, @filter_kind_options=@f_u32={{0x8}, {0x5b8, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'nicvf0\x00'}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_HASH={0x8, 0x2, 0x200}, @TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x92, 0x80000000, 0x7, 0x2, 0x7, 0xaed, 0x4, 0x401, 0x1b1, 0x9, 0x8000, 0x3, 0x1, 0x3, 0x6, 0x4, 0x42, 0x8432, 0xe490, 0x7, 0x2, 0x7ff, 0x0, 0x3f, 0x1000000, 0x3, 0x4, 0xe891, 0xc, 0x4, 0x3, 0x7, 0x8, 0x0, 0x6, 0x9, 0x8, 0x6, 0x7, 0x2, 0x101, 0x7, 0x5, 0x7, 0x7, 0x8, 0x3, 0x3ff, 0x2, 0x8, 0x7d05, 0x81, 0x4, 0x0, 0x7, 0x0, 0x10000, 0x3, 0x7, 0x0, 0x21, 0x8, 0x7, 0x9, 0xfffffff7, 0x8, 0x8000, 0x5, 0x76, 0x10001, 0xe, 0xfffffff7, 0x8, 0x80000001, 0x7, 0x5, 0x3, 0xfffffff8, 0x7, 0x3, 0x8, 0x10000, 0x2, 0x6, 0x0, 0x8, 0x40, 0x10000, 0xb5d, 0x4, 0x0, 0x7fff, 0x0, 0x5, 0x1000, 0x8, 0x3, 0x100, 0xfffffff9, 0x3, 0x9, 0x9, 0x3, 0xffff, 0xd, 0xfffffff8, 0x8, 0x7, 0x9, 0x0, 0x0, 0x6, 0x8, 0x6, 0x5, 0x64, 0x1, 0x9, 0xfffffffd, 0x1ff, 0x7, 0x0, 0x8, 0x40, 0x7ff, 0x1, 0x9, 0x800, 0x9, 0x1, 0x5, 0x8, 0x6db1681f, 0x7, 0x5, 0x9, 0x7, 0x7, 0x1, 0x2, 0x1ff, 0x8, 0x3, 0xa0, 0x8, 0x1, 0x4, 0x376, 0x3, 0x81, 0x4, 0x6, 0x4a2, 0x9, 0x94, 0x9, 0x6, 0x3ff, 0x5, 0xe18, 0x8, 0x3, 0xca5e, 0x100, 0xbf10, 0x7, 0x352, 0x1, 0xfffffc00, 0x4, 0x3, 0x6, 0x7, 0x4, 0x0, 0xa0cb, 0x6, 0x4, 0x5, 0x30000000, 0xffffffff, 0xc, 0x2, 0x3, 0xa, 0x4, 0x6, 0x4, 0x8, 0xc95d, 0x90, 0x6, 0x7, 0x432, 0x4, 0x4, 0xfabe, 0x7, 0x40000, 0x40000, 0x4, 0x1, 0xfffffc01, 0x8, 0x1000, 0x80, 0xf, 0xfffffff7, 0x3, 0x40, 0x5, 0x7, 0xffff, 0x3, 0x200000, 0x4, 0x7f, 0x762b85d9, 0x5, 0xf, 0x3, 0x4, 0x0, 0x2, 0x80000000, 0x800, 0xfffffffa, 0x5, 0x9, 0x7, 0x9, 0xd2, 0x6, 0x1000, 0x9, 0x8, 0x6, 0x8, 0x7ff, 0x2cc, 0x3, 0x2, 0xa, 0x3, 0x1, 0x3, 0x8, 0xb, 0x80000000, 0x8, 0x7, 0x99b, 0xffff, 0x5, 0x4, 0x9]}]}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg1\x00'}, @TCA_U32_MARK={0x10, 0xa, {0x81, 0xb}}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x9d}, @TCA_U32_ACT={0x154, 0x7, [@m_mirred={0xdc, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10000, 0x7, 0x3, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1000, 0x0, 0x5, 0x1}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6ec5, 0x1, 0x8, 0x6e, 0x80}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0x6, 0xffffffffffffffff, 0xc42811f6, 0x5}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x90000000, 0x6, 0x6, 0x7, 0x200}, 0x1, r12}}]}, {0xd, 0x6, "ae1df450e4ee35af11"}, {0xc, 0x7, {0xc2d0464504087c83}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x74, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x38, 0x6, "334c1095180e61fb7a7dbfd9e561bb57f6309e7a2c5660aeb1ed3fede49858be39a5364c2072636962c4ce17675484b1bd9b1335"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x5ec}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

1.879449826s ago: executing program 1 (id=2067):
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0)

1.875506247s ago: executing program 0 (id=2073):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000200), 0x4)

1.82107534s ago: executing program 0 (id=2070):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4ad)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.000130833s ago: executing program 1 (id=2071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

948.831617ms ago: executing program 0 (id=2072):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)="43210098ed")

907.126748ms ago: executing program 0 (id=2074):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)

902.897006ms ago: executing program 0 (id=2076):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

880.0313ms ago: executing program 1 (id=2077):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140), 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, 0x0, 0x0)
write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

829.667967ms ago: executing program 1 (id=2079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x40010)

829.528724ms ago: executing program 0 (id=2080):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

777.349118ms ago: executing program 1 (id=2082):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

49.711515ms ago: executing program 2 (id=2103):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)

49.482474ms ago: executing program 2 (id=2104):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10)
bpf$PROG_LOAD(0x24, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

49.289809ms ago: executing program 2 (id=2105):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6)
write(0xffffffffffffffff, 0x0, 0x0)

515.31µs ago: executing program 2 (id=2106):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x33, 0x107, 0xfffffffc, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="dd5f"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc050)

235.857µs ago: executing program 2 (id=2107):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

