last executing test programs:

413.541335ms ago: executing program 1 (id=1215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000060000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)

413.249045ms ago: executing program 2 (id=1216):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_MARK={0x8, 0x4}]}, 0xa0}, 0x1, 0xfffff000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400030500008000ffa563a52d"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8)

364.260346ms ago: executing program 1 (id=1217):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="290b0000000000001c00128009000100626f6e64000000000c0002800500010001"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0xf, 0x0) (rerun: 32)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
bind$can_raw(r2, &(0x7f0000000000), 0x10) (async)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f0000000200)={0x1d, r3}, 0x10)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10)

279.698972ms ago: executing program 2 (id=1220):
socket$nl_audit(0x10, 0x3, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x9}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x500000000000000, 0x800}, 0x0)

277.027228ms ago: executing program 0 (id=1221):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480a1}, 0x40004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdff}, 0x84)

214.774621ms ago: executing program 2 (id=1222):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x0, 0x85ff}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

214.51653ms ago: executing program 1 (id=1223):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0x13}, [@typed={0xc, 0x3ffe, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

214.280021ms ago: executing program 0 (id=1224):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "000000009b993e68", "75df9881592b9fd38bcad042e286f2cd", ')\x00\x000', "578619a280c847dd"}, 0x28)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000010000060000", 0x58}], 0x1)

152.809398ms ago: executing program 1 (id=1225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/117, 0x75}], 0x2}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)=""/104, 0x68}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4072, 0xfe8}], 0x3, 0x0, 0x0, 0x41}, 0x3}], 0x3, 0x2, 0x0)

151.116098ms ago: executing program 2 (id=1226):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfb, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f00000001c0)="3fdd8580", 0x4)
getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000001b80))
r3 = socket$inet6(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0df, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x1, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@local, 0x0, 0x6c}, 0xf, @in=@broadcast, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0xb, 0x9945}}, 0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

150.901458ms ago: executing program 0 (id=1227):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
socket$inet(0x2, 0x80001, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x88d0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000040000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

149.808392ms ago: executing program 1 (id=1228):
socket$nl_audit(0x10, 0x3, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x2, 0x80805, 0x0)
socket(0x1, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x9}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x600000000000000, 0x800}, 0x0)

93.053043ms ago: executing program 2 (id=1229):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004300)="dc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95", 0x5}], 0x1}}], 0x2, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0)

91.901612ms ago: executing program 0 (id=1230):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x25, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x1e}, {[@cipso={0x86, 0x71, 0x0, [{0x5, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c6000097ffffffffffffff000000"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

91.415233ms ago: executing program 1 (id=1231):
r0 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @netrom, @rose, @bcast, @bcast, @default, @bcast]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/175, 0xaf}, {&(0x7f0000000140)=""/99, 0x63}], 0x2, &(0x7f0000000200)=""/32, 0x20}, 0x40000101)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/127, 0x7f}, {&(0x7f00000005c0)=""/207, 0xcf}], 0x5, &(0x7f0000000740)=""/159, 0x9f}, 0x40000101)
pipe(&(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000880)={0x2, 0x7, 0x200, 0x10, 0x3, 0x42, 0x7, 0x2, <r3=>0x0}, &(0x7f00000008c0)=0x20)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000900)={<r4=>r3, 0x1000, "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"}, &(0x7f0000001940)=0x1008)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001b00)={r2, 0x20, &(0x7f0000001ac0)={&(0x7f0000001980)=""/206, 0xce, 0x0, &(0x7f0000001a80)=""/22, 0x16}}, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000001b40)={{0x2, 0x4e22, @local}, {0x6}, 0x24, {0x2, 0x5, @remote}, 'virt_wifi0\x00'})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000001bc0)={0x1, 0x9, [@remote, @link_local, @empty, @broadcast, @broadcast, @empty, @remote, @remote, @empty]})
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x8c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_FILTER={0x54, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x801}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x838}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10ec}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xa0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x28}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000001d80)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000001e40)={0x6, 'bridge_slave_0\x00', {0x8}, 0x2})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001e80)={<r6=>r4, 0x20ff}, &(0x7f0000001ec0)=0x8)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001f80)={{r0}, 0x0, 0x8, @inherit={0x70, &(0x7f0000001f00)={0x0, 0x5, 0x9, 0x33a, {0x1, 0x7, 0x4, 0xa54, 0x80000001}, [0x2f, 0x3, 0x7, 0x6, 0x538e]}}, @name="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"})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000002f80)={0x8, 0x6, 0x8005, 0xac, 0xe, 0x3, 0x3, 0x4, <r7=>r6}, &(0x7f0000002fc0)=0x20)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000003000)={r7, 0x200}, &(0x7f0000003040)=0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000003080)={'veth1_to_bridge\x00', 0x20})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003100), r1)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000003300)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003140)={0x144, r8, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x14000000}, 0x0)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003340))
bind$unix(r1, &(0x7f0000003380)=@abs={0x1, 0x0, 0x401}, 0x6e)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000003400)=0x3, 0x4)
accept4$nfc_llcp(r1, &(0x7f0000003440), &(0x7f00000034c0)=0x60, 0x800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000003540)={0x4, &(0x7f0000003500)=[{0x7, 0x40, 0x3, 0x101}, {0x8, 0x8, 0x2, 0x80000000}, {0x1, 0x6, 0x8, 0x1}, {0x80, 0x81, 0x1b, 0x4}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000003580)={r3, @in={{0x2, 0x4e22, @private=0xa010101}}}, 0x84)

567.143µs ago: executing program 0 (id=1232):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xb4, 0x4, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x64, 0x3, "5b6077b8060000641284543d00004f8cc85a861b7595862ca8d567686eab93f1fa790a36c8daf2ee2226b87b4019ee65d990c2279b98f695409818eaa11604dfafe3589d38d09cd352adf81c29ae9500000000000000fffffff5000000000000"}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x108}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

293.467µs ago: executing program 2 (id=1233):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000ffff000000080001007063690000000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x4010744d, &(0x7f0000000000)=0x20000002)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES64=r5, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003", @ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x800000}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0xffffffffffffff93}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

