last executing test programs:

1.4572661s ago: executing program 1 (id=1854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x30, r1, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.355689108s ago: executing program 1 (id=1855):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)}}], 0x2, 0x2400c044)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r2, &(0x7f0000000480), 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x30, r6, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[r3, r3, 0xffffffffffffffff], &(0x7f0000000dc0), 0x10, 0x5}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x4010)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="fa27831525ee14fef8fbb0000000a70078953315d6c304ab12dca303111242c73e087ee39bcbbba59df616f01a53d75e472113af0900000000000000e4b7f2f3dc951e22e2a6c244be6208b6f5bf1578c395c6a63411982a04235ff0e19d6aeecacd788a4d800b2b68f77c816ac2fbddec290d4b1efd661d0c17eee7e3162d4d3eada710d1db5b03340a5f1e1e7ee00ee7005655fac9b3f0f6e7a4de8a452fb3165346b65ea2a60e2b56b2fdc90a005017d128ec"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

1.058799027s ago: executing program 0 (id=1861):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x30, 0x60, 0xd3, 0xfffff020}, {0x6, 0x4, 0x2, 0x5}]}, 0x10)

988.850651ms ago: executing program 0 (id=1863):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10)

988.496517ms ago: executing program 0 (id=1864):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf)
epoll_create1(0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

850.437543ms ago: executing program 0 (id=1866):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

763.896174ms ago: executing program 0 (id=1868):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000b00)='ns/uts\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000f00)='ns/uts\x00')

763.611912ms ago: executing program 0 (id=1869):
r0 = epoll_create1(0x80000)
epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f0000000200)={[0x7]}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000240)={0x10000001})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)

683.43001ms ago: executing program 2 (id=1871):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000790000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)

558.865343ms ago: executing program 2 (id=1872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@dellinkprop={0x44, 0x6d, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x40480}, [@IFLA_MAP={0x24, 0xe, {0xfffffffffffffffd, 0xf, 0xe, 0x1000, 0x0, 0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4040000)

399.026349ms ago: executing program 2 (id=1873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

288.508306ms ago: executing program 1 (id=1874):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x1, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

288.216528ms ago: executing program 2 (id=1875):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

186.060271ms ago: executing program 2 (id=1876):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001880)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x40000)

185.660439ms ago: executing program 1 (id=1877):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="77d2bcbdedb6eddc072584bc4ed3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

87.719759ms ago: executing program 1 (id=1878):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r1)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x20, r2, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

632.565µs ago: executing program 2 (id=1879):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@allocspi={0x124, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}, @proto={0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)