0s ago: executing program 2 (id=2108):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030000000000fbdbdf25250000000e000100"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48669' (ED25519) to the list of known hosts.
syzkaller login: [   49.578177][ T5829] cgroup: Unknown subsys name 'net'
[   49.668635][ T5829] cgroup: Unknown subsys name 'cpuset'
[   49.673295][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.311888][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.917896][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.589384][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.595954][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.600107][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.604190][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.607824][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.631739][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.635619][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.638671][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.642300][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.646695][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.700356][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.702934][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.706020][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.708994][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.713002][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.862648][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   59.887699][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   59.938005][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.940777][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.943714][ T5876] bridge_slave_0: entered allmulticast mode
[   59.947589][ T5876] bridge_slave_0: entered promiscuous mode
[   59.960154][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.962832][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.965722][ T5876] bridge_slave_1: entered allmulticast mode
[   59.968326][ T5876] bridge_slave_1: entered promiscuous mode
[   59.996733][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.999468][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.002062][ T5879] bridge_slave_0: entered allmulticast mode
[   60.005356][ T5879] bridge_slave_0: entered promiscuous mode
[   60.008481][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.011092][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.013824][ T5879] bridge_slave_1: entered allmulticast mode
[   60.017415][ T5879] bridge_slave_1: entered promiscuous mode
[   60.031997][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.037841][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.080350][ T5876] team0: Port device team_slave_0 added
[   60.086603][ T5876] team0: Port device team_slave_1 added
[   60.090234][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.100583][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   60.110142][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.120003][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.122530][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.131315][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.136690][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.139015][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.147656][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.181115][ T5879] team0: Port device team_slave_0 added
[   60.185232][ T5879] team0: Port device team_slave_1 added
[   60.219832][ T5876] hsr_slave_0: entered promiscuous mode
[   60.222421][ T5876] hsr_slave_1: entered promiscuous mode
[   60.229264][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.231780][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.241491][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.265750][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.268107][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.270700][ T5881] bridge_slave_0: entered allmulticast mode
[   60.273543][ T5881] bridge_slave_0: entered promiscuous mode
[   60.277072][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.279546][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.291229][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.314582][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.317340][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.320228][ T5881] bridge_slave_1: entered allmulticast mode
[   60.323501][ T5881] bridge_slave_1: entered promiscuous mode
[   60.372679][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.379434][ T5879] hsr_slave_0: entered promiscuous mode
[   60.382052][ T5879] hsr_slave_1: entered promiscuous mode
[   60.385602][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   60.387815][ T5879] Cannot create hsr debugfs directory
[   60.398536][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.434935][ T5881] team0: Port device team_slave_0 added
[   60.441238][ T5881] team0: Port device team_slave_1 added
[   60.479341][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.482007][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.491683][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.495887][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.498001][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.507347][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.566653][ T5881] hsr_slave_0: entered promiscuous mode
[   60.569441][ T5881] hsr_slave_1: entered promiscuous mode
[   60.571994][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   60.574246][ T5881] Cannot create hsr debugfs directory
[   60.591374][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   60.606085][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   60.617285][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   60.629495][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.697293][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   60.706244][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   60.729324][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   60.735292][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.739665][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.747690][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.756375][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.763640][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.820683][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.846795][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   60.856426][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.859346][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.868483][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.870873][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.888326][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.895730][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.925570][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   60.931025][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   60.941972][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.944247][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.959264][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.961960][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.966684][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.969594][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.980501][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.983460][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.072258][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.105618][ T5876] veth0_vlan: entered promiscuous mode
[   61.117129][ T5876] veth1_vlan: entered promiscuous mode
[   61.142184][ T5876] veth0_macvtap: entered promiscuous mode
[   61.163920][ T5876] veth1_macvtap: entered promiscuous mode
[   61.198179][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.205588][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.210268][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.219589][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.231623][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.241969][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.246758][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.255260][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.284055][ T5879] veth0_vlan: entered promiscuous mode
[   61.300731][ T5879] veth1_vlan: entered promiscuous mode
[   61.327396][ T5881] veth0_vlan: entered promiscuous mode
[   61.331810][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.335228][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.336950][ T5879] veth0_macvtap: entered promiscuous mode
[   61.346468][ T5881] veth1_vlan: entered promiscuous mode
[   61.353473][ T5879] veth1_macvtap: entered promiscuous mode
[   61.369229][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.372745][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.372909][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.388302][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.407165][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.420296][ T5881] veth0_macvtap: entered promiscuous mode
[   61.432508][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.437494][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.442045][ T5881] veth1_macvtap: entered promiscuous mode
[   61.447242][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.464995][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.482232][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.516663][ T5942] netlink: 'syz.0.18': attribute type 3 has an invalid length.
[   61.518968][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.523926][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.534511][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.542794][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.545304][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.552468][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.597177][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.603331][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.624827][ T5878] Bluetooth: hci0: command tx timeout
[   61.661903][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.664324][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.675721][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.678219][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.704941][ T5878] Bluetooth: hci1: command tx timeout
[   61.784971][ T5878] Bluetooth: hci2: command tx timeout
[   61.794133][ T5960] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.811918][ T5960] Zero length message leads to an empty skb
