last executing test programs:

32.224116008s ago: executing program 2 (id=2239):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000380)={0x18, 0x2, {0xfffe, @remote}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xf34}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0)

32.153782697s ago: executing program 2 (id=2242):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
sendmmsg$alg(r1, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=ANY=[], 0x1f0, 0x80}], 0x1, 0x84)

32.055618789s ago: executing program 2 (id=2246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4)
getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x5d)

31.963564553s ago: executing program 2 (id=2247):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6bc}}, 0xd, 0x3}, &(0x7f0000000040)=0x90)

31.962664853s ago: executing program 2 (id=2250):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003200000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94)

31.696305927s ago: executing program 2 (id=2257):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

31.557350151s ago: executing program 32 (id=2257):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

1.6126593s ago: executing program 3 (id=2802):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff03316844268cb89614f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c)

1.543213303s ago: executing program 3 (id=2803):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write(r0, &(0x7f00000002c0)="03feba85", 0x4)

1.542932882s ago: executing program 3 (id=2804):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0xffdffffe, 0x4)

1.16169134s ago: executing program 0 (id=2809):
r0 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x47, 0xfffffffe, 0x5, 0x1, 0x4, 0x0, 0xf}})

1.083569373s ago: executing program 0 (id=2810):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f00000009c0))

1.03343057s ago: executing program 0 (id=2811):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80)

973.508431ms ago: executing program 0 (id=2812):
socket$key(0xf, 0x3, 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
write(r0, &(0x7f0000000040)="05000000010000", 0x7)

587.88969ms ago: executing program 3 (id=2817):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)

330.912133ms ago: executing program 1 (id=2821):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0)

253.650636ms ago: executing program 1 (id=2822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x38, 0x1, 0x20, 0x0, {0x6a}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40014)

201.67956ms ago: executing program 1 (id=2823):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)

201.297953ms ago: executing program 3 (id=2824):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x8000009, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r3=>0x0})
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10)

133.459199ms ago: executing program 3 (id=2825):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/229, 0xe5}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/14, 0xe}, 0x6}], 0x2, 0x45833af92e4b39ff, 0x0)

133.296505ms ago: executing program 1 (id=2826):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)

133.078235ms ago: executing program 0 (id=2827):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
sendmmsg$inet(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="d2", 0x1}], 0x1}}], 0x1, 0x0)
splice(r0, 0x0, r2, 0x0, 0x39000, 0x0)

131.580349ms ago: executing program 1 (id=2828):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001140))

242.972µs ago: executing program 1 (id=2829):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42)