0s ago: executing program 1 (id=1880):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x800)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600a843500142bfffe8000000000000000000000000000bbfe8000000000000000000000000000aa00020000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0300000000000000"], 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x5}, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000015c0))
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r3, &(0x7f0000000340)=""/49, 0x31)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x400c845}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48833' (ED25519) to the list of known hosts.
syzkaller login: [   56.180786][ T5790] cgroup: Unknown subsys name 'net'
[   56.261864][ T5790] cgroup: Unknown subsys name 'cpuset'
[   56.266290][ T5790] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.047452][ T5790] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.212729][  T792] sched: DL replenish lagged too much
[   70.588712][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.596622][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.600852][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.606551][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.610160][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.625398][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.629390][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.642621][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.646858][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.650617][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.668258][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.672847][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.676670][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.681139][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.685160][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.014615][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   71.163520][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.167081][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.170042][ T5877] bridge_slave_0: entered allmulticast mode
[   71.174230][ T5877] bridge_slave_0: entered promiscuous mode
[   71.198370][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.201284][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.204763][ T5877] bridge_slave_1: entered allmulticast mode
[   71.208425][ T5877] bridge_slave_1: entered promiscuous mode
[   71.223929][ T5874] chnl_net:caif_netlink_parms(): no params data found
[   71.249001][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.257442][ T5881] chnl_net:caif_netlink_parms(): no params data found
[   71.273439][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.344507][ T5877] team0: Port device team_slave_0 added
[   71.362404][ T5877] team0: Port device team_slave_1 added
[   71.426179][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.428473][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.452953][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.455063][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.463825][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.468683][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.472436][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.475198][ T5874] bridge_slave_0: entered allmulticast mode
[   71.479105][ T5874] bridge_slave_0: entered promiscuous mode
[   71.482105][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.485725][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.488913][ T5881] bridge_slave_0: entered allmulticast mode
[   71.492873][ T5881] bridge_slave_0: entered promiscuous mode
[   71.497764][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.499966][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.502852][ T5881] bridge_slave_1: entered allmulticast mode
[   71.505840][ T5881] bridge_slave_1: entered promiscuous mode
[   71.509490][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.511641][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.523810][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.528265][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.531107][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.534722][ T5874] bridge_slave_1: entered allmulticast mode
[   71.538406][ T5874] bridge_slave_1: entered promiscuous mode
[   71.602711][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.609608][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.646598][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.652786][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.661324][ T5877] hsr_slave_0: entered promiscuous mode
[   71.665348][ T5877] hsr_slave_1: entered promiscuous mode
[   71.720314][ T5874] team0: Port device team_slave_0 added
[   71.740147][ T5881] team0: Port device team_slave_0 added
[   71.746288][ T5874] team0: Port device team_slave_1 added
[   71.768930][ T5881] team0: Port device team_slave_1 added
[   71.828837][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.831294][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.840247][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.859344][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.862026][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.873451][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.878443][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.881453][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.891942][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.906611][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.909355][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.920554][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.029811][ T5874] hsr_slave_0: entered promiscuous mode
[   72.034105][ T5874] hsr_slave_1: entered promiscuous mode
[   72.036994][ T5874] debugfs: 'hsr0' already exists in 'hsr'
[   72.039289][ T5874] Cannot create hsr debugfs directory
[   72.063276][ T5881] hsr_slave_0: entered promiscuous mode
[   72.066534][ T5881] hsr_slave_1: entered promiscuous mode
[   72.069479][ T5881] debugfs: 'hsr0' already exists in 'hsr'
[   72.071910][ T5881] Cannot create hsr debugfs directory
[   72.284495][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.310462][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.325879][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.341256][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.436381][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.450412][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.460845][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.484583][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.557453][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.569875][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.576862][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.584594][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.658797][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.695491][   T55] Bluetooth: hci0: command tx timeout
[   72.695500][ T5880] Bluetooth: hci1: command tx timeout
[   72.695854][ T5876] Bluetooth: hci2: command tx timeout
[   72.713608][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   72.734307][  T704] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.736996][  T704] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.749802][  T704] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.752596][  T704] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.774601][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.833620][ T5881] 8021q: adding VLAN 0 to HW filter on device team0
[   72.839371][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.856110][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.859073][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.866679][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.869817][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.916416][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[   72.955528][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.958388][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.981037][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.984347][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.998865][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.074801][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.149248][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.255667][ T5877] veth0_vlan: entered promiscuous mode
[   73.277196][ T5877] veth1_vlan: entered promiscuous mode
[   73.311355][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.329350][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.333416][ T5877] veth0_macvtap: entered promiscuous mode
[   73.340651][ T5877] veth1_macvtap: entered promiscuous mode
[   73.383951][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.400736][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.434946][ T5881] veth0_vlan: entered promiscuous mode
[   73.437491][ T5874] veth0_vlan: entered promiscuous mode
[   73.439954][ T5902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.448645][ T5902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.452001][ T5902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.458444][ T5902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.486503][ T5874] veth1_vlan: entered promiscuous mode
[   73.494403][ T5881] veth1_vlan: entered promiscuous mode
[   73.581395][ T5874] veth0_macvtap: entered promiscuous mode
[   73.597430][ T5881] veth0_macvtap: entered promiscuous mode
[   73.605451][ T5874] veth1_macvtap: entered promiscuous mode
[   73.605970][  T704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.610851][  T704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.629279][ T5881] veth1_macvtap: entered promiscuous mode
[   73.668348][  T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.671377][  T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.680126][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.690259][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.701659][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.718199][ T5902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.721768][ T5902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.729746][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.737349][ T5902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.740784][ T5902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.756179][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   73.767821][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.772129][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.795906][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.820685][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.949676][  T704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.952159][  T704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.003279][  T704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.006492][  T704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.054965][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.058911][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.092670][  T704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.108687][  T704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.398739][ T5952] Zero length message leads to an empty skb