[   62.136094][ T5996] netlink: 'syz.1.42': attribute type 7 has an invalid length.
[   62.151565][ T5992] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET)
[   62.256614][ T6002] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.531934][ T6023] Illegal XDP return value 4294967274 on prog  (id 10) dev N/A, expect packet loss!
[   62.927051][ T6063] delete_channel: no stack
[   62.978522][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[   63.050623][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   63.217570][ T6092] netlink: 268 bytes leftover after parsing attributes in process `syz.2.87'.
[   63.221959][ T6092] unsupported nla_type 65024
[   63.705047][ T5878] Bluetooth: hci0: command tx timeout
[   63.718647][ T6115] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.97'.
[   63.784949][ T5878] Bluetooth: hci1: command tx timeout
[   63.865648][ T5878] Bluetooth: hci2: command tx timeout
[   64.091482][ T6141] netdevsim0: mtu less than device minimum
[   64.164325][ T6144] syzkaller0: entered promiscuous mode
[   64.170225][ T6144] syzkaller0: entered allmulticast mode
[   64.343150][ T6152] vlan2: entered allmulticast mode
[   64.362517][ T6152] veth1: entered allmulticast mode
[   64.365650][ T6152] batman_adv: batadv0: Adding interface: vlan2
[   64.368108][ T6152] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.382175][ T6152] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[   64.687815][ T6180] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   64.692870][ T6180] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   64.700325][ T6180] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   65.807559][ T5878] Bluetooth: hci0: command tx timeout
[   65.813961][ T6206] netlink: 'syz.2.138': attribute type 4 has an invalid length.
[   65.818531][ T6206] netlink: 17 bytes leftover after parsing attributes in process `syz.2.138'.
[   65.866729][ T5878] Bluetooth: hci1: command tx timeout
[   65.873285][ T6213] ip6tnl1: entered promiscuous mode
[   65.883931][ T6213] ip6tnl1: entered allmulticast mode
[   65.888005][ T6213] team0: Device ip6tnl1 is of different type
[   65.948292][ T5878] Bluetooth: hci2: command tx timeout
[   65.980446][ T6221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.040273][ T6223] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   66.044982][ T6223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.111167][ T6229] dummy0: entered promiscuous mode
[   66.114192][ T6229] bond0: entered promiscuous mode
[   66.117089][ T6229] bond_slave_0: entered promiscuous mode
[   66.126110][ T6229] bond_slave_1: entered promiscuous mode
[   66.129638][ T6229] hsr1: entered allmulticast mode
[   66.131652][ T6229] dummy0: entered allmulticast mode
[   66.136169][ T6229] bond0: entered allmulticast mode
[   66.138187][ T6229] bond_slave_0: entered allmulticast mode
[   66.140493][ T6229] bond_slave_1: entered allmulticast mode
[   66.147977][ T6221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.207121][ T6238] netlink: 410 bytes leftover after parsing attributes in process `syz.2.150'.
[   66.220834][ T6221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.274320][ T6221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.350847][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.359754][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.369090][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.379834][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.477180][ T6257] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   66.479937][ T6257] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.160'.
[   66.683547][ T6265] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   66.686964][ T6265] netlink: 232 bytes leftover after parsing attributes in process `syz.2.164'.
[   66.690425][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'.
[   66.864186][ T6281] netlink: 248 bytes leftover after parsing attributes in process `syz.2.170'.
[   67.300011][ T6303] IPv6: Can't replace route, no match found
[   67.416952][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.492621][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   67.864781][ T5878] Bluetooth: hci0: command tx timeout
[   67.956318][ T5878] Bluetooth: hci1: command tx timeout
[   68.039155][ T5878] Bluetooth: hci2: command tx timeout
[   68.497647][ T6371] bridge1: the hash_elasticity option has been deprecated and is always 16
[   68.653736][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   68.738857][ T6398] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   68.901752][ T6404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.909201][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'.
[   68.920066][ T6404] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.926586][ T6404] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.061534][ T6424] netlink: 'syz.1.221': attribute type 3 has an invalid length.
[   69.070619][ T6424] netlink: 'syz.1.221': attribute type 1 has an invalid length.
[   69.073765][ T6424] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.221'.
[   69.348651][ T6436] policy can only be matched on NF_INET_PRE_ROUTING
[   69.348670][ T6436] unable to load match
[   69.423932][ T6438] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.440341][ T6438] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.477623][ T6439] netlink: 'syz.1.228': attribute type 12 has an invalid length.
[   69.537833][ T6441] syzkaller0: entered promiscuous mode
[   69.540593][ T6441] syzkaller0: entered allmulticast mode
[   69.709601][ T6445] netlink: 'syz.2.231': attribute type 4 has an invalid length.
[   69.919544][ T6474] netlink: 240 bytes leftover after parsing attributes in process `syz.2.235'.
[   70.108658][ T5878] Bluetooth: hci2: command tx timeout
[   70.503391][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'.
[   70.507942][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.268'.
[   70.511970][ T6525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'.
[   70.515966][ T6525] netlink: 32 bytes leftover after parsing attributes in process `syz.1.268'.
[   70.724594][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.309863][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.312003][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.563026][ T6605] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   71.565659][ T6605] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   71.608602][ T6605] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   71.621327][ T6605] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   71.646651][ T6605] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   71.657643][ T6605] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   72.041070][ T6628] netlink: 300 bytes leftover after parsing attributes in process `syz.2.310'.
[   72.392919][ T6645] netlink: 'syz.1.316': attribute type 4 has an invalid length.
[   72.475253][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.478315][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.622169][ T6645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.752360][ T5935] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.762716][ T5935] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.772868][ T5935] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.785197][ T5935] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.946000][ T6688] tipc: Started in network mode
[   72.948125][ T6688] tipc: Node identity 6af3d272ad25, cluster identity 4711
[   72.950904][ T6688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.962790][ T6688] syzkaller0: entered promiscuous mode
[   72.966717][ T6688] syzkaller0: entered allmulticast mode
[   72.995328][ T6688] tipc: Resetting bearer <eth:syzkaller0>
[   73.000619][ T6685] tipc: Resetting bearer <eth:syzkaller0>
[   73.004374][ T6685] tipc: Disabling bearer <eth:syzkaller0>
[   73.131617][ T6714] netlink: 'syz.0.333': attribute type 1 has an invalid length.
[   73.149115][ T6714] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.153251][ T6714] block nbd0: shutting down sockets
[   73.700673][ T6755] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.038611][ T6790] __nla_validate_parse: 8 callbacks suppressed
[   74.038623][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'.
[   74.352295][ T6830] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[   74.412571][ T6836] pimreg: entered allmulticast mode
[   74.611121][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   74.615421][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   74.621616][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   74.627622][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   74.631523][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'.
[   74.685979][ T6870] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[   74.688659][ T6870] netlink: 216 bytes leftover after parsing attributes in process `syz.0.397'.
[   75.136951][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'.
[   75.139930][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.427'.
[   75.572560][ T6987] openvswitch: netlink: Message has 4 unknown bytes.
[   75.576587][ T6987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.668185][ T6992] bridge1: entered promiscuous mode
[   75.674039][ T6992] bridge1: entered allmulticast mode
[   75.685774][ T6992] team0: Port device bridge1 added
[   75.946811][ T7009] tipc: Started in network mode
[   75.949918][ T7009] tipc: Node identity 2e8826c22dfe, cluster identity 4711
[   75.952956][ T7009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.960994][ T7009] syzkaller0: entered promiscuous mode
[   75.963364][ T7009] syzkaller0: entered allmulticast mode
[   75.970444][ T7009] tipc: Resetting bearer <eth:syzkaller0>
[   75.972715][ T7009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.977777][ T7008] tipc: Resetting bearer <eth:syzkaller0>
[   75.981349][ T7008] tipc: Disabling bearer <eth:syzkaller0>
[   76.157146][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[   76.163542][ T7025] netlink: 'syz.0.473': attribute type 2 has an invalid length.
[   76.467528][ T7057] xfrm1: entered promiscuous mode
[   76.469535][ T7057] xfrm1: entered allmulticast mode
[   76.637306][ T7077] Dead loop on virtual device ip6_vti0, fix it urgently!
[   77.017372][ T7085] Bluetooth: hci0: Opcode 0x0401 failed: -22
[   77.110166][ T7095] netlink: 'syz.1.505': attribute type 11 has an invalid length.
[   77.566162][ T7136] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.575648][ T7136] bond_slave_0: entered promiscuous mode
[   77.577985][ T7136] bond_slave_1: entered promiscuous mode