0s ago: executing program 0 (id=2830):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee03a879c0779591813076fe8893e54bae6115825fd42b9c850ae09a0c9138676ef04e8706ec6057fc878302be3a1b9f7bf9805a3eac79cf2fcc0637e8b799b59439dae06bbca57a1254d8f17267776053f23801b92d20f12402acde62c60df22c4cf3bc5d7318e17650b88abedef3dcea88d3", 0x2a, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46454' (ED25519) to the list of known hosts.
syzkaller login: [   56.360827][ T5831] cgroup: Unknown subsys name 'net'
[   56.488995][ T5831] cgroup: Unknown subsys name 'cpuset'
[   56.493527][ T5831] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.322110][ T5831] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.373054][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.378211][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.381224][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.385906][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.390519][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.393568][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.396440][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.400737][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.404018][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.411428][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.425807][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.434964][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.439010][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.445984][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.455479][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.790881][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.871729][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   64.029360][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.032519][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.036266][ T5846] bridge_slave_0: entered allmulticast mode
[   64.040351][ T5846] bridge_slave_0: entered promiscuous mode
[   64.046464][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.049435][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.052445][ T5846] bridge_slave_1: entered allmulticast mode
[   64.057599][ T5846] bridge_slave_1: entered promiscuous mode
[   64.099976][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.146002][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.149904][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.154008][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.158159][ T5845] bridge_slave_0: entered allmulticast mode
[   64.162061][ T5845] bridge_slave_0: entered promiscuous mode
[   64.172459][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.176662][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.179671][ T5845] bridge_slave_1: entered allmulticast mode
[   64.183664][ T5845] bridge_slave_1: entered promiscuous mode
[   64.189060][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.257209][ T5846] team0: Port device team_slave_0 added
[   64.261975][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.267904][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.272403][ T5846] team0: Port device team_slave_1 added
[   64.348598][ T5845] team0: Port device team_slave_0 added
[   64.351706][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.353879][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.362941][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.369404][ T5845] team0: Port device team_slave_1 added
[   64.371556][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.375585][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.379333][ T5851] bridge_slave_0: entered allmulticast mode
[   64.382364][ T5851] bridge_slave_0: entered promiscuous mode
[   64.386210][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.388742][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.397752][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.427968][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.430864][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.433679][ T5851] bridge_slave_1: entered allmulticast mode
[   64.439154][ T5851] bridge_slave_1: entered promiscuous mode
[   64.466530][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.469398][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.480966][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.487912][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.490609][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.501651][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.510038][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.551763][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.571846][ T5846] hsr_slave_0: entered promiscuous mode
[   64.575572][ T5846] hsr_slave_1: entered promiscuous mode
[   64.621509][ T5851] team0: Port device team_slave_0 added
[   64.628868][ T5851] team0: Port device team_slave_1 added
[   64.637227][ T5845] hsr_slave_0: entered promiscuous mode
[   64.640449][ T5845] hsr_slave_1: entered promiscuous mode
[   64.643384][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   64.646342][ T5845] Cannot create hsr debugfs directory
[   64.717763][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.720077][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.729484][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.749463][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.751673][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.761017][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.836622][ T5851] hsr_slave_0: entered promiscuous mode
[   64.839032][ T5851] hsr_slave_1: entered promiscuous mode
[   64.841227][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.843015][ T5851] Cannot create hsr debugfs directory
[   65.018915][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.028964][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.043916][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.061965][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.100645][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.114980][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.120180][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.135238][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.214600][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.221280][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.237972][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.248401][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.337393][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.370261][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.384796][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   65.397271][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.399536][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.412106][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.414893][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.445532][   T55] Bluetooth: hci0: command tx timeout
[   65.445539][ T5850] Bluetooth: hci1: command tx timeout
[   65.452922][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   65.485590][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.488467][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.500194][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   65.503794][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.526296][ T5850] Bluetooth: hci2: command tx timeout
[   65.532136][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.534510][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.552389][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.608038][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.622548][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.625532][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.646679][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.649592][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.757873][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.806041][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.834894][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.838030][ T5846] veth0_vlan: entered promiscuous mode
[   65.877931][ T5846] veth1_vlan: entered promiscuous mode
[   65.890766][ T5851] veth0_vlan: entered promiscuous mode
[   65.902457][ T5845] veth0_vlan: entered promiscuous mode
[   65.913761][ T5851] veth1_vlan: entered promiscuous mode
[   65.929223][ T5845] veth1_vlan: entered promiscuous mode
[   65.950829][ T5846] veth0_macvtap: entered promiscuous mode
[   65.959872][ T5846] veth1_macvtap: entered promiscuous mode
[   65.976723][ T5851] veth0_macvtap: entered promiscuous mode
[   65.992317][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.998843][ T5851] veth1_macvtap: entered promiscuous mode
[   66.003257][ T5845] veth0_macvtap: entered promiscuous mode
[   66.010907][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.029555][ T5859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.032886][ T5845] veth1_macvtap: entered promiscuous mode
[   66.038257][ T5859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.041430][ T5859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.054882][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.057415][ T5859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.077279][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.098434][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.117585][ T5859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.132934][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.143341][ T5859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.147376][ T5859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.168896][ T5859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.172310][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.196036][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.207008][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.210344][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.221198][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.229143][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.288922][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.293636][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.332059][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.344733][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.370299][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.376766][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.410939][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.416195][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.430387][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.430758][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.440526][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.528562][ T5918] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3'.
[   66.836458][ T5941] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   66.944316][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   66.953559][ T5949] netlink: 'syz.1.17': attribute type 12 has an invalid length.
[   66.971557][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'.
[   66.992191][ T5879] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.994828][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   67.001754][ T5949] netlink: 'syz.1.17': attribute type 12 has an invalid length.
[   67.006332][ T5879] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.016123][ T5879] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.016184][ T5949] Zero length message leads to an empty skb
[   67.020005][ T5879] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.525453][ T5850] Bluetooth: hci0: command tx timeout
[   67.527755][ T5850] Bluetooth: hci1: command tx timeout
[   67.604519][   T55] Bluetooth: hci2: command tx timeout
[   68.015804][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.278844][ T5965] infiniband syz!: set active
[   68.284615][ T5965] infiniband syz!: added team_slave_0
[   68.368782][ T5991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.391671][ T5965] RDS/IB: syz!: added
[   68.399792][ T5965] smc: adding ib device syz! with port count 1
[   68.401930][ T5965] smc:    ib device syz! port 1 has no pnetid
[   69.434036][ T5991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.449549][ T6016] netlink: 'syz.1.42': attribute type 13 has an invalid length.
[   69.453145][ T6016] netlink: 'syz.1.42': attribute type 17 has an invalid length.
[   69.515696][ T6016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.532844][ T5991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.619094][   T55] Bluetooth: hci1: command tx timeout
[   69.620889][   T55] Bluetooth: hci0: command tx timeout
[   69.667450][ T5991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.684948][ T5850] Bluetooth: hci2: command tx timeout
[   69.780242][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.790973][ T5859] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.848120][ T5859] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.851181][ T5859] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.877024][ T5859] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.371525][ T6048] netlink: 'syz.2.47': attribute type 83 has an invalid length.
[   71.061663][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.063775][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.190899][ T5899] IPVS: starting estimator thread 0...
[   71.193463][ T6097] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   71.295720][ T6101] IPVS: using max 45 ests per chain, 108000 per kthread
[   71.670988][ T6131] netlink: 44 bytes leftover after parsing attributes in process `syz.1.74'.
[   71.677278][ T6131] netem: unknown loss type 12
[   71.679451][ T6131] netem: change failed
[   71.694449][ T5850] Bluetooth: hci0: command tx timeout
[   71.694846][   T55] Bluetooth: hci1: command tx timeout
[   71.764362][   T55] Bluetooth: hci2: command tx timeout
[   72.642385][ T6186] netlink: 'syz.0.98': attribute type 3 has an invalid length.