[   74.675458][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.777186][ T5876] Bluetooth: hci2: command tx timeout
[   74.779433][ T5876] Bluetooth: hci1: command tx timeout
[   74.781721][   T55] Bluetooth: hci0: command tx timeout
[   74.796660][ T5976] netlink: 'syz.1.35': attribute type 2 has an invalid length.
[   74.800071][ T5976] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   74.806885][ T5974] pimreg: entered allmulticast mode
[   74.838103][ T5978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'.
[   74.900582][ T5978] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.36'.
[   74.914974][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   75.122478][ T5988] pim6reg1: entered promiscuous mode
[   75.124728][ T5988] pim6reg1: entered allmulticast mode
[   75.209688][ T5992] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET)
[   75.236034][ T5992] warning: `syz.0.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.268300][ T5996] Bluetooth: MGMT ver 1.23
[   75.679601][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'.
[   75.916836][ T6040] sit0: entered promiscuous mode
[   75.923799][ T6040] netlink: 'syz.1.66': attribute type 1 has an invalid length.
[   75.926866][ T6040] netlink: 1 bytes leftover after parsing attributes in process `syz.1.66'.
[   76.009526][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   76.050791][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.69'.
[   76.117003][ T6054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'.
[   76.677745][ T6087] batman_adv: batadv0: Adding interface: dummy0
[   76.680261][ T6087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.687272][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'.
[   76.698246][ T6087] batman_adv: batadv0: Interface activated: dummy0
[   76.704490][ T6091] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   76.707759][ T6091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.736579][ T6087] batadv0: mtu less than device minimum
[   76.758736][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.764531][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.770367][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.775886][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.781010][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.787869][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.793347][ T6087] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   76.818770][ T6095] netlink: 10 bytes leftover after parsing attributes in process `syz.1.90'.
[   76.852860][   T55] Bluetooth: hci1: command tx timeout
[   76.852907][ T5876] Bluetooth: hci2: command tx timeout
[   76.855205][   T55] Bluetooth: hci0: command tx timeout
[   77.308068][ T6129] netlink: 'syz.2.106': attribute type 11 has an invalid length.
[   77.721635][ T6155] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   77.890835][ T6167] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   78.661252][ T6211] ip6gretap0: entered promiscuous mode
[   78.676737][ T6211] syz_tun: entered promiscuous mode
[   78.933599][   T55] Bluetooth: hci2: command tx timeout
[   78.933944][ T5880] Bluetooth: hci1: command tx timeout
[   78.935931][   T55] Bluetooth: hci0: command tx timeout
[   79.050405][ T6224] pim6reg1: entered promiscuous mode
[   79.062423][ T6224] pim6reg1: entered allmulticast mode
[   79.949730][ T6259] __nla_validate_parse: 9 callbacks suppressed
[   79.949749][ T6259] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'.
[   79.975234][ T6262] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   80.512153][ T6303] netlink: 'syz.1.186': attribute type 1 has an invalid length.
[   80.516730][ T6303] netlink: 224 bytes leftover after parsing attributes in process `syz.1.186'.
[   80.581804][ T6307] tipc: Started in network mode
[   80.588636][ T6307] tipc: Node identity 4, cluster identity 4711
[   80.591209][ T6307] tipc: Node number set to 4
[   80.800147][ T6323] netlink: 'syz.2.195': attribute type 7 has an invalid length.
[   80.803879][ T6323] netlink: 'syz.2.195': attribute type 8 has an invalid length.
[   80.807137][ T6323] netlink: 'syz.2.195': attribute type 15 has an invalid length.
[   80.816785][ T6323] netlink: 'syz.2.195': attribute type 1 has an invalid length.
[   80.820921][ T6323] netlink: 208 bytes leftover after parsing attributes in process `syz.2.195'.
[   80.941700][ T6329] netlink: 220 bytes leftover after parsing attributes in process `syz.1.198'.
[   81.039115][ T6335] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   81.046148][ T6335] netlink: 224 bytes leftover after parsing attributes in process `syz.0.202'.
[   83.447394][ T6441] net_ratelimit: 14 callbacks suppressed
[   83.447431][ T6441] IPv6: addrconf: prefix option has invalid lifetime
[   83.538735][ T6445] tipc: Started in network mode
[   83.541713][ T6445] tipc: Node identity 4ac29ef691b3, cluster identity 4711
[   83.547002][ T6445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.551513][ T6445] syzkaller0: entered promiscuous mode
[   83.555085][ T6445] syzkaller0: entered allmulticast mode
[   83.597761][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   83.604712][ T6444] tipc: Resetting bearer <eth:syzkaller0>
[   83.620836][ T6444] tipc: Disabling bearer <eth:syzkaller0>
[   84.621858][ T6473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.628123][ T6473] syzkaller0: entered promiscuous mode
[   84.630887][ T6473] syzkaller0: entered allmulticast mode
[   84.663640][ T6473] tipc: Resetting bearer <eth:syzkaller0>
[   84.670575][ T6472] tipc: Resetting bearer <eth:syzkaller0>
[   84.759560][ T6472] tipc: Disabling bearer <eth:syzkaller0>
[   84.918187][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.921522][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.086354][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.100267][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.273970][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.286979][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.291370][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.299479][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.305673][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.317106][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.321494][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.330429][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.335699][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.348712][ T6485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.397557][ T6485] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.401954][ T6485] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.427645][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.431572][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.464719][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.468474][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.621487][ T6524] "syz.1.271" (6524) uses obsolete ecb(arc4) skcipher
[   86.741906][ T6543] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   86.777021][   T24] cfg80211: failed to load regulatory.db
[   87.083454][ T6563] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.152180][ T6563] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.216240][ T6563] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.272573][ T6563] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.357674][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.370761][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.380443][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.390608][ T5694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.003473][ T6604] batadv1: entered promiscuous mode
[   88.005519][ T6604] batadv1: entered allmulticast mode
[   88.455547][ T6641] Driver unsupported XDP return value 0 on prog  (id 60) dev N/A, expect packet loss!
[   89.189136][ T6700] netlink: 'syz.0.343': attribute type 83 has an invalid length.
[   89.369708][ T6705] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.597502][ T6724] netlink: 'syz.0.354': attribute type 13 has an invalid length.
[   89.660489][ T6724] batman_adv: batadv0: Interface deactivated: dummy0
[   89.745194][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.755931][ T6724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.887349][ T6733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.892481][ T5884] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.903299][ T5884] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.911748][ T5884] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.927738][ T6726] syzkaller0: entered promiscuous mode
[   89.930162][ T6726] syzkaller0: entered allmulticast mode
[   89.962086][ T5884] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.988869][ T6738] bond0: (slave vlan2): Opening slave failed
[   90.004992][ T6726] tipc: Resetting bearer <eth:syzkaller0>
[   90.015778][ T6725] tipc: Resetting bearer <eth:syzkaller0>
[   90.050047][ T6725] tipc: Disabling bearer <eth:syzkaller0>
[   90.573958][ T6787] __nla_validate_parse: 26 callbacks suppressed
[   90.573972][ T6787] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'.
[   90.863119][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'.
[   90.883039][ T6810] netlink: 1032 bytes leftover after parsing attributes in process `syz.0.394'.
[   92.544983][ T6852] netlink: 'syz.2.411': attribute type 13 has an invalid length.
[   92.548296][ T6852] netlink: 'syz.2.411': attribute type 17 has an invalid length.
[   92.666032][ T6852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.687706][ T6860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'.
[   92.796953][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   92.807308][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.815347][ T6852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.489860][ T6879] syzkaller1: entered promiscuous mode
[   93.492128][ T6879] syzkaller1: entered allmulticast mode
[   93.724750][ T6897] tipc: Started in network mode
[   93.729006][ T6897] tipc: Node identity e2bb24e01c8d, cluster identity 4711
[   93.731645][ T6897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.736040][ T6897] syzkaller0: entered promiscuous mode
[   93.738050][ T6897] syzkaller0: entered allmulticast mode
[   93.749445][ T6897] tipc: Resetting bearer <eth:syzkaller0>
[   93.754712][ T6896] tipc: Resetting bearer <eth:syzkaller0>
[   93.765282][ T6896] tipc: Disabling bearer <eth:syzkaller0>
[   94.224810][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'.
[   94.235565][ T6915] vlan2: entered promiscuous mode
[   94.237609][ T6915] syz_tun: entered promiscuous mode
[   94.341296][ T6923] netlink: zone id is out of range
[   94.344013][ T6923] netlink: zone id is out of range
[   94.347428][ T6923] netlink: zone id is out of range
[   94.349414][ T6923] netlink: zone id is out of range
[   94.351706][ T6923] netlink: zone id is out of range
[   94.354723][ T6923] netlink: zone id is out of range
[   94.356808][ T6923] netlink: zone id is out of range
[   94.358893][ T6923] netlink: zone id is out of range
[   94.360574][ T6923] netlink: zone id is out of range
[   94.515041][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'.