0s ago: executing program 0 (id=1234):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], {0x95, 0x0, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18239' (ED25519) to the list of known hosts.
syzkaller login: [   49.357520][ T5835] cgroup: Unknown subsys name 'net'
[   49.445720][ T5835] cgroup: Unknown subsys name 'cpuset'
[   49.449645][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.766786][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.192282][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.201826][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.207285][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.209422][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.210750][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.213668][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.218219][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.219800][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.223440][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.225617][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.231504][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.236352][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.239928][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.243869][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.246823][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.543982][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   55.575560][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   55.620600][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   55.688947][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.691462][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.695767][ T5844] bridge_slave_0: entered allmulticast mode
[   55.699068][ T5844] bridge_slave_0: entered promiscuous mode
[   55.720249][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.722652][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.725926][ T5844] bridge_slave_1: entered allmulticast mode
[   55.728715][ T5844] bridge_slave_1: entered promiscuous mode
[   55.732215][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.735563][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.738731][ T5852] bridge_slave_0: entered allmulticast mode
[   55.742585][ T5852] bridge_slave_0: entered promiscuous mode
[   55.748012][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.751138][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.754911][ T5852] bridge_slave_1: entered allmulticast mode
[   55.758580][ T5852] bridge_slave_1: entered promiscuous mode
[   55.818949][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.825290][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.839336][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.857700][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.861551][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.864889][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.867738][ T5843] bridge_slave_0: entered allmulticast mode
[   55.870565][ T5843] bridge_slave_0: entered promiscuous mode
[   55.874433][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.877370][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.880092][ T5843] bridge_slave_1: entered allmulticast mode
[   55.884211][ T5843] bridge_slave_1: entered promiscuous mode
[   55.901637][ T5844] team0: Port device team_slave_0 added
[   55.947190][ T5844] team0: Port device team_slave_1 added
[   55.962046][ T5852] team0: Port device team_slave_0 added
[   55.966927][ T5852] team0: Port device team_slave_1 added
[   55.988678][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.006331][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.008677][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.018253][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.024771][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.028111][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.030367][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.040046][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.045338][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.047684][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.057403][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.073334][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.075657][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.085156][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.126814][ T5843] team0: Port device team_slave_0 added
[   56.130406][ T5843] team0: Port device team_slave_1 added
[   56.137530][ T5844] hsr_slave_0: entered promiscuous mode
[   56.140005][ T5844] hsr_slave_1: entered promiscuous mode
[   56.168509][ T5852] hsr_slave_0: entered promiscuous mode
[   56.170785][ T5852] hsr_slave_1: entered promiscuous mode
[   56.174404][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   56.176329][ T5852] Cannot create hsr debugfs directory
[   56.203998][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.206352][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.215192][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.230941][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.233368][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.241431][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.314245][ T5843] hsr_slave_0: entered promiscuous mode
[   56.317375][ T5843] hsr_slave_1: entered promiscuous mode
[   56.320303][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   56.325054][ T5843] Cannot create hsr debugfs directory
[   56.536796][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.546216][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.559490][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.572424][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.618911][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.626646][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.633455][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.639079][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.683920][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.689020][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.698333][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.703244][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.739068][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.762230][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   56.779062][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.781573][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.791458][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.793949][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.808823][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.832456][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   56.841561][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.844039][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.848270][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.850630][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.870295][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.895676][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   56.906548][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.909327][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.921370][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.924198][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.965712][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.065815][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.127619][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.135476][ T5844] veth0_vlan: entered promiscuous mode
[   57.140181][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.155455][ T5844] veth1_vlan: entered promiscuous mode
[   57.186903][ T5844] veth0_macvtap: entered promiscuous mode
[   57.195113][ T5844] veth1_macvtap: entered promiscuous mode
[   57.208592][ T5852] veth0_vlan: entered promiscuous mode
[   57.221645][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.226996][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.230059][ T5852] veth1_vlan: entered promiscuous mode
[   57.238628][ T5843] veth0_vlan: entered promiscuous mode
[   57.245500][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.249285][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.256259][ T5843] veth1_vlan: entered promiscuous mode
[   57.266875][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.271568][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.293588][ T5850] Bluetooth: hci0: command tx timeout
[   57.293594][ T5237] Bluetooth: hci2: command tx timeout
[   57.304306][ T5850] Bluetooth: hci1: command tx timeout
[   57.326678][ T5843] veth0_macvtap: entered promiscuous mode
[   57.332350][ T5843] veth1_macvtap: entered promiscuous mode
[   57.363185][ T5852] veth0_macvtap: entered promiscuous mode
[   57.370268][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.386095][ T5852] veth1_macvtap: entered promiscuous mode
[   57.394503][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.394739][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.397885][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.426008][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.442589][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.448452][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.452165][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.467885][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.471669][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.477540][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.494849][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.507666][ T5861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.543305][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.553947][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.558125][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.565430][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.633398][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.636721][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.638675][ T5915] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   57.690671][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.696904][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.731397][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.741441][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.752214][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.765269][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.961971][ T5926] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   57.972816][ T5926] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   58.020316][ T5928] bond0: Unable to set up delay as MII monitoring is disabled
[   58.368813][ T5935] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.438884][ T5939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   58.443531][ T5935] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8'.
[   58.453813][ T5935] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   58.460329][ T5939] netlink: 'syz.0.10': attribute type 1 has an invalid length.
[   58.466594][ T5939] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10'.
[   58.695271][ T5886] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   58.705316][ T5886] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   58.723468][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16'.
[   58.726894][ T5958] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   58.729566][ T5958] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.757360][ T5958] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   58.759987][ T5958] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   58.764060][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   59.232060][   T24] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   59.238978][   T24] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   59.252351][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.255870][ T5987] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   59.258549][ T5987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.262035][ T5987] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   59.265688][ T5987] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   59.268204][ T5987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.326600][ T5886] IPVS: starting estimator thread 0...