[   72.651992][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   72.657320][ T6186] netlink: 'syz.0.98': attribute type 3 has an invalid length.
[   72.660470][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'.
[   73.132599][ T6214] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'.
[   73.145586][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'.
[   73.810261][ T6242] pim6reg: entered allmulticast mode
[   73.815985][ T6242] pim6reg: left allmulticast mode
[   74.226458][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   74.532315][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'.
[   74.624901][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'.
[   74.786145][ T6313] netlink: 41 bytes leftover after parsing attributes in process `syz.2.153'.
[   74.850369][ T6316] dummy0: entered allmulticast mode
[   74.872123][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'.
[   75.110227][ T6336] netlink: 'syz.1.162': attribute type 4 has an invalid length.
[   75.156498][ T6336] netlink: 'syz.1.162': attribute type 4 has an invalid length.
[   75.531517][ T6357] openvswitch: netlink: Duplicate or invalid key (type 0).
[   75.536067][ T6357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.365987][ T6408] smc: net device bond0 applied user defined pnetid SYZ0
[   76.377532][ T6408] smc: net device bond0 erased user defined pnetid SYZ0
[   76.508733][ T6423] syz.0.203 uses obsolete (PF_INET,SOCK_PACKET)
[   76.766527][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   76.799034][ T6446] Bluetooth: MGMT ver 1.23
[   76.886400][ T6450] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   77.618875][ T6495] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   77.638829][ T6495] bridge_slave_0: left allmulticast mode
[   77.649562][ T6495] bridge_slave_0: left promiscuous mode
[   77.652555][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.672909][ T6495] bridge_slave_1: left allmulticast mode
[   77.675707][ T6495] bridge_slave_1: left promiscuous mode
[   77.678590][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.698317][ T6495] bond0: (slave bond_slave_0): Releasing backup interface
[   77.709075][ T6495] bond0: (slave bond_slave_1): Releasing backup interface
[   77.724338][ T6495] team0: Port device team_slave_0 removed
[   77.729310][ T6495] team0: Port device team_slave_1 removed
[   77.731579][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.744143][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.749600][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.752378][ T6495] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.763333][ T6505] netlink: 'syz.0.236': attribute type 10 has an invalid length.
[   77.763911][ T6495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   77.773868][ T6498] tipc: Started in network mode
[   77.777003][ T6498] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   77.781663][ T6498] tipc: Enabled bearer <udp:syz0>, priority 10
[   77.815427][ T6505] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   77.840835][ T6505] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   78.091860][ T6512] tipc: Started in network mode
[   78.093723][ T6512] tipc: Node identity ac1414aa, cluster identity 4711
[   78.099541][ T6512] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.170704][   T55] Bluetooth: hci2: command tx timeout
[   78.319846][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'.
[   78.455029][   T62] cfg80211: failed to load regulatory.db
[   78.775683][ T2333] tipc: Node number set to 4269801488
[   78.926733][ T6561] sock: sock_timestamping_bind_phc: sock not bind to device
[   79.184428][ T6566] nbd0: detected capacity change from 0 to 63
[   79.194352][   T56] block nbd0: Receive control failed (result -32)
[   79.199085][ T5855] block nbd0: Dead connection, failed to find a fallback
[   79.213553][ T5855] block nbd0: shutting down sockets
[   79.216087][    T9] tipc: Node number set to 2886997162
[   79.218039][ T5855] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.221222][ T5855] Buffer I/O error on dev nbd0, logical block 0, async page read
[   79.230339][ T5855] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.234966][ T5855] Buffer I/O error on dev nbd0, logical block 1, async page read
[   79.238371][ T5855] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.241813][ T5855] Buffer I/O error on dev nbd0, logical block 2, async page read
[   79.247060][ T5855] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.250842][ T5855] Buffer I/O error on dev nbd0, logical block 3, async page read
[   79.269249][ T5855] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.274781][ T5855] Buffer I/O error on dev nbd0, logical block 0, async page read
[   79.277549][ T5855] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.280494][ T5855] Buffer I/O error on dev nbd0, logical block 1, async page read
[   79.288916][ T5855] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.296986][ T5855] Buffer I/O error on dev nbd0, logical block 2, async page read
[   79.301745][ T5855] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.306200][ T5855] Buffer I/O error on dev nbd0, logical block 3, async page read
[   79.309261][ T5855] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.313728][ T5855] Buffer I/O error on dev nbd0, logical block 0, async page read
[   79.317404][ T5855] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   79.321184][ T5855] Buffer I/O error on dev nbd0, logical block 1, async page read
[   79.337074][ T5855] ldm_validate_partition_table(): Disk read failed.
[   79.347138][ T5855] Dev nbd0: unable to read RDB block 0
[   79.356872][ T5855]  nbd0: unable to read partition table
[   79.374220][ T5855] ldm_validate_partition_table(): Disk read failed.
[   79.378598][ T5855] Dev nbd0: unable to read RDB block 0
[   79.382601][ T5855]  nbd0: unable to read partition table
[   79.389402][ T5855] block nbd0: NBD_DISCONNECT
[   79.393562][ T5855] block nbd0: Send disconnect failed -32
[   79.442595][ T6579] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.269'.
[   80.261240][ T6619] netlink: 'syz.0.288': attribute type 3 has an invalid length.
[   80.657883][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'.
[   80.662748][ T6640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'.
[   80.669881][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'.
[   81.079836][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.309'.
[   81.491348][ T6679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.314'.
[   81.494484][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[   81.497636][ T6679] netlink: 3 bytes leftover after parsing attributes in process `syz.0.314'.
[   81.710133][ T6694] netlink: 'syz.1.317': attribute type 5 has an invalid length.
[   81.941176][ T6707] Driver unsupported XDP return value 0 on prog  (id 59) dev N/A, expect packet loss!
[   82.323559][ T6730] __nla_validate_parse: 2 callbacks suppressed
[   82.323575][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.333'.
[   82.371899][ T6732] tipc: Started in network mode
[   82.374983][ T6732] tipc: Node identity 1a069d39c20e, cluster identity 4711
[   82.378251][ T6732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.383011][ T6732] syzkaller0: entered promiscuous mode
[   82.386924][ T6732] syzkaller0: entered allmulticast mode
[   82.403580][ T6732] tipc: Resetting bearer <eth:syzkaller0>
[   82.408415][ T6731] tipc: Resetting bearer <eth:syzkaller0>
[   82.422809][ T6731] tipc: Disabling bearer <eth:syzkaller0>
[   83.922280][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[   83.927083][ T6808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   84.249706][   T33] audit: type=1804 audit(1757702319.444:2): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.375" name="/newroot/115/cgroup.controllers" dev="tmpfs" ino=599 res=1 errno=0
[   84.262791][   T33] audit: type=1800 audit(1757702319.464:3): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.375" name="cgroup.controllers" dev="tmpfs" ino=599 res=0 errno=0
[   84.378625][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'.
[   84.395765][ T6835] batman_adv: batadv0: Adding interface: ip6gretap1
[   84.398513][ T6835] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.410573][ T6835] batman_adv: batadv0: Interface activated: ip6gretap1
[   85.652496][ T6885] warning: `syz.0.399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.847634][ T6899] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.789410][ T6934] C: renamed from lo (while UP)
[   86.796073][ T6934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   87.129550][ T6956] netlink: 72 bytes leftover after parsing attributes in process `syz.1.434'.
[   87.167291][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[   87.178837][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'.
[   88.291196][ T6998] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[   88.297460][ T6998] netlink: 224 bytes leftover after parsing attributes in process `syz.2.448'.
[   88.428598][ T7005] netlink: 'syz.1.454': attribute type 32 has an invalid length.
[   88.488180][ T7007] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   89.010917][ T7039] vlan2: entered allmulticast mode
[   89.013036][ T7039] batadv0: entered allmulticast mode
[   89.078733][ T7045] netlink: 'syz.2.470': attribute type 12 has an invalid length.
[   89.088097][ T7045] netlink: 'syz.2.470': attribute type 29 has an invalid length.
[   89.095373][ T7045] netlink: 148 bytes leftover after parsing attributes in process `syz.2.470'.
[   90.277438][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[   90.450969][ T7127] netlink: 'syz.1.502': attribute type 2 has an invalid length.
[   90.455716][ T7127] netlink: 164 bytes leftover after parsing attributes in process `syz.1.502'.
[   90.595878][ T7144] netlink: 'syz.2.510': attribute type 13 has an invalid length.
[   91.201914][ T7207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'.
[   91.725212][ T7230] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[   91.748018][ T7230] bond2: entered promiscuous mode
[   91.749859][ T7230] bond2: entered allmulticast mode
[   91.761827][ T7230] bridge1: entered promiscuous mode
[   91.763498][ T7230] bridge1: entered allmulticast mode
[   91.769524][ T7230] bond2: (slave bridge1): making interface the new active one
[   91.772403][ T7230] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   92.639971][ T7285] netlink: 'syz.0.569': attribute type 49 has an invalid length.
[   93.205784][   T33] audit: type=1800 audit(1757702328.404:4): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="blkio.bfq.time_recursive" dev="tmpfs" ino=895 res=0 errno=0
[   93.457665][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'.
[   94.474631][ T7360] xt_l2tp: invalid flags combination: 8
[   94.905847][ T7387] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   95.007342][ T7387] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.067391][ T7399] ieee802154 phy1 wpan1: encryption failed: -22
[   95.348801][ T7426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.634'.
[   95.351652][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'.
[   95.352447][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.354732][ T7426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'.
[   95.357039][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.419387][ T7427] netlink: 192 bytes leftover after parsing attributes in process `syz.2.632'.
[   95.460418][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.466322][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.536381][ T7423] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   95.549233][ T5859] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.553307][ T5859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.557166][ T5859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.562809][ T5859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.822440][ T7537] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.837047][ T7537] bond_slave_1: entered promiscuous mode
[   96.840044][ T7537] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   96.845877][ T7537] bond1: (slave macvlan3): Enslaving as a backup interface with an up link
[   96.856573][ T7537] bridge_slave_0: left allmulticast mode
[   96.858506][ T7537] bridge_slave_0: left promiscuous mode
[   96.860563][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.869755][ T7537] bridge_slave_1: left allmulticast mode
[   96.871913][ T7537] bridge_slave_1: left promiscuous mode
[   96.873861][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.882004][ T7537] bond0: (slave bond_slave_0): Releasing backup interface
[   96.889783][ T7537] bond0: (slave bond_slave_1): Releasing backup interface
[   96.895136][ T7537] bond_slave_1: left promiscuous mode
[   96.910446][ T7537] team0: Port device team_slave_0 removed
[   96.916977][ T7537] team0: Port device team_slave_1 removed
[   96.919319][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.921613][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.928480][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.930886][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.934568][ T7537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   96.940213][   T27] bond1: (slave macvlan3): speed changed to 0 on port 1
[   96.950888][ T5913] syz!: Port: 1 Link DOWN
[   97.036919][ T5859] bond1: (slave macvlan3): link status definitely down, disabling slave
[   97.098824][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'.
[   97.126772][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.689'.
[   97.355831][ T7571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'.
[   97.360619][ T7571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.695'.
[   97.368888][ T7573] Bluetooth: MGMT ver 1.23
[   97.407029][ T7575] bridge_slave_0: left allmulticast mode
[   97.409086][ T7575] bridge_slave_0: left promiscuous mode
[   97.415105][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.423495][ T7575] bridge_slave_1: left allmulticast mode