[   94.596456][ T6931] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.600740][ T6931] bond1: (slave bond2): Enslaving as an active interface with an up link
[   94.610074][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'.
[   94.616267][ T6931] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.786659][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'.
[   94.846946][ T6952] bridge1: port 1(bond1) entered blocking state
[   94.849428][ T6952] bridge1: port 1(bond1) entered disabled state
[   94.851917][ T6952] bond1: entered allmulticast mode
[   94.857896][ T6952] bond1: entered promiscuous mode
[   94.934371][ T6962] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   96.595286][ T7001] ip6gretap0 (unregistering): left promiscuous mode
[   96.918036][ T7012] netlink: 112 bytes leftover after parsing attributes in process `syz.1.479'.
[   97.245419][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[   97.249204][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[   97.266823][ T7035] netlink: 58 bytes leftover after parsing attributes in process `syz.1.489'.
[   97.745511][ T7068] netlink: 'syz.1.504': attribute type 2 has an invalid length.
[   97.748840][ T7068] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.504'.
[   97.879366][ T7079] bridge2: entered allmulticast mode
[   98.454017][ T5880] Bluetooth: hci2: command 0x0405 tx timeout
[   99.045599][ T7124] netlink: 348 bytes leftover after parsing attributes in process `syz.2.530'.
[   99.398882][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'.
[  100.039378][ T7195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.046908][ T7195] syzkaller0: entered promiscuous mode
[  100.049339][ T7195] syzkaller0: entered allmulticast mode
[  100.088461][ T7195] tipc: Resetting bearer <eth:syzkaller0>
[  100.104205][ T7194] tipc: Resetting bearer <eth:syzkaller0>
[  100.123894][ T7194] tipc: Disabling bearer <eth:syzkaller0>
[  100.295679][ T7210] bridge: RTM_NEWNEIGH with invalid ether address
[  100.761319][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'.
[  100.966210][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[  101.248735][ T7282] delete_channel: no stack
[  101.311246][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'.
[  101.633439][ T7303] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.657063][ T7303] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  101.666793][ T7303] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  101.875070][ T7313] syz.2.616: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.881009][ T7313] CPU: 1 UID: 0 PID: 7313 Comm: syz.2.616 Not tainted syzkaller #0 PREEMPT(full) 
[  101.881022][ T7313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.881029][ T7313] Call Trace:
[  101.881034][ T7313]  <TASK>
[  101.881040][ T7313]  dump_stack_lvl+0x189/0x250
[  101.881057][ T7313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.881069][ T7313]  ? __pfx__printk+0x10/0x10
[  101.881081][ T7313]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.881091][ T7313]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.881101][ T7313]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.881114][ T7313]  warn_alloc+0x214/0x310
[  101.881134][ T7313]  ? stack_depot_save_flags+0x40/0x860
[  101.881153][ T7313]  ? __pfx_warn_alloc+0x10/0x10
[  101.881174][ T7313]  ? kasan_save_track+0x4f/0x80
[  101.881186][ T7313]  ? xskq_create+0x56/0x170
[  101.881194][ T7313]  ? xsk_init_queue+0xb0/0x110
[  101.881205][ T7313]  ? xsk_setsockopt+0x4dc/0x8d0
[  101.881216][ T7313]  ? do_sock_setsockopt+0x17c/0x1b0
[  101.881225][ T7313]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  101.881233][ T7313]  ? do_syscall_64+0xfa/0x3b0
[  101.881241][ T7313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.881252][ T7313]  __vmalloc_node_range_noprof+0x125/0x12f0
[  101.881279][ T7313]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.881291][ T7313]  ? xskq_create+0x56/0x170
[  101.881299][ T7313]  ? __kasan_kmalloc+0x93/0xb0
[  101.881311][ T7313]  vmalloc_user_noprof+0xad/0xf0
[  101.881324][ T7313]  ? xskq_create+0xbf/0x170
[  101.881331][ T7313]  xskq_create+0xbf/0x170
[  101.881341][ T7313]  xsk_init_queue+0xb0/0x110
[  101.881354][ T7313]  xsk_setsockopt+0x4dc/0x8d0
[  101.881367][ T7313]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.881378][ T7313]  ? __pfx_aa_sk_perm+0x10/0x10
[  101.881392][ T7313]  ? aa_sock_opt_perm+0xff/0x1b0
[  101.881401][ T7313]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  101.881410][ T7313]  ? __pfx_xsk_setsockopt+0x10/0x10
[  101.881422][ T7313]  do_sock_setsockopt+0x17c/0x1b0
[  101.881432][ T7313]  __x64_sys_setsockopt+0x13f/0x1b0
[  101.881450][ T7313]  do_syscall_64+0xfa/0x3b0
[  101.881459][ T7313]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.881487][ T7313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.881495][ T7313]  ? exc_page_fault+0x9f/0xf0
[  101.881504][ T7313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.881513][ T7313] RIP: 0033:0x7fa995f8ebe9
[  101.881522][ T7313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.881529][ T7313] RSP: 002b:00007fa996e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  101.881538][ T7313] RAX: ffffffffffffffda RBX: 00007fa9961c5fa0 RCX: 00007fa995f8ebe9
[  101.881545][ T7313] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  101.881550][ T7313] RBP: 00007fa996011e19 R08: 0000000000000004 R09: 0000000000000000
[  101.881554][ T7313] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.881559][ T7313] R13: 00007fa9961c6038 R14: 00007fa9961c5fa0 R15: 00007ffda442d448
[  101.881574][ T7313]  </TASK>
[  101.881632][ T7313] Mem-Info:
[  102.002629][ T7313] active_anon:5227 inactive_anon:0 isolated_anon:0
[  102.002629][ T7313]  active_file:1361 inactive_file:38244 isolated_file:0
[  102.002629][ T7313]  unevictable:1768 dirty:328 writeback:0
[  102.002629][ T7313]  slab_reclaimable:9592 slab_unreclaimable:78718
[  102.002629][ T7313]  mapped:19185 shmem:2432 pagetables:962
[  102.002629][ T7313]  sec_pagetables:0 bounce:0
[  102.002629][ T7313]  kernel_misc_reclaimable:0
[  102.002629][ T7313]  free:252944 free_pcp:18081 free_cma:0
[  102.042385][ T7313] Node 0 active_anon:12544kB inactive_anon:0kB active_file:3892kB inactive_file:18660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33612kB dirty:1100kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7324kB pagetables:2336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.059357][ T7313] Node 1 active_anon:8364kB inactive_anon:0kB active_file:1552kB inactive_file:134316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43128kB dirty:212kB writeback:0kB shmem:4892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4228kB pagetables:1444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  102.084396][ T7313] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  102.099484][ T7313] lowmem_reserve[]: 0 811 811 811 811
[  102.102057][ T7313] Node 0 DMA32 free:269432kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12544kB inactive_anon:0kB active_file:3892kB inactive_file:18660kB unevictable:3536kB writepending:1100kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:34804kB local_pcp:14920kB free_cma:0kB
[  102.117046][ T7313] lowmem_reserve[]: 0 0 0 0 0
[  102.119411][ T7313] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  102.131763][ T7313] lowmem_reserve[]: 0 0 854 854 854
[  102.138778][ T7313] Node 1 Normal free:268368kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8228kB inactive_anon:0kB active_file:1552kB inactive_file:134316kB unevictable:3536kB writepending:212kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37712kB local_pcp:21080kB free_cma:0kB
[  102.155679][ T7313] lowmem_reserve[]: 0 0 0 0 0
[  102.157863][ T7313] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  102.163624][ T7313] Node 0 DMA32: 46*4kB (UM) 32*8kB (UME) 12*16kB (M) 40*32kB (UME) 42*64kB (UME) 3*128kB (UME) 1*256kB (M) 2*512kB (UE) 1*1024kB (M) 2*2048kB (UM) 63*4096kB (M) = 269432kB
[  102.170913][ T7313] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  102.188275][ T7313] Node 1 Normal: 524*4kB (UME) 298*8kB (UME) 403*16kB (UM) 27*32kB (UME) 128*64kB (UME) 43*128kB (UME) 11*256kB (UM) 7*512kB (UME) 5*1024kB (ME) 5*2048kB (UM) 54*4096kB (UM) = 268432kB
[  102.206365][ T7313] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.218139][ T7313] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  102.227731][ T7313] 42037 total pagecache pages
[  102.234780][ T7313] 0 pages in swap cache
[  102.237360][ T7313] Free swap  = 124996kB
[  102.239284][ T7313] Total swap = 124996kB
[  102.241212][ T7313] 786301 pages RAM
[  102.245614][ T7313] 0 pages HighMem/MovableOnly
[  102.247854][ T7313] 241344 pages reserved
[  102.249815][ T7313] 0 pages cma reserved
[  103.104894][ T7342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'.
[  104.184139][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[  104.241299][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[  104.293913][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  104.307799][ T7388] trusted_key: syz.0.642 sent an empty control message without MSG_MORE.
[  104.471025][ T7400] netlink: 200 bytes leftover after parsing attributes in process `syz.2.646'.
[  104.496605][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  104.582464][ T7406] netlink: 'syz.0.650': attribute type 62 has an invalid length.
[  104.711873][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'.
[  104.715875][ T7418] netlink: 'syz.1.656': attribute type 30 has an invalid length.
[  104.748495][ T5902] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.748568][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.656'.
[  104.758707][ T7420] netlink: 'syz.0.657': attribute type 1 has an invalid length.
[  104.760811][ T5902] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.769992][ T7418] netlink: 'syz.1.656': attribute type 30 has an invalid length.
[  104.776513][ T5902] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.814255][ T5902] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.839471][ T7420] bond3: entered promiscuous mode
[  104.841565][ T7420] bond3: entered allmulticast mode
[  104.846663][ T7420] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.881419][ T7420] bridge1: entered promiscuous mode
[  104.887565][ T7420] bridge1: entered allmulticast mode
[  104.890658][ T7420] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[  105.186314][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  105.256074][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  105.535649][ T7468] bridge0: entered promiscuous mode
[  105.613353][ T7473] syzkaller0: entered promiscuous mode
[  105.615723][ T7473] syzkaller0: entered allmulticast mode
[  105.619188][ T7476] tipc: Cannot configure node identity twice
[  105.925296][ T7498] netlink: 666 bytes leftover after parsing attributes in process `syz.2.693'.
[  106.099526][ T7506] netlink: 'syz.2.695': attribute type 16 has an invalid length.
[  106.104874][ T7506] netlink: 'syz.2.695': attribute type 17 has an invalid length.
[  106.116632][ T7506] net_ratelimit: 13 callbacks suppressed
[  106.116638][ T7506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.127000][ T7508] netlink: 'syz.1.697': attribute type 6 has an invalid length.
[  108.120283][ T7537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.187024][ T7544] __nla_validate_parse: 1 callbacks suppressed