[   59.328422][ T5992] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   59.364256][ T5995] bond0: Unable to set up delay as MII monitoring is disabled
[   59.373421][ T5850] Bluetooth: hci2: command tx timeout
[   59.383647][ T5850] Bluetooth: hci1: command tx timeout
[   59.383669][ T5237] Bluetooth: hci0: command tx timeout
[   59.414585][ T5993] IPVS: using max 79 ests per chain, 189600 per kthread
[   59.422583][ T5999] netlink: 'syz.1.29': attribute type 13 has an invalid length.
[   59.555564][ T6004] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.610813][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.614423][ T6006] batadv_slave_0: entered allmulticast mode
[   59.942444][ T6042] syzkaller0: entered promiscuous mode
[   59.945636][ T6042] syzkaller0: entered allmulticast mode
[   59.952526][ T6042] syzkaller0: mtu less than device minimum
[   60.116407][ T6049] Zero length message leads to an empty skb
[   60.191518][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.49'.
[   60.196747][ T6054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'.
[   60.443837][ T6072] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   60.446755][ T6072] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   60.449870][ T6072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.55'.
[   60.541553][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   61.456009][ T5237] Bluetooth: hci1: command tx timeout
[   61.458203][ T5237] Bluetooth: hci2: command tx timeout
[   61.459123][ T5850] Bluetooth: hci0: command tx timeout
[   61.487791][ T6109] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   61.490461][ T6109] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   61.630572][ T6120] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   61.765502][ T6137] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   61.869829][ T6145] sctp: [Deprecated]: syz.1.78 (pid 6145) Use of int in max_burst socket option.
[   61.869829][ T6145] Use struct sctp_assoc_value instead
[   62.194932][ T6183] tipc: Started in network mode
[   62.196839][ T6183] tipc: Node identity 52c2d1e1dd7a, cluster identity 4711
[   62.199781][ T6183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.202143][ T6185] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   62.202313][ T6183] syzkaller0: entered promiscuous mode
[   62.207777][ T6185] NCSI netlink: No device for ifindex 0
[   62.208833][ T6183] syzkaller0: entered allmulticast mode
[   62.220285][ T6185] bridge_slave_0: left allmulticast mode
[   62.222392][ T6185] bridge_slave_0: left promiscuous mode
[   62.225659][ T6185] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.231133][ T6185] bridge_slave_1: left allmulticast mode
[   62.234170][ T6185] bridge_slave_1: left promiscuous mode
[   62.236039][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.241021][ T6185] bond0: (slave bond_slave_0): Releasing backup interface
[   62.247945][ T6185] bond0: (slave bond_slave_1): Releasing backup interface
[   62.257235][ T6185] team0: Port device team_slave_0 removed
[   62.261738][ T6185] team0: Port device team_slave_1 removed
[   62.268382][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.273377][ T6185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.275881][ T6185] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.290088][ T6184] tipc: Resetting bearer <eth:syzkaller0>
[   62.292577][ T6186] team0: Mode changed to "broadcast"
[   62.299562][ T6182] tipc: Resetting bearer <eth:syzkaller0>
[   62.309281][ T6182] tipc: Disabling bearer <eth:syzkaller0>
[   62.326642][ T6185] vlan0: entered promiscuous mode
[   62.334146][ T6185] team0: Port device vlan0 added
[   62.341304][ T6185] tipc: Started in network mode
[   62.344893][ T6185] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   62.347690][ T6185] tipc: Enabled bearer <eth:team0>, priority 0
[   62.530685][   T24] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[   62.539475][   T24] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   62.549432][ T6202] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   62.552244][ T6202] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   62.644679][ T6209] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   62.655784][ T6209] warning: `syz.1.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.688117][ T6214] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   62.690479][ T6214] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   62.786912][   T24] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[   62.796019][   T24] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   62.804547][ T6227] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   62.807030][ T6227] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   62.828293][ T6225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.850391][ T6232] netlink: 'syz.2.105': attribute type 5 has an invalid length.
[   62.859958][ T6232] geneve2: entered promiscuous mode
[   62.862168][ T6232] geneve2: entered allmulticast mode
[   62.865895][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   62.870489][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   62.875027][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   62.891785][ T6225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.900587][ T6225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   62.907935][ T6230] tipc: Started in network mode
[   62.909623][ T6230] tipc: Node identity be3b8a90f2cf, cluster identity 4711
[   62.912252][ T6230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.918640][ T6230] syzkaller0: entered promiscuous mode
[   62.921079][ T6230] syzkaller0: entered allmulticast mode
[   62.929330][ T6229] tipc: Resetting bearer <eth:syzkaller0>
[   62.944647][ T6229] tipc: Disabling bearer <eth:syzkaller0>
[   62.960399][ T6225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.967304][ T6225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   63.070465][ T6225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.077407][ T6225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   63.144682][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   63.147963][ T5879] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   63.156953][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   63.160232][ T5879] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   63.175995][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   63.184114][ T5879] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   63.210314][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   63.218508][ T5879] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   63.286886][ T6265] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   63.300739][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.304413][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.474926][    T9] tipc: Node number set to 11578026
[   63.538200][ T5850] Bluetooth: hci0: command tx timeout
[   63.538246][   T55] Bluetooth: hci1: command tx timeout
[   63.556435][ T5237] Bluetooth: hci2: command tx timeout
[   63.831596][ T6315] __nla_validate_parse: 12 callbacks suppressed
[   63.831609][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'.
[   63.857576][ T6317] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   63.862617][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.124'.
[   63.867669][ T6317] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   63.879613][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'.
[   64.140452][ T6340] bond0: Unable to set up delay as MII monitoring is disabled
[   64.224426][ T6346] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   64.226963][ T6346] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   64.229653][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'.
[   64.355636][ T6361] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   64.359178][ T6361] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   64.362491][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.142'.
[   64.513937][ T6378] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   64.516698][ T6378] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   64.524857][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   64.533562][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'.
[   64.677286][ T6394] bridge_slave_0: left allmulticast mode
[   64.679225][ T6394] bridge_slave_0: left promiscuous mode
[   64.681137][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.689718][ T6394] bridge_slave_1: left allmulticast mode
[   64.692056][ T6394] bridge_slave_1: left promiscuous mode
[   64.695119][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.702643][ T6394] bond0: (slave bond_slave_0): Releasing backup interface
[   64.710902][ T6394] bond0: (slave bond_slave_1): Releasing backup interface
[   64.722423][ T6394] team0: Port device team_slave_0 removed
[   64.731664][ T6394] team0: Port device team_slave_1 removed
[   64.735597][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.739843][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.745528][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.749309][ T6394] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.860253][ T6402] syzkaller0: entered promiscuous mode
[   64.864502][ T6402] syzkaller0: entered allmulticast mode
[   64.913942][ T6404] netlink: 'syz.0.154': attribute type 1 has an invalid length.
[   65.137958][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'.
[   65.470647][ T6416] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   65.476626][ T6416] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   65.800860][ T6412] bridge_slave_1: left allmulticast mode
[   65.808682][ T6412] bridge_slave_1: left promiscuous mode
[   65.810988][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.815855][ T6412] bridge_slave_0: left allmulticast mode
[   65.817739][ T6412] bridge_slave_0: left promiscuous mode
[   65.820063][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.904528][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[   65.911429][ T6424] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   65.914948][ T6424] netlink: 236 bytes leftover after parsing attributes in process `syz.1.159'.
[   65.918875][ T6424] NCSI netlink: No device for ifindex 813332851
[   66.130878][ T6446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.138952][ T6446] syzkaller0: entered promiscuous mode
[   66.144921][ T6446] syzkaller0: entered allmulticast mode
[   66.180973][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   66.195202][ T6450] ipvlan2: entered promiscuous mode
[   66.197682][ T6450] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   66.254707][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   66.269198][ T6445] tipc: Disabling bearer <eth:syzkaller0>
[   66.440331][ T6470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.443320][ T6470] syzkaller0: entered promiscuous mode
[   66.445240][ T6470] syzkaller0: entered allmulticast mode
[   66.449425][ T6469] tipc: Resetting bearer <eth:syzkaller0>
[   66.470734][ T6469] tipc: Disabling bearer <eth:syzkaller0>
[   67.265762][ T6519] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   67.269332][ T6519] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   67.409667][ T6525] netlink: 'syz.2.190': attribute type 4 has an invalid length.
[   67.414589][ T6525] netlink: 'syz.2.190': attribute type 3 has an invalid length.
[   67.490249][ T6527] sctp: [Deprecated]: syz.2.191 (pid 6527) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.490249][ T6527] Use struct sctp_sack_info instead
[   67.854910][ T6542] netlink: 'syz.1.196': attribute type 9 has an invalid length.
[   67.865755][ T6537] netlink: 'syz.1.196': attribute type 5 has an invalid length.