[   77.580565][ T7136] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.585285][ T7136] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   78.320192][ T7160] trusted_key: syz.0.534 sent an empty control message without MSG_MORE.
[   78.499156][ T7174] bridge_slave_0: left allmulticast mode
[   78.501494][ T7174] bridge_slave_0: left promiscuous mode
[   78.504012][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.510343][ T7174] bridge_slave_1: left allmulticast mode
[   78.512664][ T7174] bridge_slave_1: left promiscuous mode
[   78.518133][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.527329][ T7174] bond0: (slave bond_slave_0): Releasing backup interface
[   78.534229][ T7174] bond0: (slave bond_slave_1): Releasing backup interface
[   78.546079][ T7174] team0: Port device team_slave_0 removed
[   78.552842][ T7174] team0: Port device team_slave_1 removed
[   78.558044][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.561297][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.567693][ T7174] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.570778][ T7174] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.586726][ T7174] team0: Port device bridge1 removed
[   78.962826][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.965855][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.977420][ T7193] bond_slave_0: left promiscuous mode
[   78.980364][ T7193] bond_slave_1: left promiscuous mode
[   79.074876][ T5878] Bluetooth: hci0: command tx timeout
[   79.087031][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.099876][ T7193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.211122][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.215782][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.219293][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.222775][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   79.256381][ T7201] __nla_validate_parse: 7 callbacks suppressed
[   79.256396][ T7201] netlink: 72 bytes leftover after parsing attributes in process `syz.1.551'.
[   79.374760][ T7207] nbd0: detected capacity change from 0 to 549764202496
[   79.380209][   T57] block nbd0: Receive control failed (result -104)
[   80.498584][ T7285] netlink: 'syz.0.587': attribute type 13 has an invalid length.
[   80.503060][ T7285] netlink: 'syz.0.587': attribute type 17 has an invalid length.
[   80.509263][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'.
[   80.573125][ T7285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.629948][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[   80.642013][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.728083][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.760380][ T7308] geneve2: entered promiscuous mode
[   80.764015][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   80.774144][ T7310] netlink: 'syz.2.600': attribute type 10 has an invalid length.
[   80.786634][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   80.789696][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   80.793356][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   80.803003][ T7310] bridge0: port 3(macsec0) entered blocking state
[   80.806003][ T7310] bridge0: port 3(macsec0) entered disabled state
[   80.808507][ T7312] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[   80.811717][ T7310] macsec0: entered allmulticast mode
[   80.813778][ T7310] veth1_macvtap: entered allmulticast mode
[   80.817879][ T7310] macsec0: entered promiscuous mode
[   80.835993][ T7312] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.855567][ T7312] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.858590][ T7312] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   80.863830][ T7312] bond1: (slave vcan1): Error -95 calling set_mac_address
[   80.907565][ T7318] gretap1: entered promiscuous mode
[   80.914087][ T7318] bond1: (slave gretap1): making interface the new active one
[   80.923702][ T7318] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   80.952090][ T7312] macvlan2: entered promiscuous mode
[   80.954239][ T7312] macvlan2: entered allmulticast mode
[   80.957648][ T7312] bond1: entered promiscuous mode
[   80.959811][ T7312] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.964227][ T7312] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   80.969525][ T7312] bond1: left promiscuous mode
[   81.032482][ T7312] syz.1.601 (7312) used greatest stack depth: 18832 bytes left
[   81.089549][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.545187][   T10] cfg80211: failed to load regulatory.db
[   81.856575][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'.
[   81.897957][ T7356] netlink: 'syz.0.620': attribute type 12 has an invalid length.
[   82.145784][ T7382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.163608][ T7388] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.635'.
[   82.523460][ T7411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'.
[   82.619171][ T7425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.647'.
[   82.721465][ T7433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.650'.
[   82.726305][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'.
[   82.730047][ T7433] netlink: 31 bytes leftover after parsing attributes in process `syz.2.650'.
[   82.733700][ T7433] netlink: 'syz.2.650': attribute type 3 has an invalid length.
[   82.738770][ T7433] netlink: 'syz.2.650': attribute type 2 has an invalid length.
[   82.742704][ T7433] netlink: 'syz.2.650': attribute type 2 has an invalid length.
[   82.985097][ T7445] netlink: 'syz.1.654': attribute type 16 has an invalid length.
[   82.987779][ T7445] netlink: 'syz.1.654': attribute type 17 has an invalid length.
[   83.022742][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.027550][ T7445] 8021q: adding VLAN 0 to HW filter on device team0
[   83.034175][ T7445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.039971][ T7498] erspan1: entered promiscuous mode
[   84.043348][ T7502] tipc: Started in network mode
[   84.057570][ T7502] tipc: Node identity ffe5b8b56143c784, cluster identity 4711
[   84.068397][ T7502] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.278421][ T7525] team0: Mode changed to "broadcast"
[   84.305832][ T7525] vlan0: entered promiscuous mode
[   84.311481][ T7534] __nla_validate_parse: 3 callbacks suppressed
[   84.311497][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[   84.313026][ T7525] team0: Port device vlan0 added
[   84.337032][ T7525] tipc: Enabled bearer <eth:team0>, priority 0
[   84.554663][ T7559] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   85.252577][ T7609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'.
[   85.454775][   T10] tipc: Node number set to 58074818
[   85.582884][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[   85.795512][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'.
[   85.799427][ T7663] validate_nla: 3 callbacks suppressed
[   85.799457][ T7663] netlink: 'syz.1.757': attribute type 5 has an invalid length.
[   85.820902][ T7665] veth0_to_bridge: entered promiscuous mode
[   85.823500][ T7665] veth0_to_bridge: left promiscuous mode
[   85.898372][ T7675] veth1_to_team: entered allmulticast mode
[   86.276575][ T7697] netlink: 'syz.1.774': attribute type 14 has an invalid length.
[   86.388452][ T7729] veth1_macvtap: left allmulticast mode
[   86.393441][ T7729] vlan2: left allmulticast mode
[   86.395623][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'.
[   86.397045][ T7729] veth1: left allmulticast mode
[   86.401547][ T7729] xfrm1: left promiscuous mode
[   86.403537][ T7729] xfrm1: left allmulticast mode
[   86.410062][ T7729] erspan1: left promiscuous mode
[   86.426299][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.431851][ T7732] bond0: (slave rose0): Enslaving as an active interface with an up link
[   87.319205][ T7779] netlink: 'syz.0.799': attribute type 3 has an invalid length.
[   87.738776][ T7821] netlink: 308 bytes leftover after parsing attributes in process `syz.0.819'.
[   87.742462][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.819'.
[   87.747626][ T7823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[   87.747635][ T7821] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   87.751193][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[   87.970708][ T7853] bridge: RTM_NEWNEIGH with invalid ether address
[   88.056202][ T7863] nbd: must specify a size in bytes for the device
[   88.349022][ T7885] netlink: 'syz.2.840': attribute type 1 has an invalid length.
[   88.368518][ T7885] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.389634][ T7885] bond2: (slave geneve2): making interface the new active one
[   88.395792][ T7885] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   88.401445][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.406284][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.411117][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.415175][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.533631][ T7910] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   89.415772][ T7997] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.892'.
[   89.419665][ T7997] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   89.423105][ T7997] openvswitch: netlink: Duplicate key (type 0).
[   90.032448][ T8044] tap0: tun_chr_ioctl cmd 1074812118
[   90.138272][ T8048] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.168078][ T8048] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.217678][ T8051] netlink: 'syz.1.917': attribute type 9 has an invalid length.
[   90.256904][ T8048] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.297943][ T8048] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.352786][ T5935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.363809][ T5935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.379174][ T5935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.389248][ T5935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.658811][ T8088] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   91.409918][ T8122] netlink: 'syz.0.947': attribute type 1 has an invalid length.
[   91.817240][ T5936] IPVS: starting estimator thread 0...
[   91.909248][ T8147] IPVS: using max 66 ests per chain, 158400 per kthread
[   91.936860][ T8161] bond1: option mode: unable to set because the bond device has slaves
[   91.945930][ T8161] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   92.328148][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[   92.402744][ T8197] delete_channel: no stack
[   92.419967][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[   92.669795][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.983'.
[   93.000263][ T8243] netlink: 'syz.2.999': attribute type 1 has an invalid length.