[   97.427051][ T7575] bridge_slave_1: left promiscuous mode
[   97.428976][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.431649][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'.
[   97.438440][ T7575] bond0: (slave bond_slave_0): Releasing backup interface
[   97.442531][ T7575] bond0: (slave bond_slave_1): Releasing backup interface
[   97.452494][ T7575] team0: Port device team_slave_0 removed
[   97.457672][ T7575] team0: Port device team_slave_1 removed
[   97.460552][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.467887][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.473755][ T7575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   98.521460][ T7641] __nla_validate_parse: 4 callbacks suppressed
[   98.521478][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.726'.
[   98.603805][ T7650] netlink: 'syz.0.730': attribute type 1 has an invalid length.
[   98.763531][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'.
[   98.767475][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'.
[   98.771184][ T7665] netlink: 'syz.0.734': attribute type 6 has an invalid length.
[   98.811594][ T7667] syzkaller1: entered promiscuous mode
[   98.813466][ T7667] syzkaller1: entered allmulticast mode
[   99.790174][ T7723] netlink: 'syz.1.762': attribute type 1 has an invalid length.
[   99.793544][ T7723] netlink: 140 bytes leftover after parsing attributes in process `syz.1.762'.
[   99.800604][ T7723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.762'.
[  100.375591][ T7761] syzkaller0: entered promiscuous mode
[  100.377827][ T7761] syzkaller0: entered allmulticast mode
[  100.993925][ T7777] netem: change failed
[  101.557512][ T7813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.797'.
[  101.998085][ T7842] syzkaller1: entered promiscuous mode
[  102.004422][ T7842] syzkaller1: entered allmulticast mode
[  102.229373][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.817'.
[  103.086923][ T7865] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  103.089638][ T7865] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  103.107171][ T7865] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  103.109702][ T7865] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  103.122510][ T7865] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  103.134626][ T7865] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  103.470679][ T7941] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  103.474025][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.839'.
[  103.581319][ T7951] netlink: 'syz.0.843': attribute type 1 has an invalid length.
[  103.586463][ T7951] netlink: 3 bytes leftover after parsing attributes in process `syz.0.843'.
[  103.761184][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'.
[  103.766858][ T7968] veth1: entered promiscuous mode
[  103.776967][ T7968] netlink: 'syz.1.851': attribute type 8 has an invalid length.
[  103.780111][ T7968] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  105.710581][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.884'.
[  105.748908][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'.
[  105.753540][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'.
[  105.756984][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.886'.
[  105.760120][ T8045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.886'.
[  106.591645][ T8076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.596040][ T8076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.650385][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'.
[  106.677476][ T8076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.681249][ T8076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.747425][ T8076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.751846][ T8076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.813637][ T8076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.817375][ T8076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.919137][ T5859] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.923485][ T5859] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.937621][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.940882][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.953269][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.957215][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.973402][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.978255][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.147036][ T8089] netlink: 'syz.1.903': attribute type 6 has an invalid length.
[  107.224637][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.907'.
[  107.611680][   T33] audit: type=1800 audit(1757702342.804:5): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.916" name="memory.events" dev="tmpfs" ino=1543 res=0 errno=0
[  107.715954][ T8137] wg1 speed is unknown, defaulting to 1000
[  107.718644][ T8137] wg1 speed is unknown, defaulting to 1000
[  107.743197][ T8137] wg1 speed is unknown, defaulting to 1000
[  107.750898][ T8137] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  107.775055][ T8137] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  107.810872][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'.
[  107.831806][ T8137] wg1 speed is unknown, defaulting to 1000
[  107.835423][ T8137] wg1 speed is unknown, defaulting to 1000
[  107.839018][ T8137] wg1 speed is unknown, defaulting to 1000
[  108.291702][ T8151] wg1 speed is unknown, defaulting to 1000
[  108.881381][ T8192] veth0_to_bridge: entered promiscuous mode
[  108.885626][ T8190] veth0_to_bridge: left promiscuous mode
[  109.093732][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.097966][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.101537][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.173802][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.181649][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.187269][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.263911][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.270105][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.278816][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.951'.
[  109.381062][ T8213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'.
[  109.404804][ T8213] batman_adv: batadv0: Adding interface: dummy0
[  109.407885][ T8213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.419314][ T8213] batman_adv: batadv0: Interface activated: dummy0
[  109.440330][ T8213] batadv0: mtu less than device minimum
[  109.443990][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.449854][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.455336][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.460750][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.466286][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.471627][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.476872][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.482130][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.487655][ T8213] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.518986][ T8220] batman_adv: batadv0: Adding interface: ip6gretap1
[  109.521725][ T8220] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.533128][ T8220] batman_adv: batadv0: Interface activated: ip6gretap1
[  112.085726][ T8367] bridge0: port 1(syz_tun) entered blocking state
[  112.088552][ T8367] bridge0: port 1(syz_tun) entered disabled state
[  112.090768][ T8367] syz_tun: entered allmulticast mode
[  112.093544][ T8367] syz_tun: entered promiscuous mode
[  112.098438][ T8367] bridge0: port 1(syz_tun) entered blocking state
[  112.100644][ T8367] bridge0: port 1(syz_tun) entered listening state
[  112.617907][ T8422] netlink: 'syz.1.1050': attribute type 32 has an invalid length.
[  112.852815][ T8420] wg1 speed is unknown, defaulting to 1000
[  112.949546][ T8445] can: request_module (can-proto-0) failed.
[  112.957593][ T8445] netlink: 'syz.0.1059': attribute type 10 has an invalid length.
[  112.972750][ T8445] batman_adv: batadv0: Interface deactivated: dummy0
[  112.991574][ T8445] batman_adv: batadv0: Removing interface: dummy0
[  113.011951][ T8445] team0: Port device dummy0 added
[  113.017570][ T8445] netlink: 'syz.0.1059': attribute type 10 has an invalid length.
[  113.025056][ T8445] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  113.047876][ T8445] team0: Failed to send options change via netlink (err -105)
[  113.054430][ T8445] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  113.066113][ T8445] team0: Port device dummy0 removed
[  113.072714][ T8445] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  113.207842][ T8459] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  114.023800][ T8466] wg1 speed is unknown, defaulting to 1000
[  114.211154][ T8479] __nla_validate_parse: 6 callbacks suppressed
[  114.211175][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'.
[  114.274525][ T8474] wg1 speed is unknown, defaulting to 1000
[  114.379854][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'.
[  114.473849][ T8494] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.479642][ T8494] bond2: (slave bond3): Enslaving as an active interface with an up link
[  114.485173][ T8489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'.
[  114.495736][ T8489] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.757829][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1082'.
[  115.963038][ T8544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1100'.
[  115.989262][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'.
[  116.787420][ T8577] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  118.023065][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'.
[  118.129829][ T8600] C: entered allmulticast mode
[  118.131968][ T8600] C: left allmulticast mode
[  118.133665][ T8600] dummy0: left allmulticast mode
[  118.233433][ T8608] netlink: 'syz.0.1128': attribute type 29 has an invalid length.
[  118.237307][ T8608] netlink: 'syz.0.1128': attribute type 29 has an invalid length.
[  118.241144][ T8608] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1128'.
[  118.246063][ T8608] unsupported nla_type 58
[  118.313280][ T8613] : renamed from batadv_slave_1 (while UP)
[  118.973854][ T8643] net_ratelimit: 32 callbacks suppressed
[  118.973885][ T8643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  119.037318][ T8643] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  119.350355][ T8580] Set syz1 is full, maxelem 65536 reached
[  119.635682][ T8679] sctp: [Deprecated]: syz.2.1158 (pid 8679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.635682][ T8679] Use struct sctp_sack_info instead
[  119.714746][ T8683] netlink: 'syz.2.1160': attribute type 2 has an invalid length.
[  119.717556][ T8683] netlink: 'syz.2.1160': attribute type 1 has an invalid length.
[  119.720416][ T8683] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1160'.
[  119.748734][ T8685] netlink: 'syz.2.1161': attribute type 1 has an invalid length.
[  119.851026][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'.
[  119.957867][ T8704] openvswitch: netlink: Message has 4 unknown bytes.
[  119.960842][ T8704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.975512][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1171'.
[  119.979165][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1171'.
[  120.972567][ T8756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.141486][ T8763] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  122.488015][ T8777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  122.631348][ T8788] sock: sock_timestamping_bind_phc: sock not bind to device
[  122.993007][ T8818] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  122.998496][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.878046][ T8849] dummy0 speed is unknown, defaulting to 1000
[  123.888755][ T8849] dummy0 speed is unknown, defaulting to 1000
[  123.892974][ T8849] dummy0 speed is unknown, defaulting to 1000
[  124.019148][ T8849] infiniband syz2: set active
[  124.021119][ T8849] infiniband syz2: added dummy0
[  124.026700][   T47] dummy0 speed is unknown, defaulting to 1000
[  124.055967][ T8849] RDS/IB: syz2: added
[  124.057655][ T8849] smc: adding ib device syz2 with port count 1
[  124.059889][ T8849] smc:    ib device syz2 port 1 has no pnetid
[  124.062056][   T47] dummy0 speed is unknown, defaulting to 1000
[  124.069270][ T8849] dummy0 speed is unknown, defaulting to 1000
[  124.108788][ T8866] lo: entered promiscuous mode
[  124.110510][ T8866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.271720][ T8849] dummy0 speed is unknown, defaulting to 1000
[  124.460748][ T8868] wg1 speed is unknown, defaulting to 1000
[  124.519945][ T8882] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.523564][ T8882] syzkaller0: entered promiscuous mode
[  124.527598][ T8882] syzkaller0: entered allmulticast mode
[  124.552425][ T8882] tipc: Resetting bearer <eth:syzkaller0>
[  124.557534][ T8881] tipc: Resetting bearer <eth:syzkaller0>
[  124.570930][ T8881] tipc: Disabling bearer <eth:syzkaller0>
[  124.576733][ T8849] dummy0 speed is unknown, defaulting to 1000
[  124.738119][ T8868] dummy0 speed is unknown, defaulting to 1000
[  125.112787][ T8912] netlink: 'syz.1.1264': attribute type 5 has an invalid length.
[  125.115622][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  125.222792][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  125.336755][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'.
[  125.796838][ T8946] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  125.799992][ T2333] IPVS: starting estimator thread 0...
[  125.885399][ T8947] IPVS: using max 47 ests per chain, 112800 per kthread
[  126.295587][ T8984] bridge0: entered promiscuous mode
[  126.298296][ T8984] bridge0: port 1(macsec1) entered blocking state
[  126.300942][ T8984] bridge0: port 1(macsec1) entered disabled state
[  126.303846][ T8984] macsec1: entered allmulticast mode
[  126.306952][ T8984] bridge0: entered allmulticast mode