[   68.108043][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.124232][ T6563] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   68.126707][ T6563] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   68.265470][ T6579] netlink: 'syz.1.213': attribute type 8 has an invalid length.
[   68.314300][ T6588] bond0: Unable to set up delay as MII monitoring is disabled
[   68.564305][ T6613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.579631][ T6612] tipc: Disabling bearer <eth:syzkaller0>
[   68.876229][ T6649] __nla_validate_parse: 16 callbacks suppressed
[   68.876243][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   68.882556][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'.
[   68.886659][ T6649] tipc: Invalid UDP bearer configuration
[   68.886700][ T6649] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.920905][ T6657] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.238'.
[   68.925649][ T6658] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.238'.
[   69.016112][ T6664] lo speed is unknown, defaulting to 1000
[   69.019952][ T6664] lo speed is unknown, defaulting to 1000
[   69.026331][ T6664] lo speed is unknown, defaulting to 1000
[   69.036341][ T6663] veth0_to_team: entered promiscuous mode
[   69.074614][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   69.091298][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'.
[   69.311450][ T6664] infiniband syz0: set active
[   69.314681][   T24] lo speed is unknown, defaulting to 1000
[   69.317399][ T6664] infiniband syz0: added lo
[   69.361218][   T24] hid-generic 0005:16BF:5505.0005: unknown main item tag 0x0
[   69.367797][ T6695] netlink: 'syz.2.247': attribute type 4 has an invalid length.
[   69.384692][   T24] hid-generic 0005:16BF:5505.0005: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   69.411345][ T6664] RDS/IB: syz0: added
[   69.414715][ T6693] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   69.418942][ T6664] smc: adding ib device syz0 with port count 1
[   69.424160][ T6693] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   69.427402][ T6664] smc:    ib device syz0 port 1 has pnetid 
[   69.430363][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'.
[   69.439724][   T24] lo speed is unknown, defaulting to 1000
[   69.446419][ T6664] lo speed is unknown, defaulting to 1000
[   69.586843][ T6700] bond0: Unable to set up delay as MII monitoring is disabled
[   69.682369][ T6664] lo speed is unknown, defaulting to 1000
[   69.718375][ T6703] syzkaller0: entered promiscuous mode
[   69.725462][ T6703] syzkaller0: entered allmulticast mode
[   69.915659][ T6664] lo speed is unknown, defaulting to 1000
[   70.197461][ T6711] syzkaller1: entered promiscuous mode
[   70.199910][ T6711] syzkaller1: entered allmulticast mode
[   70.253381][ T6715] netlink: 104 bytes leftover after parsing attributes in process `syz.0.256'.
[   70.258320][ T6715] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   70.262031][ T6715] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   70.269059][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'.
[   70.638473][ T6729] syzkaller0: entered promiscuous mode
[   70.640965][ T6729] syzkaller0: entered allmulticast mode
[   70.878004][   T24] hid-generic 0005:16BF:5505.0006: unknown main item tag 0x0
[   70.897837][   T24] hid-generic 0005:16BF:5505.0006: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   70.923059][ T6732] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   70.926383][ T6732] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   70.929499][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.260'.
[   71.602594][ T6771] IPVS: set_ctl: invalid protocol: 58 172.20.20.47:20000
[   71.708689][ T6689] Set syz1 is full, maxelem 65536 reached
[   72.259376][ T6843] syzkaller1: entered promiscuous mode
[   72.261729][ T6843] syzkaller1: entered allmulticast mode
[   72.275195][ T6843] netlink: 'syz.0.297': attribute type 15 has an invalid length.
[   73.068181][ T6921] netlink: 'syz.2.316': attribute type 4 has an invalid length.
[   73.464574][ T6963] netlink: 'syz.2.318': attribute type 8 has an invalid length.
[   73.479450][ T5913] hid-generic 0005:16BF:5505.0007: unknown main item tag 0x0
[   73.483775][ T5913] hid-generic 0005:16BF:5505.0007: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   73.494506][ T6965] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   73.497630][ T6965] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   73.751470][ T6994] veth1_macvtap: left promiscuous mode
[   73.754137][ T6994] macsec0: entered allmulticast mode
[   74.536605][ T6996] GUP no longer grows the stack in syz.1.328 (6996): 200000003000-20000000a000 (200000001000)
[   74.540709][ T6996] CPU: 1 UID: 0 PID: 6996 Comm: syz.1.328 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   74.540722][ T6996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.540726][ T6996] Call Trace:
[   74.540730][ T6996]  <TASK>
[   74.540735][ T6996]  dump_stack_lvl+0x189/0x250
[   74.540750][ T6996]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.540759][ T6996]  ? __pfx__printk+0x10/0x10
[   74.540768][ T6996]  ? find_vma+0xe7/0x160
[   74.540778][ T6996]  ? __lock_acquire+0xab9/0xd20
[   74.540794][ T6996]  __get_user_pages+0x24d0/0x2ce0
[   74.540804][ T6996]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[   74.540824][ T6996]  ? rcu_is_watching+0x15/0xb0
[   74.540834][ T6996]  __gup_longterm_locked+0xde9/0x1660
[   74.540856][ T6996]  ? sanity_check_pinned_pages+0x123a/0x1300
[   74.540894][ T6996]  gup_fast_fallback+0x1e6a/0x2010
[   74.540920][ T6996]  ? __pfx_gup_fast_fallback+0x10/0x10
[   74.540935][ T6996]  ? pin_user_pages_fast+0x4d/0xb0
[   74.540944][ T6996]  iov_iter_extract_pages+0x35a/0x5e0
[   74.540956][ T6996]  extract_iter_to_sg+0xe46/0x24e0
[   74.540973][ T6996]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   74.540990][ T6996]  ? __asan_memset+0x22/0x50
[   74.541000][ T6996]  af_alg_get_rsgl+0x436/0x810
[   74.541015][ T6996]  aead_recvmsg+0x4cc/0x13f0
[   74.541033][ T6996]  ? __pfx_aead_recvmsg+0x10/0x10
[   74.541043][ T6996]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   74.541051][ T6996]  ? __pfx_aead_recvmsg+0x10/0x10
[   74.541060][ T6996]  sock_recvmsg_nosec+0x186/0x1c0
[   74.541071][ T6996]  ____sys_recvmsg+0x3aa/0x460
[   74.541085][ T6996]  ? __pfx_____sys_recvmsg+0x10/0x10
[   74.541102][ T6996]  ? import_iovec+0x74/0xa0
[   74.541110][ T6996]  ___sys_recvmsg+0x1b5/0x510
[   74.541123][ T6996]  ? __pfx____sys_recvmsg+0x10/0x10
[   74.541146][ T6996]  ? __might_fault+0xb0/0x130
[   74.541157][ T6996]  do_recvmmsg+0x307/0x770
[   74.541171][ T6996]  ? __pfx_do_recvmmsg+0x10/0x10
[   74.541180][ T6996]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   74.541196][ T6996]  ? __pfx_do_futex+0x10/0x10
[   74.541212][ T6996]  __x64_sys_recvmmsg+0x190/0x240
[   74.541224][ T6996]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   74.541233][ T6996]  ? rcu_is_watching+0x15/0xb0
[   74.541242][ T6996]  ? do_syscall_64+0xbe/0x3b0
[   74.541254][ T6996]  do_syscall_64+0xfa/0x3b0
[   74.541262][ T6996]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.541270][ T6996]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.541277][ T6996]  ? exc_page_fault+0x9f/0xf0
[   74.541286][ T6996]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.541293][ T6996] RIP: 0033:0x7f086df8ebe9
[   74.541300][ T6996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   74.541307][ T6996] RSP: 002b:00007f086ed23038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   74.541316][ T6996] RAX: ffffffffffffffda RBX: 00007f086e1b5fa0 RCX: 00007f086df8ebe9
[   74.541321][ T6996] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000f
[   74.541326][ T6996] RBP: 00007f086e011e19 R08: 0000000000000000 R09: 0000000000000000
[   74.541330][ T6996] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   74.541334][ T6996] R13: 00007f086e1b6038 R14: 00007f086e1b5fa0 R15: 00007ffdb02ba588
[   74.541346][ T6996]  </TASK>
[   74.693432][ T6996] __nla_validate_parse: 71 callbacks suppressed
[   74.693443][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   74.699423][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   75.706495][ T7091] bond0: Unable to set up delay as MII monitoring is disabled
[   75.780695][ T7095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'.
[   75.783723][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.344'.
[   75.925145][ T7101] netlink: 'syz.2.347': attribute type 10 has an invalid length.
[   75.936653][ T7101] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.032245][ T7110] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   76.043963][ T7110] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   76.050215][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'.
[   76.075640][ T7120] bond0: Unable to set up delay as MII monitoring is disabled
[   77.199819][ T7168] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   77.202303][ T7168] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   77.206918][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'.
[   77.250172][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   77.291167][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'.
[   77.332177][ T7172] tipc: Resetting bearer <eth:team0>
[   77.390602][ T7172] veth0_to_team: left promiscuous mode
[   77.408144][ T7172] batadv_slave_0: left allmulticast mode
[   77.457940][ T7172] vlan0: left promiscuous mode
[   77.519515][ T7172] geneve2: left promiscuous mode
[   77.521360][ T7172] geneve2: left allmulticast mode
[   77.539367][ T5861] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   77.544411][ T5861] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.547759][ T5861] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   77.551407][ T5861] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.557376][ T5861] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   77.560915][ T5861] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.575122][ T5861] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   77.578622][ T5861] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[   77.669647][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'.
[   77.833860][ T7205] tc_dump_action: action bad kind
[   77.876993][ T7210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.883992][ T7210] syzkaller0: entered promiscuous mode
[   77.886320][ T7210] syzkaller0: entered allmulticast mode
[   77.999112][   T52] hid-generic 0005:16BF:5505.0008: unknown main item tag 0x0
[   78.004189][   T52] hid-generic 0005:16BF:5505.0008: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.023593][ T7226] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   78.027901][ T7226] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   78.030916][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'.
[   78.123771][ T7236] : entered promiscuous mode
[   78.284743][ T7185] hid-generic 0005:16BF:5505.0009: unknown main item tag 0x0
[   78.294105][ T7185] hid-generic 0005:16BF:5505.0009: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.303574][ T7259] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   78.307111][ T7259] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   78.310932][ T7259] sctp: [Deprecated]: syz.0.393 (pid 7259) Use of int in max_burst socket option.
[   78.310932][ T7259] Use struct sctp_assoc_value instead
[   78.379435][ T7271] netlink: 'syz.2.396': attribute type 2 has an invalid length.
[   78.387181][ T7271] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[   78.468997][ T7280] bond1: entered promiscuous mode
[   78.470991][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.518002][ T7280] bond1 (unregistering): Released all slaves
[   78.528317][ T7282] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   78.627095][ T7202] tipc: Resetting bearer <eth:syzkaller0>
[   78.643551][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[   78.934542][ T7315] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.947352][ T7315] syzkaller0: entered promiscuous mode
[   78.950746][ T7315] syzkaller0: entered allmulticast mode
[   79.680333][ T7366] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[   79.686589][ T7366] NCSI netlink: No device for ifindex 813332851