[  108.187037][ T7544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.711'.
[  108.225109][ T7537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.320568][ T7537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.330496][   T10] IPVS: starting estimator thread 0...
[  108.338663][ T7558] netlink: 'syz.2.716': attribute type 1 has an invalid length.
[  108.341260][ T7558] netlink: 'syz.2.716': attribute type 3 has an invalid length.
[  108.346326][ T7558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.716'.
[  108.356844][ T7557] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  108.407815][ T7537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.433897][ T7559] IPVS: using max 40 ests per chain, 96000 per kthread
[  108.445127][ T7561] bridge: RTM_NEWNEIGH with invalid ether address
[  108.553492][ T7565] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.719'.
[  108.572143][ T7565] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  108.575724][ T7565] openvswitch: netlink: Message has 1 unknown bytes.
[  108.579717][ T5902] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.599348][ T5902] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.617308][ T5902] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.628407][ T5902] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.667307][ T7571] netlink: 'syz.2.723': attribute type 1 has an invalid length.
[  108.669867][ T7571] netlink: 224 bytes leftover after parsing attributes in process `syz.2.723'.
[  108.728397][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  108.731464][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'.
[  108.798957][ T7580] team_slave_0: entered promiscuous mode
[  108.801082][ T7580] team_slave_1: entered promiscuous mode
[  108.803784][ T7580] vlan2: entered promiscuous mode
[  108.808371][ T7581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.728'.
[  108.815708][ T7580] team0: entered promiscuous mode
[  108.818025][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'.
[  108.842079][ T7583] netlink: 48 bytes leftover after parsing attributes in process `syz.1.729'.
[  109.179494][ T7613] ip6erspan0: entered promiscuous mode
[  109.400684][ T7631] syzkaller0: entered promiscuous mode
[  109.405977][ T7631] syzkaller0: entered allmulticast mode
[  111.641878][ T7694] netlink: 24 bytes leftover after parsing attributes in process `syz.0.779'.
[  113.056311][ T7739] bridge_slave_0: left allmulticast mode
[  113.058900][ T7739] bridge_slave_0: left promiscuous mode
[  113.062469][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.070165][ T7739] bridge_slave_1: left allmulticast mode
[  113.074389][ T7739] bridge_slave_1: left promiscuous mode
[  113.076992][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.103768][ T7739] bond0: (slave bond_slave_0): Releasing backup interface
[  113.116791][ T7739] bond0: (slave bond_slave_1): Releasing backup interface
[  113.127822][ T7739] team0: Port device team_slave_0 removed
[  113.140769][ T7739] team0: Port device team_slave_1 removed
[  113.147082][ T7739] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.153389][ T7739] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.159153][ T7739] bond1: left allmulticast mode
[  113.161518][ T7739] bond1: left promiscuous mode
[  113.164272][ T7739] bridge1: port 1(bond1) entered disabled state
[  113.200508][ T7739] netlink: 'syz.1.795': attribute type 10 has an invalid length.
[  113.212743][ T7739] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.290553][ T7747] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  113.293849][ T7747] __nla_validate_parse: 9 callbacks suppressed
[  113.293857][ T7747] netlink: 136 bytes leftover after parsing attributes in process `syz.2.798'.
[  113.299309][ T7747] netlink: 'syz.2.798': attribute type 2 has an invalid length.
[  113.301926][ T7747] netlink: 'syz.2.798': attribute type 1 has an invalid length.
[  113.956819][ T7795] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[  114.083814][ T7805] netlink: 124 bytes leftover after parsing attributes in process `syz.1.827'.
[  114.164966][ T7816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.832'.
[  114.194673][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.833'.
[  114.410665][ T7832] netlink: 'syz.2.840': attribute type 10 has an invalid length.
[  114.429076][ T7832] dummy0: entered promiscuous mode
[  114.433449][ T7832] team0: Port device dummy0 added
[  114.445895][ T7832] netlink: 'syz.2.840': attribute type 10 has an invalid length.
[  114.453212][ T7832] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  114.464803][ T7832] dummy0: left promiscuous mode
[  114.469341][ T7832] team0: Failed to send options change via netlink (err -105)
[  114.473128][ T7832] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  114.476426][ T7832] team0: Port device dummy0 removed
[  114.485245][ T7832] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  115.127075][ T7872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.859'.
[  115.270868][ T7881] syzkaller0: entered promiscuous mode
[  115.274506][ T7881] syzkaller0: entered allmulticast mode
[  115.420672][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.866'.
[  115.447049][ T7890] ip6gretap0: entered allmulticast mode
[  115.515372][ T7892] macsec1: entered promiscuous mode
[  115.517805][ T7892] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  115.520842][ T7892] macsec1: entered allmulticast mode
[  115.524854][ T7892] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  115.644437][ T7902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.787536][ T7911] netlink: 'syz.2.876': attribute type 9 has an invalid length.
[  115.791323][ T7911] netlink: 224 bytes leftover after parsing attributes in process `syz.2.876'.
[  116.118409][ T7921] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  116.176784][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'.
[  117.179114][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'.
[  117.285450][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.0.901'.
[  117.476981][  T975] IPVS: starting estimator thread 0...
[  117.480029][ T7997] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  117.526104][ T8003] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  117.529212][ T8003] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.573370][ T7998] IPVS: using max 35 ests per chain, 84000 per kthread
[  117.691373][ T8015] netlink: 'syz.1.913': attribute type 21 has an invalid length.
[  117.714256][ T8017] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[  117.726607][ T8017] NCSI netlink: No device for ifindex 0
[  118.214813][ T8051] validate_nla: 2 callbacks suppressed
[  118.214849][ T8051] netlink: 'syz.2.927': attribute type 1 has an invalid length.
[  118.709866][ T8084] __nla_validate_parse: 7 callbacks suppressed
[  118.709883][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.939'.
[  118.821091][ T8089] netlink: 'syz.0.940': attribute type 21 has an invalid length.
[  118.900348][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'.
[  119.233463][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  119.334769][ T8111] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  119.651682][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  120.122149][ T8139] netlink: 276 bytes leftover after parsing attributes in process `syz.0.960'.
[  120.759856][ T8150] netpci0: tun_chr_ioctl cmd 2147767507
[  120.846990][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[  120.880227][ T8155] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  121.021757][ T8160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.969'.
[  121.127062][ T8165] netlink: 'syz.2.972': attribute type 10 has an invalid length.
[  121.141024][ T8165] batman_adv: batadv0: Adding interface: netdevsim0
[  121.145702][ T8165] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.165452][ T8165] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  121.918462][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.988'.
[  121.924066][ T8201] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  122.054688][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'.
[  122.541250][ T8232] netlink: 'syz.2.1002': attribute type 30 has an invalid length.
[  122.961239][ T8253] syzkaller1: entered promiscuous mode
[  122.964627][ T8253] syzkaller1: entered allmulticast mode
[  123.109664][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'.
[  123.210103][ T8262] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  123.220477][ T8262] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.368905][ T8268] syz_tun: entered promiscuous mode
[  123.377785][ T8268] syz_tun: left promiscuous mode
[  123.670060][ T8287] netlink: 'syz.0.1026': attribute type 15 has an invalid length.
[  123.802112][ T8300] __nla_validate_parse: 3 callbacks suppressed
[  123.802130][ T8300] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1033'.
[  124.030908][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'.
[  124.331349][ T8325] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  124.378411][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'.
[  124.387026][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.427339][ T8327] bridge_slave_1 (unregistering): left allmulticast mode
[  124.430501][ T8327] bridge_slave_1 (unregistering): left promiscuous mode
[  124.434140][ T8327] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.666253][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'.
[  125.776500][ T8385] netlink: 'syz.0.1065': attribute type 1 has an invalid length.
[  125.832979][ T8385] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  125.848482][ T5694] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.849327][ T8385] 8021q: adding VLAN 0 to HW filter on device bond4
[  125.888393][ T8385] veth5: entered promiscuous mode
[  125.894652][ T8385] bond4: (slave veth5): Enslaving as a backup interface with a down link
[  125.907459][ T8385] batman_adv: batadv0: Removing interface: dummy0
[  125.911703][ T8385] bridge_slave_0: left allmulticast mode
[  125.914518][ T8385] bridge_slave_0: left promiscuous mode
[  125.917217][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.924071][ T8385] bridge_slave_1: left allmulticast mode
[  125.926668][ T8385] bridge_slave_1: left promiscuous mode
[  125.929358][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.936885][ T8385] bond0: (slave bond_slave_0): Releasing backup interface
[  125.942582][ T8385] bond0: (slave bond_slave_1): Releasing backup interface
[  125.948838][ T8385] team0: Port device team_slave_0 removed
[  125.954639][ T8385] team0: Port device team_slave_1 removed
[  125.957554][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.961518][ T8385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.968800][ T8385] bond1: (slave bond2): Releasing backup interface
[  125.975588][ T5694] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.976307][ T8385] bond3: (slave bridge1): Releasing backup interface
[  125.986438][ T8385] bridge1: left promiscuous mode
[  125.989187][ T8385] bridge1: left allmulticast mode
[  125.994094][ T8385] bond4: (slave ip6gretap1): Removing an active aggregator
[  126.001474][ T8385] bond4: (slave ip6gretap1): Releasing backup interface