[  126.310627][ T8984] macsec1: left allmulticast mode
[  126.312703][ T8984] bridge0: left allmulticast mode
[  126.317162][ T8984] bridge0: left promiscuous mode
[  126.573892][ T8991] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1299'.
[  126.820273][ T9001] bond0: (slave wlan1): Releasing backup interface
[  126.823144][ T9001] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  127.102925][ T9015] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1311'.
[  127.365456][    C1] bridge0: port 1(syz_tun) entered learning state
[  128.269797][ T9077] netlink: 'syz.2.1335': attribute type 1 has an invalid length.
[  128.273931][ T9077] netlink: 'syz.2.1335': attribute type 3 has an invalid length.
[  128.280730][ T9077] netlink: 'syz.2.1335': attribute type 1 has an invalid length.
[  128.283465][ T9077] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1335'.
[  128.291070][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'.
[  128.299868][ T9077] NCSI netlink: No device for ifindex 0
[  128.302707][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'.
[  128.322682][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'.
[  129.007688][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  129.022450][ T9122] macvtap1: entered promiscuous mode
[  129.027248][ T9122] vlan0: entered promiscuous mode
[  129.033841][ T9122] macvtap1: entered allmulticast mode
[  129.036903][ T9122] vlan0: entered allmulticast mode
[  129.038683][ T9122] veth0_vlan: entered allmulticast mode
[  129.061851][ T9122] macvtap2: entered promiscuous mode
[  129.063668][ T9122] macvtap2: entered allmulticast mode
[  129.142518][ T9136] batadv0: entered promiscuous mode
[  129.145091][ T9136] vlan4: entered promiscuous mode
[  129.507470][ T9161] geneve2: entered promiscuous mode
[  129.643943][ T9172] vlan0: entered promiscuous mode
[  129.820407][ T9181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.823458][ T9181] syzkaller0: entered promiscuous mode
[  129.826786][ T9181] syzkaller0: entered allmulticast mode
[  129.830627][ T9181] tipc: Resetting bearer <eth:syzkaller0>
[  129.845143][ T9181] tipc: Disabling bearer <eth:syzkaller0>
[  130.179148][ T9192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.185293][ T9191] tipc: Resetting bearer <eth:syzkaller0>
[  130.223887][ T9206] __nla_validate_parse: 8 callbacks suppressed
[  130.223902][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1390'.
[  130.270911][ T9210] netlink: 'syz.1.1392': attribute type 12 has an invalid length.
[  130.273588][ T9210] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1392'.
[  131.304985][  T974] tipc: Node number set to 3624443193
[  131.356308][ T9191] tipc: Disabling bearer <eth:syzkaller0>
[  131.373488][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1394'.
[  131.470317][ T9224] dummy0: entered promiscuous mode
[  131.472862][ T9224] macsec1: entered promiscuous mode
[  131.481695][ T9224] dummy0: left promiscuous mode
[  131.706863][ T9241] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1402'.
[  131.893648][ T9255] netlink: 'syz.0.1408': attribute type 4 has an invalid length.
[  132.039787][ T9264] netlink: 'syz.1.1410': attribute type 14 has an invalid length.
[  132.488386][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.590055][ T9286] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1421'.
[  132.631765][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'.
[  132.777864][ T9294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1426'.
[  132.943132][ T9306] netlink: 'syz.1.1430': attribute type 1 has an invalid length.
[  133.100040][ T9323] netlink: 'syz.2.1438': attribute type 4 has an invalid length.
[  133.111415][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1442'.
[  133.120861][ T9323] netlink: 'syz.2.1438': attribute type 4 has an invalid length.
[  133.549152][ T9364] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  133.680615][ T9376] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  134.448732][    T9] IPVS: starting estimator thread 0...
[  134.537436][ T9432] IPVS: using max 64 ests per chain, 153600 per kthread
[  134.770794][ T9457] netlink: 'syz.1.1494': attribute type 10 has an invalid length.
[  134.798482][ T9457] syz_tun: entered promiscuous mode
[  134.925710][ T5859] bond1: (slave macvlan3): link status up again after 0 ms
[  134.928791][ T5859] bond1: (slave macvlan3): failed to get link speed/duplex
[  134.993646][ T9473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.001155][ T9473] syzkaller0: entered promiscuous mode
[  135.003255][ T9473] syzkaller0: entered allmulticast mode
[  135.007163][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1496'.
[  135.039775][ T9473] tipc: Resetting bearer <eth:syzkaller0>
[  135.042375][ T9461] wg1 speed is unknown, defaulting to 1000
[  135.046858][ T9461] dummy0 speed is unknown, defaulting to 1000
[  135.050095][ T9472] tipc: Resetting bearer <eth:syzkaller0>
[  135.073858][ T9472] tipc: Disabling bearer <eth:syzkaller0>
[  135.094859][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.307451][ T5859] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.434387][   T12] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.544796][ T5879] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.664244][   T12] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.700609][ T9493] wg1 speed is unknown, defaulting to 1000
[  135.719807][ T9493] dummy0 speed is unknown, defaulting to 1000
[  135.798141][   T12] bond1: (slave macvlan3): failed to get link speed/duplex
[  135.924642][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  136.387020][ T9537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1522'.
[  136.390467][ T9537] block nbd0: not configured, cannot reconfigure
[  136.871438][ T9576] netlink: 'syz.1.1538': attribute type 8 has an invalid length.
[  136.967519][ T9591] netlink: 'syz.1.1546': attribute type 98 has an invalid length.
[  137.009008][ T9597] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1549'.
[  137.009070][ T9596] netlink: 'syz.0.1548': attribute type 4 has an invalid length.
[  137.090001][ T9603] netlink: 'syz.2.1553': attribute type 1 has an invalid length.
[  137.109432][ T9603] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.131382][ T9603] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.133931][ T9603] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  137.140155][ T9603] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  137.180424][ T9611] TCP: TCP_TX_DELAY enabled
[  137.253489][ T9609] veth3: entered promiscuous mode
[  137.259946][ T9609] bond1: (slave veth3): Enslaving as an active interface with a down link
[  137.263560][ T2333] wg1 speed is unknown, defaulting to 1000
[  137.267832][ T9606] syzkaller0: entered promiscuous mode
[  137.270053][ T9606] syzkaller0: entered allmulticast mode
[  137.417802][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1557'.
[  137.466858][ T9623] dvmrp8: entered allmulticast mode
[  137.648582][ T9623] wg1 speed is unknown, defaulting to 1000
[  137.652481][ T9623] dummy0 speed is unknown, defaulting to 1000
[  137.804736][ T9622] dvmrp8: left allmulticast mode
[  137.989934][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'.
[  137.993196][ T9644] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1568'.
[  138.052863][ T9648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.056005][ T9648] syzkaller0: entered promiscuous mode
[  138.057761][ T9648] syzkaller0: entered allmulticast mode
[  138.106548][ T9648] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  138.170592][ T9655] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  138.180640][ T9648] tipc: Resetting bearer <eth:syzkaller0>
[  138.194512][ T9647] tipc: Resetting bearer <eth:syzkaller0>
[  138.224402][ T9647] tipc: Disabling bearer <eth:syzkaller0>
[  138.377080][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'.
[  138.451473][ T9675] netlink: 'syz.1.1583': attribute type 13 has an invalid length.
[  138.460437][ T9675] netlink: 'syz.1.1583': attribute type 17 has an invalid length.
[  138.714754][ T5859] net_ratelimit: 22 callbacks suppressed
[  138.714773][ T5859] bond1: (slave macvlan3): failed to get link speed/duplex
[  138.821161][ T9695] wg1 speed is unknown, defaulting to 1000
[  138.824809][ T9695] dummy0 speed is unknown, defaulting to 1000
[  138.829955][ T5859] bond1: (slave macvlan3): failed to get link speed/duplex
[  138.974657][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.086296][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.195497][ T5879] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.305043][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.424451][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.535101][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.645613][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.665665][ T9727] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  139.735355][ T9733] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1608'.
[  139.764565][ T5878] bond1: (slave macvlan3): failed to get link speed/duplex
[  139.831400][ T9742] netlink: 'syz.2.1612': attribute type 10 has an invalid length.
[  139.836678][ T9742] bond0: (slave wlan1): Opening slave failed
[  140.022668][ T9753] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1616'.
[  140.291850][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'.
[  140.326415][ T9779] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1628'.
[  141.221711][ T9832] veth1_macvtap: left promiscuous mode
[  141.333454][ T9836] pim6reg1: entered promiscuous mode
[  141.337779][ T9836] pim6reg1: entered allmulticast mode
[  142.111883][ T9894] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  142.131696][ T9894] tipc: Enabled bearer <udp:syz0>, priority 10
[  142.325060][ T9903] __nla_validate_parse: 2 callbacks suppressed
[  142.325071][ T9903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1686'.
[  142.519523][ T9911] trusted_key: syz.2.1690 sent an empty control message without MSG_MORE.
[  142.724293][    C1] bridge0: port 1(syz_tun) entered forwarding state
[  142.727118][    C1] bridge0: topology change detected, propagating
[  143.313237][ T9933] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  143.320333][ T9933] netlink: 'syz.1.1700': attribute type 4 has an invalid length.
[  143.573061][ T9933] vlan0: left allmulticast mode
[  143.576658][ T9933] veth0_vlan: left allmulticast mode
[  143.578581][ T9933] vlan0: left promiscuous mode
[  143.592366][ T5878] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.597029][ T5878] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.599563][ T5878] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.602125][ T5878] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.604600][ T9931] wg1 speed is unknown, defaulting to 1000
[  143.605651][ T5878] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.609542][ T5878] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.613551][ T5878] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.618524][ T5878] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.622413][ T9931] dummy0 speed is unknown, defaulting to 1000
[  144.416801][ T9986] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1721'.
[  144.774693][T10022] syzkaller1: entered promiscuous mode
[  144.776981][T10022] syzkaller1: entered allmulticast mode
[  144.885948][T10029] netlink: 'syz.0.1740': attribute type 21 has an invalid length.
[  144.889336][T10029] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1740'.
[  144.893154][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'.
[  144.945928][T10033] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1742'.
[  144.989149][T10037] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1744'.
[  144.998070][T10039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1745'.
[  145.275518][T10049] wg1 speed is unknown, defaulting to 1000
[  145.278818][T10049] dummy0 speed is unknown, defaulting to 1000
[  145.731552][T10084] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1762'.
[  146.129094][T10101] ip6gre1: entered allmulticast mode
[  146.553120][T10126] syzkaller1: tun_chr_ioctl cmd 2148553947
[  146.706067][T10136] net_ratelimit: 30 callbacks suppressed
[  146.706083][T10136] IPv6: addrconf: prefix option has invalid lifetime
[  146.882290][T10143] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  146.925657][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1790'.
[  146.957398][T10148] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1791'.
[  147.496119][T10180] netlink: 'syz.0.1804': attribute type 30 has an invalid length.
[  147.498633][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1804'.
[  147.501643][T10180] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  147.582005][T10189] netlink: 'syz.0.1809': attribute type 1 has an invalid length.
[  147.600513][T10189] 8021q: adding VLAN 0 to HW filter on device bond4
[  147.611207][T10189] bond4: (slave ip6erspan0): making interface the new active one
[  147.615069][T10189] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  147.908318][T10221] batadv_slave_0: entered promiscuous mode
[  147.917844][T10219] batadv_slave_0: left promiscuous mode
[  148.099712][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  148.133574][T10228] netlink: 'syz.2.1821': attribute type 33 has an invalid length.
[  148.138049][T10228] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1821'.
[  148.159846][T10223] wg1 speed is unknown, defaulting to 1000
[  148.162559][T10223] dummy0 speed is unknown, defaulting to 1000
[  148.201630][T10245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.206933][T10245] syzkaller0: entered promiscuous mode
[  148.208807][T10245] syzkaller0: entered allmulticast mode
[  148.220621][T10245] tipc: Resetting bearer <eth:syzkaller0>
[  148.228386][T10244] tipc: Resetting bearer <eth:syzkaller0>
[  148.255729][T10244] tipc: Disabling bearer <eth:syzkaller0>
[  148.336112][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  148.417535][T10259] netlink: 'syz.1.1836': attribute type 15 has an invalid length.