[   79.688858][ T7364] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[   79.691396][ T7364] NCSI netlink: No device for ifindex 813332851
[   79.694382][ T7307] tipc: Resetting bearer <eth:syzkaller0>
[   79.714475][ T7307] tipc: Disabling bearer <eth:syzkaller0>
[   79.807986][ T7376] __nla_validate_parse: 9 callbacks suppressed
[   79.808000][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'.
[   79.848599][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[   79.897716][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'.
[   80.216201][ T7417] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   80.219695][ T7417] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:19999
[   80.222861][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'.
[   80.313166][ T7422] netlink: 'syz.1.455': attribute type 9 has an invalid length.
[   80.446818][ T7433] Set syz1 is full, maxelem 65536 reached
[   80.448054][ T7431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.452536][ T7431] syzkaller0: entered promiscuous mode
[   80.456087][ T7431] syzkaller0: entered allmulticast mode
[   80.460540][ T7430] tipc: Resetting bearer <eth:syzkaller0>
[   80.471121][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[   80.694207][ T7458] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[   80.715495][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.727817][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.730275][ T7458] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   80.736531][ T7458] bond1: (slave vcan1): Error -95 calling set_mac_address
[   80.792265][ T7467] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   80.798157][ T7467] netlink: 'syz.0.470': attribute type 6 has an invalid length.
[   80.800965][ T7467] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   81.127505][ T7500] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[   81.131023][ T7500] netlink: 244 bytes leftover after parsing attributes in process `syz.2.482'.
[   81.180623][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[   81.181650][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'.
[   81.210887][ T7507] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.217352][ T7512] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.217688][   T10] cfg80211: failed to load regulatory.db
[   81.223576][ T7509] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   81.226180][ T7509] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   81.231660][ T7513] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.235288][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.484'.
[   81.243834][ T7513] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   81.497629][ T7535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.500425][ T7535] syzkaller0: entered promiscuous mode
[   81.502301][ T7535] syzkaller0: entered allmulticast mode
[   81.506697][ T7534] tipc: Resetting bearer <eth:syzkaller0>
[   81.520645][ T7534] tipc: Disabling bearer <eth:syzkaller0>
[   81.577626][ T7544] netlink: 112 bytes leftover after parsing attributes in process `syz.1.499'.
[   81.736285][ T7556] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   81.756807][ T7556] bond0: (slave bond_slave_0): Releasing backup interface
[   81.762206][ T7556] bond0: (slave bond_slave_1): Releasing backup interface
[   81.774581][ T7556] team0: Port device team_slave_0 removed
[   81.781602][ T7556] team0: Port device team_slave_1 removed
[   81.790647][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.799237][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.856912][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.859967][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.871103][   T24] lo speed is unknown, defaulting to 1000
[   81.930524][ T7556] netlink: 'syz.0.505': attribute type 10 has an invalid length.
[   81.936903][ T7556] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   81.945146][ T7556] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   81.959068][ T7556] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.965658][ T7556] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.077623][ T7563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.081143][ T7563] syzkaller0: entered promiscuous mode
[   82.083971][ T7563] syzkaller0: entered allmulticast mode
[   82.090183][ T7562] tipc: Resetting bearer <eth:syzkaller0>
[   82.103727][ T7562] tipc: Disabling bearer <eth:syzkaller0>
[   82.345765][ T7572] macvtap0: refused to change device tx_queue_len
[   82.673582][ T7596] netlink: 'syz.0.518': attribute type 8 has an invalid length.
[   82.751071][ T7601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.754269][ T7601] syzkaller0: entered promiscuous mode
[   82.756554][ T7601] syzkaller0: entered allmulticast mode
[   82.764885][ T7600] tipc: Resetting bearer <eth:syzkaller0>
[   82.785732][ T7600] tipc: Disabling bearer <eth:syzkaller0>
[   82.794539][ T7606] netem: incorrect gi model size
[   82.796820][ T7606] netem: change failed
[   82.799064][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.522'.
[   83.126436][ T7628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.129254][ T7628] syzkaller0: entered promiscuous mode
[   83.131368][ T7628] syzkaller0: entered allmulticast mode
[   83.154205][ T7627] tipc: Resetting bearer <eth:syzkaller0>
[   83.170695][ T7627] tipc: Disabling bearer <eth:syzkaller0>
[   83.418561][ T7654] netlink: 'syz.1.544': attribute type 20 has an invalid length.
[   83.448688][ T7666] syzkaller0: entered promiscuous mode
[   83.450539][ T7666] syzkaller0: entered allmulticast mode
[   83.870474][ T7709] syzkaller1: entered promiscuous mode
[   83.873962][ T7709] syzkaller1: entered allmulticast mode
[   84.046508][ T7728] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   84.074755][ T7731] netlink: 'syz.2.566': attribute type 1 has an invalid length.
[   84.362550][ T7741] netlink: 'syz.1.575': attribute type 6 has an invalid length.
[   84.373228][ T7741] netlink: 'syz.1.575': attribute type 6 has an invalid length.
[   84.580034][ T7754] nbd: must specify at least one socket
[   84.675997][ T7761] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   84.766928][ T7768] hsr0: entered promiscuous mode
[   84.775245][ T7768] hsr_slave_0: left promiscuous mode
[   84.779905][ T7768] hsr_slave_1: left promiscuous mode
[   84.797360][ T7768] hsr0 (unregistering): left promiscuous mode
[   84.833462][ T7771] netlink: 'syz.1.585': attribute type 8 has an invalid length.
[   85.041138][ T7798] __nla_validate_parse: 11 callbacks suppressed
[   85.041147][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'.
[   85.089177][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[   85.092301][ T7807] netlink: 'syz.0.602': attribute type 15 has an invalid length.
[   85.102334][ T5879] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.102381][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[   85.110397][ T7807] netlink: 'syz.0.602': attribute type 15 has an invalid length.
[   85.111283][ T5879] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.117575][ T5879] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.123441][ T5861] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.204814][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'.
[   85.356537][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'.
[   85.929423][   T10] hid-generic 0005:16BF:5505.000A: unknown main item tag 0x0
[   85.942297][   T10] hid-generic 0005:16BF:5505.000A: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   85.963334][ T7853] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   85.966534][ T7853] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   85.977053][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.616'.
[   86.138614][ T7866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.619'.
[   86.219949][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'.
[   86.297107][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[   86.949638][   T24] lo speed is unknown, defaulting to 1000
[   86.949701][ T5861] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.951782][   T24] syz0: Port: 1 Link DOWN
[   86.959880][ T5861] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.964012][ T5861] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.967125][ T5861] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.982457][   T24] lo speed is unknown, defaulting to 1000
[   86.986132][ T5861] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.989666][ T5861] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.995346][ T5861] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   86.998790][ T5861] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.051159][ T7897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.054937][ T7897] syzkaller0: entered promiscuous mode
[   87.057231][ T7897] syzkaller0: entered allmulticast mode
[   87.061549][ T7896] tipc: Resetting bearer <eth:syzkaller0>
[   87.070720][ T7896] tipc: Disabling bearer <eth:syzkaller0>
[   87.555744][ T5861] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.558370][ T5861] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.561102][ T5861] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.564368][ T5861] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.966144][   T10] hid-generic 0005:16BF:5505.000B: unknown main item tag 0x0
[   87.969523][   T10] hid-generic 0005:16BF:5505.000B: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   87.979219][ T7921] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   87.981552][ T7921] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:19999
[   88.084930][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.640'.
[   88.094137][ T7933] netlink: zone id is out of range
[   88.095853][ T7933] netlink: zone id is out of range
[   88.097549][ T7933] netlink: zone id is out of range
[   88.099253][ T7933] netlink: zone id is out of range
[   88.101200][ T7933] netlink: zone id is out of range
[   88.104676][ T7933] netlink: zone id is out of range
[   88.106335][ T7933] netlink: zone id is out of range
[   88.108027][ T7933] netlink: zone id is out of range
[   88.109754][ T7933] netlink: zone id is out of range
[   88.215680][ T7937] syzkaller0: entered promiscuous mode
[   88.218161][ T7937] syzkaller0: entered allmulticast mode
[   88.379475][ T7953] netlink: 'syz.1.646': attribute type 2 has an invalid length.
[   89.065659][ T7952] net_ratelimit: 25 callbacks suppressed
[   89.065669][ T7952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.103603][ T7958] bond0: Unable to set up delay as MII monitoring is disabled
[   89.369751][ T7989] bond0: Unable to set up delay as MII monitoring is disabled
[   89.375142][ T7990] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[   89.393682][ T7990] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.403975][ T7990] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.407054][ T7990] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[   89.414953][ T7990] bond2: (slave vcan1): Error -95 calling set_mac_address
[   89.437468][   T10] hid-generic 0005:16BF:5505.000C: unknown main item tag 0x0
[   89.442130][   T10] hid-generic 0005:16BF:5505.000C: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   89.448824][ T7993] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:21
[   89.452170][ T7993] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:19999
[   89.465792][ T7995] gretap2: entered promiscuous mode
[   89.471467][ T7995] bond2: (slave gretap2): making interface the new active one
[   89.476285][ T7995] bond2: (slave gretap2): Enslaving as an active interface with an up link
[   89.666933][ T8013] netlink: 'syz.0.665': attribute type 10 has an invalid length.
[   89.667675][ T8014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.669852][ T8012] netlink: 'syz.0.665': attribute type 10 has an invalid length.
[   89.673782][ T8014] syzkaller0: entered promiscuous mode
[   89.678659][ T8014] syzkaller0: entered allmulticast mode
[   89.685464][ T8013] veth0_vlan: left promiscuous mode
[   89.687378][ T8013] veth0_vlan: entered promiscuous mode