[   93.003091][ T8243] netlink: 224 bytes leftover after parsing attributes in process `syz.2.999'.
[   93.182136][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[   93.372187][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1019'.
[   93.760153][ T8325] netlink: 'syz.0.1038': attribute type 11 has an invalid length.
[   94.156686][ T8368] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1059'.
[   94.940623][ T8464] netlink: 'syz.1.1105': attribute type 1 has an invalid length.
[   94.949016][ T8464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1105'.
[   95.014406][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'.
[   95.020466][ T8472] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   95.058768][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'.
[   95.113956][ T8485] netlink: 'syz.1.1116': attribute type 5 has an invalid length.
[   95.118824][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[   95.178679][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'.
[   95.207878][ T8492] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1119'.
[   95.211870][ T8492] 8021q: VLANs not supported on ipvlan1
[   95.223115][ T8492] macsec1: entered promiscuous mode
[   95.227007][ T8492] macsec1: entered allmulticast mode
[   95.540617][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'.
[   95.822651][ T8537] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1133'.
[   95.903800][ T8545] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   95.909433][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'.
[   95.912387][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'.
[   96.001346][   T57] block nbd1: Receive control failed (result -32)
[   96.562697][ T8619] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   97.065979][ T8697] netlink: 'syz.0.1204': attribute type 1 has an invalid length.
[   97.069105][ T8697] netlink: 'syz.0.1204': attribute type 3 has an invalid length.
[   97.097957][ T8702] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   97.308778][ T8725] netlink: 'syz.0.1216': attribute type 1 has an invalid length.
[   97.756647][ T8772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.810213][ T8772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.819402][ T8778] tipc: MTU too low for tipc bearer
[   97.870905][ T8772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.913200][ T8772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[   97.966484][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   97.976869][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   97.986264][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   97.992359][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   98.057827][ T8794] delete_channel: no stack
[   98.237150][ T8818] bridge0: port 3(ipvlan2) entered blocking state
[   98.239853][ T8818] bridge0: port 3(ipvlan2) entered disabled state
[   98.242257][ T8821] netlink: 'syz.2.1259': attribute type 18 has an invalid length.
[   98.242524][ T8818] ipvlan2: entered allmulticast mode
[   98.249498][ T8818] bridge0: entered allmulticast mode
[   98.252526][ T8818] ipvlan2: left allmulticast mode
[   98.255364][ T8818] bridge0: left allmulticast mode
[   98.279254][ T8821] netlink: 'syz.2.1259': attribute type 18 has an invalid length.
[   98.284642][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.288467][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.296172][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.304892][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.368301][ T8826] block nbd2: not configured, cannot reconfigure
[   98.417473][ T8831] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   98.457838][ T8836] ieee802154 phy1 wpan1: encryption failed: -90
[   98.729430][ T8860] netlink: 'syz.1.1274': attribute type 13 has an invalid length.
[   98.732477][ T8860] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   99.870335][ T8960] netlink: del zone limit has 4 unknown bytes
[   99.980049][ T8977] netlink: 'syz.2.1326': attribute type 21 has an invalid length.
[   99.982641][ T8977] netlink: 'syz.2.1326': attribute type 6 has an invalid length.
[   99.988210][ T8977] __nla_validate_parse: 23 callbacks suppressed
[   99.988219][ T8977] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1326'.
[  100.096145][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1329'.
[  100.102066][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'.
[  100.572602][ T9049] netlink: 'syz.1.1358': attribute type 5 has an invalid length.
[  100.574587][ T9045] block nbd2: server does not support multiple connections per device.
[  100.578264][ T9045] block nbd2: shutting down sockets
[  100.664406][ T9059] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1362'.
[  100.807254][ T9071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1368'.
[  101.301124][ T9115] sock: sock_timestamping_bind_phc: sock not bind to device
[  101.391174][ T9126] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1383'.
[  101.396909][ T9126] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1383'.
[  101.974171][ T9198] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  102.038530][ T9207] vlan4: entered promiscuous mode
[  102.040497][ T9207] bond0: entered promiscuous mode
[  102.044709][ T9207] bond_slave_0: entered promiscuous mode
[  102.052153][ T9207] bond_slave_1: entered promiscuous mode
[  102.087307][ T9214] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1405'.
[  102.090959][ T9214] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  102.094247][ T9214] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  102.138624][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'.
[  102.284035][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1411'.
[  102.288879][ T9232] netlink: 'syz.1.1411': attribute type 7 has an invalid length.
[  102.292233][ T9232] netlink: 'syz.1.1411': attribute type 8 has an invalid length.
[  102.398166][ T9236] netlink: 'syz.1.1412': attribute type 4 has an invalid length.
[  103.236453][ T9284] openvswitch: netlink: Flow key attr not present in new flow.
[  103.370275][ T9302] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  103.555322][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022c89400: rx timeout, send abort
[  103.778314][ T9325] netlink: 'syz.2.1454': attribute type 3 has an invalid length.
[  103.880804][ T9331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.051747][ T9345] syzkaller1: entered promiscuous mode
[  104.053831][ T9345] syzkaller1: entered allmulticast mode
[  104.055781][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022c8b800: rx timeout, send abort
[  104.058744][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022c89400: abort rx timeout. Force session deactivation
[  104.251658][ T9366] vlan0: left promiscuous mode
[  104.257036][ T9366] bridge1: left promiscuous mode
[  104.555867][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022c8b800: abort rx timeout. Force session deactivation
[  104.732747][ T9406] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  104.757316][ T9406] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.768479][ T9406] bond3: (slave geneve3): making interface the new active one
[  104.774346][ T9406] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  104.793588][ T9406] syz.2.1493 (9406) used greatest stack depth: 17264 bytes left
[  104.899113][ T9425] tc_dump_action: action bad kind
[  104.917838][ T9427] netlink: 'syz.0.1503': attribute type 1 has an invalid length.
[  104.946998][ T9427] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  104.952949][ T5935] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  104.958344][ T9427] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.978078][ T9432] ieee802154 phy1 wpan1: encryption failed: -90
[  105.013236][ T9427] veth3: entered promiscuous mode
[  105.019739][ T9427] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  105.050873][ T9427] team0: Port device vlan0 removed
[  105.059965][ T9427] bond1: (slave ip6gretap0): Removing an active aggregator
[  105.064257][ T9427] bond1: (slave ip6gretap0): Releasing backup interface
[  105.073399][ T9427] bond1: (slave ip6gretap0): the permanent HWaddr of slave - 62:78:45:f2:ff:3c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  105.091861][ T9427] bond1: (slave veth3): Releasing backup interface
[  105.100491][   T40] tipc: Resetting bearer <eth:team0>
[  105.171552][ T9448] netlink: 'syz.2.1512': attribute type 10 has an invalid length.
[  105.177221][ T9448] bond0: (slave wlan1): Opening slave failed
[  105.233253][ T9452] lo: MTU too low for tipc bearer
[  105.235381][ T9452] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  105.320942][ T9460] __nla_validate_parse: 169 callbacks suppressed
[  105.320963][ T9460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1518'.
[  105.534224][ T9471] smc: net device bond0 applied user defined pnetid SYZ2
[  105.543715][ T9471] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1523'.
[  105.558416][ T9471] bond1: (slave macvlan2): Removing an active aggregator
[  105.561787][ T9471] bond1: (slave macvlan2): Releasing backup interface
[  105.586761][ T9471] smc: removing net device bond0 with user defined pnetid SYZ2
[  105.591868][ T9471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.613185][ T9471] bond_slave_0: left promiscuous mode
[  105.617032][ T9471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.620964][ T9471] bond_slave_1: left promiscuous mode
[  105.623931][ T9471] bond0 (unregistering): Released all slaves
[  105.903394][ T9479] netlink: zone id is out of range
[  105.906197][ T9479] netlink: zone id is out of range
[  105.908484][ T9479] netlink: zone id is out of range
[  105.910750][ T9479] netlink: zone id is out of range
[  105.912959][ T9479] netlink: zone id is out of range
[  105.921952][ T9479] netlink: zone id is out of range
[  105.924179][ T9479] netlink: zone id is out of range
[  105.926771][ T9479] netlink: zone id is out of range
[  105.973850][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1530'.
[  105.986551][ T9485] pim6reg: entered allmulticast mode
[  106.006069][ T9485] pim6reg: left allmulticast mode
[  106.412579][ T9507] netlink: 'syz.2.1540': attribute type 2 has an invalid length.
[  106.426578][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1542'.
[  106.654506][ T9546] netlink: 'syz.2.1558': attribute type 6 has an invalid length.
[  107.436764][ T9587] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1573'.
[  107.596887][ T9599] netlink: 'syz.0.1580': attribute type 12 has an invalid length.
[  107.796275][ T9609] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1585'.