[  149.322074][   T33] audit: type=1800 audit(1757702384.514:6): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1846" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3303 res=0 errno=0
[  149.678291][T10312] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  149.742961][T10318] netlink: 'syz.1.1863': attribute type 2 has an invalid length.
[  149.756197][T10318] netlink: 'syz.1.1863': attribute type 8 has an invalid length.
[  149.758753][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1863'.
[  150.242909][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'.
[  150.711077][T10386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1892'.
[  150.714038][T10386] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1892'.
[  150.972561][T10399] netlink: 'syz.1.1897': attribute type 13 has an invalid length.
[  150.975345][T10399] netlink: 'syz.1.1897': attribute type 17 has an invalid length.
[  150.995611][T10399] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.998762][T10399] 8021q: adding VLAN 0 to HW filter on device team0
[  151.007371][T10399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.112424][T10399] syz.1.1897 (10399) used greatest stack depth: 19928 bytes left
[  151.986951][T10419] netlink: 'syz.2.1907': attribute type 1 has an invalid length.
[  151.989884][T10419] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1907'.
[  152.140876][T10431] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  152.232519][T10437] netlink: set zone limit has 4 unknown bytes
[  152.264032][T10441] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  152.716419][T10473] lo: left promiscuous mode
[  152.726388][T10473] vlan0: left promiscuous mode
[  152.730347][T10473] veth3: left promiscuous mode
[  153.655821][T10490] netlink: 'syz.2.1936': attribute type 10 has an invalid length.
[  153.660750][T10490] bridge0: port 1(macsec0) entered blocking state
[  153.663944][T10490] bridge0: port 1(macsec0) entered disabled state
[  153.668792][T10490] macsec0: entered allmulticast mode
[  153.670661][T10490] veth1_macvtap: entered allmulticast mode
[  153.674039][T10490] macsec0: entered promiscuous mode
[  154.103425][T10537] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  154.110439][T10537] netlink: 'syz.2.1951': attribute type 13 has an invalid length.
[  154.115232][T10537] netlink: 'syz.2.1951': attribute type 17 has an invalid length.
[  154.217890][T10537] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.221941][T10537] 8021q: adding VLAN 0 to HW filter on device team0
[  154.229833][T10537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.238476][T10545] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.305993][T10545] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.360541][T10545] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.535960][T10545] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.656227][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'.
[  154.683649][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.727658][ T5878] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.731061][ T5878] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.744347][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'.
[  154.752370][ T5878] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.238159][T10626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.576498][T10641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'.
[  155.580203][T10641] syz_tun: left allmulticast mode
[  155.582345][T10641] syz_tun: left promiscuous mode
[  155.585091][T10641] bridge0: port 1(syz_tun) entered disabled state
[  156.178631][T10669] netlink: 'syz.1.1989': attribute type 1 has an invalid length.
[  156.211389][T10669] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.223124][T10669] vlan2: entered allmulticast mode
[  156.225385][T10669] macvtap0: entered allmulticast mode
[  156.228394][T10669] bond5: (slave vlan2): Opening slave failed
[  156.316455][T10672] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  156.590124][T10674] netlink: 'syz.1.1991': attribute type 12 has an invalid length.
[  156.593230][T10674] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1991'.
[  156.783967][T10680] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  156.931196][T10694] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  156.963527][T10694] bond6: entered promiscuous mode
[  156.966617][T10694] 8021q: adding VLAN 0 to HW filter on device bond6
[  156.988909][T10694] bond6: (slave bridge1): making interface the new active one
[  156.993567][T10694] bridge1: entered promiscuous mode
[  156.998409][T10694] bond6: (slave bridge1): Enslaving as an active interface with an up link
[  158.163948][T10729] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2009'.
[  158.187064][T10729] batadv1: entered promiscuous mode
[  158.189330][T10729] batadv1: entered allmulticast mode
[  158.269977][T10734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2010'.
[  158.432679][T10746] xt_l2tp: missing protocol rule (udp|l2tpip)
[  158.537116][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'.
[  158.577522][T10754] 8021q: adding VLAN 0 to HW filter on device bond5
[  158.603885][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  158.620120][T10754] macsec1: entered promiscuous mode
[  158.622024][T10754] bond5: entered promiscuous mode
[  158.623626][T10754] macsec1: entered allmulticast mode
[  158.625741][T10754] bond5: entered allmulticast mode
[  158.630171][T10754] bond5: left allmulticast mode
[  158.632949][T10754] bond5: left promiscuous mode
[  158.801747][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'.
[  159.099665][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'.
[  159.103110][T10805] netlink: 'syz.2.2040': attribute type 7 has an invalid length.
[  159.126747][T10805] netlink: 'syz.2.2040': attribute type 7 has an invalid length.
[  159.131334][ T5859] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.135234][ T5859] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.138735][ T5859] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.143241][ T5859] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.857958][T10876] __nla_validate_parse: 3 callbacks suppressed
[  159.857972][T10876] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2073'.
[  159.865900][T10876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.882010][T10878] tun0: tun_chr_ioctl cmd 2148553947
[  160.017271][T10890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2080'.
[  160.020150][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'.
[  160.408116][T10924] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  160.414979][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'.
[  160.438316][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'.
[  160.441042][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2098'.
[  160.443928][T10926] netlink: 'syz.2.2098': attribute type 4 has an invalid length.
[  161.340070][T10980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.345715][T10980] syzkaller0: entered promiscuous mode
[  161.348759][T10980] syzkaller0: entered allmulticast mode
[  161.359723][T10980] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  161.377482][T10980] tipc: Resetting bearer <eth:syzkaller0>
[  161.383325][T10979] tipc: Resetting bearer <eth:syzkaller0>
[  161.395971][T10979] tipc: Disabling bearer <eth:syzkaller0>
[  161.476841][T10982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.479789][T10982] syzkaller0: entered promiscuous mode
[  161.481604][T10982] syzkaller0: entered allmulticast mode
[  161.510199][T10982] tipc: Resetting bearer <eth:syzkaller0>
[  161.525992][T10981] tipc: Resetting bearer <eth:syzkaller0>
[  161.542918][T10981] tipc: Disabling bearer <eth:syzkaller0>
[  161.686694][T10993] syzkaller0: entered promiscuous mode
[  161.688637][T10993] syzkaller0: entered allmulticast mode
[  161.701820][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2128'.
[  163.313002][T11035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.386501][T11044] netlink: 'syz.2.2146': attribute type 33 has an invalid length.
[  163.389186][T11044] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2146'.
[  164.137702][T11098] netlink: 'syz.1.2168': attribute type 10 has an invalid length.
[  164.637610][T11129] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2184'.
[  164.733577][T11148] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  164.740353][T11148] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  164.768529][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2189'.
[  165.635296][T11171] ieee802154 phy1 wpan1: encryption failed: -22
[  165.728570][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'.
[  165.737874][T11176] netlink: 'syz.1.2199': attribute type 1 has an invalid length.
[  165.740294][T11176] netlink: 'syz.1.2199': attribute type 2 has an invalid length.
[  165.742731][T11176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2199'.
[  165.769707][T11158] syz.0.2192 (11158) used greatest stack depth: 18040 bytes left
[  165.823591][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'.
[  165.827803][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'.
[  165.941044][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2202'.
[  165.948040][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2202'.
[  165.971342][T11193] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2206'.
[  166.432860][T11229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2221'.
[  166.600555][T11245] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2229'.
[  166.915527][T11274] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2243'.
[  167.390582][ T5859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.471888][ T5859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.518916][ T5859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.608377][ T5859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.787663][ T5859] macsec0: left allmulticast mode
[  167.794048][ T5859] veth1_macvtap: left allmulticast mode
[  167.797827][ T5859] macsec0: left promiscuous mode
[  167.801538][ T5859] bridge0: port 1(macsec0) entered disabled state
[  167.910136][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  167.917942][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  167.921639][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  167.928675][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  167.932306][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  168.028052][ T5859] batman_adv: batadv0: Removing interface: ip6gretap1
[  168.753183][ T5859] bond0 (unregistering): Released all slaves
[  168.851321][ T5859] bond1 (unregistering): (slave veth3): Releasing active interface
[  168.856584][ T5859] bond1 (unregistering): Released all slaves
[  169.036363][ T5859] tipc: Disabling bearer <udp:syz2>
[  169.038888][ T5859] tipc: Disabling bearer <udp:syz0>
[  169.041159][ T5859] tipc: Left network mode
[  169.152232][T11331] wg1 speed is unknown, defaulting to 1000
[  169.156183][T11331] dummy0 speed is unknown, defaulting to 1000
[  170.004795][ T5850] Bluetooth: hci2: command tx timeout
[  170.064507][ T5859] hsr_slave_0: left promiscuous mode
[  170.073801][ T5859] hsr_slave_1: left promiscuous mode
[  171.296354][T11415] veth5: entered promiscuous mode
[  171.301667][T11331] chnl_net:caif_netlink_parms(): no params data found
[  171.519435][T11331] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.522519][T11331] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.526255][T11331] bridge_slave_0: entered allmulticast mode
[  171.529946][T11331] bridge_slave_0: entered promiscuous mode
[  171.534647][T11331] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.537406][T11331] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.540244][T11331] bridge_slave_1: entered allmulticast mode
[  171.544952][T11331] bridge_slave_1: entered promiscuous mode
[  171.608180][T11331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.613787][T11331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.677403][T11331] team0: Port device team_slave_0 added
[  171.682139][T11331] team0: Port device team_slave_1 added
[  171.766860][T11331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.769665][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.780375][T11331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.789656][T11331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.801594][T11331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.802684][T11443] __nla_validate_parse: 5 callbacks suppressed
[  171.802699][T11443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'.
[  171.819020][T11331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.865458][ T5859] IPVS: stop unused estimator thread 0...
[  171.871100][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'.
[  171.879825][T11446] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  171.919024][T11443] netlink: 'syz.0.2301': attribute type 10 has an invalid length.
[  171.926004][T11331] hsr_slave_0: entered promiscuous mode
[  171.929235][T11331] hsr_slave_1: entered promiscuous mode
[  171.932113][T11331] debugfs: 'hsr0' already exists in 'hsr'
[  171.934699][T11331] Cannot create hsr debugfs directory
[  172.084270][ T5850] Bluetooth: hci2: command tx timeout
[  172.318118][T11331] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  172.359157][T11331] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  172.366804][T11331] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  172.378748][T11331] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  172.501164][T11331] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.516756][T11331] 8021q: adding VLAN 0 to HW filter on device team0
[  172.528967][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.531884][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.541651][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.544503][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.700432][T11331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.781062][T11331] veth0_vlan: entered promiscuous mode