[   89.689430][ T8013] veth0_vlan: entered allmulticast mode
[   89.694561][ T8013] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   89.700040][ T8012] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   89.707276][ T8011] tipc: Resetting bearer <eth:syzkaller0>
[   89.721359][ T8011] tipc: Disabling bearer <eth:syzkaller0>
[   90.725452][ T8036] netlink: 'syz.0.674': attribute type 1 has an invalid length.
[   90.790269][ T8040] __nla_validate_parse: 10 callbacks suppressed
[   90.790279][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.677'.
[   90.950345][ T8048] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.954254][ T8048] syzkaller0: entered promiscuous mode
[   90.956230][ T8048] syzkaller0: entered allmulticast mode
[   91.047338][ T8046] tipc: Resetting bearer <eth:syzkaller0>
[   91.062181][ T8046] tipc: Disabling bearer <eth:syzkaller0>
[   91.116852][ T8060] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[   91.167111][ T8065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.170418][ T8065] syzkaller0: entered promiscuous mode
[   91.175097][ T8065] syzkaller0: entered allmulticast mode
[   91.179895][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[   91.196284][ T8064] tipc: Disabling bearer <eth:syzkaller0>
[   91.447689][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[   91.451168][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[   91.508070][ T8089] syzkaller0: entered promiscuous mode
[   91.510669][ T8089] syzkaller0: entered allmulticast mode
[   91.514683][ T8088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.519531][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[   91.519896][ T8090] netlink: 100 bytes leftover after parsing attributes in process `syz.0.695'.
[   91.526225][ T8088] netlink: 56 bytes leftover after parsing attributes in process `syz.0.695'.
[   91.529256][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'.
[   91.536324][ T8087] tipc: Resetting bearer <eth:syzkaller0>
[   91.545422][ T8087] tipc: Disabling bearer <eth:syzkaller0>
[   91.634591][ T8094] atomic_op ffff88803ae93198 conn xmit_atomic 0000000000000000
[   91.801914][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'.
[   91.806636][ T8105] batadv_slave_0: entered promiscuous mode
[   91.870210][ T8103] batadv_slave_0: left promiscuous mode
[   92.158523][ T8125] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   92.191004][ T8127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.709'.
[   92.395003][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.714'.
[   93.259017][ T8171] bond0: Unable to set up delay as MII monitoring is disabled
[   93.343752][ T8174] raw_sendmsg: syz.0.724 forgot to set AF_INET. Fix it!
[   93.672136][ T8185] netlink: 'syz.2.729': attribute type 1 has an invalid length.
[   93.696016][ T8185] 8021q: adding VLAN 0 to HW filter on device bond4
[   93.701921][ T8186] erspan0: entered allmulticast mode
[   93.708319][ T8186] bond4: (slave erspan0): making interface the new active one
[   93.711745][ T8186] bond4: (slave erspan0): Enslaving as an active interface with an up link
[   93.718096][ T8186] syz.2.729 (8186) used greatest stack depth: 20184 bytes left
[   93.749740][ T8190] netlink: 'syz.2.730': attribute type 4 has an invalid length.
[   93.754132][ T8190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'.
[   93.797790][ T8192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.802251][ T8191] tipc: Disabling bearer <eth:syzkaller0>
[   94.183823][ T8211] netlink: 'syz.0.738': attribute type 4 has an invalid length.
[   94.545654][ T8232] syzkaller0: entered promiscuous mode
[   94.548036][ T8232] syzkaller0: entered allmulticast mode
[   94.617466][ T8234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.621036][ T8234] syzkaller0: entered promiscuous mode
[   94.626968][ T8234] syzkaller0: entered allmulticast mode
[   94.717623][ T8233] tipc: Resetting bearer <eth:syzkaller0>
[   94.730829][ T8233] tipc: Disabling bearer <eth:syzkaller0>
[   94.929765][ T8250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.932611][ T8250] syzkaller0: entered promiscuous mode
[   94.935146][ T8250] syzkaller0: entered allmulticast mode
[   94.939609][ T8249] tipc: Resetting bearer <eth:syzkaller0>
[   94.952126][ T8249] tipc: Disabling bearer <eth:syzkaller0>
[   95.028664][ T8254] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   95.205962][ T8271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.208625][ T8271] syzkaller0: entered promiscuous mode
[   95.210457][ T8271] syzkaller0: entered allmulticast mode
[   95.215348][ T8269] tipc: Resetting bearer <eth:syzkaller0>
[   95.226258][ T8269] tipc: Disabling bearer <eth:syzkaller0>
[   95.535312][ T8293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.538627][ T8293] syzkaller0: entered promiscuous mode
[   95.541145][ T8293] syzkaller0: entered allmulticast mode
[   95.546645][ T8292] tipc: Resetting bearer <eth:syzkaller0>
[   95.557398][ T8292] tipc: Disabling bearer <eth:syzkaller0>
[   96.033899][ T8311] syzkaller1: entered promiscuous mode
[   96.036416][ T8311] syzkaller1: entered allmulticast mode
[   96.044682][ T8311] Unsupported ieee802154 address type: 0
[   96.130125][ T8314] bond0: Unable to set up delay as MII monitoring is disabled
[   96.182343][ T8318] batadv_slave_1: entered promiscuous mode
[   96.186888][ T8317] batadv_slave_1: left promiscuous mode
[   96.342983][ T8333] __nla_validate_parse: 3 callbacks suppressed
[   96.342994][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.790'.
[   96.645960][ T8373] bond0: Unable to set up delay as MII monitoring is disabled
[   96.765079][ T8382] openvswitch: netlink: Key type 12304 is out of range max 32
[   96.839674][ T8389] netlink: 236 bytes leftover after parsing attributes in process `syz.0.809'.
[   96.896048][ T8396] IPv6: NLM_F_REPLACE set, but no existing node found!
[   97.085066][ T8409] bond0: Unable to set up delay as MII monitoring is disabled
[   97.136646][ T8411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.140238][ T8411] syzkaller0: entered promiscuous mode
[   97.142654][ T8411] syzkaller0: entered allmulticast mode
[   97.147543][ T8410] tipc: Resetting bearer <eth:syzkaller0>
[   97.157997][ T8410] tipc: Disabling bearer <eth:syzkaller0>
[   97.405159][ T8422] nbd: couldn't find device at index 536870912
[   97.411560][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.821'.
[   97.629891][ T8435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.824'.
[   97.652675][ T8436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.657393][ T8438] syzkaller0: entered promiscuous mode
[   97.659793][ T8438] syzkaller0: entered allmulticast mode
[   97.699099][ T8436] tipc: Resetting bearer <eth:syzkaller0>
[   97.709312][ T8436] tipc: Disabling bearer <eth:syzkaller0>
[   97.758735][ T8444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.762665][ T8444] syzkaller0: entered promiscuous mode
[   97.765362][ T8444] syzkaller0: entered allmulticast mode
[   97.770341][ T8443] tipc: Resetting bearer <eth:syzkaller0>
[   97.786594][ T8443] tipc: Disabling bearer <eth:syzkaller0>
[   97.976900][ T8461] bond0: Unable to set up delay as MII monitoring is disabled
[   98.047717][ T8465] sctp: [Deprecated]: syz.1.836 (pid 8465) Use of int in max_burst socket option.
[   98.047717][ T8465] Use struct sctp_assoc_value instead
[   98.063660][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'.
[   98.067825][ T8458] netlink: 'syz.2.830': attribute type 8 has an invalid length.
[   98.077532][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'.
[   98.109225][ T8465] bond1: entered promiscuous mode
[   98.111599][ T8465] bond1: entered allmulticast mode
[   98.118996][ T8465] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.236603][ T8479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.239524][ T8479] syzkaller0: entered promiscuous mode
[   98.241423][ T8479] syzkaller0: entered allmulticast mode
[   98.251465][ T8478] tipc: Resetting bearer <eth:syzkaller0>
[   98.272408][ T8478] tipc: Disabling bearer <eth:syzkaller0>
[   98.364480][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.842'.
[   98.369394][ T8485] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[   98.372414][ T8485] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[   98.552510][ T8501] netlink: 'syz.0.848': attribute type 2 has an invalid length.
[   98.562078][ T8501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'.
[   98.589316][ T8506] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   98.699201][ T8514] netlink: 364 bytes leftover after parsing attributes in process `syz.1.853'.
[   98.704752][ T8514] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   98.711287][ T8512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.715215][ T8514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.853'.
[   98.720180][ T8512] syzkaller0: entered promiscuous mode
[   98.722581][ T8512] syzkaller0: entered allmulticast mode
[   98.727323][ T8511] tipc: Resetting bearer <eth:syzkaller0>
[   98.764721][ T8511] tipc: Disabling bearer <eth:syzkaller0>
[   98.896304][ T8539] openvswitch: netlink: Tunnel attr 0 has unexpected len 11 expected 8
[   98.954014][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.981436][ T8551] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   98.987137][ T8551] bond4: (slave erspan0): Releasing active interface
[   98.992425][ T8551] bond0: (slave dummy0): Releasing backup interface
[   98.998002][ T8551] team0: Port device vlan0 removed
[   99.000651][ T8551] bond2: (slave gretap2): Releasing active interface
[   99.013275][ T8551] netlink: 'syz.2.864': attribute type 10 has an invalid length.
[   99.020151][ T8551] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   99.026609][ T8551] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.032529][ T8551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.038322][ T8551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.635235][ T8577] netlink: 'syz.1.873': attribute type 4 has an invalid length.
[  100.978838][ T8618] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  101.320733][ T8628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.326076][ T8628] syzkaller0: entered promiscuous mode
[  101.329126][ T8628] syzkaller0: entered allmulticast mode
[  101.336601][ T8627] tipc: Resetting bearer <eth:syzkaller0>
[  101.349540][ T8627] tipc: Disabling bearer <eth:syzkaller0>
[  101.451876][ T8639] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  101.459702][ T8639] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  101.469270][ T8642] __nla_validate_parse: 6 callbacks suppressed
[  101.469280][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.476241][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.494986][ T8645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.498271][ T8645] syzkaller0: entered promiscuous mode
[  101.500328][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.503426][ T8645] syzkaller0: entered allmulticast mode
[  101.505412][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.513188][ T8645] tipc: Resetting bearer <eth:syzkaller0>
[  101.515257][ T8645] syzkaller0: tun_net_xmit 90
[  101.518233][ T8643] tipc: Resetting bearer <eth:syzkaller0>
[  101.529033][ T8643] tipc: Disabling bearer <eth:syzkaller0>
[  101.542929][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.545927][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.901'.
[  101.626627][ T8653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.629405][ T8653] syzkaller0: entered promiscuous mode
[  101.631580][ T8653] syzkaller0: entered allmulticast mode
[  101.635233][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'.
[  101.649418][ T8652] tipc: Resetting bearer <eth:syzkaller0>
[  101.658780][ T8652] tipc: Disabling bearer <eth:syzkaller0>
[  101.678622][ T8655] vlan4: entered allmulticast mode
[  101.680820][ T8655] bridge0: entered allmulticast mode
[  101.684402][ T8655] bridge3: port 1(vlan4) entered blocking state
[  101.687133][ T8655] bridge3: port 1(vlan4) entered disabled state
[  101.691329][ T8655] vlan4: entered promiscuous mode
[  101.693789][ T8655] bridge0: entered promiscuous mode