[  107.838942][ T9611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1586'.
[  107.960296][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'.
[  107.968309][ T9632] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1589'.
[  108.033855][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'.
[  108.111966][ T9655] IPv6: NLM_F_REPLACE set, but no existing node found!
[  109.039131][ T9735] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  109.056810][ T5936] IPVS: starting estimator thread 0...
[  109.146488][ T9737] IPVS: using max 74 ests per chain, 177600 per kthread
[  109.707129][   T98] block nbd0: Possible stuck request ffff888020368000: control (read@0,4096B). Runtime 30 seconds
[  109.988791][ T9822] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  110.010502][ T9824] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.031078][ T9826] net_ratelimit: 12 callbacks suppressed
[  110.031091][ T9826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.104826][ T9837] sock: sock_set_timeout: `syz.2.1671' (pid 9837) tries to set negative timeout
[  110.433324][ T9869] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  110.576440][ T9881] bridge_slave_0: left allmulticast mode
[  110.581069][ T9881] bridge_slave_0: left promiscuous mode
[  110.585119][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.015453][ T9881] bridge_slave_1: left allmulticast mode
[  111.023361][ T9881] bridge_slave_1: left promiscuous mode
[  111.030080][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.036686][ T9881] team0: Port device team_slave_0 removed
[  111.040333][ T9881] team0: Port device team_slave_1 removed
[  111.042884][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.047386][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.050187][ T9881] macsec0: left allmulticast mode
[  111.051967][ T9881] macsec0: left promiscuous mode
[  111.053840][ T9881] bridge0: port 3(macsec0) entered disabled state
[  111.058978][ T9881] batman_adv: batadv0: Removing interface: vlan2
[  111.062610][ T9881] bond2: (slave geneve2): Releasing active interface
[  111.070553][ T9881] bond1: (slave ip6gretap1): Releasing backup interface
[  111.076950][ T9881] bond3: (slave geneve3): Releasing active interface
[  111.094628][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.097580][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.100266][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.102964][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.120254][ T9888] geneve3: entered promiscuous mode
[  111.122688][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  111.129608][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  111.132605][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  111.151622][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  111.163934][ T9894] __nla_validate_parse: 7 callbacks suppressed
[  111.163946][ T9894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1698'.
[  111.168195][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'.
[  111.238665][ T9902] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  111.242169][ T9902] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  111.546228][ T9924] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1710'.
[  111.825099][ T9941] netlink: 'syz.2.1718': attribute type 1 has an invalid length.
[  111.837548][ T9941] smc: adding net device bond0 with user defined pnetid SYZ2
[  111.851753][ T9941] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  111.860813][   T13] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  111.866431][ T9941] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.880423][ T9941] veth3: entered promiscuous mode
[  111.884924][ T9941] bond0: (slave veth3): Enslaving as a backup interface with a down link
[  111.897625][ T9941] bond0: (slave ip6gretap2): Removing an active aggregator
[  111.900939][ T9941] bond0: (slave ip6gretap2): Releasing backup interface
[  111.903631][ T9941] bond0: (slave ip6gretap2): the permanent HWaddr of slave - 82:a7:c6:40:88:e7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  111.920752][ T9941] bond0: (slave veth3): Releasing backup interface
[  112.009733][ T9946] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.069764][ T9946] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.128297][ T9946] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.211277][ T9946] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.268672][ T5935] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.281174][ T5935] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.290854][ T5935] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.296586][ T9960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1726'.
[  112.300382][ T5935] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.368683][ T9964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.129165][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  113.273829][ T9993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'.
[  113.414551][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'.
[  113.793247][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802896d800: rx timeout, send abort
[  113.796902][    C0] vcan0: j1939_tp_rxtimer: 0xffff888113272400: rx timeout, send abort
[  113.800561][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802896d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  113.806585][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888113272400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  114.015776][T10014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1752'.
[  114.145947][T10029] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.1757'.
[  114.530498][T10052] netlink: 'syz.0.1767': attribute type 12 has an invalid length.
[  114.539190][T10052] netlink: 'syz.0.1767': attribute type 18 has an invalid length.
[  114.542321][T10052] netlink: 'syz.0.1767': attribute type 21 has an invalid length.
[  114.551690][T10052] netlink: 'syz.0.1767': attribute type 26 has an invalid length.
[  114.764266][T10082] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.821138][T10091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.910619][T10109] netlink: 'syz.0.1794': attribute type 5 has an invalid length.
[  115.250026][T10138] syzkaller1: entered allmulticast mode
[  115.866179][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'.
[  116.047800][T10162] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  116.050808][T10162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.145156][T10173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.148311][T10173] syzkaller0: entered promiscuous mode
[  116.150560][T10173] syzkaller0: entered allmulticast mode
[  116.166557][T10173] tipc: Resetting bearer <eth:syzkaller0>
[  116.170889][T10172] tipc: Resetting bearer <eth:syzkaller0>
[  116.184646][T10172] tipc: Disabling bearer <eth:syzkaller0>
[  116.263006][T10185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.268996][T10183] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  116.522723][T10201] tipc: Resetting bearer <eth:team0>
[  116.552331][T10201] rdma_op ffff88811a8659f0 conn xmit_rdma 0000000000000000
[  116.559329][T10201] netlink: 'syz.0.1834': attribute type 10 has an invalid length.
[  116.566923][T10201] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.569956][T10201] bond0: (slave wlan1): Opening slave failed
[  116.651526][T10205] __nla_validate_parse: 1 callbacks suppressed
[  116.651546][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'.
[  116.677837][T10205] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  116.909386][T10215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1841'.
[  116.985462][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1844'.
[  117.336243][T10235] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  117.831580][T10287] tipc: Resetting bearer <eth:team0>
[  118.057290][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.060758][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.063870][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.068057][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.320671][T10302] netlink: 'syz.1.1876': attribute type 1 has an invalid length.
[  118.324189][T10302] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1876'.
[  118.468261][T10320] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.529014][T10330] netlink: 'syz.1.1890': attribute type 1 has an invalid length.
[  118.538982][T10333] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  118.546481][T10330] bond2: entered promiscuous mode
[  118.548571][T10330] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.564847][T10330] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.569980][T10330] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.573354][T10330] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  118.586229][T10330] bond2: (slave vxcan3): making interface the new active one
[  118.600368][T10330] vxcan3: entered promiscuous mode
[  118.602676][T10330] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[  118.735670][T10359] tipc: New replicast peer: 255.255.255.255
[  118.742931][T10359] tipc: Enabled bearer <udp:syz2>, priority 10
[  118.940797][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'.
[  118.955872][T10392] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  119.010947][T10403] netlink: 'syz.0.1923': attribute type 1 has an invalid length.
[  119.012645][T10406] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1925'.
[  119.013677][T10403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1923'.
[  119.016892][T10406] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  119.246175][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'.
[  119.392749][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'.
[  119.518327][T10461] can: request_module (can-proto-4) failed.
[  119.854764][ T5312] tipc: Node number set to 3352744562
[  120.221674][T10476] netlink: 'syz.1.1956': attribute type 4 has an invalid length.
[  120.294073][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1959'.
[  120.407554][T10495] netlink: 'syz.0.1965': attribute type 6 has an invalid length.
[  120.410935][T10495] netlink: 'syz.0.1965': attribute type 4 has an invalid length.
[  120.755030][T10533] lo speed is unknown, defaulting to 1000
[  120.757477][T10533] lo speed is unknown, defaulting to 1000
[  120.760126][T10533] lo speed is unknown, defaulting to 1000
[  120.769144][T10533] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.782196][T10533] lo speed is unknown, defaulting to 1000
[  120.797184][T10533] lo speed is unknown, defaulting to 1000
[  120.804694][T10533] lo speed is unknown, defaulting to 1000