[  172.795272][T11331] veth1_vlan: entered promiscuous mode
[  172.836135][T11331] veth0_macvtap: entered promiscuous mode
[  172.853450][T11331] veth1_macvtap: entered promiscuous mode
[  172.890840][T11331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.911818][T11331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.929183][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.932579][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.959091][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.963070][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.136797][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.139899][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.172551][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.176519][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.509031][T11511] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2324'.
[  173.588176][T11517] syzkaller1: entered promiscuous mode
[  173.590515][T11517] syzkaller1: entered allmulticast mode
[  173.622686][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2328'.
[  173.789862][T11528] netlink: 'syz.1.2332': attribute type 11 has an invalid length.
[  174.164737][ T5850] Bluetooth: hci2: command tx timeout
[  174.455029][T11554] wg1 speed is unknown, defaulting to 1000
[  174.458592][T11554] dummy0 speed is unknown, defaulting to 1000
[  176.017131][T11588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'.
[  176.246897][ T5850] Bluetooth: hci2: command tx timeout
[  176.768676][T11640] vlan0: entered promiscuous mode
[  176.773479][T11640] macvtap0: entered promiscuous mode
[  176.800936][T11642] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  176.823939][T11635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2380'.
[  177.333092][T11655] wg1 speed is unknown, defaulting to 1000
[  177.337715][T11655] dummy0 speed is unknown, defaulting to 1000
[  179.807049][T11697] wg1 speed is unknown, defaulting to 1000
[  179.834539][T11697] dummy0 speed is unknown, defaulting to 1000
[  180.139555][T11728] netlink: zone id is out of range
[  180.144232][T11728] netlink: zone id is out of range
[  180.145914][T11728] netlink: zone id is out of range
[  180.151639][T11728] netlink: zone id is out of range
[  180.156337][T11728] netlink: zone id is out of range
[  180.157836][T11728] netlink: zone id is out of range
[  180.159861][T11728] netlink: zone id is out of range
[  180.161522][T11728] netlink: zone id is out of range
[  180.168370][T11730] IPVS: Scheduler module ip_vs_sip not found
[  180.176526][T11728] netlink: zone id is out of range
[  180.178078][T11728] netlink: zone id is out of range
[  180.397653][T11747] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2424'.
[  180.401326][T11747] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2424'.
[  180.681171][T11766] IPVS: length: 141 != 8
[  180.729439][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2432'.
[  181.360799][T11816] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2455'.
[  181.365974][T11817] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.2454'.
[  181.366247][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'.
[  181.437617][T11823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2457'.
[  181.788452][T11843] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2464'.
[  182.187754][T11845] wg1 speed is unknown, defaulting to 1000
[  182.191646][T11845] dummy0 speed is unknown, defaulting to 1000
[  183.649052][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2487'.
[  183.773198][T11926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2488'.
[  183.782739][T11926] bond0: entered promiscuous mode
[  183.785327][T11926] bond_slave_0: entered promiscuous mode
[  183.787354][T11926] bond_slave_1: entered promiscuous mode
[  183.790657][T11926] bond0: left promiscuous mode
[  183.792337][T11926] bond_slave_0: left promiscuous mode
[  183.810092][T11926] bond_slave_1: left promiscuous mode
[  184.206072][T11940] wg1 speed is unknown, defaulting to 1000
[  184.209956][T11940] dummy0 speed is unknown, defaulting to 1000
[  184.542241][T11967] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2504'.
[  185.079561][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'.
[  185.090602][T11987] vlan0: entered promiscuous mode
[  185.092673][T11987] batadv0: entered promiscuous mode
[  186.093340][T12040] netlink: 'syz.1.2540': attribute type 2 has an invalid length.
[  186.316856][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'.
[  186.324328][T12051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.371164][T12065] sctp: [Deprecated]: syz.1.2551 (pid 12065) Use of int in max_burst socket option.
[  186.371164][T12065] Use struct sctp_assoc_value instead
[  186.381571][T12051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.409187][T12066] gtp0: entered promiscuous mode
[  186.410888][T12066] gtp0: entered allmulticast mode
[  186.480980][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'.
[  186.609452][T12080] netem: incorrect ge model size
[  186.611478][T12080] netem: change failed
[  186.976264][T12111] net_ratelimit: 11 callbacks suppressed
[  186.976286][T12111] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  187.558404][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'.
[  187.567099][T12151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.915618][T12183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.918702][T12183] syzkaller0: entered promiscuous mode
[  187.920570][T12183] syzkaller0: entered allmulticast mode
[  187.960785][T12183] tipc: Resetting bearer <eth:syzkaller0>
[  187.965468][T12182] tipc: Resetting bearer <eth:syzkaller0>
[  187.988166][T12182] tipc: Disabling bearer <eth:syzkaller0>
[  188.053424][T12196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2610'.
[  188.219712][T12213] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  188.291502][T12217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.295449][T12217] syzkaller0: entered promiscuous mode
[  188.297650][T12217] syzkaller0: entered allmulticast mode
[  188.315267][T12217] tipc: Resetting bearer <eth:syzkaller0>
[  188.320005][T12216] tipc: Resetting bearer <eth:syzkaller0>
[  188.334025][T12216] tipc: Disabling bearer <eth:syzkaller0>
[  188.468137][T12210] wg1 speed is unknown, defaulting to 1000
[  188.473514][T12210] dummy0 speed is unknown, defaulting to 1000
[  188.879142][T12223] wg1 speed is unknown, defaulting to 1000
[  188.883054][T12223] dummy0 speed is unknown, defaulting to 1000
[  188.976350][T12231] netlink: 'syz.3.2622': attribute type 12 has an invalid length.
[  189.220443][T12240] dvmrp1: tun_chr_ioctl cmd 1074025677
[  189.223194][T12240] dvmrp1: linktype set to 773
[  189.509896][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2630'.
[  189.880650][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2640'.
[  189.889802][T12277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2640'.
[  189.898293][T12277] netlink: 'syz.0.2640': attribute type 4 has an invalid length.
[  189.933779][T12280] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2640'.
[  190.408748][T12279] wg1 speed is unknown, defaulting to 1000
[  190.412166][T12279] dummy0 speed is unknown, defaulting to 1000
[  191.199503][T12317] tipc: New replicast peer: 0.0.0.0
[  191.202430][T12317] tipc: Enabled bearer <udp:syz2>, priority 10
[  191.206698][T12317] tipc: New replicast peer: 255.255.255.255
[  191.291575][T12325] netlink: 'syz.3.2661': attribute type 1 has an invalid length.
[  191.297320][T12325] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2661'.
[  191.300218][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2661'.
[  191.564640][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.567814][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.658919][T12357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2673'.
[  191.662640][T12357] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2673'.
[  191.666865][T12357] netlink: 'syz.1.2673': attribute type 5 has an invalid length.
[  191.670021][T12357] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2673'.
[  192.943889][T12422] ieee802154 phy1 wpan1: encryption failed: -22
[  193.000993][T12408] wg1 speed is unknown, defaulting to 1000
[  193.006933][T12408] dummy0 speed is unknown, defaulting to 1000
[  193.022065][T12424] syzkaller0: entered promiscuous mode
[  193.024649][T12424] syzkaller0: entered allmulticast mode
[  193.028956][ T5878] syzkaller0: tun_net_xmit 70
[  193.031891][T12424] syzkaller0: tun_chr_ioctl cmd 1074025677
[  193.036157][T12424] syzkaller0: Linktype set failed because interface is up
[  193.719468][T12453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'.
[  193.741910][T12454] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  193.859092][T12462] netlink: 'syz.1.2722': attribute type 19 has an invalid length.
[  193.861605][T12462] netlink: 'syz.1.2722': attribute type 19 has an invalid length.
[  193.934558][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  193.980653][T12470] tipc: Started in network mode
[  193.984209][T12470] tipc: Node identity 3e52164777b2, cluster identity 4711
[  193.986652][T12470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.064339][T12470] syzkaller0: entered promiscuous mode
[  194.066334][T12470] syzkaller0: entered allmulticast mode
[  194.069925][T12470] tipc: Resetting bearer <eth:syzkaller0>
[  194.083035][T12469] tipc: Resetting bearer <eth:syzkaller0>
[  195.064492][ T2333] tipc: Node number set to 1239422535
[  195.390424][T12469] tipc: Disabling bearer <eth:syzkaller0>
[  195.589882][T12509] __nla_validate_parse: 4 callbacks suppressed
[  195.589897][T12509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2743'.
[  195.598418][T12507] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2742'.
[  195.827369][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'.
[  195.868615][T12535] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  196.196151][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2767'.
[  196.266365][T12561] netlink: 'syz.1.2769': attribute type 1 has an invalid length.
[  196.488147][T12576] netlink: 'syz.3.2776': attribute type 1 has an invalid length.
[  196.491356][T12576] netlink: 15 bytes leftover after parsing attributes in process `syz.3.2776'.
[  196.580166][ T5878] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.586982][ T5878] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.589570][ T5878] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.592088][ T5878] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.799612][T12597] bridge2: entered allmulticast mode
[  196.953685][T12609] v: renamed from ip6_vti0 (while UP)
[  197.110807][T12618] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2796'.
[  198.030319][T12655] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2811'.
[  198.372896][T12666] syzkaller1: entered promiscuous mode
[  198.377033][T12666] syzkaller1: entered allmulticast mode
[  198.631925][T12668] wg1 speed is unknown, defaulting to 1000
[  198.636926][T12668] dummy0 speed is unknown, defaulting to 1000
[  198.857658][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2823'.
[  199.122557][    C1] ==================================================================
[  199.125807][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  199.129028][    C1] Write of size 8 at addr ffff8880290f5fb0 by task modprobe/12701
[  199.131949][    C1] 
[  199.132877][    C1] CPU: 1 UID: 0 PID: 12701 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  199.132894][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.132904][    C1] Call Trace:
[  199.132911][    C1]  <IRQ>
[  199.132920][    C1]  dump_stack_lvl+0x189/0x250
[  199.132940][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  199.132957][    C1]  ? rcu_is_watching+0x15/0xb0
[  199.132971][    C1]  ? __kasan_check_byte+0x12/0x40
[  199.132988][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.133002][    C1]  ? rcu_is_watching+0x15/0xb0
[  199.133015][    C1]  ? lock_release+0x4b/0x3e0
[  199.133034][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  199.133047][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  199.133061][    C1]  print_report+0xca/0x240
[  199.133074][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  199.133088][    C1]  kasan_report+0x118/0x150
[  199.133104][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  199.133122][    C1]  __xfrm_state_delete+0x696/0xca0
[  199.133142][    C1]  xfrm_timer_handler+0x18f/0xa00
[  199.133158][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.133172][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  199.133185][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.133199][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.133212][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.133227][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.133241][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.133256][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  199.133276][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  199.133289][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  199.133305][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  199.133321][    C1]  handle_softirqs+0x286/0x870
[  199.133335][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  199.133350][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  199.133367][    C1]  __irq_exit_rcu+0xca/0x1f0
[  199.133380][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  199.133395][    C1]  irq_exit_rcu+0x9/0x30
[  199.133406][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  199.133418][    C1]  </IRQ>
[  199.133422][    C1]  <TASK>
[  199.133427][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.133442][    C1] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  199.133463][    C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  199.133475][    C1] RSP: 0018:ffffc900030f7328 EFLAGS: 00000246