[  126.005213][ T8385] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 26:2f:8e:64:a2:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  126.017732][ T8385] bond4: (slave veth5): Releasing backup interface
[  126.243847][ T8390] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  126.459297][ T8397] netlink: 'syz.0.1070': attribute type 11 has an invalid length.
[  127.197301][ T8461] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  127.319830][ T8469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  127.453708][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  127.473251][ T8478] geneve2: entered promiscuous mode
[  127.475540][ T8478] geneve2: entered allmulticast mode
[  127.803678][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'.
[  128.034368][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'.
[  128.315786][ T8540] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  128.905652][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'.
[  128.909876][ T8584] nbd: socks must be embedded in a SOCK_ITEM attr
[  128.914479][ T8584] block nbd1: shutting down sockets
[  128.972006][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'.
[  129.107733][ T8602] netlink: 'syz.1.1167': attribute type 322 has an invalid length.
[  129.389995][ T8624] syzkaller1: entered promiscuous mode
[  129.399683][ T8624] syzkaller1: entered allmulticast mode
[  129.620935][ T8641] netlink: 'syz.1.1182': attribute type 11 has an invalid length.
[  129.631624][ T8641] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1182'.
[  129.934253][ T8652] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  130.035973][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  130.447722][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'.
[  130.557734][ T8694] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.567840][ T8694] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.962170][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'.
[  131.008325][ T8738] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.049320][ T8738] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.054140][ T8738] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  131.061586][ T8738] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  132.030014][ T8794] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1229'.
[  132.251284][ T8809] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1234'.
[  132.416183][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.564306][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.586183][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.766172][ T8812] bridge2: left allmulticast mode
[  132.781587][ T8812] geneve2: left promiscuous mode
[  132.792911][ T8812] geneve2: left allmulticast mode
[  132.807262][ T5884] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.821760][ T5884] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.860092][ T5884] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.864049][ T5884] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.527156][ T8868] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  133.529991][ T8868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1258'.
[  133.533869][ T8868] netlink: 'syz.0.1258': attribute type 2 has an invalid length.
[  133.537002][ T8868] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  133.576267][ T8872] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'.
[  134.037942][ T8915] tap0: tun_chr_ioctl cmd 1074025677
[  134.040259][ T8915] tap0: linktype set to 0
[  134.981377][ T8963] __nla_validate_parse: 1 callbacks suppressed
[  134.981392][ T8963] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1293'.
[  135.120941][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1298'.
[  135.229953][ T8983] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1303'.
[  135.236892][ T8983] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1303'.
[  135.801357][ T9008] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  135.804991][ T9008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.928349][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'.
[  135.951132][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1315'.
[  135.962297][ T9014] bridge3: entered promiscuous mode
[  135.966346][ T9014] macsec2: entered promiscuous mode
[  135.969015][ T9014] macsec2: entered allmulticast mode
[  135.971428][ T9014] bridge3: entered allmulticast mode
[  135.975526][ T9014] bridge3: port 1(macsec2) entered blocking state
[  135.978469][ T9014] bridge3: port 1(macsec2) entered disabled state
[  135.984845][ T9014] bridge3: left allmulticast mode
[  135.987465][ T9014] bridge3: left promiscuous mode
[  136.447128][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[  137.139196][ T9058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.145830][ T9058] syzkaller0: entered promiscuous mode
[  137.148243][ T9058] syzkaller0: entered allmulticast mode
[  137.149687][ T9061] netlink: 'syz.2.1333': attribute type 1 has an invalid length.
[  137.163205][ T9058] tipc: Resetting bearer <eth:syzkaller0>
[  137.194160][ T9057] tipc: Resetting bearer <eth:syzkaller0>
[  137.239672][ T9057] tipc: Disabling bearer <eth:syzkaller0>
[  137.262639][ T9061] bond3: (slave geneve3): making interface the new active one
[  137.265970][ T9061] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  137.269417][ T5902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  137.278080][ T5902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  137.281951][ T5902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  137.301726][ T5902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  137.364221][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'.
[  137.470161][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1341'.
[  137.526194][ T9083] syzkaller0: entered allmulticast mode
[  137.534732][ T9082] netlink: 'syz.0.1343': attribute type 1 has an invalid length.
[  137.571160][ T9082] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.592123][ T9083] syzkaller0 (unregistering): left allmulticast mode
[  137.644874][ T9082] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  137.653231][ T9087] vlan3: entered allmulticast mode
[  137.655504][ T9087] veth1: entered allmulticast mode
[  137.658161][ T9087] bond5: (slave vlan3): Opening slave failed
[  137.929997][ T9104] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1352'.
[  138.079968][ T9115] vlan0: entered promiscuous mode
[  138.345581][ T9136] netlink: 'syz.2.1364': attribute type 1 has an invalid length.
[  138.391698][ T9136] bond4: (slave veth1): Enslaving as an active interface with a down link
[  138.406404][ T9136] 8021q: adding VLAN 0 to HW filter on device bond4
[  139.980345][ T9241] vlan0: left promiscuous mode
[  140.018752][ T5694] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  140.035208][ T5694] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  140.039239][ T5694] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  140.053727][ T5694] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  141.829891][ T9290] netlink: 'syz.0.1437': attribute type 11 has an invalid length.
[  141.834474][ T9290] netlink: 'syz.0.1437': attribute type 11 has an invalid length.
[  141.837264][ T9290] __nla_validate_parse: 10 callbacks suppressed
[  141.837277][ T9290] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1437'.
[  141.987859][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'.
[  141.995416][ T9300] vlan0: entered promiscuous mode
[  142.025010][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'.
[  142.739929][ T9333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1450'.
[  142.755247][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'.
[  143.051647][ T9343] netlink: 'syz.1.1455': attribute type 1 has an invalid length.
[  143.071009][ T9343] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.095611][ T9343] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.102859][ T9343] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.113893][ T9343] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  143.178942][ T9345] veth5: entered promiscuous mode
[  143.190429][ T9345] bond2: (slave veth5): Enslaving as an active interface with a down link
[  143.233156][ T5876] Bluetooth: hci2: link tx timeout
[  143.235533][ T5876] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.242416][ T5880] Bluetooth: hci2: link tx timeout
[  143.245385][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.247157][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.252761][ T5880] Bluetooth: hci2: link tx timeout
[  143.255114][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.258340][ T5880] Bluetooth: hci2: link tx timeout
[  143.260167][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.260598][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.268299][ T5880] Bluetooth: hci2: link tx timeout
[  143.270484][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.273839][ T5880] Bluetooth: hci2: link tx timeout
[  143.276074][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.279473][ T5880] Bluetooth: hci2: link tx timeout
[  143.281636][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.908841][ T9391] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.279962][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'.
[  144.287027][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'.
[  144.290883][ T9417] netlink: 'syz.0.1486': attribute type 12 has an invalid length.
[  145.253053][ T5880] Bluetooth: hci2: command 0x0405 tx timeout
[  145.824988][ T9431] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1494'.
[  145.933087][ T9441] Bluetooth: MGMT ver 1.23
[  145.961495][ T9443] netlink: 'syz.0.1499': attribute type 1 has an invalid length.
[  145.986003][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'.
[  146.290684][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'.
[  146.297084][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.399516][ T9476] netlink: 'syz.1.1514': attribute type 19 has an invalid length.
[  146.444652][ T9476] netlink: 'syz.1.1514': attribute type 19 has an invalid length.
[  146.493736][ T9482] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  146.564295][ T9485] netlink: 'syz.2.1518': attribute type 83 has an invalid length.
[  146.695878][ T9498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.699228][ T9498] syzkaller0: entered promiscuous mode
[  146.701878][ T9498] syzkaller0: entered allmulticast mode
[  146.714060][ T9498] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  146.742497][ T9498] tipc: Resetting bearer <eth:syzkaller0>
[  146.747198][ T9494] tipc: Resetting bearer <eth:syzkaller0>
[  146.756900][ T9494] tipc: Disabling bearer <eth:syzkaller0>
[  146.859876][ T9503] __nla_validate_parse: 6 callbacks suppressed
[  146.859886][ T9503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1526'.
[  146.956090][ T9508] netlink: 'syz.2.1527': attribute type 5 has an invalid length.
[  147.946218][ T9557] netlink: 'syz.1.1552': attribute type 1 has an invalid length.
[  147.949400][ T9557] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1552'.
[  148.006827][ T9561] netlink: 'syz.1.1554': attribute type 10 has an invalid length.
[  148.852793][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'.
[  148.861873][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'.