[  120.923800][T10541] syzkaller0: entered promiscuous mode
[  120.931918][T10541] syzkaller0: entered allmulticast mode
[  121.179221][T10488] delete_channel: no stack
[  121.441243][T10579] syzkaller1: entered allmulticast mode
[  122.587003][T10619] __nla_validate_parse: 6 callbacks suppressed
[  122.587022][T10619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2017'.
[  122.607963][T10621] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  122.731172][T10625] Bluetooth: MGMT ver 1.23
[  122.864117][T10633] lo speed is unknown, defaulting to 1000
[  123.091191][T10638] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  123.434582][T10645] netlink: 'syz.0.2028': attribute type 21 has an invalid length.
[  123.440117][T10645] netlink: 'syz.0.2028': attribute type 1 has an invalid length.
[  123.442777][T10645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2028'.
[  123.632410][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.028044][T10659] block nbd2: NBD_DISCONNECT
[  124.194055][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'.
[  124.260094][T10682] netlink: 'syz.2.2046': attribute type 2 has an invalid length.
[  124.285707][T10686] netlink: 'syz.2.2048': attribute type 2 has an invalid length.
[  124.291289][T10687] sctp: [Deprecated]: syz.1.2047 (pid 10687) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.291289][T10687] Use struct sctp_sack_info instead
[  124.403779][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.445496][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'.
[  124.487663][T10715] netlink: 'syz.1.2062': attribute type 1 has an invalid length.
[  124.490341][T10715] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2062'.
[  124.569485][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'.
[  124.580406][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'.
[  124.752655][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'.
[  125.571976][T10741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.575246][T10741] syzkaller0: entered promiscuous mode
[  125.577797][T10741] syzkaller0: entered allmulticast mode
[  125.588403][T10741] tipc: Resetting bearer <eth:syzkaller0>
[  125.592070][T10740] tipc: Resetting bearer <eth:syzkaller0>
[  125.608883][T10740] tipc: Disabling bearer <eth:syzkaller0>
[  125.875853][T10768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2085'.
[  125.972565][T10774] netlink: 'syz.2.2088': attribute type 1 has an invalid length.
[  126.009565][T10774] vlan4: entered allmulticast mode
[  126.011479][T10774] bond4: entered allmulticast mode
[  126.096265][T10777] netlink: 'syz.2.2089': attribute type 11 has an invalid length.
[  126.371216][T10802] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2101'.
[  126.564855][    C1] ==================================================================
[  126.567998][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  126.571186][    C1] Write of size 8 at addr ffff88810ad3c930 by task syz.0.2080/10755
[  126.575543][    C1] 
[  126.576558][    C1] CPU: 1 UID: 0 PID: 10755 Comm: syz.0.2080 Not tainted syzkaller #0 PREEMPT(full) 
[  126.576580][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.576591][    C1] Call Trace:
[  126.576640][    C1]  <IRQ>
[  126.576656][    C1]  dump_stack_lvl+0x189/0x250
[  126.576679][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  126.576697][    C1]  ? rcu_is_watching+0x15/0xb0
[  126.576713][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.576728][    C1]  ? rcu_is_watching+0x15/0xb0
[  126.576741][    C1]  ? lock_release+0x4b/0x3e0
[  126.576762][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  126.576778][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  126.576792][    C1]  print_report+0xca/0x240
[  126.576805][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  126.576817][    C1]  kasan_report+0x118/0x150
[  126.576836][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  126.576851][    C1]  __xfrm_state_delete+0x696/0xca0
[  126.576868][    C1]  xfrm_timer_handler+0x18f/0xa00
[  126.576891][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  126.576917][    C1]  ? rcu_is_watching+0x15/0xb0
[  126.576930][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.576949][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  126.576969][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  126.576989][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  126.577007][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  126.577027][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  126.577040][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  126.577057][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  126.577073][    C1]  handle_softirqs+0x286/0x870
[  126.577087][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  126.577100][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  126.577116][    C1]  __irq_exit_rcu+0xca/0x1f0
[  126.577129][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  126.577144][    C1]  irq_exit_rcu+0x9/0x30
[  126.577156][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  126.577177][    C1]  </IRQ>
[  126.577182][    C1]  <TASK>
[  126.577187][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.577204][    C1] RIP: 0010:folios_put_refs+0x149/0x640
[  126.577223][    C1] Code: 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 8d 1a 28 00 4c 89 6c 24 10 4f 8b 2c fc 48 83 7c 24 38 00 74 26 e8 27 b1 c4 ff <48> 8b 44 24 28 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 16 03 00 00 48
[  126.577236][    C1] RSP: 0018:ffffc9000295f600 EFLAGS: 00000293
[  126.577252][    C1] RAX: ffffffff81fafa09 RBX: dffffc0000000000 RCX: ffff88810b7c0000
[  126.577263][    C1] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 000000000000001f
[  126.577272][    C1] RBP: ffffc9000295f6f0 R08: ffffea000441aa77 R09: 1ffffd400088354e
[  126.577282][    C1] R10: dffffc0000000000 R11: fffff9400088354f R12: ffffc9000295f760
[  126.577292][    C1] R13: ffffea000441aa80 R14: 0000000000000016 R15: 0000000000000017
[  126.577304][    C1]  ? folios_put_refs+0x149/0x640
[  126.577325][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  126.577339][    C1]  ? free_swap_cache+0x9b/0x300
[  126.577354][    C1]  free_pages_and_swap_cache+0x277/0x520
[  126.577367][    C1]  ? lock_release+0x4b/0x3e0
[  126.577388][    C1]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  126.577402][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  126.577427][    C1]  ? __pfx_call_rcu+0x10/0x10
[  126.577446][    C1]  ? tlb_table_flush+0x36d/0x410
[  126.577462][    C1]  tlb_flush_mmu+0x3a0/0x680
[  126.577475][    C1]  ? __pfx_down_write+0x10/0x10
[  126.577490][    C1]  tlb_finish_mmu+0xc3/0x1d0
[  126.577504][    C1]  exit_mmap+0x44c/0xb50
[  126.577526][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  126.577543][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  126.577569][    C1]  ? __pfx_exit_aio+0x10/0x10
[  126.577593][    C1]  ? uprobe_clear_state+0x274/0x290
[  126.577643][    C1]  __mmput+0x118/0x420
[  126.577657][    C1]  exit_mm+0x1da/0x2c0
[  126.577676][    C1]  ? __pfx_exit_mm+0x10/0x10
[  126.577693][    C1]  ? rcu_is_watching+0x15/0xb0
[  126.577707][    C1]  do_exit+0x648/0x2300
[  126.577726][    C1]  ? preempt_schedule_common+0x83/0xd0
[  126.577745][    C1]  ? preempt_schedule+0xae/0xc0
[  126.577763][    C1]  ? __pfx_do_exit+0x10/0x10
[  126.577780][    C1]  ? rcu_is_watching+0x15/0xb0
[  126.577793][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  126.577817][    C1]  do_group_exit+0x21c/0x2d0
[  126.577837][    C1]  __x64_sys_exit_group+0x3f/0x40
[  126.577854][    C1]  x64_sys_call+0x21f7/0x2200
[  126.577873][    C1]  do_syscall_64+0xfa/0x3b0
[  126.577887][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.577907][    C1]  ? exc_page_fault+0x9f/0xf0
[  126.577926][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.577940][    C1] RIP: 0033:0x7fc8bdb8ebe9
[  126.577953][    C1] Code: Unable to access opcode bytes at 0x7fc8bdb8ebbf.
[  126.577961][    C1] RSP: 002b:00007ffd33a6d748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  126.577976][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8bdb8ebe9
[  126.577986][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  126.577994][    C1] RBP: 00007ffd33a6d7ac R08: 0000000533a6d83f R09: 00000000000927c0
[  126.578003][    C1] R10: 0000000000001f70 R11: 0000000000000246 R12: 0000000000000284
[  126.578012][    C1] R13: 00000000000927c0 R14: 000000000001ea7a R15: 00007ffd33a6d800
[  126.578027][    C1]  </TASK>
[  126.578033][    C1] 
[  126.775997][    C1] Allocated by task 7584:
[  126.777796][    C1]  kasan_save_track+0x3e/0x80
[  126.779764][    C1]  __kasan_slab_alloc+0x6c/0x80
[  126.781799][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  126.784063][    C1]  xfrm_state_alloc+0x24/0x2f0
[  126.786053][    C1]  __find_acq_core+0x8a7/0x1c00
[  126.788071][    C1]  xfrm_find_acq+0x78/0xa0
[  126.789917][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  126.791976][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  126.794009][    C1]  netlink_rcv_skb+0x208/0x470
[  126.795999][    C1]  xfrm_netlink_rcv+0x79/0x90
[  126.797974][    C1]  netlink_unicast+0x82f/0x9e0
[  126.799978][    C1]  netlink_sendmsg+0x805/0xb30
[  126.801874][    C1]  __sock_sendmsg+0x21c/0x270
[  126.803839][    C1]  ____sys_sendmsg+0x505/0x830
[  126.805801][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  126.807882][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  126.809923][    C1]  do_syscall_64+0xfa/0x3b0
[  126.811811][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.814214][    C1] 
[  126.815223][    C1] Freed by task 47:
[  126.816809][    C1]  kasan_save_track+0x3e/0x80
[  126.818755][    C1]  kasan_save_free_info+0x46/0x50
[  126.820848][    C1]  __kasan_slab_free+0x5b/0x80
[  126.822782][    C1]  kmem_cache_free+0x18f/0x400
[  126.824767][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  126.826753][    C1]  process_scheduled_works+0xae1/0x17b0
[  126.828984][    C1]  worker_thread+0x8a0/0xda0
[  126.830928][    C1]  kthread+0x711/0x8a0
[  126.832627][    C1]  ret_from_fork+0x3fc/0x770
[  126.834486][    C1]  ret_from_fork_asm+0x1a/0x30
[  126.836412][    C1] 
[  126.837385][    C1] The buggy address belongs to the object at ffff88810ad3c900
[  126.837385][    C1]  which belongs to the cache xfrm_state of size 928
[  126.842781][    C1] The buggy address is located 48 bytes inside of
[  126.842781][    C1]  freed 928-byte region [ffff88810ad3c900, ffff88810ad3cca0)
[  126.848179][    C1] 
[  126.849191][    C1] The buggy address belongs to the physical page:
[  126.851671][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810ad3f180 pfn:0x10ad3c
[  126.855709][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  126.859054][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  126.862034][    C1] page_type: f5(slab)
[  126.863702][    C1] raw: 057ff00000000040 ffff88801af39640 dead000000000122 0000000000000000
[  126.867095][    C1] raw: ffff88810ad3f180 00000000800e0007 00000000f5000000 0000000000000000
[  126.870546][    C1] head: 057ff00000000040 ffff88801af39640 dead000000000122 0000000000000000
[  126.874035][    C1] head: ffff88810ad3f180 00000000800e0007 00000000f5000000 0000000000000000
[  126.877440][    C1] head: 057ff00000000002 ffffea00042b4f01 00000000ffffffff 00000000ffffffff
[  126.880851][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  126.884259][    C1] page dumped because: kasan: bad access detected
[  126.886805][    C1] page_owner tracks the page as allocated
[  126.888977][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6156, tgid 6155 (syz.1.116), ts 64387625993, free_ts 64168790453
[  126.896521][    C1]  post_alloc_hook+0x240/0x2a0
[  126.898535][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  126.900808][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  126.903180][    C1]  alloc_pages_mpol+0x232/0x4a0
[  126.905202][    C1]  allocate_slab+0x8a/0x370
[  126.907087][    C1]  ___slab_alloc+0xbeb/0x1410
[  126.908962][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  126.911119][    C1]  xfrm_state_alloc+0x24/0x2f0
[  126.913022][    C1]  xfrm_add_sa+0x17d1/0x4070
[  126.914828][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  126.916827][    C1]  netlink_rcv_skb+0x208/0x470
[  126.918806][    C1]  xfrm_netlink_rcv+0x79/0x90
[  126.920715][    C1]  netlink_unicast+0x82f/0x9e0
[  126.922631][    C1]  netlink_sendmsg+0x805/0xb30
[  126.924599][    C1]  __sock_sendmsg+0x21c/0x270
[  126.926520][    C1]  ____sys_sendmsg+0x505/0x830
[  126.928422][    C1] page last free pid 6138 tgid 6138 stack trace:
[  126.930898][    C1]  __free_frozen_pages+0xbc4/0xd30
[  126.932897][    C1]  stack_depot_save_flags+0x436/0x860
[  126.935047][    C1]  ref_tracker_free+0xfe/0x7d0
[  126.936945][    C1]  __sk_destruct+0x3c3/0x660
[  126.938824][    C1]  __vsock_release+0x3b8/0x520
[  126.940806][    C1]  vsock_release+0x99/0x100
[  126.942686][    C1]  sock_close+0xc3/0x240
[  126.944357][    C1]  __fput+0x44c/0xa70
[  126.945962][    C1]  task_work_run+0x1d4/0x260
[  126.947787][    C1]  exit_to_user_mode_loop+0xec/0x110
[  126.949933][    C1]  do_syscall_64+0x2bd/0x3b0
[  126.951808][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.954099][    C1] 
[  126.955068][    C1] Memory state around the buggy address:
[  126.957297][    C1]  ffff88810ad3c800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  126.960571][    C1]  ffff88810ad3c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.964022][    C1] >ffff88810ad3c900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.967263][    C1]                                      ^
[  126.969727][    C1]  ffff88810ad3c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.973058][    C1]  ffff88810ad3ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.976442][    C1] ==================================================================
[  126.980240][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  126.983412][    C1] CPU: 1 UID: 0 PID: 10755 Comm: syz.0.2080 Not tainted syzkaller #0 PREEMPT(full) 
[  126.987470][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.991838][    C1] Call Trace:
[  126.993293][    C1]  <IRQ>
[  126.994551][    C1]  dump_stack_lvl+0x99/0x250
[  126.996640][    C1]  ? __asan_memcpy+0x40/0x70
[  126.998731][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.000926][    C1]  ? __pfx__printk+0x10/0x10
[  127.003029][    C1]  vpanic+0x281/0x750
[  127.004829][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  127.007095][    C1]  ? __pfx_vpanic+0x10/0x10
[  127.009088][    C1]  ? rcu_is_watching+0x15/0xb0
[  127.011193][    C1]  panic+0xb9/0xc0
[  127.012874][    C1]  ? __pfx_panic+0x10/0x10
[  127.014808][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  127.017358][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.020115][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  127.022381][    C1]  check_panic_on_warn+0x89/0xb0
[  127.024543][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  127.026816][    C1]  end_report+0x78/0x160
[  127.028712][    C1]  kasan_report+0x129/0x150
[  127.030687][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  127.032977][    C1]  __xfrm_state_delete+0x696/0xca0
[  127.035179][    C1]  xfrm_timer_handler+0x18f/0xa00
[  127.037350][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  127.039660][    C1]  ? rcu_is_watching+0x15/0xb0
[  127.041713][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.044238][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.046895][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  127.049276][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  127.051654][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  127.053778][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  127.056192][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  127.058736][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  127.060532][    C1]  handle_softirqs+0x286/0x870
[  127.062554][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  127.064653][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  127.066974][    C1]  __irq_exit_rcu+0xca/0x1f0
[  127.069024][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  127.071176][    C1]  irq_exit_rcu+0x9/0x30
[  127.073069][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  127.075506][    C1]  </IRQ>
[  127.076844][    C1]  <TASK>
[  127.078124][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  127.080686][    C1] RIP: 0010:folios_put_refs+0x149/0x640
[  127.083109][    C1] Code: 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 8d 1a 28 00 4c 89 6c 24 10 4f 8b 2c fc 48 83 7c 24 38 00 74 26 e8 27 b1 c4 ff <48> 8b 44 24 28 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 16 03 00 00 48
[  127.091383][    C1] RSP: 0018:ffffc9000295f600 EFLAGS: 00000293
[  127.094040][    C1] RAX: ffffffff81fafa09 RBX: dffffc0000000000 RCX: ffff88810b7c0000
[  127.097480][    C1] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 000000000000001f
[  127.100926][    C1] RBP: ffffc9000295f6f0 R08: ffffea000441aa77 R09: 1ffffd400088354e
[  127.104360][    C1] R10: dffffc0000000000 R11: fffff9400088354f R12: ffffc9000295f760
[  127.107502][    C1] R13: ffffea000441aa80 R14: 0000000000000016 R15: 0000000000000017
[  127.110784][    C1]  ? folios_put_refs+0x149/0x640
[  127.112866][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  127.115035][    C1]  ? free_swap_cache+0x9b/0x300
[  127.117115][    C1]  free_pages_and_swap_cache+0x277/0x520
[  127.119599][    C1]  ? lock_release+0x4b/0x3e0
[  127.121534][    C1]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  127.124183][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  127.126345][    C1]  ? __pfx_call_rcu+0x10/0x10
[  127.128390][    C1]  ? tlb_table_flush+0x36d/0x410
[  127.130554][    C1]  tlb_flush_mmu+0x3a0/0x680
[  127.132604][    C1]  ? __pfx_down_write+0x10/0x10
[  127.134753][    C1]  tlb_finish_mmu+0xc3/0x1d0
[  127.136805][    C1]  exit_mmap+0x44c/0xb50
[  127.138716][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  127.140813][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  127.143165][    C1]  ? __pfx_exit_aio+0x10/0x10
[  127.145259][    C1]  ? uprobe_clear_state+0x274/0x290
[  127.147452][    C1]  __mmput+0x118/0x420
[  127.149280][    C1]  exit_mm+0x1da/0x2c0
[  127.151129][    C1]  ? __pfx_exit_mm+0x10/0x10
[  127.153184][    C1]  ? rcu_is_watching+0x15/0xb0
[  127.155251][    C1]  do_exit+0x648/0x2300
[  127.157059][    C1]  ? preempt_schedule_common+0x83/0xd0
[  127.159381][    C1]  ? preempt_schedule+0xae/0xc0
[  127.161458][    C1]  ? __pfx_do_exit+0x10/0x10
[  127.163431][    C1]  ? rcu_is_watching+0x15/0xb0
[  127.165519][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  127.167878][    C1]  do_group_exit+0x21c/0x2d0
[  127.169876][    C1]  __x64_sys_exit_group+0x3f/0x40
[  127.172119][    C1]  x64_sys_call+0x21f7/0x2200
[  127.174211][    C1]  do_syscall_64+0xfa/0x3b0
[  127.176224][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.178861][    C1]  ? exc_page_fault+0x9f/0xf0
[  127.180904][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.183510][    C1] RIP: 0033:0x7fc8bdb8ebe9
[  127.185500][    C1] Code: Unable to access opcode bytes at 0x7fc8bdb8ebbf.
[  127.188445][    C1] RSP: 002b:00007ffd33a6d748 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  127.192049][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc8bdb8ebe9
[  127.195450][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  127.198794][    C1] RBP: 00007ffd33a6d7ac R08: 0000000533a6d83f R09: 00000000000927c0
[  127.202252][    C1] R10: 0000000000001f70 R11: 0000000000000246 R12: 0000000000000284
[  127.205592][    C1] R13: 00000000000927c0 R14: 000000000001ea7a R15: 00007ffd33a6d800
[  127.208964][    C1]  </TASK>
[  127.211027][    C1] Kernel Offset: disabled
[  127.212869][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:58:31  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11004583e53 RBX=ffff888022c1f298 RCX=ffff888020f8b980 RDX=0000000000000000
RSI=0000000000000001 RDI=ffff888022c1ef68 RBP=dffffc0000000000 RSP=ffffc9000376fc98
R8 =ffff888020f8b980 R9 =0000000000000003 R10=000000000000a000 R11=0000000000000000
R12=ffff888022c1f088 R13=ffff888022c1ef68 R14=ffff888022c1f068 R15=ffff888022c1f088
RIP=ffffffff823fe9a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558708e500 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555870a95c8 CR3=0000000028254000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8691612e53
XMM06=0000000000000000 00007f8691612e4d XMM07=0000000000000000 00007f8691612e61
XMM08=0000000000000000 00007f8691612ee7 XMM09=0000000000000000 00007f8691612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df0670 RSP=ffffc900001e0350
R8 =ffff88801f640237 R9 =1ffff11003ec8046 R10=dffffc0000000000 R11=ffffffff854f1f70
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f1fe7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558a785500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9fcc1763a CR3=000000002937a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc8bdc12e53
XMM06=0000000000000000 00007fc8bdc12e4d XMM07=0000000000000000 00007fc8bdc12e61
XMM08=0000000000000000 00007fc8bdc12ee7 XMM09=0000000000000000 00007fc8bdc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