[  101.706640][ T8655] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  101.758714][ T8660] netlink: 'syz.1.907': attribute type 1 has an invalid length.
[  101.789930][ T8666] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  101.903824][ T8678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.907217][ T8678] syzkaller0: entered promiscuous mode
[  101.913507][ T8678] syzkaller0: entered allmulticast mode
[  101.919680][ T8677] tipc: Resetting bearer <eth:syzkaller0>
[  101.936093][ T8677] tipc: Disabling bearer <eth:syzkaller0>
[  101.940912][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'.
[  101.945213][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'.
[  101.970534][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'.
[  102.010786][ T8680] lo speed is unknown, defaulting to 1000
[  102.279263][ T8713] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  102.344952][ T8717] netlink: 'syz.2.926': attribute type 2 has an invalid length.
[  102.824898][ T8761] netlink: 'syz.0.945': attribute type 1 has an invalid length.
[  102.867125][ T8767] bridge4: entered promiscuous mode
[  102.869466][ T8767] bridge4: entered allmulticast mode
[  102.879706][ T8769] syzkaller1: entered promiscuous mode
[  102.882113][ T8769] syzkaller1: entered allmulticast mode
[  103.435493][ T8804] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.438699][ T8805] syzkaller0: entered promiscuous mode
[  103.441255][ T8805] syzkaller0: entered allmulticast mode
[  103.463006][ T8806] tipc: Resetting bearer <eth:syzkaller0>
[  103.472318][ T8803] tipc: Resetting bearer <eth:syzkaller0>
[  103.483202][ T8803] tipc: Disabling bearer <eth:syzkaller0>
[  103.673620][ T8810] nbd2: detected capacity change from 0 to 63
[  103.682553][ T8816] block nbd2: NBD_DISCONNECT
[  103.685225][ T8816] block nbd2: Disconnected due to user request.
[  103.691050][ T8816] block nbd2: shutting down sockets
[  103.695838][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.699914][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.703933][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.707705][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.710546][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.713565][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  103.716453][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.719475][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  103.723146][ T8412] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.728259][ T8412] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.732269][ T8412] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.738559][ T8412] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.741970][ T8412] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.748387][ T8412] Buffer I/O error on dev nbd2, logical block 2, async page read
[  103.751886][ T8412] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.763566][ T8412] Buffer I/O error on dev nbd2, logical block 3, async page read
[  103.767239][ T8412] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.775308][ T8412] Buffer I/O error on dev nbd2, logical block 0, async page read
[  103.780517][ T8412] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  103.785315][ T8412] Buffer I/O error on dev nbd2, logical block 1, async page read
[  103.792357][ T8412] ldm_validate_partition_table(): Disk read failed.
[  103.800919][ T8412] Dev nbd2: unable to read RDB block 0
[  103.806909][ T8412]  nbd2: unable to read partition table
[  103.827730][ T8412] ldm_validate_partition_table(): Disk read failed.
[  103.830816][ T8412] Dev nbd2: unable to read RDB block 0
[  103.859522][ T8412]  nbd2: unable to read partition table
[  103.923672][ T8828] bond6: entered promiscuous mode
[  103.926931][ T8828] bond6: entered allmulticast mode
[  103.929529][ T8828] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.232131][ T8878] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  104.325728][ T8884] lo speed is unknown, defaulting to 1000
[  105.030171][ T8929] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  105.218863][ T8945] netlink: 'syz.1.1012': attribute type 10 has an invalid length.
[  105.225104][ T8945] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.301693][ T8957] rdma_op ffff88803a8561f0 conn xmit_rdma 0000000000000000
[  105.545143][ T8996] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  105.580675][ T9004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.584492][ T9004] syzkaller0: entered promiscuous mode
[  105.586511][ T9004] syzkaller0: entered allmulticast mode
[  105.589670][ T9003] tipc: Resetting bearer <eth:syzkaller0>
[  105.598431][ T9003] tipc: Disabling bearer <eth:syzkaller0>
[  105.761604][ T9018] netlink: 'syz.1.1034': attribute type 1 has an invalid length.
[  106.532320][ T9038] __nla_validate_parse: 16 callbacks suppressed
[  106.532333][ T9038] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1041'.
[  106.744251][ T9072] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  106.841252][ T9083] veth1_virt_wifi: entered allmulticast mode
[  106.962520][ T9093] netlink: 'syz.1.1059': attribute type 4 has an invalid length.
[  106.986275][ T9093] netlink: 'syz.1.1059': attribute type 4 has an invalid length.
[  106.997576][ T9093] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1059'.
[  107.122599][ T9107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.128839][ T9107] syzkaller0: entered promiscuous mode
[  107.130774][ T9107] syzkaller0: entered allmulticast mode
[  107.257881][ T9115] ip6gre1: entered allmulticast mode
[  107.267640][ T9098] tipc: Resetting bearer <eth:syzkaller0>
[  107.279056][ T9098] tipc: Disabling bearer <eth:syzkaller0>
[  108.565629][ T9135] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1076'.
[  108.580030][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'.
[  108.730735][ T9137] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  108.893944][ T9153] netlink: 'syz.0.1081': attribute type 32 has an invalid length.
[  109.123395][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'.
[  109.330677][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1105'.
[  109.454748][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'.
[  109.459713][ T9231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.462480][ T9231] syzkaller0: entered promiscuous mode
[  109.470237][ T9231] syzkaller0: entered allmulticast mode
[  109.474966][ T9230] tipc: Resetting bearer <eth:syzkaller0>
[  109.483256][ T9230] tipc: Disabling bearer <eth:syzkaller0>
[  109.563752][ T9241] netlink: 'syz.2.1117': attribute type 10 has an invalid length.
[  109.566454][ T9241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1117'.
[  109.578239][ T9241] veth0_vlan: left promiscuous mode
[  109.580438][ T9241] veth0_vlan: entered promiscuous mode
[  109.582269][ T9241] veth0_vlan: entered allmulticast mode
[  109.589617][ T9241] bridge0: port 1(veth0_vlan) entered blocking state
[  109.592181][ T9241] bridge0: port 1(veth0_vlan) entered disabled state
[  109.598077][ T9241] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  109.760374][ T9260] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  109.764456][ T9260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.771727][ T9260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.774486][ T9260] syzkaller0: entered promiscuous mode
[  109.776438][ T9260] syzkaller0: entered allmulticast mode
[  109.792903][ T9259] tipc: Resetting bearer <eth:syzkaller0>
[  109.813635][ T9259] tipc: Disabling bearer <eth:syzkaller0>
[  110.047972][ T9282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1131'.
[  110.065628][ T9287] syzkaller0: entered promiscuous mode
[  110.067472][ T9287] syzkaller0: entered allmulticast mode
[  110.080090][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'.
[  110.114228][ T9295] batadv_slave_1: entered promiscuous mode
[  110.123860][ T9287] lo speed is unknown, defaulting to 1000
[  110.252968][ T9305] pimreg3: entered allmulticast mode
[  110.315883][ T9310] IPv6: NLM_F_REPLACE set, but no existing node found!
[  110.448791][ T9318] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  110.462402][ T9322] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  111.330045][ T9331] netlink: 'syz.0.1147': attribute type 5 has an invalid length.
[  111.335194][ T9331] netlink: 'syz.0.1147': attribute type 5 has an invalid length.
[  111.582528][ T9353] __nla_validate_parse: 3 callbacks suppressed
[  111.582544][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'.
[  111.600899][ T9353] netlink: 'syz.2.1154': attribute type 7 has an invalid length.
[  111.604631][ T9353] netlink: 'syz.2.1154': attribute type 8 has an invalid length.
[  111.607755][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  111.828331][ T9366] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  111.831187][ T9366] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1160'.
[  111.836409][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1160'.
[  112.030107][ T9393] xt_limit: Overflow, try lower: 604147548/4200216962
[  112.096644][ T9404] Bluetooth: MGMT ver 1.23
[  112.509126][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'.
[  112.515523][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'.
[  112.531017][ T9454] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  112.540404][ T9455] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  112.703783][ T9483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.726249][ T9483] syzkaller0: entered promiscuous mode
[  112.728024][ T9483] syzkaller0: entered allmulticast mode
[  112.740260][ T9483] tipc: Resetting bearer <eth:syzkaller0>
[  112.744648][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'.
[  112.748841][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'.
[  112.756211][ T9482] tipc: Resetting bearer <eth:syzkaller0>
[  112.812953][ T9492] Bluetooth: MGMT ver 1.23
[  113.642682][ T9482] tipc: Disabling bearer <eth:syzkaller0>
[  113.703535][ T9502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1214'.
[  113.747107][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'.
[  113.778818][ T9509] bond3: entered promiscuous mode
[  113.780672][ T9509] bond3: entered allmulticast mode
[  113.782685][ T9509] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.795637][ T9509] bond4: entered promiscuous mode
[  113.797412][ T9509] bond4: entered allmulticast mode
[  113.799297][ T9509] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.841444][ T9509] bond5: entered promiscuous mode
[  113.849754][ T9509] bond5: entered allmulticast mode
[  113.851816][ T9509] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.893909][ T9523] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  114.010723][ T9537] IPv6: NLM_F_CREATE should be specified when creating new route
[  114.143668][    C1] ==================================================================
[  114.146954][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  114.150153][    C1] Write of size 8 at addr ffff888107ed0db0 by task ksoftirqd/1/23
[  114.154033][    C1] 
[  114.155027][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  114.155041][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.155048][    C1] Call Trace:
[  114.155053][    C1]  <TASK>
[  114.155058][    C1]  dump_stack_lvl+0x189/0x250
[  114.155075][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  114.155089][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.155099][    C1]  ? __kasan_check_byte+0x12/0x40
[  114.155114][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.155126][    C1]  ? rcu_is_watching+0x15/0xb0
[  114.155136][    C1]  ? lock_release+0x4b/0x3e0
[  114.155153][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  114.155165][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  114.155179][    C1]  print_report+0xca/0x240
[  114.155190][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  114.155209][    C1]  kasan_report+0x118/0x150
[  114.155224][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  114.155260][    C1]  __xfrm_state_delete+0x696/0xca0
[  114.155280][    C1]  xfrm_timer_handler+0x18f/0xa00