[  199.133488][    C1] RAX: ffffc900030f7401 RBX: ffffffffffffffff RCX: ffffffff8b733e74
[  199.133499][    C1] RDX: 0000000000000001 RSI: 000000000000000c RDI: ffffc900030f74cc
[  199.133507][    C1] RBP: 0000000000000000 R08: ffffc900030f74d7 R09: 1ffff9200061ee9a
[  199.133516][    C1] R10: dffffc0000000000 R11: fffff5200061ee9a R12: 0000000000000002
[  199.133525][    C1] R13: dffffc0000000000 R14: fffff5200061ee9b R15: 1ffff9200061ee99
[  199.133539][    C1]  ? mt_validate+0xf4/0x4380
[  199.133559][    C1]  __asan_memset+0x22/0x50
[  199.133574][    C1]  mt_validate+0xf4/0x4380
[  199.133593][    C1]  ? __pfx_mt_validate+0x10/0x10
[  199.133607][    C1]  ? perf_event_mmap+0x229/0x15f0
[  199.133630][    C1]  ? __pfx_mas_destroy+0x10/0x10
[  199.133656][    C1]  validate_mm+0xb6/0x4b0
[  199.133709][    C1]  ? __pfx_validate_mm+0x10/0x10
[  199.133725][    C1]  ? up_write+0x1c4/0x420
[  199.133739][    C1]  ? __pfx___anon_vma_interval_tree_augment_rotate+0x10/0x10
[  199.133755][    C1]  expand_downwards+0x6d5/0xaa0
[  199.133781][    C1]  ? __pfx_expand_downwards+0x10/0x10
[  199.133797][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  199.133814][    C1]  setup_arg_pages+0x804/0xaa0
[  199.133835][    C1]  ? __pfx_setup_arg_pages+0x10/0x10
[  199.133860][    C1]  ? up_write+0x1c4/0x420
[  199.133878][    C1]  load_elf_binary+0xba4/0x2740
[  199.133904][    C1]  ? load_misc_binary+0x110/0xc40
[  199.133924][    C1]  ? __lock_acquire+0xab9/0xd20
[  199.133946][    C1]  ? __pfx_load_elf_binary+0x10/0x10
[  199.133972][    C1]  bprm_execve+0x99c/0x1450
[  199.133994][    C1]  ? __pfx_bprm_execve+0x10/0x10
[  199.134010][    C1]  ? copy_string_kernel+0x25f/0x2a0
[  199.134026][    C1]  kernel_execve+0x8f0/0x9f0
[  199.134045][    C1]  call_usermodehelper_exec_async+0x210/0x360
[  199.134064][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  199.134085][    C1]  ret_from_fork+0x3fc/0x770
[  199.134099][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  199.134114][    C1]  ? __switch_to_asm+0x39/0x70
[  199.134130][    C1]  ? __switch_to_asm+0x33/0x70
[  199.134144][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  199.134164][    C1]  ret_from_fork_asm+0x1a/0x30
[  199.134184][    C1]  </TASK>
[  199.134190][    C1] 
[  199.298739][    C1] Allocated by task 12365:
[  199.300289][    C1]  kasan_save_track+0x3e/0x80
[  199.302055][    C1]  __kasan_slab_alloc+0x6c/0x80
[  199.303784][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  199.305671][    C1]  xfrm_state_alloc+0x24/0x2f0
[  199.307199][    C1]  pfkey_add+0x6e4/0x2e00
[  199.308590][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  199.310199][    C1]  __sock_sendmsg+0x21c/0x270
[  199.311949][    C1]  ____sys_sendmsg+0x505/0x830
[  199.313789][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  199.315322][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  199.316808][    C1]  do_syscall_64+0xfa/0x3b0
[  199.318363][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.320437][    C1] 
[  199.321327][    C1] Freed by task 9:
[  199.322719][    C1]  kasan_save_track+0x3e/0x80
[  199.324239][    C1]  kasan_save_free_info+0x46/0x50
[  199.325909][    C1]  __kasan_slab_free+0x5b/0x80
[  199.327568][    C1]  kmem_cache_free+0x18f/0x400
[  199.329244][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  199.330872][    C1]  process_scheduled_works+0xae1/0x17b0
[  199.332926][    C1]  worker_thread+0x8a0/0xda0
[  199.334550][    C1]  kthread+0x711/0x8a0
[  199.336137][    C1]  ret_from_fork+0x3fc/0x770
[  199.337758][    C1]  ret_from_fork_asm+0x1a/0x30
[  199.339724][    C1] 
[  199.340579][    C1] The buggy address belongs to the object at ffff8880290f5f80
[  199.340579][    C1]  which belongs to the cache xfrm_state of size 928
[  199.345476][    C1] The buggy address is located 48 bytes inside of
[  199.345476][    C1]  freed 928-byte region [ffff8880290f5f80, ffff8880290f6320)
[  199.350265][    C1] 
[  199.351214][    C1] The buggy address belongs to the physical page:
[  199.353357][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880290f4000 pfn:0x290f4
[  199.356635][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  199.359532][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  199.362104][    C1] page_type: f5(slab)
[  199.363353][    C1] raw: 00fff00000000040 ffff888104e86280 dead000000000122 0000000000000000
[  199.366417][    C1] raw: ffff8880290f4000 00000000800e000a 00000000f5000000 0000000000000000
[  199.369292][    C1] head: 00fff00000000040 ffff888104e86280 dead000000000122 0000000000000000
[  199.371905][    C1] head: ffff8880290f4000 00000000800e000a 00000000f5000000 0000000000000000
[  199.374682][    C1] head: 00fff00000000002 ffffea0000a43d01 00000000ffffffff 00000000ffffffff
[  199.377530][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  199.380461][    C1] page dumped because: kasan: bad access detected
[  199.382637][    C1] page_owner tracks the page as allocated
[  199.384454][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5977, tgid 5976 (syz.0.29), ts 68147239755, free_ts 67952963820
[  199.390319][    C1]  post_alloc_hook+0x240/0x2a0
[  199.391999][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  199.394138][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  199.396361][    C1]  alloc_pages_mpol+0x232/0x4a0
[  199.398260][    C1]  allocate_slab+0x8a/0x370
[  199.399913][    C1]  ___slab_alloc+0xbeb/0x1420
[  199.401610][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  199.403509][    C1]  xfrm_state_alloc+0x24/0x2f0
[  199.405304][    C1]  xfrm_add_sa+0x17d1/0x4070
[  199.407064][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.408860][    C1]  netlink_rcv_skb+0x208/0x470
[  199.410797][    C1]  xfrm_netlink_rcv+0x79/0x90
[  199.412738][    C1]  netlink_unicast+0x82f/0x9e0
[  199.414706][    C1]  netlink_sendmsg+0x805/0xb30
[  199.416430][    C1]  __sock_sendmsg+0x21c/0x270
[  199.417936][    C1]  ____sys_sendmsg+0x505/0x830
[  199.419374][    C1] page last free pid 5965 tgid 5964 stack trace:
[  199.421378][    C1]  __free_frozen_pages+0xbc4/0xd30
[  199.422997][    C1]  __slab_free+0x303/0x3c0
[  199.424612][    C1]  qlist_free_all+0x97/0x140
[  199.426511][    C1]  kasan_quarantine_reduce+0x148/0x160
[  199.428593][    C1]  __kasan_slab_alloc+0x22/0x80
[  199.430333][    C1]  __kmalloc_noprof+0x224/0x4f0
[  199.432162][    C1]  tomoyo_realpath_from_path+0xe3/0x5d0
[  199.433907][    C1]  tomoyo_path_number_perm+0x1e8/0x5a0
[  199.435913][    C1]  security_file_ioctl+0xcb/0x2d0
[  199.437481][    C1]  __se_sys_ioctl+0x47/0x170
[  199.438961][    C1]  do_syscall_64+0xfa/0x3b0
[  199.440592][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.442769][    C1] 
[  199.443684][    C1] Memory state around the buggy address:
[  199.445447][    C1]  ffff8880290f5e80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  199.448048][    C1]  ffff8880290f5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.450710][    C1] >ffff8880290f5f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.453589][    C1]                                      ^
[  199.455480][    C1]  ffff8880290f6000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.458113][    C1]  ffff8880290f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.460611][    C1] ==================================================================
[  199.463666][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  199.466194][    C1] CPU: 1 UID: 0 PID: 12701 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) 
[  199.469035][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.472261][    C1] Call Trace:
[  199.473465][    C1]  <IRQ>
[  199.474513][    C1]  dump_stack_lvl+0x99/0x250
[  199.476188][    C1]  ? __asan_memcpy+0x40/0x70
[  199.477806][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.479556][    C1]  ? __pfx__printk+0x10/0x10
[  199.481004][    C1]  vpanic+0x281/0x750
[  199.482261][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  199.484028][    C1]  ? __pfx_vpanic+0x10/0x10
[  199.485528][    C1]  ? irqentry_exit+0x74/0x90
[  199.487033][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.488841][    C1]  panic+0xb9/0xc0
[  199.490135][    C1]  ? __pfx_panic+0x10/0x10
[  199.491831][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  199.494131][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.496415][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  199.498281][    C1]  check_panic_on_warn+0x89/0xb0
[  199.500259][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  199.502170][    C1]  end_report+0x78/0x160
[  199.503703][    C1]  kasan_report+0x129/0x150
[  199.505262][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  199.507156][    C1]  __xfrm_state_delete+0x696/0xca0
[  199.509100][    C1]  xfrm_timer_handler+0x18f/0xa00
[  199.510786][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.512662][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  199.514981][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.516917][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.519052][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.521235][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.523206][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  199.524890][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  199.526442][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  199.528174][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  199.530012][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  199.531664][    C1]  handle_softirqs+0x286/0x870
[  199.533325][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  199.535235][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  199.537043][    C1]  __irq_exit_rcu+0xca/0x1f0
[  199.538490][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  199.540146][    C1]  irq_exit_rcu+0x9/0x30
[  199.541482][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  199.543248][    C1]  </IRQ>
[  199.544176][    C1]  <TASK>
[  199.545166][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.547124][    C1] RIP: 0010:kasan_check_range+0x9f/0x2c0
[  199.549169][    C1] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 de 01 00 00 49 ff c3 48 ff c3 75 ee e9 21 01 00 00 44 89 dd
[  199.555836][    C1] RSP: 0018:ffffc900030f7328 EFLAGS: 00000246
[  199.557940][    C1] RAX: ffffc900030f7401 RBX: ffffffffffffffff RCX: ffffffff8b733e74
[  199.560669][    C1] RDX: 0000000000000001 RSI: 000000000000000c RDI: ffffc900030f74cc
[  199.563407][    C1] RBP: 0000000000000000 R08: ffffc900030f74d7 R09: 1ffff9200061ee9a
[  199.566432][    C1] R10: dffffc0000000000 R11: fffff5200061ee9a R12: 0000000000000002
[  199.569558][    C1] R13: dffffc0000000000 R14: fffff5200061ee9b R15: 1ffff9200061ee99
[  199.572667][    C1]  ? mt_validate+0xf4/0x4380
[  199.574503][    C1]  __asan_memset+0x22/0x50
[  199.576268][    C1]  mt_validate+0xf4/0x4380
[  199.578030][    C1]  ? __pfx_mt_validate+0x10/0x10
[  199.579962][    C1]  ? perf_event_mmap+0x229/0x15f0
[  199.581982][    C1]  ? __pfx_mas_destroy+0x10/0x10
[  199.583985][    C1]  validate_mm+0xb6/0x4b0
[  199.585749][    C1]  ? __pfx_validate_mm+0x10/0x10
[  199.587800][    C1]  ? up_write+0x1c4/0x420
[  199.589587][    C1]  ? __pfx___anon_vma_interval_tree_augment_rotate+0x10/0x10
[  199.592499][    C1]  expand_downwards+0x6d5/0xaa0
[  199.594429][    C1]  ? __pfx_expand_downwards+0x10/0x10
[  199.596544][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  199.598617][    C1]  setup_arg_pages+0x804/0xaa0
[  199.600585][    C1]  ? __pfx_setup_arg_pages+0x10/0x10
[  199.602726][    C1]  ? up_write+0x1c4/0x420
[  199.604456][    C1]  load_elf_binary+0xba4/0x2740
[  199.606367][    C1]  ? load_misc_binary+0x110/0xc40
[  199.608311][    C1]  ? __lock_acquire+0xab9/0xd20
[  199.610202][    C1]  ? __pfx_load_elf_binary+0x10/0x10
[  199.612246][    C1]  bprm_execve+0x99c/0x1450
[  199.614036][    C1]  ? __pfx_bprm_execve+0x10/0x10
[  199.616036][    C1]  ? copy_string_kernel+0x25f/0x2a0
[  199.618088][    C1]  kernel_execve+0x8f0/0x9f0
[  199.619980][    C1]  call_usermodehelper_exec_async+0x210/0x360
[  199.622452][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  199.625021][    C1]  ret_from_fork+0x3fc/0x770
[  199.626817][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  199.628824][    C1]  ? __switch_to_asm+0x39/0x70
[  199.630729][    C1]  ? __switch_to_asm+0x33/0x70
[  199.632612][    C1]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  199.635179][    C1]  ret_from_fork_asm+0x1a/0x30
[  199.637242][    C1]  </TASK>
[  199.639161][    C1] Kernel Offset: disabled
[  199.640917][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:40:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=ffff88801c688000 RDX=0000000000000000
RSI=00000000ffffffff RDI=ffffffff8e139f80 RBP=00000000ffffffff RSP=ffffc900001074b0
R8 =0000000000000000 R9 =ffffffff825d4bec R10=dffffc0000000000 R11=ffffed102001c037
R12=1ffff92000020ec4 R13=ffff88801c688000 R14=ffffffff8e139f80 R15=dffffc0000000000
RIP=ffffffff8b7a9b55 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f001ddd7dac CR3=0000000035f6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f001dda7498 00007f001dda7470 XMM03=00007f001dda74a8 00007f001dda74a0
XMM04=00007f001e90d100 00007f001dda7460 XMM05=00007f001dda7478 00007f001dda74c0
XMM06=00007f001dda74b8 00007f001dda74b0 XMM07=00007f001dda74a8 00007f001dda74a0
XMM08=0000000000000000 00007f001dc12ee7 XMM09=0000000000000000 00007f001dc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff8881067d8237 R9 =1ffff11020cfb046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01902 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c31fe84 CR3=000000010b17a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faee93a7498 00007faee93a7470 XMM03=00007faee93a74a8 00007faee93a74a0
XMM04=00007faee9f0d100 00007faee93a7460 XMM05=00007faee93a7478 00007faee93a74c0
XMM06=00007faee93a74b8 00007faee93a74b0 XMM07=00007faee93a74a8 00007faee93a74a0
XMM08=0000000000000000 00007faee9212ee7 XMM09=0000000000000000 00007faee9212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