[  148.916557][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'.
[  148.950793][ T9616] bridge2: entered allmulticast mode
[  149.188247][ T9632] netlink: 'syz.2.1586': attribute type 12 has an invalid length.
[  149.297611][ T9634] sit0: left promiscuous mode
[  149.318237][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.323306][ T9634] 8021q: adding VLAN 0 to HW filter on device team0
[  149.333497][ T9634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.367819][ T9634] veth0_to_team: entered promiscuous mode
[  149.369718][ T9634] veth0_to_team: entered allmulticast mode
[  149.456166][ T9641] veth1_to_bond: entered allmulticast mode
[  149.459304][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'.
[  149.492941][ T9641] veth1_to_bond (unregistering): left allmulticast mode
[  149.637184][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'.
[  149.640350][ T9650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.951073][    T9] hid-generic 0005:07C0:0009.0001: unknown main item tag 0x0
[  149.985807][    T9] hid-generic 0005:07C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  150.464204][ T9682] team0: Port device sit2 added
[  150.555418][ T9688] xt_time: unknown flags 0xf4
[  150.733020][ T9701] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  151.058192][ T9716] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1619'.
[  151.279992][ T9725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'.
[  151.291064][ T9725] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  151.295964][ T9725] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1621'.
[  151.309090][ T9726] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  151.332056][ T9726] bond0: (slave wlan1): Releasing backup interface
[  151.344080][ T9726] bond2: (slave veth5): Releasing active interface
[  151.367150][ T9726] team0: Port device sit2 removed
[  151.379600][ T9726] netlink: 'syz.1.1623': attribute type 10 has an invalid length.
[  151.382745][ T9726] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  151.389866][ T9726] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  151.400805][ T9726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  151.405765][ T9726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.567943][ T9736] syzkaller1: entered promiscuous mode
[  151.570435][ T9736] syzkaller1: entered allmulticast mode
[  151.974080][ T9762] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1641'.
[  152.032834][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1643'.
[  152.113993][ T9772] bond5: entered promiscuous mode
[  152.116025][ T9772] bond5: entered allmulticast mode
[  152.132976][ T9772] 8021q: adding VLAN 0 to HW filter on device bond5
[  152.210566][ T9782] batadv_slave_1: entered promiscuous mode
[  152.214626][ T9780] batadv_slave_1: left promiscuous mode
[  152.479627][ T9802] netlink: 'syz.0.1656': attribute type 12 has an invalid length.
[  153.248916][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'.
[  153.560456][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'.
[  153.603829][ T9839] netlink: 'syz.0.1673': attribute type 9 has an invalid length.
[  153.786544][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  155.357320][ T9978] netlink: 'syz.1.1735': attribute type 30 has an invalid length.
[  155.401561][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  155.435259][ T9982] vlan3: entered allmulticast mode
[  155.437708][ T9982] bond3: entered allmulticast mode
[  155.755025][T10000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.758707][T10000] syzkaller0: entered promiscuous mode
[  155.761232][T10000] syzkaller0: entered allmulticast mode
[  155.796578][T10000] tipc: Resetting bearer <eth:syzkaller0>
[  155.807376][ T9999] tipc: Resetting bearer <eth:syzkaller0>
[  155.824189][ T9999] tipc: Disabling bearer <eth:syzkaller0>
[  155.928138][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1749'.
[  156.000689][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'.
[  157.104735][T10075] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1778'.
[  157.112503][T10075] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1778'.
[  157.121907][T10075] netlink: 'syz.2.1778': attribute type 5 has an invalid length.
[  157.126842][T10075] netlink: 'syz.2.1778': attribute type 6 has an invalid length.
[  157.129631][T10075] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1778'.
[  157.226302][T10085] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  157.230558][T10085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.462088][T10107] netlink: 'syz.1.1794': attribute type 1 has an invalid length.
[  158.212502][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  158.288370][T10120] syzkaller1: entered promiscuous mode
[  158.290410][T10120] syzkaller1: entered allmulticast mode
[  158.295307][T10120] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  158.448440][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'.
[  158.667105][T10148] IPv6: NLM_F_CREATE should be specified when creating new route
[  158.826076][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'.
[  159.070658][T10173] syzkaller1: entered promiscuous mode
[  159.078278][T10173] syzkaller1: entered allmulticast mode
[  159.271201][T10182] sctp: [Deprecated]: syz.1.1829 (pid 10182) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.271201][T10182] Use struct sctp_sack_info instead
[  159.750391][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1847'.
[  160.031389][T10238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  160.212579][T10247] netlink: 'syz.1.1855': attribute type 13 has an invalid length.
[  160.224183][T10247] netlink: 'syz.1.1855': attribute type 17 has an invalid length.
[  160.326007][T10247] 8021q: adding VLAN 0 to HW filter on device team0
[  160.341736][T10247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.367207][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'.
[  160.580687][T10271] syzkaller0: entered promiscuous mode
[  160.583989][T10271] syzkaller0: entered allmulticast mode
[  160.590933][T10271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.598572][T10270] tipc: Resetting bearer <eth:syzkaller0>
[  160.616879][T10270] tipc: Disabling bearer <eth:syzkaller0>
[  160.627927][T10273] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1865'.
[  160.633352][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'.
[  160.716087][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'.
[  161.567469][T10306] ==================================================================
[  161.570903][T10306] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  161.574094][T10306] Read of size 4 at addr ffff88811f3a4e44 by task syz.2.1879/10306
[  161.578584][T10306] 
[  161.579593][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.2.1879 Not tainted syzkaller #0 PREEMPT(full) 
[  161.579615][T10306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.579625][T10306] Call Trace:
[  161.579632][T10306]  <TASK>
[  161.579640][T10306]  dump_stack_lvl+0x189/0x250
[  161.579663][T10306]  ? __kasan_check_byte+0x12/0x40
[  161.579685][T10306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.579700][T10306]  ? lock_release+0x4b/0x3e0
[  161.579723][T10306]  ? __virt_addr_valid+0x4a5/0x5c0
[  161.579741][T10306]  print_report+0xca/0x240
[  161.579754][T10306]  ? xfrm_alloc_spi+0x570/0xf30
[  161.579778][T10306]  kasan_report+0x118/0x150
[  161.579797][T10306]  ? xfrm_alloc_spi+0x570/0xf30
[  161.579813][T10306]  xfrm_alloc_spi+0x570/0xf30
[  161.579828][T10306]  ? xfrm_alloc_spi+0x2a0/0xf30
[  161.579847][T10306]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  161.579863][T10306]  ? xfrm_find_acq+0x87/0xa0
[  161.579882][T10306]  xfrm_alloc_userspi+0x70b/0xc90
[  161.579904][T10306]  ? apparmor_capable+0x137/0x1b0
[  161.579920][T10306]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  161.579938][T10306]  ? __nla_parse+0x40/0x60
[  161.579960][T10306]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.579980][T10306]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.580009][T10306]  ? __pfx___mutex_trylock_common+0x10/0x10
[  161.580023][T10306]  ? rcu_is_watching+0x15/0xb0
[  161.580036][T10306]  ? trace_contention_end+0x39/0x120
[  161.580051][T10306]  ? __mutex_lock+0x335/0x1350
[  161.580067][T10306]  netlink_rcv_skb+0x208/0x470
[  161.580081][T10306]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.580100][T10306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  161.580117][T10306]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.580130][T10306]  ? netlink_deliver_tap+0x2e/0x1b0
[  161.580144][T10306]  xfrm_netlink_rcv+0x79/0x90
[  161.580182][T10306]  netlink_unicast+0x82f/0x9e0
[  161.580205][T10306]  ? __pfx_netlink_unicast+0x10/0x10
[  161.580225][T10306]  ? netlink_sendmsg+0x642/0xb30
[  161.580237][T10306]  ? skb_put+0x11b/0x210
[  161.580252][T10306]  netlink_sendmsg+0x805/0xb30
[  161.580268][T10306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.580283][T10306]  ? aa_sock_msg_perm+0xf1/0x1d0
[  161.580295][T10306]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  161.580310][T10306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  161.580323][T10306]  __sock_sendmsg+0x21c/0x270
[  161.580343][T10306]  ____sys_sendmsg+0x505/0x830
[  161.580360][T10306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  161.580378][T10306]  ? import_iovec+0x74/0xa0
[  161.580394][T10306]  ___sys_sendmsg+0x21f/0x2a0
[  161.580410][T10306]  ? __pfx____sys_sendmsg+0x10/0x10
[  161.580437][T10306]  ? __fget_files+0x2a/0x420
[  161.580484][T10306]  ? __fget_files+0x3a0/0x420
[  161.580500][T10306]  __x64_sys_sendmsg+0x19b/0x260
[  161.580516][T10306]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  161.580536][T10306]  ? rcu_is_watching+0x15/0xb0
[  161.580551][T10306]  ? do_syscall_64+0xbe/0x3b0
[  161.580567][T10306]  do_syscall_64+0xfa/0x3b0
[  161.580581][T10306]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.580593][T10306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.580607][T10306]  ? exc_page_fault+0x9f/0xf0
[  161.580620][T10306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.580634][T10306] RIP: 0033:0x7fa995f8ebe9
[  161.580648][T10306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.580660][T10306] RSP: 002b:00007fa996e5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  161.580677][T10306] RAX: ffffffffffffffda RBX: 00007fa9961c5fa0 RCX: 00007fa995f8ebe9
[  161.580688][T10306] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  161.580697][T10306] RBP: 00007fa996011e19 R08: 0000000000000000 R09: 0000000000000000
[  161.580705][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.580713][T10306] R13: 00007fa9961c6038 R14: 00007fa9961c5fa0 R15: 00007ffda442d448
[  161.580728][T10306]  </TASK>
[  161.580734][T10306] 
[  161.737655][T10306] Allocated by task 8520:
[  161.739505][T10306]  kasan_save_track+0x3e/0x80
[  161.741676][T10306]  __kasan_slab_alloc+0x6c/0x80
[  161.743876][T10306]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  161.746326][T10306]  xfrm_state_alloc+0x24/0x2f0
[  161.748408][T10306]  __find_acq_core+0x8a7/0x1c00
[  161.750544][T10306]  xfrm_find_acq+0x78/0xa0
[  161.752373][T10306]  xfrm_alloc_userspi+0x6b3/0xc90
[  161.754470][T10306]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.756729][T10306]  netlink_rcv_skb+0x208/0x470