[  114.155294][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.155308][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  114.155320][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.155335][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.155345][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.155357][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.155371][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.155384][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  114.155400][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  114.155412][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  114.155426][    C1]  handle_softirqs+0x286/0x870
[  114.155437][    C1]  ? run_ksoftirqd+0x9b/0x100
[  114.155451][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  114.155462][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.155473][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.155483][    C1]  run_ksoftirqd+0x9b/0x100
[  114.155493][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  114.155508][    C1]  smpboot_thread_fn+0x542/0xa60
[  114.155518][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.155531][    C1]  kthread+0x711/0x8a0
[  114.155544][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  114.155553][    C1]  ? __pfx_kthread+0x10/0x10
[  114.155568][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.155578][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.155590][    C1]  ? __pfx_kthread+0x10/0x10
[  114.155602][    C1]  ret_from_fork+0x3fc/0x770
[  114.155614][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  114.155626][    C1]  ? __switch_to_asm+0x39/0x70
[  114.155638][    C1]  ? __switch_to_asm+0x33/0x70
[  114.155652][    C1]  ? __pfx_kthread+0x10/0x10
[  114.155663][    C1]  ret_from_fork_asm+0x1a/0x30
[  114.155682][    C1]  </TASK>
[  114.155686][    C1] 
[  114.263934][    C1] Allocated by task 6715:
[  114.265772][    C1]  kasan_save_track+0x3e/0x80
[  114.267697][    C1]  __kasan_slab_alloc+0x6c/0x80
[  114.269699][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  114.271974][    C1]  xfrm_state_alloc+0x24/0x2f0
[  114.273978][    C1]  __find_acq_core+0x8a7/0x1c00
[  114.276035][    C1]  xfrm_find_acq+0x78/0xa0
[  114.277913][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  114.279981][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  114.282084][    C1]  netlink_rcv_skb+0x208/0x470
[  114.284068][    C1]  xfrm_netlink_rcv+0x79/0x90
[  114.286037][    C1]  netlink_unicast+0x82f/0x9e0
[  114.288015][    C1]  netlink_sendmsg+0x805/0xb30
[  114.289999][    C1]  __sock_sendmsg+0x21c/0x270
[  114.291976][    C1]  ____sys_sendmsg+0x505/0x830
[  114.293936][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  114.295857][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  114.297946][    C1]  do_syscall_64+0xfa/0x3b0
[  114.299809][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.302193][    C1] 
[  114.303268][    C1] Freed by task 52:
[  114.304852][    C1]  kasan_save_track+0x3e/0x80
[  114.306822][    C1]  kasan_save_free_info+0x46/0x50
[  114.308921][    C1]  __kasan_slab_free+0x5b/0x80
[  114.310873][    C1]  kmem_cache_free+0x18f/0x400
[  114.312770][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  114.314829][    C1]  process_scheduled_works+0xae1/0x17b0
[  114.317064][    C1]  worker_thread+0x8a0/0xda0
[  114.318886][    C1]  kthread+0x711/0x8a0
[  114.320567][    C1]  ret_from_fork+0x3fc/0x770
[  114.322414][    C1]  ret_from_fork_asm+0x1a/0x30
[  114.324356][    C1] 
[  114.325349][    C1] The buggy address belongs to the object at ffff888107ed0d80
[  114.325349][    C1]  which belongs to the cache xfrm_state of size 928
[  114.330943][    C1] The buggy address is located 48 bytes inside of
[  114.330943][    C1]  freed 928-byte region [ffff888107ed0d80, ffff888107ed1120)
[  114.336504][    C1] 
[  114.337505][    C1] The buggy address belongs to the physical page:
[  114.340118][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888107ed2400 pfn:0x107ed0
[  114.344191][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.347588][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  114.350650][    C1] page_type: f5(slab)
[  114.352326][    C1] raw: 057ff00000000040 ffff888104e91780 dead000000000122 0000000000000000
[  114.355721][    C1] raw: ffff888107ed2400 00000000800e000a 00000000f5000000 0000000000000000
[  114.359127][    C1] head: 057ff00000000040 ffff888104e91780 dead000000000122 0000000000000000
[  114.362646][    C1] head: ffff888107ed2400 00000000800e000a 00000000f5000000 0000000000000000
[  114.366069][    C1] head: 057ff00000000002 ffffea00041fb401 00000000ffffffff 00000000ffffffff
[  114.369579][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  114.373007][    C1] page dumped because: kasan: bad access detected
[  114.375598][    C1] page_owner tracks the page as allocated
[  114.377878][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6268, tgid 6267 (syz.2.117), ts 63345911815, free_ts 63174077335
[  114.385383][    C1]  post_alloc_hook+0x240/0x2a0
[  114.387311][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  114.389522][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.391843][    C1]  alloc_pages_mpol+0x232/0x4a0
[  114.393828][    C1]  allocate_slab+0x8a/0x370
[  114.395737][    C1]  ___slab_alloc+0xbeb/0x1410
[  114.397639][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  114.399856][    C1]  xfrm_state_alloc+0x24/0x2f0
[  114.401811][    C1]  pfkey_add+0x6e4/0x2e00
[  114.403609][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  114.405590][    C1]  __sock_sendmsg+0x21c/0x270
[  114.407521][    C1]  ____sys_sendmsg+0x52d/0x830
[  114.409443][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  114.411369][    C1]  __sys_sendmmsg+0x227/0x430
[  114.413267][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  114.415223][    C1]  do_syscall_64+0xfa/0x3b0
[  114.417080][    C1] page last free pid 6249 tgid 6249 stack trace:
[  114.419618][    C1]  __free_frozen_pages+0xbc4/0xd30
[  114.421702][    C1]  stack_depot_save_flags+0x436/0x860
[  114.423905][    C1]  ref_tracker_free+0xfe/0x7d0
[  114.425886][    C1]  __sk_destruct+0x3c3/0x660
[  114.427765][    C1]  raw_release+0x7f0/0x960
[  114.429587][    C1]  sock_close+0xc3/0x240
[  114.431355][    C1]  __fput+0x44c/0xa70
[  114.432994][    C1]  task_work_run+0x1d4/0x260
[  114.434873][    C1]  exit_to_user_mode_loop+0xec/0x110
[  114.437046][    C1]  do_syscall_64+0x2bd/0x3b0
[  114.438922][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.441313][    C1] 
[  114.442356][    C1] Memory state around the buggy address:
[  114.444600][    C1]  ffff888107ed0c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  114.447807][    C1]  ffff888107ed0d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.450983][    C1] >ffff888107ed0d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.454202][    C1]                                      ^
[  114.456464][    C1]  ffff888107ed0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.459719][    C1]  ffff888107ed0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.462968][    C1] ==================================================================
[  114.466561][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.469497][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  114.474259][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.478320][    C1] Call Trace:
[  114.479683][    C1]  <TASK>
[  114.480912][    C1]  dump_stack_lvl+0x99/0x250
[  114.482793][    C1]  ? __asan_memcpy+0x40/0x70
[  114.484649][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.486727][    C1]  ? __pfx__printk+0x10/0x10
[  114.488573][    C1]  vpanic+0x281/0x750
[  114.490210][    C1]  ? __pfx_print_hex_dump+0x10/0x10
[  114.492265][    C1]  ? __pfx_vpanic+0x10/0x10
[  114.494116][    C1]  ? irqentry_exit+0x74/0x90
[  114.496009][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.498060][    C1]  panic+0xb9/0xc0
[  114.499581][    C1]  ? __pfx_panic+0x10/0x10
[  114.501470][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  114.503835][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.506378][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  114.508528][    C1]  check_panic_on_warn+0x89/0xb0
[  114.510531][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  114.512717][    C1]  end_report+0x78/0x160
[  114.514508][    C1]  kasan_report+0x129/0x150
[  114.516408][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  114.518601][    C1]  __xfrm_state_delete+0x696/0xca0
[  114.520674][    C1]  xfrm_timer_handler+0x18f/0xa00
[  114.522696][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.524933][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  114.527254][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.529352][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.531704][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.534213][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.536493][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  114.538703][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  114.540832][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  114.543131][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  114.545151][    C1]  handle_softirqs+0x286/0x870
[  114.547078][    C1]  ? run_ksoftirqd+0x9b/0x100
[  114.548936][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  114.551000][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.553026][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.555001][    C1]  run_ksoftirqd+0x9b/0x100
[  114.556836][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  114.558870][    C1]  smpboot_thread_fn+0x542/0xa60
[  114.560833][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  114.562879][    C1]  kthread+0x711/0x8a0
[  114.564550][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  114.566764][    C1]  ? __pfx_kthread+0x10/0x10
[  114.568763][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  114.570959][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.573106][    C1]  ? __pfx_kthread+0x10/0x10
[  114.574979][    C1]  ret_from_fork+0x3fc/0x770
[  114.576852][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  114.578935][    C1]  ? __switch_to_asm+0x39/0x70
[  114.580935][    C1]  ? __switch_to_asm+0x33/0x70
[  114.582959][    C1]  ? __pfx_kthread+0x10/0x10
[  114.584816][    C1]  ret_from_fork_asm+0x1a/0x30
[  114.586805][    C1]  </TASK>
[  114.588840][    C1] Kernel Offset: disabled
[  114.590592][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:27:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fb79084 RCX=ffffffff8fb79088 RDX=ffffffff9033ba2a
RSI=ffffffff9033ba2a RDI=ffffffff8be32620 RBP=dffffc0000000000 RSP=ffffc9000847f518
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc9000847f638 R11=ffffffff81ac3890
R12=ffffffff9033ba2e R13=ffffffff9033ba2f R14=ffffc9000847f5e8 R15=ffffffff8fb79084
RIP=ffffffff8172c464 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcfc5618380 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcfc5694440 CR3=000000011556a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006567646972625f 6f745f3168746576
XMM02=07db6a762c3f3bde 5634c19ec7dad8a0 XMM03=7a3fe58a0d1ead8e 1b20e8c6b18b0222
XMM04=d086149302179c0e af07be9b7c421b23 XMM05=72e49016ec85f4f2 73600e045037a5bc
XMM06=0c36a7048e90eded df10097d9a9270ac XMM07=550c0e75be0ed21a 3b9e0840b6c41b9b
XMM08=e7c735f7e9b55e10 309c0509529edbb0 XMM09=0000000000000000 00007f086e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001b70d0
R8 =ffff888021240237 R9 =1ffff11004248046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af4900 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9631230fc8 CR3=000000010a646000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9630587498 00007f9630587470 XMM03=00007f96305874a8 00007f96305874a0
XMM04=00007f96310ed100 00007f9630587460 XMM05=00007f9630587478 00007f96305874c0
XMM06=00007f96305874b8 00007f96305874b0 XMM07=00007f96305874a8 00007f96305874a0
XMM08=0000000000000000 00007f9630412ee7 XMM09=0000000000000000 00007f9630412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