[  161.758892][T10306]  xfrm_netlink_rcv+0x79/0x90
[  161.760996][T10306]  netlink_unicast+0x82f/0x9e0
[  161.763077][T10306]  netlink_sendmsg+0x805/0xb30
[  161.765058][T10306]  __sock_sendmsg+0x21c/0x270
[  161.766948][T10306]  ____sys_sendmsg+0x505/0x830
[  161.768858][T10306]  ___sys_sendmsg+0x21f/0x2a0
[  161.770829][T10306]  __x64_sys_sendmsg+0x19b/0x260
[  161.772523][T10306]  do_syscall_64+0xfa/0x3b0
[  161.774358][T10306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.776917][T10306] 
[  161.778033][T10306] Freed by task 24:
[  161.779648][T10306]  kasan_save_track+0x3e/0x80
[  161.781606][T10306]  kasan_save_free_info+0x46/0x50
[  161.783650][T10306]  __kasan_slab_free+0x5b/0x80
[  161.785696][T10306]  kmem_cache_free+0x18f/0x400
[  161.787634][T10306]  xfrm_state_gc_task+0x52d/0x6b0
[  161.789780][T10306]  process_scheduled_works+0xae1/0x17b0
[  161.792213][T10306]  worker_thread+0x8a0/0xda0
[  161.794212][T10306]  kthread+0x711/0x8a0
[  161.795960][T10306]  ret_from_fork+0x3fc/0x770
[  161.798162][T10306]  ret_from_fork_asm+0x1a/0x30
[  161.799950][T10306] 
[  161.800891][T10306] The buggy address belongs to the object at ffff88811f3a4d80
[  161.800891][T10306]  which belongs to the cache xfrm_state of size 928
[  161.806585][T10306] The buggy address is located 196 bytes inside of
[  161.806585][T10306]  freed 928-byte region [ffff88811f3a4d80, ffff88811f3a5120)
[  161.811733][T10306] 
[  161.812561][T10306] The buggy address belongs to the physical page:
[  161.814613][T10306] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811f3a4480 pfn:0x11f3a4
[  161.817882][T10306] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  161.820774][T10306] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  161.823591][T10306] page_type: f5(slab)
[  161.825016][T10306] raw: 057ff00000000040 ffff88801bf7b640 dead000000000122 0000000000000000
[  161.827945][T10306] raw: ffff88811f3a4480 00000000800e000c 00000000f5000000 0000000000000000
[  161.830898][T10306] head: 057ff00000000040 ffff88801bf7b640 dead000000000122 0000000000000000
[  161.833483][T10306] head: ffff88811f3a4480 00000000800e000c 00000000f5000000 0000000000000000
[  161.836248][T10306] head: 057ff00000000002 ffffea00047ce901 00000000ffffffff 00000000ffffffff
[  161.839533][T10306] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  161.842816][T10306] page dumped because: kasan: bad access detected
[  161.844990][T10306] page_owner tracks the page as allocated
[  161.846901][T10306] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6169, tgid 6168 (syz.2.127), ts 77916380256, free_ts 77598944436
[  161.853107][T10306]  post_alloc_hook+0x240/0x2a0
[  161.854859][T10306]  get_page_from_freelist+0x21e4/0x22c0
[  161.856805][T10306]  __alloc_frozen_pages_noprof+0x181/0x370
[  161.858734][T10306]  alloc_pages_mpol+0x232/0x4a0
[  161.860555][T10306]  allocate_slab+0x8a/0x370
[  161.862314][T10306]  ___slab_alloc+0xbeb/0x1410
[  161.864195][T10306]  kmem_cache_alloc_noprof+0x283/0x3c0
[  161.866059][T10306]  xfrm_state_alloc+0x24/0x2f0
[  161.867986][T10306]  xfrm_add_sa+0x17d1/0x4070
[  161.870004][T10306]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.872156][T10306]  netlink_rcv_skb+0x208/0x470
[  161.874048][T10306]  xfrm_netlink_rcv+0x79/0x90
[  161.875937][T10306]  netlink_unicast+0x82f/0x9e0
[  161.877889][T10306]  netlink_sendmsg+0x805/0xb30
[  161.879846][T10306]  __sock_sendmsg+0x21c/0x270
[  161.881946][T10306]  ____sys_sendmsg+0x505/0x830
[  161.884098][T10306] page last free pid 5874 tgid 5874 stack trace:
[  161.886368][T10306]  __free_frozen_pages+0xbc4/0xd30
[  161.888148][T10306]  __put_partials+0x156/0x1a0
[  161.889610][T10306]  put_cpu_partial+0x17c/0x250
[  161.891315][T10306]  __slab_free+0x2d5/0x3c0
[  161.892723][T10306]  qlist_free_all+0x97/0x140
[  161.894253][T10306]  kasan_quarantine_reduce+0x148/0x160
[  161.896171][T10306]  __kasan_slab_alloc+0x22/0x80
[  161.898038][T10306]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  161.899916][T10306]  ptlock_alloc+0x20/0x70
[  161.901359][T10306]  pte_alloc_one+0x7d/0x170
[  161.902884][T10306]  __pte_alloc+0x25/0x1a0
[  161.904206][T10306]  copy_pmd_range+0x6a91/0x71d0
[  161.905828][T10306]  copy_page_range+0xc14/0x1270
[  161.907799][T10306]  dup_mmap+0xf57/0x1ac0
[  161.909344][T10306]  copy_mm+0x13c/0x4b0
[  161.910684][T10306]  copy_process+0x1706/0x3c00
[  161.912585][T10306] 
[  161.913445][T10306] Memory state around the buggy address:
[  161.915811][T10306]  ffff88811f3a4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  161.918536][T10306]  ffff88811f3a4d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.921503][T10306] >ffff88811f3a4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.924252][T10306]                                            ^
[  161.926684][T10306]  ffff88811f3a4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.929977][T10306]  ffff88811f3a4f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  161.932799][T10306] ==================================================================
[  161.935914][T10306] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  161.938540][T10306] CPU: 0 UID: 0 PID: 10306 Comm: syz.2.1879 Not tainted syzkaller #0 PREEMPT(full) 
[  161.942041][T10306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.945946][T10306] Call Trace:
[  161.947200][T10306]  <TASK>
[  161.948383][T10306]  dump_stack_lvl+0x99/0x250
[  161.950311][T10306]  ? __asan_memcpy+0x40/0x70
[  161.951917][T10306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.953830][T10306]  ? __pfx__printk+0x10/0x10
[  161.955647][T10306]  vpanic+0x281/0x750
[  161.957184][T10306]  ? __pfx_vpanic+0x10/0x10
[  161.959036][T10306]  ? irqentry_exit+0x74/0x90
[  161.960784][T10306]  panic+0xb9/0xc0
[  161.962485][T10306]  ? __pfx_panic+0x10/0x10
[  161.964190][T10306]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  161.966715][T10306]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.968964][T10306]  ? xfrm_alloc_spi+0x570/0xf30
[  161.970638][T10306]  check_panic_on_warn+0x89/0xb0
[  161.972326][T10306]  ? xfrm_alloc_spi+0x570/0xf30
[  161.974263][T10306]  end_report+0x78/0x160
[  161.976374][T10306]  kasan_report+0x129/0x150
[  161.978475][T10306]  ? xfrm_alloc_spi+0x570/0xf30
[  161.980306][T10306]  xfrm_alloc_spi+0x570/0xf30
[  161.982152][T10306]  ? xfrm_alloc_spi+0x2a0/0xf30
[  161.984105][T10306]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  161.986069][T10306]  ? xfrm_find_acq+0x87/0xa0
[  161.988154][T10306]  xfrm_alloc_userspi+0x70b/0xc90
[  161.989997][T10306]  ? apparmor_capable+0x137/0x1b0
[  161.991824][T10306]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  161.993878][T10306]  ? __nla_parse+0x40/0x60
[  161.995460][T10306]  xfrm_user_rcv_msg+0x7a3/0xab0
[  161.997166][T10306]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  161.999023][T10306]  ? __pfx___mutex_trylock_common+0x10/0x10
[  162.001320][T10306]  ? rcu_is_watching+0x15/0xb0
[  162.003431][T10306]  ? trace_contention_end+0x39/0x120
[  162.005703][T10306]  ? __mutex_lock+0x335/0x1350
[  162.007783][T10306]  netlink_rcv_skb+0x208/0x470
[  162.009794][T10306]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  162.011991][T10306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.015275][T10306]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.017460][T10306]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.019657][T10306]  xfrm_netlink_rcv+0x79/0x90
[  162.021702][T10306]  netlink_unicast+0x82f/0x9e0
[  162.023743][T10306]  ? __pfx_netlink_unicast+0x10/0x10
[  162.025962][T10306]  ? netlink_sendmsg+0x642/0xb30
[  162.028085][T10306]  ? skb_put+0x11b/0x210
[  162.029802][T10306]  netlink_sendmsg+0x805/0xb30
[  162.031648][T10306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.033773][T10306]  ? aa_sock_msg_perm+0xf1/0x1d0
[  162.035838][T10306]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.038087][T10306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.040230][T10306]  __sock_sendmsg+0x21c/0x270
[  162.042204][T10306]  ____sys_sendmsg+0x505/0x830
[  162.044258][T10306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.046461][T10306]  ? import_iovec+0x74/0xa0
[  162.048337][T10306]  ___sys_sendmsg+0x21f/0x2a0
[  162.050371][T10306]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.052597][T10306]  ? __fget_files+0x2a/0x420
[  162.054507][T10306]  ? __fget_files+0x3a0/0x420
[  162.056426][T10306]  __x64_sys_sendmsg+0x19b/0x260
[  162.058477][T10306]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.060703][T10306]  ? rcu_is_watching+0x15/0xb0
[  162.062732][T10306]  ? do_syscall_64+0xbe/0x3b0
[  162.064772][T10306]  do_syscall_64+0xfa/0x3b0
[  162.066757][T10306]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.069001][T10306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.071493][T10306]  ? exc_page_fault+0x9f/0xf0
[  162.073416][T10306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.075792][T10306] RIP: 0033:0x7fa995f8ebe9
[  162.077762][T10306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.085007][T10306] RSP: 002b:00007fa996e5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.087673][T10306] RAX: ffffffffffffffda RBX: 00007fa9961c5fa0 RCX: 00007fa995f8ebe9
[  162.090573][T10306] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  162.093482][T10306] RBP: 00007fa996011e19 R08: 0000000000000000 R09: 0000000000000000
[  162.096206][T10306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.099249][T10306] R13: 00007fa9961c6038 R14: 00007fa9961c5fa0 R15: 00007ffda442d448
[  162.101890][T10306]  </TASK>
[  162.103863][T10306] Kernel Offset: disabled
[  162.105330][T10306] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:29:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001188 RDI=0000000000001189 RBP=00000000000003f8 RSP=ffffc90004e969f0
R8 =ffff8880213c0237 R9 =1ffff11004278046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018f8 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa996e5e6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=00000000245d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa996197498 00007fa996197470 XMM03=00007fa9961974a8 00007fa9961974a0
XMM04=00007fa996cfd100 00007fa996197460 XMM05=00007fa996197478 00007fa9961974c0
XMM06=00007fa9961974b8 00007fa9961974b0 XMM07=00007fa9961974a8 00007fa9961974a0
XMM08=0000000000000000 00007fa996012ee7 XMM09=0000000000000000 00007fa996012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bf4e1b RBX=0000000000000806 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88810d9740e0 RBP=ffffc90004f674d0 RSP=ffffc90004f67440
R8 =ffff88810d9740e3 R9 =1ffff11021b2e81c R10=dffffc0000000000 R11=ffffed1021b2e81d
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffff88810d9740e0 R15=1ffff920009ece88
RIP=ffffffff8b7ccdf5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7ce4ddd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000354030 CR3=000000003bfd6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff820b7f72 ffffffff820b7ef2
XMM02=ffffffff82346752 ffffffff820b7f72 XMM03=ffffffff820b7ef2 ffffffff81688a1f
XMM04=00007f7ce4cfd100 00007f7ce4197460 XMM05=00007f7ce4197478 00007f7ce41974c0
XMM06=00007f7ce41974b8 00007f7ce41974b0 XMM07=00007f7ce41974a8 00007f7ce41974a0
XMM08=0000000000000000 00007f7ce4012ee7 XMM09=0000000000000000 00007f7ce4012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
